$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: rCaGU5uzo7yQnw8yjGcdXWNNPDmNWqDl3xqX6FyimKw= Subject key identifier: A1:DE:BD:FE:A0:AB:51:AF:FE:45:D3:5E:60:A6:FC:55:F2:F2:6D:26 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 768358FCF531F39773CC7479577A83410E355758 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 01EC Signing time: Mon 20 Oct 2025 07:11:45 +0000 Manifest this update: Mon 20 Oct 2025 07:06:45 +0000 Manifest next update: Thu 23 Oct 2025 16:42:45 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) 3: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: 6JYuxftZ2rL4zG5aQE7U9/gnOiHmkehX6k85PoPddEk=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:83:58:fc:f5:31:f3:97:73:cc:74:79:57:7a:83:41:0e:35:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Oct 20 07:06:45 2025 GMT Not After : Oct 23 16:42:45 2025 GMT Subject: CN=A1DEBDFEA0AB51AFFE45D35E60A6FC55F2F26D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:60:5c:a1:15:ad:df:50:b9:7d:93:21:c4: 1e:7e:bf:90:87:36:db:fc:fa:a9:fc:dd:85:ac:35: d1:79:a2:de:f6:4f:7c:55:82:21:2b:30:05:bd:92: 0f:d7:57:08:64:0c:9e:aa:25:45:5e:e6:2a:0b:38: 59:7b:7b:e7:d7:cc:ba:c8:60:31:80:b0:4f:8f:b7: 72:d5:f3:65:85:63:cf:b2:55:5e:45:3a:2c:26:b0: 61:95:1c:d8:7b:c0:67:9f:ed:03:14:75:ee:36:37: 37:60:5f:c9:26:9a:ae:3a:4b:f1:4f:af:f2:17:d2: 79:6b:e5:bb:27:7d:ef:18:84:46:3e:4e:4b:d1:99: b4:ab:0e:00:7c:68:8f:c8:fc:dc:ad:b2:f6:22:9d: 7f:1f:ac:46:45:aa:7e:79:43:47:27:99:a0:47:81: 71:c5:a0:48:6d:79:fc:cf:6d:91:57:65:90:f8:3f: 05:b3:69:3f:d3:48:22:50:4c:e8:b7:38:23:1c:e6: 43:e3:b9:34:01:9c:ad:0d:f9:29:52:52:e9:b3:7a: 53:b4:fd:22:a5:cd:aa:5e:3d:ef:d0:22:92:e0:f7: ef:22:ca:16:95:78:53:20:a3:c4:a5:9a:ec:a1:c2: 0f:9d:e7:a8:dc:be:33:c9:93:94:b5:8a:40:5c:31: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DE:BD:FE:A0:AB:51:AF:FE:45:D3:5E:60:A6:FC:55:F2:F2:6D:26 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b5:59:2d:4a:f8:31:02:19:13:72:db:9c:ce:5d:ca:e6:62: 8b:3c:fa:63:09:ca:f8:f8:df:21:fc:49:81:96:de:4f:a7:6f: e4:dd:d8:be:19:8a:19:7f:2e:c2:b0:89:09:dc:f0:cf:2c:2a: 5a:2a:44:a6:a3:28:c5:9d:90:69:f6:a1:5c:51:14:40:1b:e3: 0b:18:e2:4b:2f:97:aa:82:b0:3d:b5:d3:58:cd:33:c2:56:78: 0e:9b:94:09:15:e3:f3:99:1d:f4:24:77:19:b4:29:af:b4:8a: 1a:78:83:5a:bd:0f:a3:92:52:34:d3:e1:ff:3c:16:6a:2e:d1: 6e:63:00:e1:e5:da:2e:5d:50:5e:a6:ea:ea:d1:4f:af:01:1a: 3b:1b:2e:a8:c7:e0:36:55:51:7d:a4:91:db:24:19:45:5e:bf: 4f:b9:0f:04:d6:f7:2c:be:a4:1a:8d:09:3f:65:56:ac:d9:93: 4b:75:91:38:73:92:59:01:0c:20:05:46:c2:75:5a:42:4d:11: ae:19:e9:fd:39:d9:63:45:9d:a6:38:ea:ab:e4:4e:a5:7e:26: dd:ac:ba:04:80:96:56:f8:3f:3f:08:61:35:32:9a:8c:14:03: 83:f5:a6:76:0c:27:5d:d4:99:47:88:cf:29:ac:b4:a8:97:58: d1:a3:d7:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoNY/PUx85dzzHR5V3qDQQ41V1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTEwMjAwNzA2NDVaFw0yNTEwMjMxNjQyNDVaMDMxMTAvBgNV BAMTKEExREVCREZFQTBBQjUxQUZGRTQ1RDM1RTYwQTZGQzU1RjJGMjZEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+mBcoRWt31C5fZMhxB5+v5CH Ntv8+qn83YWsNdF5ot72T3xVgiErMAW9kg/XVwhkDJ6qJUVe5ioLOFl7e+fXzLrI YDGAsE+Pt3LV82WFY8+yVV5FOiwmsGGVHNh7wGef7QMUde42NzdgX8kmmq46S/FP r/IX0nlr5bsnfe8YhEY+TkvRmbSrDgB8aI/I/NytsvYinX8frEZFqn55Q0cnmaBH gXHFoEhtefzPbZFXZZD4PwWzaT/TSCJQTOi3OCMc5kPjuTQBnK0N+SlSUumzelO0 /SKlzapePe/QIpLg9+8iyhaVeFMgo8Slmuyhwg+d56jcvjPJk5S1ikBcMaS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod69/qCrUa/+RdNeYKb8VfLybSYwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe1WS1K+DECGRNy25zOXcrmYos8+mMJyvj4 3yH8SYGW3k+nb+Td2L4Zihl/LsKwiQnc8M8sKloqRKajKMWdkGn2oVxRFEAb4wsY 4ksvl6qCsD2101jNM8JWeA6blAkV4/OZHfQkdxm0Ka+0ihp4g1q9D6OSUjTT4f88 Fmou0W5jAOHl2i5dUF6m6urRT68BGjsbLqjH4DZVUX2kkdskGUVev0+5DwTW9yy+ pBqNCT9lVqzZk0t1kThzklkBDCAFRsJ1WkJNEa4Z6f052WNFnaY46qvkTqV+Jt2s ugSAllb4Pz8IYTUymowUA4P1pnYMJ13UmUeIzymstKiXWNGj1/A= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:34 2025 by rpki-client