$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: Ku4hVTLHaz7juK6XseEK1itUEffXrsC8mdbLHQsnZMA= Subject key identifier: 07:02:57:8E:B8:34:45:36:28:A2:EF:FF:61:32:FC:F9:60:5D:6F:28 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 1DF2CC4D6CE4E4F8E2CAD879D6C955D240F84D3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 01E6 Signing time: Sun 19 Oct 2025 00:50:45 +0000 Manifest this update: Sun 19 Oct 2025 00:45:45 +0000 Manifest next update: Wed 22 Oct 2025 09:21:45 +0000 Files and hashes: 1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: tAjKFPpvCjRyUwb+cyNi6I+RF6wF8Fd8vkzQyU2oi0U=) 4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f2:cc:4d:6c:e4:e4:f8:e2:ca:d8:79:d6:c9:55:d2:40:f8:4d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Oct 19 00:45:45 2025 GMT Not After : Oct 22 09:21:45 2025 GMT Subject: CN=0702578EB834453628A2EFFF6132FCF9605D6F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:1e:02:80:bb:ec:32:65:4b:8a:7b:85:78:f2: fb:f5:78:d0:07:e3:23:a4:82:cb:f8:72:69:35:da: 72:6c:6b:f5:12:3e:d3:b2:15:55:d4:a0:bd:ff:ab: 49:09:1a:03:03:fe:21:38:00:4e:54:25:79:77:d3: 04:e4:3b:98:e2:db:8f:0d:a4:65:bd:1d:b6:ef:d4: a3:e8:cc:59:a9:22:9d:6d:3f:6d:a1:37:6c:48:ef: 8e:b8:45:41:89:2b:23:49:cc:b5:d0:d4:63:da:70: 11:f2:48:f2:56:05:87:54:f5:c4:67:73:3e:03:a0: 92:be:5c:cf:30:b4:5c:aa:42:ad:c5:9b:ea:d7:ab: 04:2d:5f:f6:ec:eb:49:d1:98:cd:ee:d3:a5:2b:00: 50:c4:28:ac:61:0e:63:d1:a0:f5:dc:ad:ef:dd:c5: c8:74:8c:2b:b4:2b:9b:d8:9a:22:3d:09:07:ba:5a: 3c:61:bd:0c:fb:ff:4b:91:e2:16:72:da:71:5e:69: 13:6a:74:95:c4:e0:fa:5e:1d:f5:aa:64:31:f1:52: 77:d8:82:70:76:68:82:5c:f8:0e:ec:f1:fd:7f:58: 1d:eb:cc:e4:9e:ba:77:46:68:f0:df:d2:3f:86:dd: 83:75:10:2e:71:4c:51:94:a6:04:8d:f1:0f:9e:3f: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:02:57:8E:B8:34:45:36:28:A2:EF:FF:61:32:FC:F9:60:5D:6F:28 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:38:95:f9:1b:ef:9c:c5:f1:b3:1d:0f:9f:f4:c3:50:16:ef: 67:01:5c:f8:01:6c:54:c5:1f:77:a8:da:3d:f0:41:2b:81:31: 20:d5:e4:3c:4f:f1:99:83:b9:46:54:eb:87:81:ee:38:52:34: e7:40:20:de:69:db:7b:8b:31:a1:fc:12:5c:f1:cc:78:6b:91: 0a:61:90:87:9b:c6:5d:c0:ba:8e:3b:cb:34:83:e9:91:a7:c9: dc:4b:87:8b:35:e4:7e:db:c7:09:c5:0f:2b:4f:4e:82:b1:fa: ee:e1:7e:8d:42:89:8d:6b:a5:b2:7c:d6:d7:e8:ca:24:6c:98: e5:ed:13:80:23:65:e1:ba:e1:c6:c2:0b:e7:64:98:53:c2:1b: eb:6c:2a:57:8b:e3:67:61:27:3a:a3:a7:76:7d:d0:cb:b6:b9: 30:5c:a6:09:37:1d:ef:46:47:6e:41:87:ca:66:3f:11:26:12: 31:20:f3:29:9a:43:83:a8:cb:c0:e2:df:e0:ab:86:ef:5d:34: 2d:2f:0a:1a:4e:8d:d5:f3:ac:cb:b8:f9:b6:26:9b:a1:ac:1b: f1:b6:dd:bb:20:9f:06:9b:1f:7e:ec:1c:97:b0:c4:24:09:b8: 13:dd:e1:1e:44:94:0d:5d:90:61:ab:d0:33:41:9e:5a:28:c1: 6a:af:8d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfLMTWzk5Pjiyth51slV0kD4TTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTEwMTkwMDQ1NDVaFw0yNTEwMjIwOTIxNDVaMDMxMTAvBgNV BAMTKDA3MDI1NzhFQjgzNDQ1MzYyOEEyRUZGRjYxMzJGQ0Y5NjA1RDZGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9HgKAu+wyZUuKe4V48vv1eNAH 4yOkgsv4cmk12nJsa/USPtOyFVXUoL3/q0kJGgMD/iE4AE5UJXl30wTkO5ji248N pGW9Hbbv1KPozFmpIp1tP22hN2xI7464RUGJKyNJzLXQ1GPacBHySPJWBYdU9cRn cz4DoJK+XM8wtFyqQq3Fm+rXqwQtX/bs60nRmM3u06UrAFDEKKxhDmPRoPXcre/d xch0jCu0K5vYmiI9CQe6WjxhvQz7/0uR4hZy2nFeaRNqdJXE4PpeHfWqZDHxUnfY gnB2aIJc+A7s8f1/WB3rzOSeundGaPDf0j+G3YN1EC5xTFGUpgSN8Q+eP9+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwJXjrg0RTYoou//YTL8+WBdbygwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs4lfkb75zF8bMdD5/0w1AW72cBXPgBbFTF H3eo2j3wQSuBMSDV5DxP8ZmDuUZU64eB7jhSNOdAIN5p23uLMaH8ElzxzHhrkQph kIebxl3Auo47yzSD6ZGnydxLh4s15H7bxwnFDytPToKx+u7hfo1CiY1rpbJ81tfo yiRsmOXtE4AjZeG64cbCC+dkmFPCG+tsKleL42dhJzqjp3Z90Mu2uTBcpgk3He9G R25Bh8pmPxEmEjEg8ymaQ4Ooy8Di3+Crhu9dNC0vChpOjdXzrMu4+bYmm6GsG/G2 3bsgnwabH37sHJewxCQJuBPd4R5ElA1dkGGr0DNBnloowWqvjRU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:49 2025 by rpki-client