$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: N8mdRqi0eiJjVz62uEnOBAh43UMwBiQ2ukdA4FiLjxc= Subject key identifier: AF:90:A4:2F:08:8F:C4:7F:3F:92:B2:66:D2:92:66:88:E3:5C:80:62 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 653E64F70908A4AA9586F4D982E56F691B6DB239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0236 Signing time: Sat 18 Oct 2025 22:41:32 +0000 Manifest this update: Sat 18 Oct 2025 22:36:32 +0000 Manifest next update: Tue 21 Oct 2025 23:52:32 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: +xi/YUl36gobBX+M4ujsKZAjHXxWWVVdQGBEScAeDRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3e:64:f7:09:08:a4:aa:95:86:f4:d9:82:e5:6f:69:1b:6d:b2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Oct 18 22:36:32 2025 GMT Not After : Oct 21 23:52:32 2025 GMT Subject: CN=AF90A42F088FC47F3F92B266D2926688E35C8062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:ff:4f:59:54:5b:a3:c4:19:06:46:ba:49: c5:58:82:7c:a9:78:87:cf:8d:da:02:f0:df:6c:35: 67:6b:2b:47:91:c6:58:a6:be:21:29:31:09:60:22: b1:6d:48:2a:56:c2:ea:ba:75:4d:07:55:60:20:6f: a5:10:88:ff:e1:17:20:2d:e7:b1:1f:cf:7e:84:b0: aa:bd:67:dc:d5:9f:0d:a4:08:6d:6b:08:52:a8:6e: fa:36:db:db:88:4e:bf:83:71:f6:a5:1a:da:6d:10: fc:f1:a6:79:ee:ed:a0:cd:b9:88:64:4f:fc:73:da: 59:8e:f1:b1:db:0f:67:54:2e:70:d0:97:e8:ab:d4: b0:32:a7:61:6b:6e:b3:84:4e:db:6a:14:d1:b6:d5: 09:78:57:df:36:7d:70:88:e8:9f:8f:ee:04:71:74: 12:bf:4f:20:13:84:41:ea:ad:fe:52:c6:8b:be:a9: c0:3e:a1:67:ed:76:e2:7a:81:bf:be:b0:90:e6:c4: f9:f6:6a:87:07:cf:55:67:6e:10:e9:9b:75:8a:01: 70:f1:d4:e8:fb:93:8f:13:be:85:59:ca:9f:78:61: ca:42:f2:c8:25:06:db:0a:77:cd:44:fe:6b:59:2a: 48:7a:4d:01:9f:e6:40:70:02:5f:be:a2:75:fd:ab: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:A4:2F:08:8F:C4:7F:3F:92:B2:66:D2:92:66:88:E3:5C:80:62 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2b:03:09:49:e2:cd:14:cf:3e:1e:ab:6e:2f:dd:fc:cf:93: 16:51:5f:bd:65:80:9e:39:4c:a9:cf:e9:07:28:99:44:c8:ad: 8c:d7:0d:0a:f1:37:09:06:11:65:d7:f5:f1:e1:e2:e8:6c:9f: 7b:cc:bb:8f:b5:ee:dc:40:53:51:d7:37:8c:64:58:54:26:52: 87:a3:48:44:19:6f:f0:68:f2:6c:80:09:8d:48:8d:d9:73:b2: d1:b0:ee:09:92:9f:63:20:9a:11:2b:b9:dc:4f:0b:72:d3:27: f7:ce:d4:bb:64:ac:76:31:15:55:3e:c6:d3:3c:20:fd:2d:2e: 7e:c6:f6:ea:19:b3:c2:d5:e5:c0:65:b4:b8:47:f5:6a:05:41: f5:e5:6c:67:e1:af:c1:8d:fd:b1:92:b6:eb:40:b7:5d:c1:4d: 0c:58:e8:b6:55:8f:19:aa:42:fc:c2:ed:f7:63:24:1f:00:6d: 1c:e8:4c:f6:53:5c:1c:38:a0:33:62:44:f2:ed:af:2f:ce:61: 92:07:aa:60:7c:68:0c:77:bb:e6:b6:f3:d4:5b:fd:8a:f4:31: 1b:28:fc:7b:bd:ed:dc:20:86:f7:cb:43:4b:89:6a:a0:36:00: e4:ea:6c:ac:b0:54:c6:7a:6d:7b:16:00:f8:37:bb:88:58:46: b3:7c:eb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZT5k9wkIpKqVhvTZguVvaRttsjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTEwMTgyMjM2MzJaFw0yNTEwMjEyMzUyMzJaMDMxMTAvBgNV BAMTKEFGOTBBNDJGMDg4RkM0N0YzRjkyQjI2NkQyOTI2Njg4RTM1QzgwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtP9PWVRbo8QZBka6ScVYgnyp eIfPjdoC8N9sNWdrK0eRxlimviEpMQlgIrFtSCpWwuq6dU0HVWAgb6UQiP/hFyAt 57Efz36EsKq9Z9zVnw2kCG1rCFKobvo229uITr+DcfalGtptEPzxpnnu7aDNuYhk T/xz2lmO8bHbD2dULnDQl+ir1LAyp2FrbrOETttqFNG21Ql4V982fXCI6J+P7gRx dBK/TyAThEHqrf5Sxou+qcA+oWftduJ6gb++sJDmxPn2aocHz1VnbhDpm3WKAXDx 1Oj7k48TvoVZyp94YcpC8sglBtsKd81E/mtZKkh6TQGf5kBwAl++onX9qzKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5CkLwiPxH8/krJm0pJmiONcgGIwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYrAwlJ4s0Uzz4eq24v3fzPkxZRX71lgJ45 TKnP6QcomUTIrYzXDQrxNwkGEWXX9fHh4uhsn3vMu4+17txAU1HXN4xkWFQmUoej SEQZb/Bo8myACY1IjdlzstGw7gmSn2MgmhErudxPC3LTJ/fO1LtkrHYxFVU+xtM8 IP0tLn7G9uoZs8LV5cBltLhH9WoFQfXlbGfhr8GN/bGStutAt13BTQxY6LZVjxmq QvzC7fdjJB8AbRzoTPZTXBw4oDNiRPLtry/OYZIHqmB8aAx3u+a289Rb/Yr0MRso /Hu97dwghvfLQ0uJaqA2AOTqbKywVMZ6bXsWAPg3u4hYRrN860I= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:51 2025 by rpki-client