$ rpki-client -vvf repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft File: ED47540CA812870D4CDBD150F71BACF636BC000E.mft (raw, json) Hash identifier: HwjjHZG1wfmmedl6VtAISmGiEdJGQLw1cLQNVq3ecwc= Subject key identifier: D6:3F:61:5B:57:11:AA:44:1A:2B:E9:95:ED:0F:37:B0:8A:51:DF:6D Authority key identifier: ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E Certificate issuer: /CN=ED47540CA812870D4CDBD150F71BACF636BC000E Certificate serial: 2263A37732D66BCA165F61CE3CAD3484E6A834F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 22:01:38 +0000 Manifest this update: Sun 19 Oct 2025 21:56:38 +0000 Manifest next update: Thu 23 Oct 2025 09:00:38 +0000 Files and hashes: 1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: vyZtldMTjMyu3iJ/orgojw8DEr5/d6xlea+iuDJEfRk=) 2: ED47540CA812870D4CDBD150F71BACF636BC000E.crl (hash: GvuVe11xgSYdJX0gU4GrrceElNnTArNWn/Lw0YRsJic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:63:a3:77:32:d6:6b:ca:16:5f:61:ce:3c:ad:34:84:e6:a8:34:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED47540CA812870D4CDBD150F71BACF636BC000E Validity Not Before: Oct 19 21:56:38 2025 GMT Not After : Oct 23 09:00:38 2025 GMT Subject: CN=D63F615B5711AA441A2BE995ED0F37B08A51DF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:13:1f:2a:b1:e3:ad:78:d8:f4:40:8b:5c: 68:69:9d:57:e0:1c:f5:1c:cd:cf:4d:9a:f5:3b:c2: fe:6d:38:f7:39:8f:1c:0f:1e:53:f8:43:b1:fe:85: f4:d5:fe:15:82:55:d4:e6:22:5b:da:18:3f:ef:8b: 48:a3:0c:7a:b4:3b:01:0d:5b:e4:8c:f0:3b:1b:ed: b6:4e:06:fc:88:b3:29:57:80:0e:a9:2b:c4:16:ba: e3:2d:2f:49:a5:f2:5f:85:64:31:df:69:46:37:a5: ec:67:fb:54:9b:92:d4:39:7a:56:3a:b1:ca:a7:8c: ab:21:dc:a1:eb:5d:20:fe:1d:d6:ce:88:d4:e4:32: e8:03:0a:ef:4b:fb:5a:6c:5d:1a:6b:06:18:ac:08: b4:f9:3d:42:f1:ad:81:70:d4:55:91:e9:19:a7:f5: 0e:df:73:25:af:52:0a:ad:b3:36:ca:57:23:10:a6: db:c7:4b:ae:a6:79:87:45:a1:e6:7e:93:8c:4a:7f: 38:be:61:f2:95:35:40:e0:18:ed:9a:1f:60:08:dc: 17:d3:cf:ea:98:14:ac:f6:26:f6:50:cd:21:f9:25: 94:19:eb:44:eb:6e:18:a3:18:6a:cd:3f:49:b2:c6: e0:db:f3:81:80:8c:1c:eb:80:f4:d8:d3:b7:bc:75: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:61:5B:57:11:AA:44:1A:2B:E9:95:ED:0F:37:B0:8A:51:DF:6D X509v3 Authority Key Identifier: keyid:ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:95:da:2e:97:92:b6:12:d3:67:98:7c:78:35:60:8d:82:e8: 83:28:55:49:fa:7d:45:2a:29:a9:15:76:1d:cf:e6:68:9d:f5: 16:a7:aa:cd:6d:58:24:a3:26:ac:1f:87:93:74:3b:59:c2:0e: 52:74:f7:4d:c0:d1:8e:4f:65:1a:8a:83:f2:28:8f:97:e9:1b: 8f:8e:67:c3:3e:0a:b0:12:5a:14:9b:4c:61:7c:0a:fa:2a:57: 19:ec:a2:d5:9f:2c:b2:db:de:74:06:a2:e3:94:d4:b2:12:ec: aa:d2:cb:10:c0:ff:10:b6:e2:9a:54:84:ec:8e:5e:da:7b:5e: 93:1a:51:fb:57:6c:1f:91:aa:8a:dc:cf:c6:11:2f:d4:67:74: 8d:fd:73:af:8c:3c:f6:72:78:95:10:9f:a5:2d:11:d2:15:5a: d4:a0:e1:c3:41:1c:e6:d2:99:e8:a9:51:95:26:b7:ad:07:a7: d7:13:70:73:9d:68:57:cb:c5:60:ea:d1:76:c8:41:a7:13:68: c8:f8:3c:b8:48:59:25:f2:9d:a2:0a:ce:53:f0:c4:10:8f:69: 7a:2a:05:ea:19:d2:67:39:4f:b8:1f:a8:41:6c:8d:7b:5d:24: 7b:17:22:85:b4:73:a9:a0:d8:c4:3a:8e:da:7d:45:e9:14:04: 6b:a3:01:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImOjdzLWa8oWX2HOPK00hOaoNPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYz NkJDMDAwRTAeFw0yNTEwMTkyMTU2MzhaFw0yNTEwMjMwOTAwMzhaMDMxMTAvBgNV BAMTKEQ2M0Y2MTVCNTcxMUFBNDQxQTJCRTk5NUVEMEYzN0IwOEE1MURGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyERMfKrHjrXjY9ECLXGhpnVfg HPUczc9NmvU7wv5tOPc5jxwPHlP4Q7H+hfTV/hWCVdTmIlvaGD/vi0ijDHq0OwEN W+SM8Dsb7bZOBvyIsylXgA6pK8QWuuMtL0ml8l+FZDHfaUY3pexn+1SbktQ5elY6 scqnjKsh3KHrXSD+HdbOiNTkMugDCu9L+1psXRprBhisCLT5PULxrYFw1FWR6Rmn 9Q7fcyWvUgqtszbKVyMQptvHS66meYdFoeZ+k4xKfzi+YfKVNUDgGO2aH2AI3BfT z+qYFKz2JvZQzSH5JZQZ60TrbhijGGrNP0myxuDb84GAjBzrgPTY07e8dcYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1j9hW1cRqkQaK+mV7Q83sIpR320wHwYDVR0j BBgwFoAU7UdUDKgShw1M29FQ9xus9ja8AA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVmMTVjOS01ODQzLTQ3MDUtYjY5NC1mZTVlN2NlMTk4MDgvMC9FRDQ3NTQwQ0E4 MTI4NzBENENEQkQxNTBGNzFCQUNGNjM2QkMwMDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYzNkJD MDAwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFD RjYzNkJDMDAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiV2i6XkrYS02eYfHg1YI2C6IMoVUn6fUUq KakVdh3P5mid9Ranqs1tWCSjJqwfh5N0O1nCDlJ0903A0Y5PZRqKg/Ioj5fpG4+O Z8M+CrASWhSbTGF8CvoqVxnsotWfLLLb3nQGouOU1LIS7KrSyxDA/xC24ppUhOyO Xtp7XpMaUftXbB+Rqorcz8YRL9RndI39c6+MPPZyeJUQn6UtEdIVWtSg4cNBHObS meipUZUmt60Hp9cTcHOdaFfLxWDq0XbIQacTaMj4PLhIWSXynaIKzlPwxBCPaXoq BeoZ0mc5T7gfqEFsjXtdJHsXIoW0c6mg2MQ6jtp9RekUBGujAU0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:26 2025 by rpki-client