$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: 1Eo2M/0XmYJ7djCe3lbrke0BpUER+M30IR91taWqBSw= Subject key identifier: 2D:11:CA:A6:5E:0C:8A:7E:1F:F8:F2:DE:CF:D0:31:79:DA:EA:D4:E6 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 57D4248585A6E1984117CEC0FD1B4DBF96D812CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 12:02:12 +0000 Manifest this update: Mon 20 Oct 2025 11:57:12 +0000 Manifest next update: Thu 23 Oct 2025 21:38:12 +0000 Files and hashes: 1: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 2: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 3: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: iySXC5+1DQ2Tc6fsLPG89ZY9XSRI863J9ej9Rl3jWCQ=) 4: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 5: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 6: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 7: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d4:24:85:85:a6:e1:98:41:17:ce:c0:fd:1b:4d:bf:96:d8:12:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Oct 20 11:57:12 2025 GMT Not After : Oct 23 21:38:12 2025 GMT Subject: CN=2D11CAA65E0C8A7E1FF8F2DECFD03179DAEAD4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:e2:66:91:b9:ac:87:92:0a:1b:df:cd:4d: 98:68:60:7b:3b:e8:4a:58:27:06:d9:51:0f:6f:47: b7:34:61:6d:14:a9:17:94:8d:a4:93:77:ef:66:3d: 3c:ff:ce:f9:f5:29:a6:b3:96:f0:77:88:6d:61:34: 02:35:2e:fc:7b:5c:83:bd:70:9a:58:a5:85:a9:e1: 41:3e:6c:12:23:8d:40:9f:42:de:eb:ae:64:7d:2d: 2a:09:41:7c:10:54:52:e6:c8:a8:85:2d:2c:4b:70: 59:5d:9c:0a:e7:0c:5f:01:d3:3a:9f:30:83:16:b5: 86:dc:e0:87:ee:cf:b5:6c:fd:99:6b:ae:fd:be:ca: 79:09:a8:ec:a8:e4:b7:af:fd:72:9a:62:15:b1:35: 4b:20:ce:25:75:8e:2e:1a:72:ab:5a:31:90:f6:52: cf:1e:b2:a7:32:eb:7a:76:fb:19:7a:65:15:84:04: 52:c0:58:67:9d:43:eb:9e:46:c2:e5:a9:ca:3f:89: 11:86:3f:d2:b9:2b:81:1d:40:75:12:dd:a4:46:ef: 57:69:ed:de:c0:0e:9b:77:ff:08:a8:45:89:5c:bb: b6:60:aa:1a:17:c9:92:9d:99:2e:dc:e7:7d:9f:19: e3:41:1a:11:22:82:fb:f3:49:65:c3:a6:ee:13:f0: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:CA:A6:5E:0C:8A:7E:1F:F8:F2:DE:CF:D0:31:79:DA:EA:D4:E6 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:11:8d:f9:57:50:1b:34:5a:5e:71:49:66:3e:88:27:d7:f7: 97:1b:b7:5f:c7:cc:5d:4f:08:34:0d:ed:5b:8e:ec:2a:3c:bf: 5e:f2:d9:17:3c:bc:25:8a:48:86:1c:2c:5a:65:cb:a7:20:96: 5a:b1:0a:ca:0f:94:e2:d4:08:e8:1c:be:5f:82:ea:d2:5e:5e: 88:78:b8:8d:40:f2:91:f6:66:d7:e3:01:37:b3:60:c2:98:d1: e7:23:73:e2:ed:0a:9b:21:1d:f1:00:d3:ab:a5:32:6f:f2:72: 75:1a:2b:4f:a1:62:e5:23:30:27:4c:68:3e:77:1e:c8:52:dc: a0:99:19:52:b3:af:9f:6e:d0:8f:0e:38:d5:dc:17:da:26:84: cb:c8:20:6e:df:d8:01:a0:7b:56:38:89:d6:a6:48:a7:90:ba: 65:bd:22:d4:de:11:bd:da:39:2b:5c:80:ed:ad:ab:ac:bd:81: 27:22:70:05:ab:7d:8d:0e:82:2f:4a:9e:66:e4:d6:f4:f1:68: 07:69:14:c9:f3:fa:a6:d2:94:f9:3d:db:3b:8f:f6:0a:02:97: 2d:36:71:8b:75:e7:de:00:18:76:b8:69:ba:f2:c2:b4:58:ed: 77:04:7a:64:51:33:af:18:b6:cd:1c:ed:90:ab:67:8d:19:6f: e8:81:e5:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9QkhYWm4ZhBF87A/RtNv5bYEsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTEwMjAxMTU3MTJaFw0yNTEwMjMyMTM4MTJaMDMxMTAvBgNV BAMTKDJEMTFDQUE2NUUwQzhBN0UxRkY4RjJERUNGRDAzMTc5REFFQUQ0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyuJmkbmsh5IKG9/NTZhoYHs7 6EpYJwbZUQ9vR7c0YW0UqReUjaSTd+9mPTz/zvn1KaazlvB3iG1hNAI1Lvx7XIO9 cJpYpYWp4UE+bBIjjUCfQt7rrmR9LSoJQXwQVFLmyKiFLSxLcFldnArnDF8B0zqf MIMWtYbc4Ifuz7Vs/Zlrrv2+ynkJqOyo5Lev/XKaYhWxNUsgziV1ji4acqtaMZD2 Us8esqcy63p2+xl6ZRWEBFLAWGedQ+ueRsLlqco/iRGGP9K5K4EdQHUS3aRG71dp 7d7ADpt3/wioRYlcu7ZgqhoXyZKdmS7c532fGeNBGhEigvvzSWXDpu4T8BbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRHKpl4Min4f+PLez9Axedrq1OYwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACERjflXUBs0Wl5xSWY+iCfX95cbt1/HzF1P CDQN7VuO7Co8v17y2Rc8vCWKSIYcLFply6cgllqxCsoPlOLUCOgcvl+C6tJeXoh4 uI1A8pH2ZtfjATezYMKY0ecjc+LtCpshHfEA06ulMm/ycnUaK0+hYuUjMCdMaD53 HshS3KCZGVKzr59u0I8OONXcF9omhMvIIG7f2AGge1Y4idamSKeQumW9ItTeEb3a OStcgO2tq6y9gScicAWrfY0Ogi9Knmbk1vTxaAdpFMnz+qbSlPk92zuP9goCly02 cYt1594AGHa4abrywrRY7XcEemRRM68Yts0c7ZCrZ40Zb+iB5ZA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:03 2025 by rpki-client