$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: 9RahKTPrYRqvxm9XsGGXPoCoLU4lSzKE7neIS2embU8= Subject key identifier: 85:D7:74:B3:E9:46:92:E0:40:F9:CC:DD:91:EB:92:93:E6:1C:05:1F Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 32D0E3EE008903ED51376123E2353D9E75F08A30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01B0 Signing time: Sun 19 Oct 2025 20:41:02 +0000 Manifest this update: Sun 19 Oct 2025 20:36:02 +0000 Manifest next update: Wed 22 Oct 2025 22:47:02 +0000 Files and hashes: 1: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 2: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: IUznN65TnDCLwEwfU73+k+E/jEOYMhK2OhJXXItMSGY=) 3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) 4: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d0:e3:ee:00:89:03:ed:51:37:61:23:e2:35:3d:9e:75:f0:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Oct 19 20:36:02 2025 GMT Not After : Oct 22 22:47:02 2025 GMT Subject: CN=85D774B3E94692E040F9CCDD91EB9293E61C051F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:eb:30:ab:ea:e7:0b:b3:00:a5:3b:7e:b0: a9:68:d5:ff:c4:fe:0e:37:f6:82:64:dd:9d:f6:bb: 26:1b:e9:b4:65:b0:3e:f5:6f:1c:3e:2c:e9:e8:71: 12:ab:4e:2f:e7:49:c3:6f:a6:a0:a8:76:e8:f5:17: 6e:28:46:01:2e:fd:c7:26:6c:b2:e9:97:75:88:9b: c6:05:b6:13:eb:92:78:1b:7c:44:d6:f0:dc:18:68: 67:94:4f:c3:22:85:ae:37:62:68:33:f5:a6:de:1d: 47:d2:82:8d:fb:26:a6:1b:fd:30:09:bd:01:65:01: 21:53:c2:ad:c3:ee:90:25:c1:6c:4e:46:4f:bd:01: 22:8c:69:6a:f3:f3:c9:e1:69:7e:39:fb:dc:c3:ed: 98:a4:03:8f:c2:dd:0f:f2:85:20:72:3c:fa:54:1c: e0:b0:59:b1:46:ea:b8:ef:3d:b2:2e:a9:3f:bc:5b: b8:6b:b5:42:d7:0c:0c:c1:48:45:77:fa:d3:d9:46: c8:a7:25:32:fe:49:9b:84:5b:4a:78:55:c0:6c:c7: 8c:c9:5b:45:44:5d:73:c0:a0:c7:d1:9a:4d:d5:f3: fd:80:7e:1e:7e:2c:82:34:37:18:0d:b9:3a:00:c6: d9:6f:a8:dd:d2:59:b2:85:7c:01:78:88:44:15:11: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:74:B3:E9:46:92:E0:40:F9:CC:DD:91:EB:92:93:E6:1C:05:1F X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4e:3e:87:cb:3d:2d:a3:89:da:e5:12:89:83:9d:b1:aa:97: d2:2b:73:48:6b:3a:ff:da:23:ac:9c:fa:f5:89:4c:d4:e1:e4: 34:dc:cf:45:68:3b:67:11:97:cf:d2:9d:bf:d4:78:6f:17:df: 36:6e:2b:7a:a4:fa:f0:87:e9:da:ab:ab:22:9a:8c:64:5a:93: 5d:a2:9c:8a:0b:ca:a0:aa:fd:57:aa:e6:f2:9a:37:68:c3:a6: 4a:8f:ac:ac:5c:83:cf:50:7e:aa:14:71:29:77:36:17:bf:3a: 63:f3:d8:be:53:a4:e0:00:d9:01:41:7a:cb:30:2c:04:c2:d3: 31:bc:ea:89:9b:11:80:bf:0a:18:e5:ce:16:53:5a:b1:7e:c4: 74:3b:ce:fb:0c:2a:19:a4:24:0e:0c:5d:64:4b:50:b2:26:a6: 5f:e0:b1:e4:75:24:4a:f1:4d:ee:4b:24:1f:a0:d9:9b:9a:07: 52:15:73:72:60:2f:14:6a:02:8b:d6:ec:fb:81:4b:5f:79:ad: 64:bc:71:8e:77:8d:74:83:fd:bb:b1:fa:cf:0f:ce:3e:c9:c5: 71:ad:76:00:a0:d6:36:a1:1b:bd:41:ee:9b:e7:52:5d:b5:21: 0a:1b:eb:96:cc:04:18:f2:71:ce:e8:0a:6c:82:09:66:3a:c6: 39:60:79:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtDj7gCJA+1RN2Ej4jU9nnXwijAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTEwMTkyMDM2MDJaFw0yNTEwMjIyMjQ3MDJaMDMxMTAvBgNV BAMTKDg1RDc3NEIzRTk0NjkyRTA0MEY5Q0NERDkxRUI5MjkzRTYxQzA1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPuswq+rnC7MApTt+sKlo1f/E /g439oJk3Z32uyYb6bRlsD71bxw+LOnocRKrTi/nScNvpqCoduj1F24oRgEu/ccm bLLpl3WIm8YFthPrkngbfETW8NwYaGeUT8Miha43Ymgz9abeHUfSgo37JqYb/TAJ vQFlASFTwq3D7pAlwWxORk+9ASKMaWrz88nhaX45+9zD7ZikA4/C3Q/yhSByPPpU HOCwWbFG6rjvPbIuqT+8W7hrtULXDAzBSEV3+tPZRsinJTL+SZuEW0p4VcBsx4zJ W0VEXXPAoMfRmk3V8/2Afh5+LII0NxgNuToAxtlvqN3SWbKFfAF4iEQVEQ5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdd0s+lGkuBA+czdkeuSk+YcBR8wHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBOPofLPS2jidrlEomDnbGql9Irc0hrOv/a I6yc+vWJTNTh5DTcz0VoO2cRl8/Snb/UeG8X3zZuK3qk+vCH6dqrqyKajGRak12i nIoLyqCq/Veq5vKaN2jDpkqPrKxcg89QfqoUcSl3Nhe/OmPz2L5TpOAA2QFBessw LATC0zG86ombEYC/ChjlzhZTWrF+xHQ7zvsMKhmkJA4MXWRLULImpl/gseR1JErx Te5LJB+g2ZuaB1IVc3JgLxRqAovW7PuBS195rWS8cY53jXSD/bux+s8Pzj7JxXGt dgCg1jahG71B7pvnUl21IQob65bMBBjycc7oCmyCCWY6xjlgeT8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:03 2025 by rpki-client