$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: Nk1T9YQbsNC4brssxcVHi/ZfvAOCeNB9UnNskUWpZOo= Subject key identifier: 11:FF:B1:06:AA:83:2C:47:58:32:09:43:84:4A:ED:9A:11:1B:E8:E1 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 604DB289C733EA06BC87FB4BED8C8E5654EECFD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 023B Signing time: Sun 19 Oct 2025 13:40:53 +0000 Manifest this update: Sun 19 Oct 2025 13:35:53 +0000 Manifest next update: Wed 22 Oct 2025 18:12:53 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: sBYoAgpF3fdsQem7GEI8OxuzpIXVCoLqlMGFTHT7hAQ=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4d:b2:89:c7:33:ea:06:bc:87:fb:4b:ed:8c:8e:56:54:ee:cf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Oct 19 13:35:53 2025 GMT Not After : Oct 22 18:12:53 2025 GMT Subject: CN=11FFB106AA832C4758320943844AED9A111BE8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:3f:d5:5f:a6:7e:ee:45:a8:ec:e1:9c:51: c5:cf:29:d9:e2:8d:42:36:86:2e:09:db:3b:3c:aa: b2:f2:99:1b:62:c3:26:cd:81:5f:1b:76:51:36:be: 96:9c:10:8d:ef:7e:f8:34:81:1e:48:1f:ae:5f:ff: 42:f7:7a:74:5c:83:d3:53:92:c9:9c:ee:71:e7:50: e2:02:2a:81:1c:88:9e:59:12:d4:2d:f7:1d:6e:df: 7c:02:35:53:0f:03:0b:3b:56:2c:8d:58:05:7c:22: 84:82:df:df:eb:d9:2b:53:8b:27:c6:97:ef:ee:46: 68:ea:05:4c:21:12:e7:46:44:55:36:80:11:cd:c1: f4:fe:fe:44:7c:b6:9d:f8:3d:ae:0a:79:e3:6f:49: 9f:e2:13:46:d0:57:ac:b5:b0:2d:72:c6:97:cd:74: b7:ab:22:94:19:d6:bf:6b:97:4c:f4:ad:8c:17:86: 3a:37:de:b4:5e:4d:42:6e:f2:95:53:fb:c8:33:e1: 46:87:03:da:51:ce:93:90:aa:a0:5f:83:7c:35:6c: 66:e0:e9:e6:e7:fd:a6:c5:5f:00:c2:84:c7:b2:ec: 30:93:9b:e8:c8:ef:c0:40:9e:9f:ac:f7:ed:7e:43: a6:ea:e3:47:77:d7:1b:91:0e:10:8b:2d:fb:bc:48: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FF:B1:06:AA:83:2C:47:58:32:09:43:84:4A:ED:9A:11:1B:E8:E1 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1f:e2:68:ec:0a:3c:50:2c:00:1a:38:15:70:26:2d:8b:6e: bb:cf:6d:cd:8a:71:a9:cb:25:6e:92:25:b5:42:e9:1e:f8:cc: 2e:e5:4a:d2:32:48:a5:bc:ba:ef:72:12:59:11:e8:ac:f3:b2: 1f:f7:77:56:00:f6:32:f5:67:8a:73:42:94:e3:2e:17:d3:ac: 86:13:68:06:89:69:40:d0:5c:a5:2a:9e:1d:a1:cb:ed:c2:a7: 11:c4:ab:42:75:5a:c9:c9:11:a4:05:fc:b0:3b:58:c3:a6:c0: 73:f7:ed:bb:9c:80:ea:6b:c3:34:10:b4:b6:18:0d:a6:1f:bf: 7a:8a:80:7c:0a:58:ab:96:1f:c0:9b:9f:a4:cf:cd:34:45:39: 85:b9:39:9a:82:e2:70:44:56:5f:7a:44:67:f1:60:04:b6:61: 9f:b8:b8:c4:7c:6c:f4:bb:63:bf:ac:22:49:d1:71:ce:ab:a7: 3a:55:6f:82:f9:dc:88:9b:4f:02:b1:eb:ea:0c:e3:10:72:4a: ec:2a:b6:59:cf:72:30:a2:89:09:44:4e:c2:be:89:3a:40:26: 3c:e4:4e:ed:9c:a5:94:17:60:47:39:a6:43:1b:31:5a:c0:c2: 16:64:2c:87:58:43:a0:4b:28:57:53:e5:66:15:9c:82:d0:5f: 72:9e:da:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE2yiccz6ga8h/tL7YyOVlTuz9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTEwMTkxMzM1NTNaFw0yNTEwMjIxODEyNTNaMDMxMTAvBgNV BAMTKDExRkZCMTA2QUE4MzJDNDc1ODMyMDk0Mzg0NEFFRDlBMTExQkU4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWz/VX6Z+7kWo7OGcUcXPKdni jUI2hi4J2zs8qrLymRtiwybNgV8bdlE2vpacEI3vfvg0gR5IH65f/0L3enRcg9NT ksmc7nHnUOICKoEciJ5ZEtQt9x1u33wCNVMPAws7ViyNWAV8IoSC39/r2StTiyfG l+/uRmjqBUwhEudGRFU2gBHNwfT+/kR8tp34Pa4KeeNvSZ/iE0bQV6y1sC1yxpfN dLerIpQZ1r9rl0z0rYwXhjo33rReTUJu8pVT+8gz4UaHA9pRzpOQqqBfg3w1bGbg 6ebn/abFXwDChMey7DCTm+jI78BAnp+s9+1+Q6bq40d31xuRDhCLLfu8SCVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEf+xBqqDLEdYMglDhErtmhEb6OEwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcf4mjsCjxQLAAaOBVwJi2LbrvPbc2KcanL JW6SJbVC6R74zC7lStIySKW8uu9yElkR6Kzzsh/3d1YA9jL1Z4pzQpTjLhfTrIYT aAaJaUDQXKUqnh2hy+3CpxHEq0J1WsnJEaQF/LA7WMOmwHP37bucgOprwzQQtLYY DaYfv3qKgHwKWKuWH8Cbn6TPzTRFOYW5OZqC4nBEVl96RGfxYAS2YZ+4uMR8bPS7 Y7+sIknRcc6rpzpVb4L53IibTwKx6+oM4xBySuwqtlnPcjCiiQlETsK+iTpAJjzk Tu2cpZQXYEc5pkMbMVrAwhZkLIdYQ6BLKFdT5WYVnILQX3Ke2q0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:32 2025 by rpki-client