$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: iZGEFZCqgBZ96vDZ935eu+qpMFcrtyM644V9ZOn+ESk= Subject key identifier: 0B:31:66:F6:47:26:39:D5:81:24:A6:38:19:20:28:42:8C:54:39:86 Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 707FD841358465D466FCA89271F41F2F09C2311C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: D2 Signing time: Sat 18 Oct 2025 22:00:41 +0000 Manifest this update: Sat 18 Oct 2025 21:55:41 +0000 Manifest next update: Wed 22 Oct 2025 02:31:41 +0000 Files and hashes: 1: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: nmXUOxI7mjTYSy3qO9vgQeXZnIA4U8uQ4qofbe0JgXI=) 2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7f:d8:41:35:84:65:d4:66:fc:a8:92:71:f4:1f:2f:09:c2:31:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Oct 18 21:55:41 2025 GMT Not After : Oct 22 02:31:41 2025 GMT Subject: CN=0B3166F6472639D58124A638192028428C543986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:5f:dd:85:40:43:9d:bb:db:44:73:b1:9e: 23:03:46:c5:5b:55:c8:eb:00:c6:65:67:78:c3:cf: 0e:71:61:ef:7f:98:1b:87:6d:4f:1a:07:b4:03:9a: a4:78:44:6b:36:51:6b:76:55:cf:42:60:1a:b1:65: 19:62:d9:ed:92:24:92:6f:5c:7f:b6:f8:49:b8:51: 3d:27:77:68:89:f2:56:a5:cc:40:28:8b:91:49:50: e8:30:9b:2d:cb:8e:45:44:6f:9d:85:8d:5b:e5:ed: 50:9f:28:a7:c8:8b:6f:02:82:51:f3:8a:82:10:cd: 20:01:b9:e5:00:b0:99:c9:af:02:e4:a1:26:e7:54: 7e:9f:d9:fe:fb:ae:a8:aa:9d:98:bc:1e:5b:f6:6d: a7:de:d0:ef:6a:35:eb:60:3f:13:d2:aa:fc:55:b6: 7d:a5:d7:58:ec:11:74:e4:f2:b5:d8:39:5c:f6:f2: 84:d8:78:90:c9:ef:e6:24:2c:7a:ea:3e:46:6c:f2: eb:a1:5b:3d:71:2d:4d:ec:01:78:92:39:cc:e3:df: a1:ae:6e:b2:22:ed:6d:12:4f:43:d3:f8:11:59:e7: cf:c0:83:cb:5c:96:96:13:5d:b5:0b:24:6e:15:8b: da:c5:63:1c:eb:c0:8f:8e:7c:5b:fa:d4:92:6d:40: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:31:66:F6:47:26:39:D5:81:24:A6:38:19:20:28:42:8C:54:39:86 X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bb:96:0f:77:c0:7f:09:3d:40:5e:d1:f8:9e:e9:50:53:48: a1:64:a2:db:90:ff:01:7e:82:a8:55:c1:20:a4:0a:05:ae:91: df:63:88:e3:c9:c2:50:d7:6d:c0:f9:e7:4f:95:d3:1c:2c:f6: 49:06:cb:e3:32:f3:6e:13:41:9d:0f:88:3a:9f:4d:28:ac:b8: d9:5b:43:6e:71:6e:82:bb:b6:d1:b5:b9:ab:4d:8b:e0:d3:36: d2:91:68:eb:c1:57:ff:6a:f1:b9:6d:33:0b:7d:19:4d:40:79: fe:79:4c:aa:48:00:aa:b8:55:2e:15:85:87:5d:1b:fc:50:42: cc:e6:ac:a0:66:8e:8e:a7:50:16:30:38:65:14:b0:b6:e1:7e: 07:31:48:d4:6b:fd:d8:b3:65:4b:e4:3f:4d:2e:55:fc:71:fa: 44:86:c4:ab:87:fe:71:d4:4b:53:14:64:7d:44:4a:6d:b2:63: 88:32:e8:49:e6:27:7a:ae:4e:12:30:d3:4e:42:06:76:e6:87: e2:c3:2e:d6:64:6c:6a:97:d9:d2:19:62:7c:ac:71:f0:30:51: ce:91:13:53:1f:00:4b:49:0d:95:35:05:45:c3:03:71:15:1c: 46:6f:88:64:3c:c2:10:c6:80:11:33:30:29:7b:15:f3:b5:b8: 45:51:94:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcH/YQTWEZdRm/KiScfQfLwnCMRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTEwMTgyMTU1NDFaFw0yNTEwMjIwMjMxNDFaMDMxMTAvBgNV BAMTKDBCMzE2NkY2NDcyNjM5RDU4MTI0QTYzODE5MjAyODQyOEM1NDM5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoF/dhUBDnbvbRHOxniMDRsVb VcjrAMZlZ3jDzw5xYe9/mBuHbU8aB7QDmqR4RGs2UWt2Vc9CYBqxZRli2e2SJJJv XH+2+Em4UT0nd2iJ8lalzEAoi5FJUOgwmy3LjkVEb52FjVvl7VCfKKfIi28CglHz ioIQzSABueUAsJnJrwLkoSbnVH6f2f77rqiqnZi8Hlv2bafe0O9qNetgPxPSqvxV tn2l11jsEXTk8rXYOVz28oTYeJDJ7+YkLHrqPkZs8uuhWz1xLU3sAXiSOczj36Gu brIi7W0ST0PT+BFZ58/Ag8tclpYTXbULJG4Vi9rFYxzrwI+OfFv61JJtQNrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzFm9kcmOdWBJKY4GSAoQoxUOYYwHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS7lg93wH8JPUBe0fie6VBTSKFkotuQ/wF+ gqhVwSCkCgWukd9jiOPJwlDXbcD550+V0xws9kkGy+My824TQZ0PiDqfTSisuNlb Q25xboK7ttG1uatNi+DTNtKRaOvBV/9q8bltMwt9GU1Aef55TKpIAKq4VS4VhYdd G/xQQszmrKBmjo6nUBYwOGUUsLbhfgcxSNRr/dizZUvkP00uVfxx+kSGxKuH/nHU S1MUZH1ESm2yY4gy6EnmJ3quThIw005CBnbmh+LDLtZkbGqX2dIZYnyscfAwUc6R E1MfAEtJDZU1BUXDA3EVHEZviGQ8whDGgBEzMCl7FfO1uEVRlA4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:29 2025 by rpki-client