$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: PA30ls80urMghbXmpkbqs4XqJFKKvJsPkQRPkuBVpj0= Subject key identifier: 33:18:DD:C0:3B:F1:FB:9C:C4:D5:03:7A:82:5B:21:23:BB:1F:8F:12 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 6F5C2F1E1A1EF4D1F1E1732A673B72FBD523612A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 019E Signing time: Sat 18 Oct 2025 06:42:13 +0000 Manifest this update: Sat 18 Oct 2025 06:37:13 +0000 Manifest next update: Tue 21 Oct 2025 11:06:13 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: U07HtXScbaTddwfSE056Y0X+/sjKnvbaCEmqf9Q2gXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5c:2f:1e:1a:1e:f4:d1:f1:e1:73:2a:67:3b:72:fb:d5:23:61:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Oct 18 06:37:13 2025 GMT Not After : Oct 21 11:06:13 2025 GMT Subject: CN=3318DDC03BF1FB9CC4D5037A825B2123BB1F8F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:fc:3d:12:9c:5d:9e:bd:8b:7a:93:9f:28: 7d:a7:62:78:02:4a:cf:80:09:27:d0:3e:9c:8d:25: 1c:1c:03:bb:47:d8:63:8a:1e:fb:f7:ce:7b:01:ea: c7:e3:28:92:13:49:18:06:73:4b:c1:7a:0b:d8:ca: 41:a3:40:52:4b:64:a4:89:c1:ae:fa:64:58:41:09: 5f:52:4e:9b:9c:22:e7:be:60:10:3e:d8:61:a8:48: f9:92:46:dc:7b:85:be:e5:fe:52:8a:52:d3:a9:4d: 3a:e9:0e:12:2a:90:a7:aa:4a:05:58:e0:af:d0:32: bd:09:df:88:95:07:87:98:56:5f:2b:1f:c7:51:d7: 6d:7e:7d:3b:10:11:06:12:88:37:14:82:18:3f:2a: 12:b6:bd:0e:65:ae:0a:c1:2e:59:19:8f:a8:10:35: b2:02:62:e9:b1:30:c5:60:96:0c:7a:f6:27:ab:76: 1f:b2:cc:a9:5f:b8:f3:d0:08:a4:b2:91:0a:30:af: a5:87:a6:05:d8:d5:04:81:a3:ed:95:4e:bf:65:9c: 07:d6:1e:64:da:25:ec:7b:7c:36:43:3c:c1:7b:5a: f6:74:39:59:16:b9:38:56:e8:ed:ed:00:8b:8f:06: e7:44:ec:b7:c4:60:87:31:e5:b7:f9:d6:ff:35:d4: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:18:DD:C0:3B:F1:FB:9C:C4:D5:03:7A:82:5B:21:23:BB:1F:8F:12 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c4:67:64:a6:71:6f:3f:d1:b3:d9:51:56:3a:97:59:35:4b: d2:40:51:de:6d:6c:71:3b:cf:2a:db:0e:b6:39:b5:29:ad:5f: 9c:84:4c:c0:e3:ea:60:aa:3a:06:ed:dc:2f:50:13:83:fe:8c: e6:b0:b0:48:11:7c:58:24:27:88:16:ee:93:14:93:a4:55:13: 40:20:95:6d:78:71:3a:45:25:c9:40:12:7a:0f:76:09:1a:4a: 9e:d0:c0:1d:9e:d0:a1:f1:ee:d1:26:cc:6a:6f:5d:1f:cc:82: 36:05:90:9f:46:76:e5:0e:7d:08:4b:e1:68:3c:90:78:06:2e: 7e:c4:9a:c4:4c:f2:35:99:ef:f1:ac:9c:dc:ec:ba:0b:03:64: cb:2c:0f:16:7a:7d:dd:86:33:b8:52:86:b3:fb:21:db:ad:3e: de:6b:51:26:d5:69:d3:9d:7b:02:a9:3c:4f:e2:04:fb:90:7e: 5b:c2:aa:69:c3:17:9c:b6:97:a3:f4:62:7f:48:a3:9b:d9:92: 2c:23:d5:ff:07:2e:f6:fc:8b:8c:f2:52:07:5a:63:bf:cf:3d: 04:f7:44:d7:e2:be:9b:bc:9a:47:0a:4d:f9:15:fd:cb:e1:fb: 92:2f:bb:96:f4:c0:01:eb:18:23:ca:29:75:10:0d:00:82:29: 56:6c:a7:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1wvHhoe9NHx4XMqZzty+9UjYSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTEwMTgwNjM3MTNaFw0yNTEwMjExMTA2MTNaMDMxMTAvBgNV BAMTKDMzMThEREMwM0JGMUZCOUNDNEQ1MDM3QTgyNUIyMTIzQkIxRjhGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvvw9Epxdnr2LepOfKH2nYngC Ss+ACSfQPpyNJRwcA7tH2GOKHvv3znsB6sfjKJITSRgGc0vBegvYykGjQFJLZKSJ wa76ZFhBCV9STpucIue+YBA+2GGoSPmSRtx7hb7l/lKKUtOpTTrpDhIqkKeqSgVY 4K/QMr0J34iVB4eYVl8rH8dR121+fTsQEQYSiDcUghg/KhK2vQ5lrgrBLlkZj6gQ NbICYumxMMVglgx69ierdh+yzKlfuPPQCKSykQowr6WHpgXY1QSBo+2VTr9lnAfW HmTaJex7fDZDPMF7WvZ0OVkWuThW6O3tAIuPBudE7LfEYIcx5bf51v811P5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMxjdwDvx+5zE1QN6glshI7sfjxIwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnEZ2SmcW8/0bPZUVY6l1k1S9JAUd5tbHE7 zyrbDrY5tSmtX5yETMDj6mCqOgbt3C9QE4P+jOawsEgRfFgkJ4gW7pMUk6RVE0Ag lW14cTpFJclAEnoPdgkaSp7QwB2e0KHx7tEmzGpvXR/MgjYFkJ9GduUOfQhL4Wg8 kHgGLn7EmsRM8jWZ7/GsnNzsugsDZMssDxZ6fd2GM7hShrP7IdutPt5rUSbVadOd ewKpPE/iBPuQflvCqmnDF5y2l6P0Yn9Io5vZkiwj1f8HLvb8i4zyUgdaY7/PPQT3 RNfivpu8mkcKTfkV/cvh+5Ivu5b0wAHrGCPKKXUQDQCCKVZsp6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:34 2025 by rpki-client