$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: UxUtmnR7t8/Fu0tAIH3+xCTLr3UsJJHMR7hkgrVAdWk= Subject key identifier: 1E:B3:F9:D3:78:B6:6C:6B:CD:E3:1A:0A:3E:71:52:0A:51:F8:C5:28 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 0D7F5BFFBAF9C17493AAA4EC712F66528514EF2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 049E Signing time: Mon 20 Oct 2025 08:41:13 +0000 Manifest this update: Mon 20 Oct 2025 08:36:13 +0000 Manifest next update: Thu 23 Oct 2025 09:57:13 +0000 Files and hashes: 1: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: B1op7EiaUOzuCPvdrXr04OTdCDo4L5aD0eFPRsRI46E=) 2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) 4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:5b:ff:ba:f9:c1:74:93:aa:a4:ec:71:2f:66:52:85:14:ef:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Oct 20 08:36:13 2025 GMT Not After : Oct 23 09:57:13 2025 GMT Subject: CN=1EB3F9D378B66C6BCDE31A0A3E71520A51F8C528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:65:c2:20:af:26:91:1d:6c:ac:72:a0:9a: fe:b9:1f:27:53:ea:c0:7d:fb:17:08:92:6c:c3:b3: c5:d0:6f:aa:25:26:2a:3b:df:9b:0a:19:85:14:c4: ad:12:5d:2c:b1:e6:e2:f7:5e:3f:2d:69:bb:d2:55: da:32:73:d1:7f:8d:61:db:77:1c:11:34:d7:d0:5d: 2c:9b:28:85:f3:1c:23:27:07:ad:65:62:0c:0e:04: 34:cd:b7:b0:d1:f7:8b:41:6d:bd:6e:5d:cf:58:c0: 90:8b:26:1d:9a:35:03:26:b5:7e:d6:21:bf:2a:d2: 19:8d:93:1a:2f:6b:00:c0:ee:3e:44:f2:57:5b:54: 24:2c:e0:6a:af:eb:ac:d8:05:d4:16:c3:12:7a:d8: 05:24:39:5e:09:4b:0b:bf:35:f0:4a:3c:aa:3a:27: cc:22:dd:fa:5d:b5:b1:c5:8e:4a:d0:c4:eb:6d:07: 94:8b:4d:d1:00:53:50:90:65:e9:16:5a:12:68:bf: 0a:cd:e5:88:2c:ed:a6:62:37:cb:28:0c:e3:96:c2: 7d:ab:3c:08:a5:b2:7e:ac:dd:9d:bd:f5:82:f5:5c: 05:db:39:4d:7d:68:fb:94:7e:45:89:4a:51:5c:85: f1:b9:14:3a:9a:c9:4a:4e:f8:db:11:7d:91:a7:04: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:F9:D3:78:B6:6C:6B:CD:E3:1A:0A:3E:71:52:0A:51:F8:C5:28 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:54:92:87:28:71:78:8f:10:d9:d8:85:dc:df:68:2a:45: 0b:66:ec:1f:46:b1:e1:ff:f3:6c:95:8f:b7:cb:97:e5:be:bc: f2:8a:89:31:06:65:aa:f0:da:1d:b0:ef:dd:00:ab:9c:e6:27: e9:55:fa:7f:1d:57:b6:23:32:ff:da:16:f2:6b:b2:e1:f9:47: 7d:0b:11:f2:41:ad:b3:88:ed:44:a5:b4:a1:43:64:a2:31:0f: 69:ff:64:8a:96:8f:6e:a8:a9:fd:bf:fb:24:fe:3f:d8:c2:a4: e0:38:42:d8:e6:bf:b2:4a:ab:f2:ae:69:59:09:4e:d4:ba:1d: 3a:04:19:ae:41:fb:f2:4f:23:72:d7:8b:b1:5c:d7:1c:4a:83: 7f:c7:71:62:85:fd:ed:93:d7:f9:c7:fb:15:5c:55:a8:ce:49: e8:69:cc:7d:c7:5d:4b:1d:4a:ec:2d:58:d8:d1:09:bf:b7:48: 03:54:85:8a:14:1b:76:c4:70:3f:d8:f8:61:93:07:92:5a:4c: 48:10:6b:9d:93:f3:47:60:90:b6:cf:1f:91:38:02:85:fd:c0: cb:e2:24:77:56:65:9f:55:ce:c4:0b:32:51:56:93:ee:b3:f1: 51:48:c9:fc:75:0d:7e:8d:9b:e7:7f:5f:5f:14:ad:27:47:a7: 68:9e:d9:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX9b/7r5wXSTqqTscS9mUoUU7y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTEwMjAwODM2MTNaFw0yNTEwMjMwOTU3MTNaMDMxMTAvBgNV BAMTKDFFQjNGOUQzNzhCNjZDNkJDREUzMUEwQTNFNzE1MjBBNTFGOEM1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVmXCIK8mkR1srHKgmv65HydT 6sB9+xcIkmzDs8XQb6olJio735sKGYUUxK0SXSyx5uL3Xj8tabvSVdoyc9F/jWHb dxwRNNfQXSybKIXzHCMnB61lYgwOBDTNt7DR94tBbb1uXc9YwJCLJh2aNQMmtX7W Ib8q0hmNkxovawDA7j5E8ldbVCQs4Gqv66zYBdQWwxJ62AUkOV4JSwu/NfBKPKo6 J8wi3fpdtbHFjkrQxOttB5SLTdEAU1CQZekWWhJovwrN5Ygs7aZiN8soDOOWwn2r PAilsn6s3Z299YL1XAXbOU19aPuUfkWJSlFchfG5FDqayUpO+NsRfZGnBHYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHrP503i2bGvN4xoKPnFSClH4xSgwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa9VJKHKHF4jxDZ2IXc32gqRQtm7B9GseH/ 82yVj7fLl+W+vPKKiTEGZarw2h2w790Aq5zmJ+lV+n8dV7YjMv/aFvJrsuH5R30L EfJBrbOI7USltKFDZKIxD2n/ZIqWj26oqf2/+yT+P9jCpOA4Qtjmv7JKq/KuaVkJ TtS6HToEGa5B+/JPI3LXi7Fc1xxKg3/HcWKF/e2T1/nH+xVcVajOSehpzH3HXUsd SuwtWNjRCb+3SANUhYoUG3bEcD/Y+GGTB5JaTEgQa52T80dgkLbPH5E4AoX9wMvi JHdWZZ9VzsQLMlFWk+6z8VFIyfx1DX6Nm+d/X18UrSdHp2ie2S8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:34 2025 by rpki-client