$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: i8D1Vi9jR+kGLVqVUdb7c9yWbXx1WQOEl88H7T5p4yM= Subject key identifier: 09:15:C6:70:D1:45:7D:B0:F3:E1:9F:6C:D0:44:32:82:32:2F:63:A3 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 28A6FA509AB92FBFAD07724BD1A8B632148D268C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: B9 Signing time: Mon 20 Oct 2025 10:41:51 +0000 Manifest this update: Mon 20 Oct 2025 10:36:51 +0000 Manifest next update: Thu 23 Oct 2025 13:23:51 +0000 Files and hashes: 1: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: PedEUNXkPS28vEqu/9ZdJ4Kk6OvActSPoBiIW6pjnwI=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a6:fa:50:9a:b9:2f:bf:ad:07:72:4b:d1:a8:b6:32:14:8d:26:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Oct 20 10:36:51 2025 GMT Not After : Oct 23 13:23:51 2025 GMT Subject: CN=0915C670D1457DB0F3E19F6CD0443282322F63A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:b9:a2:93:cb:3e:6f:07:9d:a9:4f:72:4c: a9:b4:b7:ae:b6:4d:89:78:39:8b:41:29:11:b0:1b: 5c:1b:b3:44:66:02:46:9d:1c:d2:cc:e6:a9:c6:06: 2a:a4:75:b4:8e:d3:98:1a:ee:e5:9b:56:ec:65:da: f4:7d:28:26:91:c3:6d:47:71:b4:6d:84:25:ae:52: c9:0f:1e:ab:77:33:79:5b:f2:01:c7:ff:3b:59:11: 7d:6a:46:e4:8e:d4:a3:1f:af:41:91:61:56:56:33: 20:21:37:55:bb:84:70:42:c7:18:3f:f3:64:9d:b1: b5:ab:b6:a9:24:7e:b5:80:ae:96:79:cd:d5:c6:ee: ed:b3:c8:e3:41:77:bb:bd:97:18:81:7b:34:5c:ce: 7d:7c:9e:b6:b4:61:8c:a0:ec:33:6b:50:03:f9:8f: 4c:80:1c:e0:de:d8:6f:86:8c:00:77:b9:88:d0:80: ae:73:20:46:7e:8d:8f:c3:3b:6f:3a:c1:34:28:1f: 4c:85:a6:95:e7:b8:b8:86:12:8a:27:64:aa:a2:f0: af:81:db:0f:ca:6b:d5:ff:68:88:c6:29:a5:60:90: 3b:2e:da:27:aa:b6:d9:58:67:5c:10:05:92:9f:4f: 07:6d:92:40:8a:f9:2b:19:60:03:3d:2b:49:9c:fa: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:C6:70:D1:45:7D:B0:F3:E1:9F:6C:D0:44:32:82:32:2F:63:A3 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fc:dc:8e:01:cd:e8:0b:8d:52:23:63:d6:ec:bf:b6:5b:36: dc:e5:27:0a:a5:3a:06:40:f7:96:c4:c2:ee:6e:d0:41:82:84: d6:e5:6c:45:8a:00:92:04:ef:96:11:b7:c1:19:49:a0:29:47: a2:10:e0:f2:dd:ee:47:b6:be:56:d5:a3:d5:fe:e5:29:e1:e2: bd:10:0d:38:39:11:de:1d:60:d6:64:9d:cb:ba:20:55:9d:fd: d7:59:d3:09:dd:79:b4:3b:62:fe:a6:c5:c1:0e:da:0b:30:8b: 5b:0b:d0:54:87:94:13:41:9e:02:61:55:1e:6b:12:84:ff:31: dc:d9:c9:b7:c3:6e:9a:f2:22:88:b8:26:76:95:8a:44:7d:5d: d0:05:72:70:ce:92:6a:08:fc:14:c3:7f:25:6f:fd:1f:3b:7d: ee:6c:bd:d4:00:f3:8b:e9:bd:b6:39:1c:a5:7d:7e:af:aa:86: 64:bc:52:d6:31:78:bd:36:75:3a:d9:f5:47:b5:23:b0:19:50: c1:fa:6e:ce:a3:ff:32:9f:cf:70:e2:a3:0b:dd:86:15:45:89: d3:66:53:c8:cd:7d:18:b1:ce:7a:43:f1:de:dc:0f:09:47:ac: 9e:5b:fc:aa:c6:29:6e:c4:ea:7e:1f:8e:62:04:c3:74:2d:2e: 43:76:2a:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKb6UJq5L7+tB3JL0ai2MhSNJowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTEwMjAxMDM2NTFaFw0yNTEwMjMxMzIzNTFaMDMxMTAvBgNV BAMTKDA5MTVDNjcwRDE0NTdEQjBGM0UxOUY2Q0QwNDQzMjgyMzIyRjYzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCrmik8s+bwedqU9yTKm0t662 TYl4OYtBKRGwG1wbs0RmAkadHNLM5qnGBiqkdbSO05ga7uWbVuxl2vR9KCaRw21H cbRthCWuUskPHqt3M3lb8gHH/ztZEX1qRuSO1KMfr0GRYVZWMyAhN1W7hHBCxxg/ 82SdsbWrtqkkfrWArpZ5zdXG7u2zyONBd7u9lxiBezRczn18nra0YYyg7DNrUAP5 j0yAHODe2G+GjAB3uYjQgK5zIEZ+jY/DO286wTQoH0yFppXnuLiGEoonZKqi8K+B 2w/Ka9X/aIjGKaVgkDsu2ieqttlYZ1wQBZKfTwdtkkCK+SsZYAM9K0mc+vqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRXGcNFFfbDz4Z9s0EQygjIvY6MwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr83I4BzegLjVIjY9bsv7ZbNtzlJwqlOgZA 95bEwu5u0EGChNblbEWKAJIE75YRt8EZSaApR6IQ4PLd7ke2vlbVo9X+5Snh4r0Q DTg5Ed4dYNZkncu6IFWd/ddZ0wndebQ7Yv6mxcEO2gswi1sL0FSHlBNBngJhVR5r EoT/MdzZybfDbpryIoi4JnaVikR9XdAFcnDOkmoI/BTDfyVv/R87fe5svdQA84vp vbY5HKV9fq+qhmS8UtYxeL02dTrZ9Ue1I7AZUMH6bs6j/zKfz3DiowvdhhVFidNm U8jNfRixznpD8d7cDwlHrJ5b/KrGKW7E6n4fjmIEw3QtLkN2KuQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:00 2025 by rpki-client