$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: Lu6UBSUfs+TQy7PPia0chMYgdrZ1HU4E9eZYA10/3pA= Subject key identifier: 5C:66:00:24:69:AB:54:9B:EE:0B:21:E4:DE:F5:4C:CB:BB:A3:24:2A Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 4B1236FB756BC301B59779D0ADB9EBB2991A71D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 018D Signing time: Sat 18 Oct 2025 15:31:22 +0000 Manifest this update: Sat 18 Oct 2025 15:26:22 +0000 Manifest next update: Tue 21 Oct 2025 21:20:22 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: qZCGur/NrNMVAhIqMf8GvA3zA2p/XahkZovhz3FHSXo=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:36:fb:75:6b:c3:01:b5:97:79:d0:ad:b9:eb:b2:99:1a:71:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Oct 18 15:26:22 2025 GMT Not After : Oct 21 21:20:22 2025 GMT Subject: CN=5C66002469AB549BEE0B21E4DEF54CCBBBA3242A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:21:bd:af:f5:1c:2e:c8:6e:f5:c4:f4:d7: 1c:5a:a3:29:61:a3:10:91:c7:6c:7c:ab:40:d3:b5: f2:b0:9a:ed:1c:90:4e:2f:ba:f7:48:d2:3f:53:94: 3f:cd:bb:28:22:58:9f:50:42:6a:74:50:21:5a:a8: 6c:51:29:8e:7f:05:81:c4:fb:3f:75:5b:f8:07:87: bf:7f:12:17:d7:23:f5:81:fd:93:65:ef:00:99:39: c5:6a:34:36:ee:cc:16:cd:a2:6a:36:b6:46:03:10: 4c:18:6e:eb:ce:1d:10:1a:1e:4f:9d:24:c3:b7:6b: 2d:48:ff:72:be:d4:b2:a4:82:31:29:6a:47:99:a7: 65:83:d1:11:77:d5:92:69:74:1e:a8:e4:90:d5:e1: 69:0e:fc:ad:83:fe:b0:bd:7b:34:2a:a2:91:0a:b2: a0:9d:b9:e3:0c:28:a2:1f:34:19:49:72:f7:a3:2b: 64:8b:96:6a:04:4b:ce:56:b3:ba:21:04:68:48:47: af:1e:a7:f8:fc:05:45:59:bc:2b:b4:59:6e:60:fa: c8:6c:5f:d9:3b:71:d9:98:63:4c:4c:df:53:d8:76: 2d:c5:8c:3d:12:d2:20:d8:ac:d3:87:67:6c:3c:00: 51:29:95:36:16:b9:f1:c8:fb:90:94:e6:5e:a0:f5: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:66:00:24:69:AB:54:9B:EE:0B:21:E4:DE:F5:4C:CB:BB:A3:24:2A X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:26:cb:07:a0:fb:93:a7:a8:0d:08:08:37:76:f7:29:eb:11: 46:10:01:d4:0b:dc:e4:b5:7f:95:ab:b0:8b:aa:8e:ac:93:0a: 52:6a:54:41:29:e0:de:6d:69:89:37:fc:00:59:59:87:8c:e5: db:b3:83:ca:a3:7b:10:e9:be:48:de:4f:27:a0:f6:ee:57:a1: 72:cf:6f:f0:78:e9:37:77:4a:07:8d:24:79:5b:4c:29:20:27: ca:9f:c1:26:db:b8:b1:85:4b:97:17:37:c5:75:1c:97:ae:ef: 60:6f:ac:10:59:8b:66:f5:7a:86:e2:89:87:2b:a6:2e:a2:ad: f2:81:c7:b8:44:c6:76:d4:92:7e:b0:f5:af:81:5e:33:2c:17: a8:1b:84:17:3d:ea:79:47:70:65:01:ce:37:ff:4c:c4:a2:cc: 73:9a:14:fd:04:46:2a:34:3b:58:e4:19:21:cc:a0:c3:e5:6f: 5e:9a:78:25:fd:d1:17:3b:be:c0:d7:fc:94:44:b0:d1:61:d2: 04:3b:2d:14:87:ea:5b:b7:f5:2c:8d:3c:78:6d:c9:18:87:97: 86:1d:bb:90:d8:e4:83:6f:03:33:d1:26:bc:44:25:4d:2a:bd: c8:e3:d8:c7:67:11:fc:e3:e0:d3:19:59:b3:04:20:1f:1e:02: c9:11:ca:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxI2+3VrwwG1l3nQrbnrspkacdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTEwMTgxNTI2MjJaFw0yNTEwMjEyMTIwMjJaMDMxMTAvBgNV BAMTKDVDNjYwMDI0NjlBQjU0OUJFRTBCMjFFNERFRjU0Q0NCQkJBMzI0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LSG9r/UcLshu9cT01xxaoylh oxCRx2x8q0DTtfKwmu0ckE4vuvdI0j9TlD/NuygiWJ9QQmp0UCFaqGxRKY5/BYHE +z91W/gHh79/EhfXI/WB/ZNl7wCZOcVqNDbuzBbNomo2tkYDEEwYbuvOHRAaHk+d JMO3ay1I/3K+1LKkgjEpakeZp2WD0RF31ZJpdB6o5JDV4WkO/K2D/rC9ezQqopEK sqCdueMMKKIfNBlJcvejK2SLlmoES85Ws7ohBGhIR68ep/j8BUVZvCu0WW5g+shs X9k7cdmYY0xM31PYdi3FjD0S0iDYrNOHZ2w8AFEplTYWufHI+5CU5l6g9Y2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGYAJGmrVJvuCyHk3vVMy7ujJCowHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAComyweg+5OnqA0ICDd29ynrEUYQAdQL3OS1 f5WrsIuqjqyTClJqVEEp4N5taYk3/ABZWYeM5duzg8qjexDpvkjeTyeg9u5XoXLP b/B46Td3SgeNJHlbTCkgJ8qfwSbbuLGFS5cXN8V1HJeu72BvrBBZi2b1eobiiYcr pi6irfKBx7hExnbUkn6w9a+BXjMsF6gbhBc96nlHcGUBzjf/TMSizHOaFP0ERio0 O1jkGSHMoMPlb16aeCX90Rc7vsDX/JREsNFh0gQ7LRSH6lu39SyNPHhtyRiHl4Yd u5DY5INvAzPRJrxEJU0qvcjj2MdnEfzj4NMZWbMEIB8eAskRyms= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:01 2025 by rpki-client