$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: z82m5YEN//yNP9ZOpWaGvR7BbwO3UkgtNMfX9HMWdhw= Subject key identifier: EF:9A:84:6A:F9:D0:95:4D:71:33:5D:E8:59:4F:44:A1:E5:E8:B1:1A Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 7F8CD2E297AB924AF2CB87273116079B54180627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0138 Signing time: Sat 18 Oct 2025 13:02:07 +0000 Manifest this update: Sat 18 Oct 2025 12:57:07 +0000 Manifest next update: Tue 21 Oct 2025 13:34:07 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: p4HFcQDM3zS3uQQjfTSyV6qQ1VhENSPCDGdegbfNd7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8c:d2:e2:97:ab:92:4a:f2:cb:87:27:31:16:07:9b:54:18:06:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Oct 18 12:57:07 2025 GMT Not After : Oct 21 13:34:07 2025 GMT Subject: CN=EF9A846AF9D0954D71335DE8594F44A1E5E8B11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:3a:01:1a:a2:fb:8a:68:b9:f9:21:f6:ce: a9:fa:51:c1:95:bc:48:4a:c5:47:7c:ab:1c:26:3f: 68:6f:f9:7a:6a:d3:0e:e0:06:0d:50:77:41:44:33: b3:a4:b3:78:50:9b:f4:c6:6f:4c:99:e1:fc:95:72: c3:d2:7b:e6:f7:e2:4c:8c:5a:45:00:49:10:3f:27: 5a:e6:8a:c5:e2:2e:9f:b2:20:39:df:ef:00:30:e8: 74:64:2a:1d:9d:56:26:a1:59:16:20:15:27:78:dc: 4a:d4:95:01:68:e0:a3:7e:50:d3:50:10:6c:5b:f5: ba:26:ca:ce:83:58:1d:3c:d8:dd:01:49:f7:bb:6f: 9a:9e:27:a2:63:2c:41:82:9a:cd:96:1d:e3:71:48: ba:1a:ce:a2:59:d8:2e:f4:ff:96:cb:54:76:82:14: 8a:9c:b1:28:83:18:52:09:36:1d:34:39:5f:74:c8: 2f:c8:53:8f:34:7d:17:a0:9f:f5:47:50:fc:6b:39: df:2c:28:78:be:ac:37:4a:4a:4b:88:29:70:17:7b: 57:28:93:46:9e:97:60:bf:ae:06:97:6d:0f:f1:cf: 0b:fe:38:75:8e:7c:4d:db:e2:42:08:34:2e:68:ef: f9:80:5b:a4:8e:96:d4:be:6b:bb:fe:45:5d:c3:af: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:84:6A:F9:D0:95:4D:71:33:5D:E8:59:4F:44:A1:E5:E8:B1:1A X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fe:e9:41:09:5a:3d:dc:5c:e9:6f:0c:1d:f4:46:09:ca:fd: 36:ee:e4:1f:8a:5b:8a:48:22:09:95:08:64:48:6e:d1:0f:71: ac:dd:52:c4:61:cb:c2:60:e0:44:55:e3:b2:09:29:ed:33:71: 8f:78:ae:37:65:b9:65:24:cd:d6:2a:7b:05:d0:82:0f:11:8c: 66:c8:d4:93:12:e1:cd:4c:4b:08:7e:8b:54:c1:bc:a3:8a:56: b4:bf:37:07:c0:8f:50:3f:1f:0e:4d:87:02:9c:e7:a4:51:a9: d8:b6:93:93:5f:6e:60:15:17:8d:c8:6a:14:ad:15:25:17:c6: 8a:2c:7d:fb:e7:11:fa:6d:c9:67:7e:fc:0e:9f:bd:75:67:f8: 7d:dd:24:19:2e:4e:3f:16:f8:5f:78:ba:e0:2f:cf:73:63:e5: 24:30:eb:47:e5:ed:7a:29:bd:38:f4:6c:aa:0f:7e:a6:09:05: 8a:7e:66:e7:01:77:af:5f:9b:63:a0:0c:03:12:e2:ed:5a:31: b9:d3:16:c8:9d:19:80:f8:6f:b1:b5:3b:a2:fc:61:6a:28:c0: 9f:20:5e:fe:3c:a3:c6:ea:f7:d8:1c:65:35:f1:b9:a0:f4:58: 47:48:85:9a:7c:83:e8:d8:f6:2e:2c:8e:c5:07:18:48:8e:3d: 14:9d:7a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4zS4perkkryy4cnMRYHm1QYBicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTEwMTgxMjU3MDdaFw0yNTEwMjExMzM0MDdaMDMxMTAvBgNV BAMTKEVGOUE4NDZBRjlEMDk1NEQ3MTMzNURFODU5NEY0NEExRTVFOEIxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnjoBGqL7imi5+SH2zqn6UcGV vEhKxUd8qxwmP2hv+Xpq0w7gBg1Qd0FEM7Oks3hQm/TGb0yZ4fyVcsPSe+b34kyM WkUASRA/J1rmisXiLp+yIDnf7wAw6HRkKh2dViahWRYgFSd43ErUlQFo4KN+UNNQ EGxb9bomys6DWB082N0BSfe7b5qeJ6JjLEGCms2WHeNxSLoazqJZ2C70/5bLVHaC FIqcsSiDGFIJNh00OV90yC/IU480fRegn/VHUPxrOd8sKHi+rDdKSkuIKXAXe1co k0ael2C/rgaXbQ/xzwv+OHWOfE3b4kIINC5o7/mAW6SOltS+a7v+RV3Dr3TNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75qEavnQlU1xM13oWU9EoeXosRowHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv+6UEJWj3cXOlvDB30RgnK/Tbu5B+KW4pI IgmVCGRIbtEPcazdUsRhy8Jg4ERV47IJKe0zcY94rjdluWUkzdYqewXQgg8RjGbI 1JMS4c1MSwh+i1TBvKOKVrS/NwfAj1A/Hw5NhwKc56RRqdi2k5NfbmAVF43IahSt FSUXxoosffvnEfptyWd+/A6fvXVn+H3dJBkuTj8W+F94uuAvz3Nj5SQw60fl7Xop vTj0bKoPfqYJBYp+ZucBd69fm2OgDAMS4u1aMbnTFsidGYD4b7G1O6L8YWoowJ8g Xv48o8bq99gcZTXxuaD0WEdIhZp8g+jY9i4sjsUHGEiOPRSdeu8= -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:25 2025 by rpki-client