$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: MxpITp9cD3+LiqkUoKMiHCr2MAG+zEjiSZVaWa2BFhE= Subject key identifier: 3E:34:0D:B9:FC:94:94:8D:83:54:64:60:5D:1D:24:4E:4D:D8:43:12 Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 60E50C06B1FEA7FB346F1262C5613B41B8895891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01E2 Signing time: Sun 19 Oct 2025 09:30:01 +0000 Manifest this update: Sun 19 Oct 2025 09:25:01 +0000 Manifest next update: Wed 22 Oct 2025 16:15:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: yEif1hMv84+Z+ff+VmrhvfrLJ48atZvrEnfwniwViVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e5:0c:06:b1:fe:a7:fb:34:6f:12:62:c5:61:3b:41:b8:89:58:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Oct 19 09:25:01 2025 GMT Not After : Oct 22 16:15:01 2025 GMT Subject: CN=3E340DB9FC94948D835464605D1D244E4DD84312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:86:0d:a7:23:07:56:b6:80:fb:8c:53:3e: 3a:d5:16:3e:01:47:15:97:31:38:ec:05:bc:99:a1: 06:36:96:1d:0b:c8:48:95:7c:82:24:74:34:97:25: ab:c7:7c:56:7c:62:61:79:e9:21:59:73:7b:e3:0d: 69:e0:93:90:b2:0a:36:df:33:7b:82:e4:a0:8a:2f: 3e:e7:18:36:78:15:31:1c:fb:22:66:98:08:45:54: 9b:84:db:2f:f4:a2:06:b9:43:0e:40:c3:0b:b9:60: 52:60:60:ea:46:0a:b6:bf:c3:f3:80:aa:e0:16:20: b2:c8:10:b6:dd:6f:77:6d:eb:b5:cf:ef:cc:fe:1f: 09:bd:8e:53:43:41:8c:5d:77:aa:17:7a:76:f6:2e: 94:05:f3:e6:88:32:e3:af:6a:57:2d:6f:31:a9:ce: 21:1a:db:56:d5:ab:55:aa:07:41:f5:8c:95:8a:50: 32:15:2d:6d:8d:8e:64:51:70:0a:e2:92:5e:e6:35: bd:89:24:03:00:de:18:d3:f6:10:67:50:3f:c9:cf: 85:47:27:d3:f0:28:d8:90:4b:1f:34:fc:f3:1e:c4: 1d:89:9e:a7:22:34:0b:c1:65:47:bd:39:ab:09:f0: 57:36:8e:9c:f6:bb:88:a1:83:21:af:37:05:89:b5: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:0D:B9:FC:94:94:8D:83:54:64:60:5D:1D:24:4E:4D:D8:43:12 X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d8:a0:08:c5:6c:78:43:1f:bd:4a:22:c4:18:5e:e9:9c:54: 31:fd:2e:9b:fc:aa:dc:07:49:a1:d5:70:5a:c0:e0:eb:0b:f0: c2:fa:28:d8:7f:30:ed:02:7e:c4:67:fa:99:ba:0d:b2:5b:b3: 1a:dc:fd:12:5e:d0:3a:88:7a:84:68:5c:8e:13:ab:f1:dc:f5: 69:60:5d:98:d3:28:73:14:c3:59:b1:8b:d0:cd:6e:9e:be:bf: 7f:ba:93:19:30:64:bf:47:2e:cb:a5:71:80:b2:10:a4:36:bd: e8:be:4a:af:e6:01:60:91:64:ae:9a:36:04:9b:95:a4:89:a4: c2:81:c5:7f:64:a4:12:f5:b4:58:c6:2b:49:59:6c:33:e0:00: 49:af:7d:a8:84:7d:75:92:8a:4c:47:bf:c7:3a:6f:61:f1:86: 83:97:e4:e7:d6:d2:c6:9c:cb:12:f2:89:52:f8:91:f8:ec:f7: 2b:0a:44:17:ae:25:47:91:76:d7:f0:22:59:83:34:69:d4:cf: 80:c5:00:55:54:92:97:f0:fd:cf:29:46:eb:f7:c3:4d:b1:e5: bd:be:e5:35:72:fe:26:a2:98:35:f8:5e:67:12:18:43:36:5b: 59:61:5d:89:7f:bd:df:fe:ef:df:1c:b9:cc:66:00:5f:49:f6: eb:c7:0e:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOUMBrH+p/s0bxJixWE7QbiJWJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTEwMTkwOTI1MDFaFw0yNTEwMjIxNjE1MDFaMDMxMTAvBgNV BAMTKDNFMzQwREI5RkM5NDk0OEQ4MzU0NjQ2MDVEMUQyNDRFNEREODQzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73oYNpyMHVraA+4xTPjrVFj4B RxWXMTjsBbyZoQY2lh0LyEiVfIIkdDSXJavHfFZ8YmF56SFZc3vjDWngk5CyCjbf M3uC5KCKLz7nGDZ4FTEc+yJmmAhFVJuE2y/0oga5Qw5Awwu5YFJgYOpGCra/w/OA quAWILLIELbdb3dt67XP78z+Hwm9jlNDQYxdd6oXenb2LpQF8+aIMuOvalctbzGp ziEa21bVq1WqB0H1jJWKUDIVLW2NjmRRcArikl7mNb2JJAMA3hjT9hBnUD/Jz4VH J9PwKNiQSx80/PMexB2JnqciNAvBZUe9OasJ8Fc2jpz2u4ihgyGvNwWJtXTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjQNufyUlI2DVGRgXR0kTk3YQxIwHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbYoAjFbHhDH71KIsQYXumcVDH9Lpv8qtwH SaHVcFrA4OsL8ML6KNh/MO0CfsRn+pm6DbJbsxrc/RJe0DqIeoRoXI4Tq/Hc9Wlg XZjTKHMUw1mxi9DNbp6+v3+6kxkwZL9HLsulcYCyEKQ2vei+Sq/mAWCRZK6aNgSb laSJpMKBxX9kpBL1tFjGK0lZbDPgAEmvfaiEfXWSikxHv8c6b2HxhoOX5OfW0sac yxLyiVL4kfjs9ysKRBeuJUeRdtfwIlmDNGnUz4DFAFVUkpfw/c8pRuv3w02x5b2+ 5TVy/iaimDX4XmcSGEM2W1lhXYl/vd/+798cucxmAF9J9uvHDmY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:25 2025 by rpki-client