$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: 2AodhEDC1aHA2+o9DR9q5C6+gMOe9EVOjuiK0nsPmHM= Subject key identifier: BB:CD:38:79:0F:9B:34:7D:9D:78:31:9B:97:58:52:AF:E2:0C:61:47 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 6E9F1C18D7B49955EED8384E8A0FBB091823094F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 0197 Signing time: Mon 20 Oct 2025 12:21:39 +0000 Manifest this update: Mon 20 Oct 2025 12:16:39 +0000 Manifest next update: Thu 23 Oct 2025 12:41:39 +0000 Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) 2: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: ATe0iAuyk01GxDNjN9nH6w3LfOJrn+sbXqFM1Pa79zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9f:1c:18:d7:b4:99:55:ee:d8:38:4e:8a:0f:bb:09:18:23:09:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Oct 20 12:16:39 2025 GMT Not After : Oct 23 12:41:39 2025 GMT Subject: CN=BBCD38790F9B347D9D78319B975852AFE20C6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:15:15:a2:20:63:2c:23:08:a2:be:78:a3: 34:03:69:24:18:71:27:6b:2a:e2:77:f5:3a:63:8f: 00:6d:de:10:ed:17:5b:ab:5b:ed:a1:88:e9:5d:e6: 0e:62:17:e8:ec:a8:3f:62:df:86:94:8e:3f:55:af: 8c:03:c0:3b:09:63:73:ed:bc:78:32:8f:c0:f1:75: 29:9b:d7:27:e4:61:29:83:1f:17:63:88:52:e9:83: b3:d8:76:a5:32:a4:53:fc:76:73:21:07:05:22:c0: c2:a9:35:14:c0:09:f4:ba:29:f5:d6:14:bb:64:a1: 8c:80:62:3b:33:ed:a0:6f:f7:51:f7:13:b0:b4:e9: 2b:c6:b9:f9:9f:8b:bb:63:36:39:07:1b:60:84:62: 7b:77:78:8f:f7:33:a8:79:a1:fe:75:e1:bd:ea:f7: 73:d7:cc:1b:a2:de:4e:4a:c0:69:f0:4d:da:9e:b1: 0b:74:2d:5e:27:62:6d:3b:e9:39:75:0c:91:86:44: 3d:f4:4f:2f:19:10:f5:65:62:8d:5a:96:08:50:64: 14:35:05:11:ce:8f:15:51:b6:53:da:d6:52:c4:36: 5a:52:94:e8:58:d9:69:db:15:d7:39:6f:29:68:ab: 60:fa:93:66:37:2a:c1:69:7f:0b:e3:70:fe:bc:cf: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:38:79:0F:9B:34:7D:9D:78:31:9B:97:58:52:AF:E2:0C:61:47 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ff:3f:4d:42:3a:a1:86:24:35:2e:84:a8:1e:95:a7:b6:94: 46:c2:b5:0f:2b:9a:30:d7:31:12:a7:15:f0:60:8b:e0:cf:2a: af:83:59:8e:42:df:99:ff:a5:91:28:ce:b8:7f:57:48:9f:f2: 41:d7:ce:ff:b7:86:36:5d:b6:18:a7:35:72:f9:8d:04:1a:ca: b7:01:4c:57:4c:86:03:3b:8d:db:97:1f:f6:24:7d:28:85:8e: d0:58:8d:02:17:e0:0e:80:4d:b3:e1:00:ce:0e:7e:5b:2f:45: 02:d7:21:14:10:d6:e7:11:57:25:20:40:c8:4a:f1:b0:fe:74: a8:5d:e8:67:85:d1:d3:d6:b4:b7:6f:a0:85:75:8b:2e:16:e2: 53:4f:b5:d4:79:1a:03:11:b2:6f:26:94:5a:ab:7b:a7:fb:f6: 7a:f8:c9:17:d3:5c:de:65:c7:6b:26:a3:46:24:f8:85:2e:df: 67:61:8b:cd:6b:7b:2a:a8:da:6f:3a:15:62:b9:6f:4e:f4:1c: 72:e4:db:7d:83:44:73:fe:00:ba:59:19:a0:2d:d9:6f:ea:0d: 29:0e:ac:2a:6a:91:a6:ae:fc:75:5f:52:0d:a2:b6:35:89:bb: d8:c8:e5:47:0c:11:f9:45:df:02:c9:30:58:7b:b2:2c:d8:d6: 36:42:d9:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbp8cGNe0mVXu2DhOig+7CRgjCU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTEwMjAxMjE2MzlaFw0yNTEwMjMxMjQxMzlaMDMxMTAvBgNV BAMTKEJCQ0QzODc5MEY5QjM0N0Q5RDc4MzE5Qjk3NTg1MkFGRTIwQzYxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnRUVoiBjLCMIor54ozQDaSQY cSdrKuJ39TpjjwBt3hDtF1urW+2hiOld5g5iF+jsqD9i34aUjj9Vr4wDwDsJY3Pt vHgyj8DxdSmb1yfkYSmDHxdjiFLpg7PYdqUypFP8dnMhBwUiwMKpNRTACfS6KfXW FLtkoYyAYjsz7aBv91H3E7C06SvGufmfi7tjNjkHG2CEYnt3eI/3M6h5of514b3q 93PXzBui3k5KwGnwTdqesQt0LV4nYm076Tl1DJGGRD30Ty8ZEPVlYo1alghQZBQ1 BRHOjxVRtlPa1lLENlpSlOhY2WnbFdc5byloq2D6k2Y3KsFpfwvjcP68z2qZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu804eQ+bNH2deDGbl1hSr+IMYUcwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn/P01COqGGJDUuhKgelae2lEbCtQ8rmjDX MRKnFfBgi+DPKq+DWY5C35n/pZEozrh/V0if8kHXzv+3hjZdthinNXL5jQQayrcB TFdMhgM7jduXH/YkfSiFjtBYjQIX4A6ATbPhAM4OflsvRQLXIRQQ1ucRVyUgQMhK 8bD+dKhd6GeF0dPWtLdvoIV1iy4W4lNPtdR5GgMRsm8mlFqre6f79nr4yRfTXN5l x2smo0Yk+IUu32dhi81reyqo2m86FWK5b070HHLk232DRHP+ALpZGaAt2W/qDSkO rCpqkaau/HVfUg2itjWJu9jI5UcMEflF3wLJMFh7sizY1jZC2U0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:34 2025 by rpki-client