$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: /1OyoAd69FLr6nM8bnfZDOheaQq5ns++FfGGyAaLoA8= Subject key identifier: 69:2C:BA:8C:23:B0:B6:F6:58:35:2D:FC:A9:EF:30:B5:3F:44:9B:BA Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 05B22023C2AE1435623BCC0C378564C1599FA277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 0520 Signing time: Sun 19 Oct 2025 15:00:05 +0000 Manifest this update: Sun 19 Oct 2025 14:55:05 +0000 Manifest next update: Wed 22 Oct 2025 22:15:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: EXc+payrZuincjY2mOaHDm2pqE1hYnmJ5xeuNr2N1lQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b2:20:23:c2:ae:14:35:62:3b:cc:0c:37:85:64:c1:59:9f:a2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Oct 19 14:55:05 2025 GMT Not After : Oct 22 22:15:05 2025 GMT Subject: CN=692CBA8C23B0B6F658352DFCA9EF30B53F449BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:02:97:29:34:89:ac:48:e1:e0:a8:79:31: 15:a4:a7:4a:f4:68:a1:3c:ad:7d:18:df:53:29:33: 6d:b5:49:18:87:96:e8:ce:b8:1b:2b:93:1f:2c:99: 6a:33:ef:63:74:55:89:64:2f:34:0d:43:7c:8a:c4: e6:9c:c2:1c:68:32:84:e7:ad:0f:6b:d7:c6:db:40: cf:e5:a9:ab:cd:9c:15:e7:01:6e:ba:39:64:e2:ed: b2:b7:f2:f0:6e:8a:d6:36:22:02:29:6d:43:e6:08: 18:b9:90:2c:76:01:1f:a7:f4:8c:d2:ad:ef:31:9b: 8c:11:14:35:03:f0:0f:b4:ac:f2:f5:56:1f:08:a8: c5:12:d3:10:1b:62:67:7a:8e:48:11:01:3d:30:70: c9:b3:26:0d:81:c4:80:13:c1:5b:d5:69:51:2b:49: 30:42:c8:97:d4:15:00:98:8f:83:64:1c:29:06:89: ad:37:c1:7a:d1:53:45:9a:30:bd:5c:68:d1:55:f9: b2:3e:96:c7:c4:20:6d:86:68:b2:6b:2b:01:11:24: 02:09:fe:b2:52:5a:5c:65:86:af:b1:70:cf:79:cb: a5:cf:03:26:1d:64:97:85:1b:b3:e5:ef:ee:c5:47: cc:8e:a5:6b:fd:6d:a7:98:03:39:c4:75:75:db:fe: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2C:BA:8C:23:B0:B6:F6:58:35:2D:FC:A9:EF:30:B5:3F:44:9B:BA X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:10:07:50:8c:8e:4e:a4:ca:b9:2d:db:01:6c:2e:82:49:7c: 15:83:9c:71:b2:fb:c3:3b:44:e7:df:d3:86:ea:f7:a6:22:2a: 9a:a2:a3:8f:87:8e:f2:1b:25:07:b5:53:a6:ca:f1:89:5a:73: 8a:9c:79:42:a3:d1:03:0e:da:b8:85:94:e4:d4:cf:06:d3:dc: bb:e0:07:fd:a2:25:37:07:90:ac:cb:27:07:8e:28:e0:05:a9: 7f:2f:dd:94:3a:d5:e7:3f:8a:e8:8c:14:56:71:d5:57:68:47: 1f:2b:7a:6e:56:59:59:55:e3:c4:22:e7:18:0d:a2:a5:65:2b: 62:d7:fc:3e:a5:1f:49:9a:f2:d2:7a:b5:27:ff:94:02:c1:a9: 6a:17:79:4c:c1:d4:e0:ba:e7:48:d7:cf:5b:5f:17:7d:55:3e: 21:f5:4b:b3:1d:00:0f:35:77:82:44:c0:2b:53:44:0b:d3:76: a9:8f:33:92:fb:a5:30:43:38:8d:c8:5a:48:f4:48:d3:55:9a: 15:85:c2:61:7b:5a:56:68:31:90:a6:c2:03:e6:c8:bf:f7:09: b9:f2:58:f2:33:71:26:79:35:a8:1d:0d:2b:2f:6a:61:d8:be: d8:8d:a7:03:90:b6:ac:ec:2d:87:d3:ff:a7:29:20:29:3e:87: 21:67:d0:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbIgI8KuFDViO8wMN4VkwVmfoncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTEwMTkxNDU1MDVaFw0yNTEwMjIyMjE1MDVaMDMxMTAvBgNV BAMTKDY5MkNCQThDMjNCMEI2RjY1ODM1MkRGQ0E5RUYzMEI1M0Y0NDlCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAAKXKTSJrEjh4Kh5MRWkp0r0 aKE8rX0Y31MpM221SRiHlujOuBsrkx8smWoz72N0VYlkLzQNQ3yKxOacwhxoMoTn rQ9r18bbQM/lqavNnBXnAW66OWTi7bK38vBuitY2IgIpbUPmCBi5kCx2AR+n9IzS re8xm4wRFDUD8A+0rPL1Vh8IqMUS0xAbYmd6jkgRAT0wcMmzJg2BxIATwVvVaVEr STBCyJfUFQCYj4NkHCkGia03wXrRU0WaML1caNFV+bI+lsfEIG2GaLJrKwERJAIJ /rJSWlxlhq+xcM95y6XPAyYdZJeFG7Pl7+7FR8yOpWv9baeYAznEdXXb/gWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaSy6jCOwtvZYNS38qe8wtT9Em7owHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0QB1CMjk6kyrkt2wFsLoJJfBWDnHGy+8M7 ROff04bq96YiKpqio4+HjvIbJQe1U6bK8Ylac4qceUKj0QMO2riFlOTUzwbT3Lvg B/2iJTcHkKzLJweOKOAFqX8v3ZQ61ec/iuiMFFZx1VdoRx8rem5WWVlV48Qi5xgN oqVlK2LX/D6lH0ma8tJ6tSf/lALBqWoXeUzB1OC650jXz1tfF31VPiH1S7MdAA81 d4JEwCtTRAvTdqmPM5L7pTBDOI3IWkj0SNNVmhWFwmF7WlZoMZCmwgPmyL/3Cbny WPIzcSZ5NagdDSsvamHYvtiNpwOQtqzsLYfT/6cpICk+hyFn0Lw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:19 2025 by rpki-client