$ rpki-client -vvf repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft File: E0EC18AE1077112F303C479717B7E1EAA868E35F.mft (raw, json) Hash identifier: IfkJWZ8L4/fB5yBbTOWwPac1TN8W49I3AhS9QPEum3U= Subject key identifier: DF:27:87:DF:9B:F2:07:89:E3:F6:F7:7B:5A:48:F4:AB:31:27:56:4E Authority key identifier: E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F Certificate issuer: /CN=E0EC18AE1077112F303C479717B7E1EAA868E35F Certificate serial: 4D19A36EE5040C58E477F25C988E5645BCB1B31C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft Manifest number: 013C Signing time: Mon 20 Oct 2025 11:04:26 +0000 Manifest this update: Mon 20 Oct 2025 10:59:26 +0000 Manifest next update: Thu 23 Oct 2025 12:09:26 +0000 Files and hashes: 1: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: iFIOjwBtj1k6jrBAXZlZrv1rFkh0HszvE5iJysrcroI=) 2: E0EC18AE1077112F303C479717B7E1EAA868E35F.crl (hash: ixRXxoME6fvF+3cHdlyaiNTd1Gkiy9LC5WehAKhg2/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:19:a3:6e:e5:04:0c:58:e4:77:f2:5c:98:8e:56:45:bc:b1:b3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0EC18AE1077112F303C479717B7E1EAA868E35F Validity Not Before: Oct 20 10:59:26 2025 GMT Not After : Oct 23 12:09:26 2025 GMT Subject: CN=DF2787DF9BF20789E3F6F77B5A48F4AB3127564E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:df:88:de:0f:73:05:57:e9:92:a0:69:1c: 93:0b:0a:1d:9c:72:ab:3b:34:c7:16:88:dc:98:b9: 46:15:07:40:1d:ed:f1:d4:0e:b8:f7:5e:b0:14:26: 0d:9e:07:90:b4:fd:25:98:b1:17:cc:aa:14:37:d6: ef:e1:83:5d:0c:23:b3:c4:c2:56:96:c6:27:80:4c: 0c:a7:2e:0f:87:78:8b:ff:0c:22:2d:7e:41:fa:c0: b4:ee:3b:a6:65:d8:ec:49:2e:1a:66:b9:03:25:8e: 09:aa:e4:50:9d:a5:68:c8:5f:2f:6c:bd:7e:36:63: 62:84:44:58:b2:d7:c8:32:77:1c:79:b4:74:d9:f8: a0:89:b9:55:f5:06:78:32:69:d7:d5:9b:be:55:b2: 9b:12:1f:10:70:8a:99:68:dd:83:6f:1e:63:0d:19: 17:82:fc:9b:93:ac:06:66:bd:23:4f:15:6d:db:2c: 15:ff:c4:cb:3e:51:1d:38:e6:32:04:fd:d5:d7:ff: d8:20:b5:1a:fd:33:cc:46:3c:6f:5a:11:24:76:31: 78:1f:cc:d9:a1:17:9b:4f:d8:50:7e:92:96:b4:e6: 82:69:19:b7:6b:30:0b:9e:ef:35:97:45:be:04:2b: 60:05:83:e0:77:26:e2:4e:2a:48:14:f2:24:1a:7f: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:87:DF:9B:F2:07:89:E3:F6:F7:7B:5A:48:F4:AB:31:27:56:4E X509v3 Authority Key Identifier: keyid:E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b4:72:32:d7:d6:fc:9b:d9:45:35:06:e6:6a:6e:05:bd:f4: 6e:f2:33:83:37:47:e1:6e:8d:3e:a5:d5:65:e9:5c:5e:19:96: 18:cb:ec:4c:bc:22:75:68:f0:d4:03:8b:ba:d0:76:33:a2:22: df:9d:e4:72:98:18:ce:16:f4:a3:08:90:3b:c9:4e:2f:85:95: 1b:d3:dd:89:05:62:cb:57:06:7e:24:d2:c7:f6:aa:ef:3b:2e: c5:5c:b7:49:62:f0:64:98:a5:76:7e:00:83:0f:9f:0b:c2:5a: 86:d8:47:13:a4:94:be:af:52:15:61:6d:27:37:fb:da:da:6a: ab:ed:2a:e0:44:88:5f:ba:c5:6b:c0:04:3a:4b:40:6e:92:39: a8:a5:16:3e:e5:57:8c:df:73:03:3d:1c:3c:86:ae:5d:79:22: b2:67:44:a8:1b:79:6b:a8:67:d3:dd:84:c2:16:7c:f5:8a:18: 27:50:ae:4b:32:9e:db:85:68:d3:cf:ad:a4:87:7f:9a:12:15: 65:2f:42:44:48:09:a5:4b:81:12:69:a0:27:67:1e:71:ef:19: 59:c7:ea:a8:af:3c:35:80:b7:22:0c:82:33:51:af:8a:c8:b6: ae:14:6e:f0:70:b5:6b:68:28:69:2b:60:c8:ed:69:0a:66:8a: 81:69:76:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRmjbuUEDFjkd/JcmI5WRbyxsxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0UxRUFB ODY4RTM1RjAeFw0yNTEwMjAxMDU5MjZaFw0yNTEwMjMxMjA5MjZaMDMxMTAvBgNV BAMTKERGMjc4N0RGOUJGMjA3ODlFM0Y2Rjc3QjVBNDhGNEFCMzEyNzU2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFd+I3g9zBVfpkqBpHJMLCh2c cqs7NMcWiNyYuUYVB0Ad7fHUDrj3XrAUJg2eB5C0/SWYsRfMqhQ31u/hg10MI7PE wlaWxieATAynLg+HeIv/DCItfkH6wLTuO6Zl2OxJLhpmuQMljgmq5FCdpWjIXy9s vX42Y2KERFiy18gydxx5tHTZ+KCJuVX1BngyadfVm75VspsSHxBwiplo3YNvHmMN GReC/JuTrAZmvSNPFW3bLBX/xMs+UR045jIE/dXX/9ggtRr9M8xGPG9aESR2MXgf zNmhF5tP2FB+kpa05oJpGbdrMAue7zWXRb4EK2AFg+B3JuJOKkgU8iQaf6LtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yeH35vyB4nj9vd7Wkj0qzEnVk4wHwYDVR0j BBgwFoAU4OwYrhB3ES8wPEeXF7fh6qho418wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTljN2M5Ni03YWJiLTQ1YWMtYTBjYi1kN2ZmZDA5YzE4NzYvMC9FMEVDMThBRTEw NzcxMTJGMzAzQzQ3OTcxN0I3RTFFQUE4NjhFMzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0UxRUFBODY4 RTM1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5YzdjOTYtN2FiYi00NWFjLWEw Y2ItZDdmZmQwOWMxODc2LzAvRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0Ux RUFBODY4RTM1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS0cjLX1vyb2UU1BuZqbgW99G7yM4M3R+Fu jT6l1WXpXF4ZlhjL7Ey8InVo8NQDi7rQdjOiIt+d5HKYGM4W9KMIkDvJTi+FlRvT 3YkFYstXBn4k0sf2qu87LsVct0li8GSYpXZ+AIMPnwvCWobYRxOklL6vUhVhbSc3 +9raaqvtKuBEiF+6xWvABDpLQG6SOailFj7lV4zfcwM9HDyGrl15IrJnRKgbeWuo Z9PdhMIWfPWKGCdQrksyntuFaNPPraSHf5oSFWUvQkRICaVLgRJpoCdnHnHvGVnH 6qivPDWAtyIMgjNRr4rItq4UbvBwtWtoKGkrYMjtaQpmioFpdng= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:24 2025 by rpki-client