$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: RL9qCZZxLasB0JhzEOx7+Z39A417c9ZFZuzJxTfyOp8= Subject key identifier: 2D:69:71:79:9B:4A:93:54:47:1B:55:11:A4:56:66:27:1E:D8:69:39 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 3712FA7472AEB6ABAD883200D5DB1DA21CDA8560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: E7 Signing time: Sun 19 Oct 2025 20:20:40 +0000 Manifest this update: Sun 19 Oct 2025 20:15:40 +0000 Manifest next update: Wed 22 Oct 2025 20:41:40 +0000 Files and hashes: 1: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 2: 020EA2304929066809CA6F723574798639D77438.crl (hash: dTOZKBA+e5LImiJsQ3jJZ11MgyXxKpYW6PanxDvq+tY=) 3: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:12:fa:74:72:ae:b6:ab:ad:88:32:00:d5:db:1d:a2:1c:da:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Oct 19 20:15:40 2025 GMT Not After : Oct 22 20:41:40 2025 GMT Subject: CN=2D6971799B4A9354471B5511A45666271ED86939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:cc:f2:f5:91:91:40:68:f8:26:58:06:35: 16:71:26:a9:5a:af:4f:35:75:2f:84:08:a0:7f:2c: d4:44:83:1a:49:70:b5:ff:ab:66:d0:4e:a3:45:ae: e0:9f:54:33:ac:b4:90:fa:66:32:50:9e:c9:be:d8: cd:6c:1b:05:44:21:27:cd:16:30:1f:fe:0c:5a:0a: 51:62:af:d6:0d:7d:c0:d9:1b:cc:ef:9b:2e:28:e4: da:35:cb:b8:ad:a8:00:ef:b3:a4:37:25:82:0b:f4: 5b:72:e0:5f:5c:5a:a2:22:50:1f:b3:60:e4:95:4a: 2c:83:69:ec:50:49:d1:83:70:d3:f4:45:35:5b:1c: 20:19:4d:fb:42:2d:75:72:36:8b:fd:c2:8d:90:af: 7a:9e:af:9f:48:bd:f1:8f:31:54:7c:34:8e:fe:7c: 3f:3e:62:30:79:7d:8f:a5:73:93:5b:b0:c5:77:c1: bb:6d:cf:c3:40:9c:90:c5:14:68:13:9e:b0:1d:ad: 41:b3:4b:cc:ae:51:20:bb:e0:f1:69:2f:72:2c:f2: 97:e8:f2:f3:63:da:3d:8e:fa:79:de:92:71:5b:e7: 56:20:cb:3d:22:c9:bf:d4:6d:62:e0:f6:df:03:c7: 18:ba:17:98:43:60:cf:dc:8e:5a:cf:1a:87:80:1d: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:71:79:9B:4A:93:54:47:1B:55:11:A4:56:66:27:1E:D8:69:39 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:96:9c:6f:3c:be:e4:19:b6:f6:db:74:1e:0f:f3:d5:1b:54: 50:4a:dd:4a:75:0c:27:6b:78:81:e6:19:d4:ca:16:d5:9a:ed: f1:66:3a:93:82:f2:38:4f:66:6b:af:c0:5f:29:ef:88:63:71: 3d:2f:df:85:4e:2b:db:c3:3e:82:97:a9:b7:4f:bd:33:15:44: 91:93:ba:0d:1b:4d:9d:38:dd:a2:de:9e:78:74:70:89:76:93: 41:b9:1a:60:5b:22:53:6c:37:4a:c5:14:e4:eb:93:c3:2d:13: dd:67:10:c3:a9:c2:e2:01:8e:b3:f8:b7:62:67:64:e6:cc:18: 37:95:6e:66:38:47:af:38:bd:65:8d:e9:5c:c4:08:45:6b:89: 69:55:fc:dc:f3:48:4f:9d:ce:29:fd:97:2f:4e:f4:19:0c:57: fc:ee:0c:66:a3:01:90:0e:58:b2:65:32:dc:d6:66:dd:8c:61: 85:54:fc:7f:b7:8e:98:30:b7:84:91:44:c4:2d:0f:25:a6:20: 34:fd:12:36:30:67:64:66:73:ab:a8:d1:9a:bd:6a:c1:81:1e: 63:c8:1f:d0:d5:c9:f8:38:36:58:6e:58:33:62:f1:cf:35:7d: bc:a3:ae:50:04:76:4f:fe:04:f0:df:cd:2a:0e:ac:c6:63:ff: de:cd:59:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxL6dHKutqutiDIA1dsdohzahWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTEwMTkyMDE1NDBaFw0yNTEwMjIyMDQxNDBaMDMxMTAvBgNV BAMTKDJENjk3MTc5OUI0QTkzNTQ0NzFCNTUxMUE0NTY2NjI3MUVEODY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChP8zy9ZGRQGj4JlgGNRZxJqla r081dS+ECKB/LNREgxpJcLX/q2bQTqNFruCfVDOstJD6ZjJQnsm+2M1sGwVEISfN FjAf/gxaClFir9YNfcDZG8zvmy4o5No1y7itqADvs6Q3JYIL9Fty4F9cWqIiUB+z YOSVSiyDaexQSdGDcNP0RTVbHCAZTftCLXVyNov9wo2Qr3qer59IvfGPMVR8NI7+ fD8+YjB5fY+lc5NbsMV3wbttz8NAnJDFFGgTnrAdrUGzS8yuUSC74PFpL3Is8pfo 8vNj2j2O+nneknFb51Ygyz0iyb/UbWLg9t8Dxxi6F5hDYM/cjlrPGoeAHRozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWlxeZtKk1RHG1URpFZmJx7YaTkwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaWnG88vuQZtvbbdB4P89UbVFBK3Up1DCdr eIHmGdTKFtWa7fFmOpOC8jhPZmuvwF8p74hjcT0v34VOK9vDPoKXqbdPvTMVRJGT ug0bTZ043aLennh0cIl2k0G5GmBbIlNsN0rFFOTrk8MtE91nEMOpwuIBjrP4t2Jn ZObMGDeVbmY4R684vWWN6VzECEVriWlV/NzzSE+dzin9ly9O9BkMV/zuDGajAZAO WLJlMtzWZt2MYYVU/H+3jpgwt4SRRMQtDyWmIDT9EjYwZ2Rmc6uo0Zq9asGBHmPI H9DVyfg4NlhuWDNi8c81fbyjrlAEdk/+BPDfzSoOrMZj/97NWe4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:11 2025 by rpki-client