$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: v+RUqhx6XjURo8hCnHFc8OdTfIX1b91rOiPJidsCmL4= Subject key identifier: AD:40:1E:7C:10:6C:86:0B:3A:C1:C0:1F:84:C6:12:38:8C:26:F5:C7 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 74C3C218A9B5BB231D02F017880650F186589E8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0369 Signing time: Sun 19 Oct 2025 19:01:51 +0000 Manifest this update: Sun 19 Oct 2025 18:56:51 +0000 Manifest next update: Thu 23 Oct 2025 01:37:51 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 2: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: By+jMrwCaU22L9zMSiPDXJS2Sd6+QBU5JYuaoly5qxg=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c3:c2:18:a9:b5:bb:23:1d:02:f0:17:88:06:50:f1:86:58:9e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Oct 19 18:56:51 2025 GMT Not After : Oct 23 01:37:51 2025 GMT Subject: CN=AD401E7C106C860B3AC1C01F84C612388C26F5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:1c:0d:c0:18:53:d3:1a:d9:51:0a:e3:66: f2:ff:2a:ed:4e:82:fa:20:54:9b:56:6a:9b:dc:93: 07:4b:af:90:d1:48:de:65:f5:40:63:a9:0f:8d:a9: 16:34:a0:21:b4:01:22:ac:f3:a9:49:08:b5:02:28: ea:59:48:3f:49:a7:a6:94:64:43:f4:d0:54:35:0c: f3:6b:bc:6e:16:3c:da:fd:39:1b:fe:ff:b7:af:00: 45:a2:39:f6:f7:d1:66:23:11:e2:21:c9:46:52:a6: e4:38:5a:8b:11:c1:15:7c:c9:ff:2e:ed:ac:35:7a: 54:2a:28:a6:35:40:f6:33:1b:2c:fa:07:59:2d:6a: 73:90:81:a3:de:86:68:f1:49:90:0a:08:53:63:8a: 4a:80:ab:86:27:90:41:26:9b:cd:52:b9:db:7a:85: ac:6c:d0:ef:0b:5e:c9:83:bb:2d:02:fe:17:5b:d7: 5c:0e:b6:86:f5:a9:a9:12:c2:93:b1:bd:c4:ca:de: c3:f8:f7:55:f1:4c:4f:61:8e:d3:15:43:3d:8f:34: 38:bb:43:df:ed:71:eb:45:aa:c3:36:bc:f1:b7:0a: ad:52:39:06:24:38:ff:c2:ea:eb:db:61:d6:07:d1: 15:53:f5:81:ef:70:2a:c3:b6:a9:fb:95:ca:c8:09: 69:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:40:1E:7C:10:6C:86:0B:3A:C1:C0:1F:84:C6:12:38:8C:26:F5:C7 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0f:99:b7:cb:64:ec:7b:35:9a:4d:c5:5e:74:90:cc:34:ba: ef:75:da:03:0c:dd:11:36:db:5d:b7:9b:8d:69:7c:f4:03:14: 1e:ef:44:30:6c:7a:b0:ac:71:b4:77:6c:ea:7f:3f:65:fd:2f: 0d:f8:85:ec:10:64:31:ca:05:23:4e:b9:75:6b:1a:1d:49:1c: 87:52:ec:a1:cb:be:e8:b7:05:2a:a5:bd:6b:c5:35:44:24:17: fb:51:31:b9:c7:0d:e2:e7:00:e4:18:e4:af:d7:5b:0e:af:ea: 70:e6:9b:1d:17:18:c3:d2:44:71:a3:e5:70:5a:1d:dc:33:dd: 57:9f:ef:a2:04:c8:19:80:13:41:73:67:22:81:9a:66:97:23: b3:c7:03:71:0f:88:f1:3e:90:87:ec:41:c0:46:24:d3:1e:73: d7:25:29:68:8f:61:4e:75:34:84:ec:1c:f0:44:b2:e5:d9:ae: 06:90:91:77:24:3c:28:71:a2:b6:8c:6d:53:73:9f:57:a4:ad: 3a:fe:ee:db:a0:99:2b:95:3d:ef:c1:0e:d7:a9:ae:6b:f1:db: d9:71:f3:07:11:d2:d4:16:10:e4:86:fa:cc:4c:80:aa:2d:c2: da:16:42:02:37:6d:c9:31:5e:04:a8:b6:2d:21:0e:da:56:f8: 81:cf:35:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMPCGKm1uyMdAvAXiAZQ8YZYnowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTEwMTkxODU2NTFaFw0yNTEwMjMwMTM3NTFaMDMxMTAvBgNV BAMTKEFENDAxRTdDMTA2Qzg2MEIzQUMxQzAxRjg0QzYxMjM4OEMyNkY1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIhwNwBhT0xrZUQrjZvL/Ku1O gvogVJtWapvckwdLr5DRSN5l9UBjqQ+NqRY0oCG0ASKs86lJCLUCKOpZSD9Jp6aU ZEP00FQ1DPNrvG4WPNr9ORv+/7evAEWiOfb30WYjEeIhyUZSpuQ4WosRwRV8yf8u 7aw1elQqKKY1QPYzGyz6B1ktanOQgaPehmjxSZAKCFNjikqAq4YnkEEmm81Sudt6 haxs0O8LXsmDuy0C/hdb11wOtob1qakSwpOxvcTK3sP491XxTE9hjtMVQz2PNDi7 Q9/tcetFqsM2vPG3Cq1SOQYkOP/C6uvbYdYH0RVT9YHvcCrDtqn7lcrICWnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUAefBBshgs6wcAfhMYSOIwm9ccwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgPmbfLZOx7NZpNxV50kMw0uu912gMM3RE2 2123m41pfPQDFB7vRDBserCscbR3bOp/P2X9Lw34hewQZDHKBSNOuXVrGh1JHIdS 7KHLvui3BSqlvWvFNUQkF/tRMbnHDeLnAOQY5K/XWw6v6nDmmx0XGMPSRHGj5XBa Hdwz3Vef76IEyBmAE0FzZyKBmmaXI7PHA3EPiPE+kIfsQcBGJNMec9clKWiPYU51 NITsHPBEsuXZrgaQkXckPChxoraMbVNzn1ekrTr+7tugmSuVPe/BDteprmvx29lx 8wcR0tQWEOSG+sxMgKotwtoWQgI3bckxXgSoti0hDtpW+IHPNUU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:14 2025 by rpki-client