$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: /A1GRGe2i0heiK/Wm+fOXEaMpEJ1urWT72tL10nwrvQ= Subject key identifier: E5:05:06:A9:3E:AC:BD:82:70:EC:B0:1E:A2:F1:DA:70:A6:6A:FC:3E Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 34A7BDAC95D6FCA3208357C5E91EDB7514F2FED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: FC Signing time: Mon 20 Oct 2025 14:22:02 +0000 Manifest this update: Mon 20 Oct 2025 14:17:02 +0000 Manifest next update: Fri 24 Oct 2025 00:46:02 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: +TkNgSk6SLXO5vSkcNAbDwXp60a/31uC7WvYC1rjZyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a7:bd:ac:95:d6:fc:a3:20:83:57:c5:e9:1e:db:75:14:f2:fe:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Oct 20 14:17:02 2025 GMT Not After : Oct 24 00:46:02 2025 GMT Subject: CN=E50506A93EACBD8270ECB01EA2F1DA70A66AFC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:8e:bb:6c:28:9b:87:97:80:32:52:97:86: d6:1f:14:bf:bc:03:91:fe:bb:a7:61:ed:22:e1:0e: 51:49:e6:a4:e5:a3:a6:75:32:33:99:59:ae:a1:67: 3e:b6:de:e8:15:55:4e:e2:56:ca:5c:40:23:90:fe: ba:f6:e8:a0:0b:8d:91:bc:ac:b6:75:d2:29:ca:2f: 86:85:eb:78:38:ab:ea:ca:2f:2d:4b:f7:5f:44:67: 5d:27:58:44:fc:09:b2:fe:3f:39:16:69:9d:ab:94: 63:ae:24:dc:4b:3c:01:7e:ef:19:22:58:9f:3c:60: 06:ed:6a:8c:57:ce:1f:fb:44:8d:f8:93:d8:91:4e: a4:a9:a7:91:66:dd:b4:a7:97:2e:d3:3d:47:b7:38: 64:ac:be:f3:62:df:b1:5a:22:b8:0d:e9:bc:07:7f: 24:14:45:7a:97:66:10:87:9d:ae:76:b0:7d:f8:ed: 0e:95:c1:92:c5:8a:bd:7a:5f:1b:36:ce:0a:d1:f9: ec:c1:f0:c1:9d:44:5a:4c:53:99:85:4b:41:14:b7: 36:5b:92:00:e8:e9:ff:92:bd:c9:b9:be:98:ea:54: 32:1e:bc:bf:0b:34:5d:52:b7:59:6c:a8:25:70:03: bf:b9:73:84:60:aa:24:58:52:0d:d6:2a:15:e7:97: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:05:06:A9:3E:AC:BD:82:70:EC:B0:1E:A2:F1:DA:70:A6:6A:FC:3E X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5a:30:8a:d5:4e:da:ca:44:47:c5:07:3e:ee:fb:c5:64:c1: 67:ac:f5:70:67:4f:a9:f1:8a:d5:c8:cf:d0:8e:50:3c:bc:18: 34:b7:88:74:0e:3e:41:61:e5:78:9d:e5:f2:83:ab:0b:f8:4d: a4:d5:90:7c:ca:9a:cf:88:26:3e:62:59:77:6e:7b:5f:3f:28: 2d:e6:27:08:05:6d:c3:b9:1e:d7:5d:5a:6e:f2:c1:9c:42:7c: e4:24:d8:82:e3:d4:7f:08:22:c0:59:2a:76:18:fa:be:78:b6: 35:ff:93:e5:f7:80:b9:13:0c:e0:4f:88:cd:72:87:c7:75:21: 8a:38:ab:8c:99:fb:fe:b4:e3:3f:14:f5:0a:eb:38:59:07:78: 8a:4a:08:ab:5e:78:9b:7a:50:69:cf:e2:d1:c6:cb:c8:e4:5c: b1:b0:d7:bf:51:9b:da:b5:73:d8:2c:19:2c:f7:bc:db:7d:ff: e1:78:89:6a:3d:89:a7:58:43:a9:05:b5:f0:62:cd:92:ba:7e: 1d:03:4f:be:1c:f6:80:31:d9:71:95:71:a4:21:2b:52:ab:ef: aa:d0:b4:58:87:58:6e:58:ed:41:b8:07:a6:79:38:83:f6:38: 1d:4e:64:ac:08:7f:42:a7:8c:6f:75:7d:0c:b4:97:3d:75:be: db:b1:bc:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKe9rJXW/KMgg1fF6R7bdRTy/tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTEwMjAxNDE3MDJaFw0yNTEwMjQwMDQ2MDJaMDMxMTAvBgNV BAMTKEU1MDUwNkE5M0VBQ0JEODI3MEVDQjAxRUEyRjFEQTcwQTY2QUZDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoI67bCibh5eAMlKXhtYfFL+8 A5H+u6dh7SLhDlFJ5qTlo6Z1MjOZWa6hZz623ugVVU7iVspcQCOQ/rr26KALjZG8 rLZ10inKL4aF63g4q+rKLy1L919EZ10nWET8CbL+PzkWaZ2rlGOuJNxLPAF+7xki WJ88YAbtaoxXzh/7RI34k9iRTqSpp5Fm3bSnly7TPUe3OGSsvvNi37FaIrgN6bwH fyQURXqXZhCHna52sH347Q6VwZLFir16Xxs2zgrR+ezB8MGdRFpMU5mFS0EUtzZb kgDo6f+Svcm5vpjqVDIevL8LNF1St1lsqCVwA7+5c4RgqiRYUg3WKhXnl79NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QUGqT6svYJw7LAeovHacKZq/D4wHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhaMIrVTtrKREfFBz7u+8VkwWes9XBnT6nx itXIz9COUDy8GDS3iHQOPkFh5Xid5fKDqwv4TaTVkHzKms+IJj5iWXdue18/KC3m JwgFbcO5HtddWm7ywZxCfOQk2ILj1H8IIsBZKnYY+r54tjX/k+X3gLkTDOBPiM1y h8d1IYo4q4yZ+/604z8U9QrrOFkHeIpKCKteeJt6UGnP4tHGy8jkXLGw179Rm9q1 c9gsGSz3vNt9/+F4iWo9iadYQ6kFtfBizZK6fh0DT74c9oAx2XGVcaQhK1Kr76rQ tFiHWG5Y7UG4B6Z5OIP2OB1OZKwIf0KnjG91fQy0lz11vtuxvEo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:33 2025 by rpki-client