$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: 0AqhUXajxLc71+XYpLFrH+RrlHpc0QmydjHv8WMdud0= Subject key identifier: 9F:11:A6:F1:7A:67:86:0D:99:CC:7E:84:01:9D:FC:BD:7C:1F:63:B0 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 1CC249E329C1122DDEBA916DFBD551576663029E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03EA Signing time: Sun 19 Oct 2025 01:22:18 +0000 Manifest this update: Sun 19 Oct 2025 01:17:18 +0000 Manifest next update: Wed 22 Oct 2025 11:50:18 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: cd5yioaaKW+od4Xjq92ZeRgCIngkVVrz8CaW1RX+qKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c2:49:e3:29:c1:12:2d:de:ba:91:6d:fb:d5:51:57:66:63:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Oct 19 01:17:18 2025 GMT Not After : Oct 22 11:50:18 2025 GMT Subject: CN=9F11A6F17A67860D99CC7E84019DFCBD7C1F63B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:8e:fe:69:64:98:63:5d:d2:ad:1b:16:4e: bb:fa:6a:b7:b5:40:94:37:6c:74:5a:af:94:66:a3: e2:3b:c4:92:5e:d9:3b:23:f3:9b:39:b6:fb:fe:d2: 56:a0:f3:7a:48:bf:23:e9:aa:29:77:5d:9a:52:31: d8:db:97:46:eb:de:c8:9c:20:29:f8:52:b5:3c:b4: 87:2e:b1:e4:ee:17:5a:8f:62:88:d7:7e:0a:cf:72: 6c:86:8d:56:e2:b2:51:80:6c:ab:e4:0e:5f:22:cb: 75:79:89:de:10:c6:c3:07:75:7d:d2:48:c6:00:52: 6e:39:ee:27:d8:4d:20:7f:c7:8d:4d:55:bc:a8:c5: d1:7a:9d:7e:b9:be:4f:bc:a4:70:7b:9a:6e:a1:d7: 2b:ad:be:24:f8:3d:83:bb:9c:11:ad:b7:ef:38:10: 59:21:6b:ac:df:7c:5c:c7:64:3d:ed:99:1a:ce:5b: a9:a8:fe:3b:36:7a:ea:6e:84:c3:ac:4a:03:f5:1c: 29:00:f1:18:71:79:2e:95:09:26:67:0c:1e:f1:67: f0:12:bd:22:2b:cb:0e:de:2c:4a:67:f2:a6:de:06: 49:f9:c7:f7:b1:78:91:76:e3:6c:76:7b:9b:14:c8: dd:5c:ce:dc:4d:a9:03:17:f9:9b:21:dd:dd:ed:5e: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:A6:F1:7A:67:86:0D:99:CC:7E:84:01:9D:FC:BD:7C:1F:63:B0 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:09:99:82:df:4e:67:f5:0c:89:24:40:54:2e:00:91:5e: db:fa:b0:59:7a:07:d2:07:32:74:a8:00:6f:76:7f:f4:58:1a: 72:dc:c4:44:cd:26:5d:9a:59:23:c9:49:29:db:61:81:1b:1a: d8:7a:3a:fa:68:da:1e:d3:5d:7a:8a:99:8f:85:52:8e:70:e6: 69:75:d2:d2:21:f0:dd:90:c7:80:4d:09:09:0e:c5:58:34:c6: 65:3d:df:db:19:91:d1:de:7c:11:de:08:04:63:ae:4d:f8:ad: d3:2f:86:a4:9e:98:2b:7f:fd:dc:af:60:c5:87:15:72:b1:88: 26:4a:3c:db:24:e2:65:0d:77:8e:ad:8e:dc:a4:9e:f0:20:c1: 3f:19:d0:52:48:4c:c6:52:2b:b9:1a:00:ac:c9:06:cb:c1:c0: 54:0a:c6:ae:e1:40:c9:47:7f:8a:f7:eb:9a:23:7a:f3:d4:4f: 30:29:25:00:ec:7b:65:99:3b:02:19:c4:b5:6f:be:68:6e:fb: 21:96:b0:85:07:f9:a8:8a:34:88:3b:9a:7c:06:ee:60:fc:03: 9f:11:84:d9:9a:b5:f5:b1:8f:12:c0:38:db:f2:66:ba:2c:56: 7b:87:2c:53:f5:8e:3c:9e:5e:1a:86:28:97:d8:63:77:02:72: 6f:eb:1b:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMJJ4ynBEi3eupFt+9VRV2ZjAp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTEwMTkwMTE3MThaFw0yNTEwMjIxMTUwMThaMDMxMTAvBgNV BAMTKDlGMTFBNkYxN0E2Nzg2MEQ5OUNDN0U4NDAxOURGQ0JEN0MxRjYzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7Y7+aWSYY13SrRsWTrv6are1 QJQ3bHRar5Rmo+I7xJJe2Tsj85s5tvv+0lag83pIvyPpqil3XZpSMdjbl0br3sic ICn4UrU8tIcuseTuF1qPYojXfgrPcmyGjVbislGAbKvkDl8iy3V5id4QxsMHdX3S SMYAUm457ifYTSB/x41NVbyoxdF6nX65vk+8pHB7mm6h1yutviT4PYO7nBGtt+84 EFkha6zffFzHZD3tmRrOW6mo/js2eupuhMOsSgP1HCkA8RhxeS6VCSZnDB7xZ/AS vSIryw7eLEpn8qbeBkn5x/exeJF242x2e5sUyN1cztxNqQMX+Zsh3d3tXjQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxGm8Xpnhg2ZzH6EAZ38vXwfY7AwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUiCZmC305n9QyJJEBULgCRXtv6sFl6B9IH MnSoAG92f/RYGnLcxETNJl2aWSPJSSnbYYEbGth6Ovpo2h7TXXqKmY+FUo5w5ml1 0tIh8N2Qx4BNCQkOxVg0xmU939sZkdHefBHeCARjrk34rdMvhqSemCt//dyvYMWH FXKxiCZKPNsk4mUNd46tjtyknvAgwT8Z0FJITMZSK7kaAKzJBsvBwFQKxq7hQMlH f4r365ojevPUTzApJQDse2WZOwIZxLVvvmhu+yGWsIUH+aiKNIg7mnwG7mD8A58R hNmatfWxjxLAONvyZrosVnuHLFP1jjyeXhqGKJfYY3cCcm/rG5w= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:40 2025 by rpki-client