$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: UJeyoCWI1LdHj0PfJHEFZ4dW15aMQMuoe/E+sndN2Rw= Subject key identifier: 8F:E8:9F:6B:30:93:15:85:F6:A5:75:2B:AB:47:1C:62:C2:F3:83:86 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 565B8D6CBFA4635F1557C4ECD1A492EAFD9F3230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 0112 Signing time: Sun 19 Oct 2025 12:11:09 +0000 Manifest this update: Sun 19 Oct 2025 12:06:09 +0000 Manifest next update: Wed 22 Oct 2025 13:15:09 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 2: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: Mex+PsZ/919ScRWxJ/LU/0hZazKKSop5ZEp16k9mPcQ=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5b:8d:6c:bf:a4:63:5f:15:57:c4:ec:d1:a4:92:ea:fd:9f:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Oct 19 12:06:09 2025 GMT Not After : Oct 22 13:15:09 2025 GMT Subject: CN=8FE89F6B30931585F6A5752BAB471C62C2F38386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:e5:3f:9f:7d:aa:34:8a:d8:35:29:c1:63: ef:f0:0a:f3:b3:f2:21:bf:78:f2:fa:5d:42:52:47: fc:70:88:91:e9:09:6e:fd:e3:e4:22:41:c1:ce:ca: 7a:28:5c:92:82:68:e8:4f:5c:4c:44:fb:65:5c:1a: 56:48:ae:7a:34:2a:55:76:9b:a6:bb:80:96:fb:3d: 7d:72:df:19:1c:4f:7b:91:e8:37:bf:03:06:d8:14: ec:b2:fe:04:29:6a:93:79:1d:92:14:99:5f:32:34: a7:a1:06:29:04:62:1f:38:f9:eb:0c:3f:74:63:a0: 9f:8e:e7:e0:03:6d:b0:49:c1:39:43:f4:87:61:15: 15:f4:3d:00:fb:5c:8c:ac:51:2e:65:30:7c:23:1d: 20:95:bd:8f:43:75:9a:67:37:ac:94:f6:b3:d0:9c: c4:c6:69:bf:41:60:62:4c:24:41:ae:6d:e3:c0:51: 61:a7:f8:14:42:2d:a4:2a:f1:26:cb:f4:d7:38:10: fa:7b:3f:da:65:34:87:49:12:35:9e:2c:a8:84:d6: d7:8e:e6:5a:a4:0f:0c:85:bb:65:bd:7b:f7:72:fd: 8d:1f:cd:00:6c:71:3f:da:c2:6a:aa:39:f5:9f:03: 18:b0:a0:f8:22:a0:d2:57:40:e6:90:15:66:99:14: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:9F:6B:30:93:15:85:F6:A5:75:2B:AB:47:1C:62:C2:F3:83:86 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b6:19:6c:34:a7:76:14:56:16:0d:0d:dd:73:76:f7:22:c5: 64:bf:a3:05:de:5f:68:b6:b5:74:e2:a0:98:6a:21:bc:67:28: 75:3c:34:51:17:a7:3b:70:c3:c6:a9:1d:6c:1b:b3:29:be:c2: 44:3c:ef:4a:a0:eb:0e:90:b6:19:c0:63:50:48:b8:0c:76:2a: e1:34:75:3f:c0:3f:79:d6:17:3a:f7:bd:eb:ce:03:38:e2:d7: bc:26:38:2f:4d:c1:81:d6:97:eb:5f:e4:ff:ed:41:a7:a9:eb: 65:ee:46:a7:8c:c4:4f:b0:31:6e:2e:9f:dc:af:c8:27:18:32: 30:42:f0:31:a4:97:d8:9d:c2:60:b5:3f:0b:e2:39:b9:6a:fa: e8:c2:a1:50:5d:3f:21:6d:c2:e8:7b:84:56:7f:54:7b:1f:df: ec:19:f9:aa:69:69:46:0a:81:ac:6f:ff:bd:22:91:ab:0f:e8: b2:e4:6c:35:80:00:51:2f:9c:35:e7:fd:bc:d7:b7:f2:cb:76: 2a:76:8b:b1:eb:db:9c:42:41:7d:03:e8:79:32:43:2b:5a:ad: 50:13:b4:2d:11:16:7b:23:96:db:bb:65:56:c2:58:ad:b2:c2: 5f:cc:d0:97:58:b8:c4:23:ac:2f:3e:3a:a4:ad:c0:59:05:00: 84:45:81:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVluNbL+kY18VV8Ts0aSS6v2fMjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTEwMTkxMjA2MDlaFw0yNTEwMjIxMzE1MDlaMDMxMTAvBgNV BAMTKDhGRTg5RjZCMzA5MzE1ODVGNkE1NzUyQkFCNDcxQzYyQzJGMzgzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3T+U/n32qNIrYNSnBY+/wCvOz 8iG/ePL6XUJSR/xwiJHpCW794+QiQcHOynooXJKCaOhPXExE+2VcGlZIrno0KlV2 m6a7gJb7PX1y3xkcT3uR6De/AwbYFOyy/gQpapN5HZIUmV8yNKehBikEYh84+esM P3RjoJ+O5+ADbbBJwTlD9IdhFRX0PQD7XIysUS5lMHwjHSCVvY9DdZpnN6yU9rPQ nMTGab9BYGJMJEGubePAUWGn+BRCLaQq8SbL9Nc4EPp7P9plNIdJEjWeLKiE1teO 5lqkDwyFu2W9e/dy/Y0fzQBscT/awmqqOfWfAxiwoPgioNJXQOaQFWaZFD3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+ifazCTFYX2pXUrq0ccYsLzg4YwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW2GWw0p3YUVhYNDd1zdvcixWS/owXeX2i2 tXTioJhqIbxnKHU8NFEXpztww8apHWwbsym+wkQ870qg6w6QthnAY1BIuAx2KuE0 dT/AP3nWFzr3vevOAzji17wmOC9NwYHWl+tf5P/tQaep62XuRqeMxE+wMW4un9yv yCcYMjBC8DGkl9idwmC1PwviOblq+ujCoVBdPyFtwuh7hFZ/VHsf3+wZ+appaUYK gaxv/70ikasP6LLkbDWAAFEvnDXn/bzXt/LLdip2i7Hr25xCQX0D6HkyQytarVAT tC0RFnsjltu7ZVbCWK2ywl/M0JdYuMQjrC8+OqStwFkFAIRFgdA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:48 2025 by rpki-client