$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: Cut0iX/VjW0YHimv95ScoNC7mp12zrvq8FwGW0cTbhA= Subject key identifier: 44:6E:76:18:D3:C7:99:1B:A9:60:A3:89:E5:3F:C6:FD:50:79:11:E2 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 564F4A6C86B2C0808248919A73CA3A0B3F9C6508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 49 Signing time: Sat 18 Oct 2025 16:32:15 +0000 Manifest this update: Sat 18 Oct 2025 16:27:15 +0000 Manifest next update: Tue 21 Oct 2025 19:42:15 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: qMVK7o0dAiB73lvuymEKKxHdE7mgP/jiWKnTLLgz0JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4f:4a:6c:86:b2:c0:80:82:48:91:9a:73:ca:3a:0b:3f:9c:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Oct 18 16:27:15 2025 GMT Not After : Oct 21 19:42:15 2025 GMT Subject: CN=446E7618D3C7991BA960A389E53FC6FD507911E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:ca:9d:8f:2f:db:ef:82:f0:dc:9f:4a:2a: 13:06:34:fb:9c:35:04:62:9d:be:93:f0:16:a8:c9: 03:03:0d:1f:da:43:68:36:2b:00:01:41:82:a9:ed: 03:98:83:9a:69:d8:99:5e:69:5a:89:48:2d:f1:6f: f8:c2:c9:f1:1c:f2:a0:d2:8e:7e:1d:a4:90:17:d3: 76:6f:f6:d2:c4:f4:06:41:14:bc:c8:a7:94:59:62: 10:77:b7:84:e4:c6:bf:cb:e6:31:ac:f1:ad:d6:48: 6c:77:21:46:b5:cc:af:c7:ad:ee:bb:f8:33:dc:15: 99:a6:de:b5:f9:2d:eb:da:f6:50:3b:8d:64:7e:f2: a1:15:ae:75:4e:7a:b5:af:ab:4c:a2:39:36:25:2b: 7d:be:14:6f:f7:27:3d:ee:91:72:3b:cf:8f:c7:15: 3a:d6:fc:02:8f:52:23:9a:5d:80:2a:bd:9d:55:8a: 98:16:45:db:51:5e:01:b3:82:71:0d:0d:12:99:87: 34:0b:0d:8f:31:5a:bd:ba:95:66:89:77:1d:0d:b2: 01:60:5f:a7:38:70:18:aa:0c:d5:28:a1:ff:7b:88: 5d:d6:bd:49:90:e2:18:1c:5c:24:d7:99:e1:1a:46: 3e:02:f4:94:c4:22:99:c1:ea:92:2b:d0:fb:92:ae: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:76:18:D3:C7:99:1B:A9:60:A3:89:E5:3F:C6:FD:50:79:11:E2 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:22:51:61:fd:93:e5:ca:73:0f:77:cc:c7:28:77:71:ad:f3: 21:56:47:d6:59:67:73:52:d2:5e:8e:f8:ba:99:c3:16:b6:73: b5:29:f2:e2:05:d6:70:46:db:a2:0b:a3:61:e8:d7:7d:cd:94: db:a3:f6:a1:01:f0:c6:0e:fe:57:2f:d2:7e:38:33:23:53:82: fc:ee:ee:40:8c:3d:47:4b:ec:5a:ae:34:a2:cb:be:8e:23:44: 23:e8:19:5a:9f:64:23:81:2b:f7:4e:ec:2d:e5:8b:8e:f9:3b: d5:40:f8:5c:06:34:dc:5b:96:8e:90:4d:ef:51:54:f9:e3:52: 40:ab:2b:31:ea:35:53:c3:a3:f3:19:25:b8:13:ea:41:ba:a0: ea:36:72:67:b7:2a:1b:7a:14:8f:53:c8:f2:e6:9c:90:d2:f1: f7:8c:2b:3f:fc:f1:c6:c1:4e:a6:c2:7a:9c:f8:08:28:29:7a: 39:fc:e4:f5:40:7e:5d:ea:fb:5e:bb:07:71:af:0d:a7:14:76: 4f:8e:a0:8c:3e:82:cd:1b:37:69:d8:ea:8e:d4:21:94:fe:0a: e8:b2:96:37:f3:f1:46:db:72:24:87:10:e1:18:0a:07:80:df: 0b:29:88:4f:fc:ab:58:ff:70:78:87:e5:dc:22:00:fe:97:7a: 88:16:e7:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVk9KbIaywICCSJGac8o6Cz+cZQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTEwMTgxNjI3MTVaFw0yNTEwMjExOTQyMTVaMDMxMTAvBgNV BAMTKDQ0NkU3NjE4RDNDNzk5MUJBOTYwQTM4OUU1M0ZDNkZENTA3OTExRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Msqdjy/b74Lw3J9KKhMGNPuc NQRinb6T8BaoyQMDDR/aQ2g2KwABQYKp7QOYg5pp2JleaVqJSC3xb/jCyfEc8qDS jn4dpJAX03Zv9tLE9AZBFLzIp5RZYhB3t4Tkxr/L5jGs8a3WSGx3IUa1zK/Hre67 +DPcFZmm3rX5Leva9lA7jWR+8qEVrnVOerWvq0yiOTYlK32+FG/3Jz3ukXI7z4/H FTrW/AKPUiOaXYAqvZ1VipgWRdtRXgGzgnENDRKZhzQLDY8xWr26lWaJdx0NsgFg X6c4cBiqDNUoof97iF3WvUmQ4hgcXCTXmeEaRj4C9JTEIpnB6pIr0PuSroeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURG52GNPHmRupYKOJ5T/G/VB5EeIwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoiUWH9k+XKcw93zMcod3Gt8yFWR9ZZZ3NS 0l6O+LqZwxa2c7Up8uIF1nBG26ILo2Ho133NlNuj9qEB8MYO/lcv0n44MyNTgvzu 7kCMPUdL7FquNKLLvo4jRCPoGVqfZCOBK/dO7C3li475O9VA+FwGNNxblo6QTe9R VPnjUkCrKzHqNVPDo/MZJbgT6kG6oOo2cme3Kht6FI9TyPLmnJDS8feMKz/88cbB TqbCepz4CCgpejn85PVAfl3q+167B3GvDacUdk+OoIw+gs0bN2nY6o7UIZT+Cuiy ljfz8UbbciSHEOEYCgeA3wspiE/8q1j/cHiH5dwiAP6XeogW594= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:34 2025 by rpki-client