$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: C5GZySt4uEpZCxTiSVIacIz2NZVwhg10YxJbQMka9no= Subject key identifier: 65:E4:01:72:66:45:7C:89:EA:46:9D:3C:3C:E5:FD:CB:88:B7:CB:FD Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 09756D892BF60FEC54DA07504B0A087E079ACC33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 0219 Signing time: Mon 20 Oct 2025 17:52:12 +0000 Manifest this update: Mon 20 Oct 2025 17:47:12 +0000 Manifest next update: Fri 24 Oct 2025 03:53:12 +0000 Files and hashes: 1: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: LI13Oiwos27NH9fZ9uCjsrTtT/ALoh094BdiKflNCjg=) 2: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: a+PxQY/foNgwO4KEnb5obClj2U8JYhl4mAl9/dpdIbw=) 3: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: P2JGQjJlh0X8PPnIYvpO+iKqp7Ecvs49iVh/XO+bX5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 03:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:75:6d:89:2b:f6:0f:ec:54:da:07:50:4b:0a:08:7e:07:9a:cc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Oct 20 17:47:12 2025 GMT Not After : Oct 24 03:53:12 2025 GMT Subject: CN=65E4017266457C89EA469D3C3CE5FDCB88B7CBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:33:79:91:a4:81:ee:0e:5c:51:ee:24:4a: 3f:5d:a9:fa:35:19:dd:91:c7:bc:6f:79:5f:94:4f: 25:50:ef:94:68:86:67:4d:85:7b:fc:fd:5d:d8:0c: 1f:37:6d:19:2c:b6:f4:35:5a:bd:fb:48:08:e4:61: 0b:2d:44:31:53:ce:ed:4b:da:a9:e9:d9:83:33:e4: bb:ba:c4:27:70:d4:3a:ed:80:ab:26:9a:55:c7:f7: 0d:77:83:64:96:5c:4b:c3:b2:e1:b9:a2:8a:4c:7d: 96:e1:d0:cf:dc:b1:1a:ef:84:9c:1c:9c:72:cd:75: 10:96:ee:ae:86:55:51:8f:6a:49:6b:24:8f:10:a2: 96:a7:29:d7:f6:27:08:7c:5e:31:bd:a0:bc:1c:b6: 9f:f8:33:fb:cb:41:d6:9e:42:6d:23:65:d2:70:66: 71:83:74:1e:2e:c9:99:9d:e9:93:ee:19:63:4a:79: db:1b:a8:90:82:51:cc:41:73:3a:b6:64:eb:f8:10: 21:29:0c:48:a1:f0:e0:fc:7b:68:03:2e:3d:92:43: b1:2c:00:32:88:db:5b:15:70:25:5b:22:32:30:6e: 98:79:9c:ad:62:37:e8:19:21:34:68:8b:99:ae:97: 3e:bb:8b:22:ab:3d:6e:ca:8e:7c:1d:2d:7d:c8:c0: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E4:01:72:66:45:7C:89:EA:46:9D:3C:3C:E5:FD:CB:88:B7:CB:FD X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:43:84:18:74:8e:a3:8e:b0:53:e8:92:29:cf:39:3d:58:9e: c1:1b:2e:f1:8b:7a:be:2d:f6:88:44:5b:9c:3c:27:31:9e:5c: b8:53:f3:fe:2c:c3:fe:82:b0:22:43:02:63:a4:3a:40:b5:91: 84:4d:f7:85:dd:98:3f:9c:ff:f0:ab:39:8f:45:d8:09:11:74: 90:09:c1:84:f0:74:58:84:e8:18:52:2f:e4:2f:b7:02:f2:b4: 56:e3:05:81:ee:a4:c4:18:ef:bf:12:04:9f:aa:c4:cf:61:0b: e1:f2:e0:10:6b:40:b7:e8:af:71:a4:8f:81:9b:21:c3:3e:2d: 0f:7d:b5:5e:16:18:e7:a4:b2:00:67:2b:5c:c3:85:fb:74:13: 75:f8:f3:4d:7e:69:69:ac:c9:8d:b5:e8:86:ba:31:74:82:23: e4:7b:b9:bd:f2:99:dd:92:4a:65:d0:c0:16:89:c6:c2:f9:fa: 6c:76:db:d3:a3:97:1f:ce:70:ef:cd:1e:d6:18:77:14:02:e1: ff:e7:5e:93:76:f3:51:79:ac:1f:a8:38:36:8c:c6:0d:4c:d1: f4:23:fe:7b:7d:21:b4:8c:5a:99:98:13:da:36:05:bc:a2:3f: e2:4d:24:ea:6a:e5:d0:c7:88:5f:a7:28:87:8d:7f:bd:88:e1: f8:a5:e7:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXVtiSv2D+xU2gdQSwoIfgeazDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTEwMjAxNzQ3MTJaFw0yNTEwMjQwMzUzMTJaMDMxMTAvBgNV BAMTKDY1RTQwMTcyNjY0NTdDODlFQTQ2OUQzQzNDRTVGRENCODhCN0NCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHDN5kaSB7g5cUe4kSj9dqfo1 Gd2Rx7xveV+UTyVQ75RohmdNhXv8/V3YDB83bRkstvQ1Wr37SAjkYQstRDFTzu1L 2qnp2YMz5Lu6xCdw1DrtgKsmmlXH9w13g2SWXEvDsuG5oopMfZbh0M/csRrvhJwc nHLNdRCW7q6GVVGPaklrJI8QopanKdf2Jwh8XjG9oLwctp/4M/vLQdaeQm0jZdJw ZnGDdB4uyZmd6ZPuGWNKedsbqJCCUcxBczq2ZOv4ECEpDEih8OD8e2gDLj2SQ7Es ADKI21sVcCVbIjIwbph5nK1iN+gZITRoi5mulz67iyKrPW7KjnwdLX3IwFfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZeQBcmZFfInqRp08POX9y4i3y/0wHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZDhBh0jqOOsFPokinPOT1YnsEbLvGLer4t 9ohEW5w8JzGeXLhT8/4sw/6CsCJDAmOkOkC1kYRN94XdmD+c//CrOY9F2AkRdJAJ wYTwdFiE6BhSL+QvtwLytFbjBYHupMQY778SBJ+qxM9hC+Hy4BBrQLfor3Gkj4Gb IcM+LQ99tV4WGOeksgBnK1zDhft0E3X4801+aWmsyY216Ia6MXSCI+R7ub3ymd2S SmXQwBaJxsL5+mx229Ojlx/OcO/NHtYYdxQC4f/nXpN281F5rB+oODaMxg1M0fQj /nt9IbSMWpmYE9o2BbyiP+JNJOpq5dDHiF+nKIeNf72I4fil5+M= -----END CERTIFICATE-----Generated at Tue Oct 21 10:59:59 2025 by rpki-client