$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: ABDic+5gfeU3pHdD0dOX6lHhH2yXG6UY05NNVZY34fw= Subject key identifier: 4D:D0:D6:0B:7C:4F:C0:2A:47:8F:F4:22:25:89:D8:FC:E2:92:44:B4 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 12E9C5E4F032AE8DF0E75C782FEA8E1548B71DA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: EB Signing time: Mon 20 Oct 2025 15:41:11 +0000 Manifest this update: Mon 20 Oct 2025 15:36:11 +0000 Manifest next update: Thu 23 Oct 2025 19:40:11 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: IUluZOPkSfe0OpHsoCrdakQfa0ZMDNI0SnS1iHFl8jM=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e9:c5:e4:f0:32:ae:8d:f0:e7:5c:78:2f:ea:8e:15:48:b7:1d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Oct 20 15:36:11 2025 GMT Not After : Oct 23 19:40:11 2025 GMT Subject: CN=4DD0D60B7C4FC02A478FF4222589D8FCE29244B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:ac:17:52:b2:36:e3:e9:d7:ae:ad:e4:e3: a1:e6:e6:b5:e0:85:49:a5:a7:88:81:46:27:f8:d5: 3f:7a:23:7a:64:37:1c:4f:ef:89:2f:96:a5:d1:53: 88:01:ae:1c:60:fb:7e:42:27:78:44:37:3a:8a:bb: d8:6c:67:df:56:7e:f8:8e:e8:71:3b:94:8a:39:2d: e7:08:e5:89:59:11:55:69:b4:36:8e:a0:75:34:77: 4c:c0:30:94:ee:93:61:49:a6:6b:12:4d:2e:76:ec: 96:dc:91:5e:7e:9a:5c:6e:8a:24:b6:e9:4a:a8:c7: 66:e3:5c:6f:d6:01:88:26:5b:ff:09:d0:a1:bd:e8: 98:ae:f5:d9:e5:ff:c5:c5:3f:63:e3:76:18:cd:51: 58:7f:bd:4d:bb:e0:fa:69:32:ef:58:ba:78:9c:3b: 2b:1e:d7:f8:43:64:81:de:da:89:0a:e4:90:aa:d5: 13:5c:55:b8:a3:5f:ae:c6:6c:59:e9:71:cb:84:98: 6b:36:72:90:0e:df:ab:b4:88:e9:34:8b:9e:0c:b4: 8c:85:a4:ba:3c:7d:e0:c3:0e:71:9f:3e:fe:d0:60: 7a:c4:89:03:ee:d9:21:ab:15:3e:3c:9c:b8:f3:c7: 84:bf:48:2d:1d:4e:eb:c4:ca:18:f6:da:b1:b6:c1: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:D6:0B:7C:4F:C0:2A:47:8F:F4:22:25:89:D8:FC:E2:92:44:B4 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7f:2c:08:09:a4:92:66:1c:85:15:3c:1c:3b:98:46:c4:87: 3f:75:2c:91:e8:b9:ca:85:2e:3a:e2:08:8d:e4:c5:93:0a:1b: 20:21:bc:e3:33:a3:2f:52:ef:31:9c:4b:f0:22:ae:db:a1:bf: 94:4c:83:64:53:48:8a:15:ab:5f:f6:96:be:13:ac:7a:7e:dd: f0:48:db:81:74:53:fe:82:7f:d2:61:ef:7d:8f:5b:5b:a3:0d: 38:85:b6:40:35:4e:39:41:7b:f4:bc:f7:d9:88:2e:19:43:32: d8:e2:f5:fa:a8:be:5c:1a:37:dd:09:8c:66:ae:f4:0d:02:f1: 49:71:23:31:e3:60:ef:9a:bd:e0:da:bd:80:c3:44:81:90:15: e2:be:0c:ff:d4:5b:1f:8e:d7:55:f9:b6:18:29:bc:db:23:3d: 3e:36:de:fc:b2:c2:2a:2e:ec:ef:ce:37:71:81:75:77:b9:52: d5:22:fe:37:d3:21:f4:55:aa:d2:34:04:c7:26:08:6b:e1:dc: fd:a8:b9:ef:99:d2:78:20:71:1d:93:c9:99:d2:c4:f2:67:97: ff:46:1a:7c:34:3e:b9:23:78:0b:d2:96:b2:a4:3f:dd:71:dc: 1b:c7:63:21:5b:16:9b:53:9c:ca:58:80:45:fb:aa:50:c5:3f: fd:06:ed:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEunF5PAyro3w51x4L+qOFUi3HacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTEwMjAxNTM2MTFaFw0yNTEwMjMxOTQwMTFaMDMxMTAvBgNV BAMTKDRERDBENjBCN0M0RkMwMkE0NzhGRjQyMjI1ODlEOEZDRTI5MjQ0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWawXUrI24+nXrq3k46Hm5rXg hUmlp4iBRif41T96I3pkNxxP74kvlqXRU4gBrhxg+35CJ3hENzqKu9hsZ99WfviO 6HE7lIo5LecI5YlZEVVptDaOoHU0d0zAMJTuk2FJpmsSTS527JbckV5+mlxuiiS2 6Uqox2bjXG/WAYgmW/8J0KG96Jiu9dnl/8XFP2PjdhjNUVh/vU274PppMu9Yunic Oyse1/hDZIHe2okK5JCq1RNcVbijX67GbFnpccuEmGs2cpAO36u0iOk0i54MtIyF pLo8feDDDnGfPv7QYHrEiQPu2SGrFT48nLjzx4S/SC0dTuvEyhj22rG2wRKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdDWC3xPwCpHj/QiJYnY/OKSRLQwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ/LAgJpJJmHIUVPBw7mEbEhz91LJHoucqF LjriCI3kxZMKGyAhvOMzoy9S7zGcS/Airtuhv5RMg2RTSIoVq1/2lr4TrHp+3fBI 24F0U/6Cf9Jh732PW1ujDTiFtkA1TjlBe/S899mILhlDMtji9fqovlwaN90JjGau 9A0C8UlxIzHjYO+aveDavYDDRIGQFeK+DP/UWx+O11X5thgpvNsjPT423vyywiou 7O/ON3GBdXe5UtUi/jfTIfRVqtI0BMcmCGvh3P2oue+Z0nggcR2TyZnSxPJnl/9G Gnw0PrkjeAvSlrKkP91x3BvHYyFbFptTnMpYgEX7qlDFP/0G7S0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:30 2025 by rpki-client