$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: aOTXtqu4JXX7yxmfN+/iO73i6QboFYyDsZdl58y5JLk= Subject key identifier: 7A:E6:FC:E6:83:FB:9B:2C:D7:34:82:F8:D4:F9:03:31:84:AC:D1:E7 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 2D045B72685775E3A399802E388317A7AACB2914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 018E Signing time: Sat 18 Oct 2025 23:51:12 +0000 Manifest this update: Sat 18 Oct 2025 23:46:12 +0000 Manifest next update: Wed 22 Oct 2025 06:30:12 +0000 Files and hashes: 1: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: 8dFuI02EysZWyBuyCq1XrlIm8DjAIFf95Ti3N+vXcQs=) 2: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 4: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) 5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:5b:72:68:57:75:e3:a3:99:80:2e:38:83:17:a7:aa:cb:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Oct 18 23:46:12 2025 GMT Not After : Oct 22 06:30:12 2025 GMT Subject: CN=7AE6FCE683FB9B2CD73482F8D4F9033184ACD1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:65:e6:57:4c:c0:72:49:fd:ed:92:0d:a8: 76:62:bc:ca:00:9b:bf:6e:1c:04:54:87:ef:7a:d8: 0e:54:52:af:a7:0b:88:a0:fd:a9:a7:ca:c1:b0:6b: 34:82:1d:f8:cd:ad:99:b8:c6:1f:43:52:02:77:48: 57:86:d5:e4:a9:66:a1:1f:2b:57:6f:89:f2:22:1b: ff:08:b9:ad:07:a0:48:c4:12:37:4c:47:fd:28:39: c9:3e:ec:df:3b:e5:2e:22:bf:9e:01:cd:99:de:cf: 3f:19:a1:c3:4b:ad:93:d8:64:7f:48:da:38:83:71: d8:79:d1:c7:49:4a:18:50:bd:ba:c5:b6:e1:9b:df: 12:73:a0:8b:75:73:13:c8:0f:30:03:91:e6:d7:5b: 54:03:91:a1:05:e7:01:07:78:ba:46:1a:69:59:5d: cc:17:aa:8a:c4:2f:d7:74:f2:6d:36:08:8b:b9:d8: 1a:b7:0f:f0:78:95:24:61:f1:71:28:0d:ca:70:ea: bd:e2:27:9a:5b:11:8e:63:7c:80:87:5b:ad:bd:af: 79:7a:4b:51:c3:87:2e:de:e5:e8:ef:ad:f2:da:96: 63:0e:45:c2:a1:12:83:ec:b7:af:db:b7:6c:d4:49: af:2c:e4:b5:02:39:3b:90:f3:f0:5d:b5:f1:95:a6: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:FC:E6:83:FB:9B:2C:D7:34:82:F8:D4:F9:03:31:84:AC:D1:E7 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e9:53:e3:c8:8c:34:69:c8:20:07:8c:3f:f2:9a:8b:83:94: 0e:68:aa:b9:52:dc:19:94:a8:ab:55:3f:84:2d:ec:da:19:ca: 96:ff:d8:5a:9d:c2:d9:be:f1:78:ec:2a:40:99:ec:8f:7f:ec: 42:e3:59:8a:e5:e4:8c:21:6c:54:be:dd:d8:cd:fb:03:24:c5: 26:a4:b0:8d:4f:f7:9e:27:91:27:1c:a9:c8:79:67:56:21:f1: f4:f1:25:6e:6c:ac:8c:c9:c5:60:c2:41:c6:2e:50:61:19:39: 4a:76:4f:86:9a:19:9c:66:12:51:b1:4d:bb:75:5f:31:1e:57: 49:e3:c1:5c:23:60:22:5d:da:3c:3d:2d:0c:65:f9:07:28:87: 89:a9:fa:10:d8:2f:46:9f:15:11:a3:40:c9:de:18:a4:fa:6e: 80:c5:7d:81:26:0a:78:f6:75:27:cd:09:ed:9e:f8:b3:e5:78: db:b8:67:91:9e:8e:09:0a:ee:a8:4e:4c:10:f3:c6:db:42:3c: 58:fa:55:f0:b0:78:30:a4:f3:9d:9e:84:9c:44:c3:51:b2:84: 06:fe:37:54:09:db:f4:91:0d:5d:dd:04:23:79:8f:08:2f:f9: 30:49:04:d4:a9:5a:48:bd:52:17:bb:c4:16:14:2a:7a:34:51: 60:b0:07:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQRbcmhXdeOjmYAuOIMXp6rLKRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTEwMTgyMzQ2MTJaFw0yNTEwMjIwNjMwMTJaMDMxMTAvBgNV BAMTKDdBRTZGQ0U2ODNGQjlCMkNENzM0ODJGOEQ0RjkwMzMxODRBQ0QxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/GXmV0zAckn97ZINqHZivMoA m79uHARUh+962A5UUq+nC4ig/amnysGwazSCHfjNrZm4xh9DUgJ3SFeG1eSpZqEf K1dvifIiG/8Iua0HoEjEEjdMR/0oOck+7N875S4iv54BzZnezz8ZocNLrZPYZH9I 2jiDcdh50cdJShhQvbrFtuGb3xJzoIt1cxPIDzADkebXW1QDkaEF5wEHeLpGGmlZ XcwXqorEL9d08m02CIu52Bq3D/B4lSRh8XEoDcpw6r3iJ5pbEY5jfICHW629r3l6 S1HDhy7e5ejvrfLalmMORcKhEoPst6/bt2zUSa8s5LUCOTuQ8/BdtfGVpkxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeub85oP7myzXNIL41PkDMYSs0ecwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTpU+PIjDRpyCAHjD/ymouDlA5oqrlS3BmU qKtVP4Qt7NoZypb/2Fqdwtm+8XjsKkCZ7I9/7ELjWYrl5IwhbFS+3djN+wMkxSak sI1P954nkSccqch5Z1Yh8fTxJW5srIzJxWDCQcYuUGEZOUp2T4aaGZxmElGxTbt1 XzEeV0njwVwjYCJd2jw9LQxl+Qcoh4mp+hDYL0afFRGjQMneGKT6boDFfYEmCnj2 dSfNCe2e+LPleNu4Z5GejgkK7qhOTBDzxttCPFj6VfCweDCk852ehJxEw1GyhAb+ N1QJ2/SRDV3dBCN5jwgv+TBJBNSpWki9Uhe7xBYUKno0UWCwB0c= -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:50 2025 by rpki-client