$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: 27DIutgaoLZBZMDdR0QHn3g3sm8aRB2t1i6HhoAhxW8= Subject key identifier: 1F:6E:C7:FA:65:E5:B1:EE:30:F2:4A:81:67:73:E6:97:C8:34:BE:09 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 39461BBEDCBFD59912C66ABEBD09416DE9249B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 045D Signing time: Sun 19 Oct 2025 22:01:46 +0000 Manifest this update: Sun 19 Oct 2025 21:56:46 +0000 Manifest next update: Thu 23 Oct 2025 01:36:46 +0000 Files and hashes: 1: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: jQAvgZnvI3WyKPoJE5TSyxb35OkY7nIBbLvOlnw1nUA=) 2: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 3: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=) 4: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:46:1b:be:dc:bf:d5:99:12:c6:6a:be:bd:09:41:6d:e9:24:9b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Oct 19 21:56:46 2025 GMT Not After : Oct 23 01:36:46 2025 GMT Subject: CN=1F6EC7FA65E5B1EE30F24A816773E697C834BE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:47:fb:a9:89:2b:6e:87:bb:76:01:88:87: 74:62:b3:77:5f:70:fd:25:80:34:fb:71:24:f8:41: 98:92:cb:e8:03:a6:28:63:3d:85:57:8f:df:78:d4: 7b:fe:82:93:09:38:13:d9:b4:b1:81:5b:a6:2a:6f: 39:f5:6a:5a:7b:83:be:36:ff:62:75:cd:c5:29:05: 75:7e:58:04:d6:de:6b:06:4b:20:a1:92:ae:08:e5: e9:a4:c7:72:57:37:51:ce:c1:d1:a7:c0:53:7f:3b: 9a:b0:55:cf:a8:a8:6f:d0:ff:87:df:f9:c2:c3:b9: bc:27:e5:ab:b4:af:e6:c1:99:0c:d9:8b:da:8f:24: fb:0a:88:59:d6:ce:a7:d9:88:6e:8a:76:3e:6c:da: 0f:03:d5:7a:65:dd:62:c0:fc:0c:94:fc:90:3f:8e: c2:42:9d:d2:02:e2:1d:18:53:0f:8c:35:73:a9:6c: 71:89:d9:b2:1c:33:95:c9:b8:6b:a7:db:c6:f6:5d: 62:9d:b2:ba:9d:22:87:85:8f:e6:b1:1d:a3:6d:cf: 8a:c1:f2:6f:d3:7f:1a:f7:99:eb:70:d6:0c:09:3d: d5:cc:e8:92:ec:96:18:9f:7d:ad:dd:11:1d:f4:bc: 0a:96:93:b4:4b:18:f0:aa:88:62:e1:8f:13:27:30: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:C7:FA:65:E5:B1:EE:30:F2:4A:81:67:73:E6:97:C8:34:BE:09 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:04:02:bc:b6:ca:87:57:5d:e7:55:dc:7e:1d:6e:16:01: 23:b0:6a:58:70:32:06:14:9e:50:08:4c:b3:02:71:f4:1c:4b: ab:c0:a9:13:99:d0:c8:42:1d:d3:5b:e4:8b:89:34:53:5a:5c: d4:1a:aa:17:c3:f0:b9:58:32:56:62:50:82:6a:13:f2:c7:94: c5:72:70:28:50:e3:5e:63:47:e5:dc:9d:2e:83:15:cf:25:47: bb:d9:8b:3c:a1:a5:43:2a:ea:66:34:a2:d6:b7:a5:65:fd:db: 85:77:f1:d2:a4:f0:04:33:d1:d7:16:ce:57:44:01:68:e8:7b: 99:7a:9d:d6:f3:29:c0:a1:7d:6b:67:f3:00:93:45:1e:70:a0: 0a:2b:f7:fc:b0:71:84:d7:43:46:f2:b2:63:73:54:5c:a7:7c: bd:76:a8:b2:86:33:44:a5:db:c5:30:00:44:dd:d2:77:3c:e0: 22:0f:c5:2a:aa:6c:84:1b:37:45:c1:3f:10:e6:ec:cc:4a:bd: 2f:72:ce:14:e7:06:ef:29:a4:4d:95:94:cc:b7:4d:3a:bb:a9: a3:26:b3:7f:58:8b:56:75:cf:ca:9c:ee:dc:09:d4:6a:50:3f: 17:d7:b5:a8:02:a9:ba:4e:a7:92:d2:45:ce:81:3f:bc:3c:72: 7f:32:0c:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUYbvty/1ZkSxmq+vQlBbekkmzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTEwMTkyMTU2NDZaFw0yNTEwMjMwMTM2NDZaMDMxMTAvBgNV BAMTKDFGNkVDN0ZBNjVFNUIxRUUzMEYyNEE4MTY3NzNFNjk3QzgzNEJFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt40f7qYkrboe7dgGIh3Ris3df cP0lgDT7cST4QZiSy+gDpihjPYVXj9941Hv+gpMJOBPZtLGBW6Yqbzn1alp7g742 /2J1zcUpBXV+WATW3msGSyChkq4I5emkx3JXN1HOwdGnwFN/O5qwVc+oqG/Q/4ff +cLDubwn5au0r+bBmQzZi9qPJPsKiFnWzqfZiG6Kdj5s2g8D1Xpl3WLA/AyU/JA/ jsJCndIC4h0YUw+MNXOpbHGJ2bIcM5XJuGun28b2XWKdsrqdIoeFj+axHaNtz4rB 8m/Tfxr3metw1gwJPdXM6JLslhiffa3dER30vAqWk7RLGPCqiGLhjxMnMHLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH27H+mXlse4w8kqBZ3Pml8g0vgkwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4sBAK8tsqHV13nVdx+HW4WASOwalhwMgYU nlAITLMCcfQcS6vAqROZ0MhCHdNb5IuJNFNaXNQaqhfD8LlYMlZiUIJqE/LHlMVy cChQ415jR+XcnS6DFc8lR7vZizyhpUMq6mY0ota3pWX924V38dKk8AQz0dcWzldE AWjoe5l6ndbzKcChfWtn8wCTRR5woAor9/ywcYTXQ0bysmNzVFynfL12qLKGM0Sl 28UwAETd0nc84CIPxSqqbIQbN0XBPxDm7MxKvS9yzhTnBu8ppE2VlMy3TTq7qaMm s39Yi1Z1z8qc7twJ1GpQPxfXtagCqbpOp5LSRc6BP7w8cn8yDLw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:06 2025 by rpki-client