$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: L/idESOr1wHsAfuCXnJ0roZaOljYD/nbBdjpZ+KFJhs= Subject key identifier: 2A:CB:74:B1:94:F0:7D:06:8E:4A:6C:10:0F:25:6A:CD:70:D7:9F:8D Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 3DC80775C28D599E8D0A6FECD5EB6A3802D03FB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 12:51:12 +0000 Manifest this update: Sun 19 Oct 2025 12:46:12 +0000 Manifest next update: Wed 22 Oct 2025 20:07:12 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: QbK4lPxyVmKdqF/Nv8FKuucCBRG2DjlHvqAP54VyDVk=) 2: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 3: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) 4: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c8:07:75:c2:8d:59:9e:8d:0a:6f:ec:d5:eb:6a:38:02:d0:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Oct 19 12:46:12 2025 GMT Not After : Oct 22 20:07:12 2025 GMT Subject: CN=2ACB74B194F07D068E4A6C100F256ACD70D79F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:af:6b:30:6e:b2:50:2a:5e:f6:d8:3c:77: 33:e3:e7:90:93:4e:08:be:d2:c0:dc:6f:99:83:c2: 9a:1d:7d:0d:b6:8c:88:3c:e7:b5:9b:db:b3:0d:09: ad:9c:72:bf:43:c6:62:6e:e8:cf:e1:99:0d:9e:c4: fe:57:7b:84:47:83:1d:61:51:8a:2c:f3:10:5b:ff: 0d:e0:23:df:2e:9a:a3:ae:31:e3:cf:f9:38:ed:a7: 41:24:60:15:70:3d:51:b5:88:ab:86:cf:fa:b6:17: 94:67:0b:87:62:f1:60:c0:1d:21:6e:e9:9a:88:bd: 06:80:57:e2:7f:2c:e8:d9:d9:df:72:79:a3:63:43: 07:77:8d:15:15:ff:ef:f4:fb:46:d1:7b:d0:b4:ee: 49:95:89:3e:8d:25:d8:ca:b4:02:c2:0f:15:b9:6f: a3:42:b1:ce:36:02:14:43:dc:10:5f:b6:58:e3:68: 84:e0:d0:9b:b5:70:0d:cb:18:fe:9e:81:2d:55:5f: 76:d1:c6:e2:cb:cd:86:7a:5c:4b:7f:d6:3a:f3:7d: c1:d6:52:a8:bc:11:b2:45:55:6f:60:72:9b:62:c1: 36:64:81:00:c7:ff:a5:5e:f5:f5:d3:3e:d2:d2:6c: e7:a4:ee:e7:7e:de:a9:15:29:98:d0:d4:5b:63:d6: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:74:B1:94:F0:7D:06:8E:4A:6C:10:0F:25:6A:CD:70:D7:9F:8D X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f4:fc:28:1b:e7:bf:49:78:ba:0d:68:be:27:1b:1a:aa:c0: 56:d7:ce:83:d0:90:3e:16:e9:84:27:c7:76:2b:01:85:0a:d5: 4f:33:d5:f5:c8:67:63:f1:f2:08:59:f9:33:c6:a7:7a:36:82: 74:d6:04:0a:78:6e:de:ae:9a:41:c2:e4:a9:cb:ad:72:3e:88: ef:44:bc:8c:93:f2:44:b9:75:25:f2:c3:db:8f:d8:51:2a:80: 33:4b:95:88:52:3b:22:14:3a:68:fd:72:dd:96:91:2b:66:5a: d5:15:d3:c2:5e:9a:b4:a6:27:94:bc:ea:13:8f:1c:69:00:ff: 53:cd:01:d1:20:09:d8:b9:f9:a9:2a:bc:30:8b:b3:75:7f:83: b4:a3:29:04:ab:74:6e:b2:74:b6:78:c7:df:7c:cc:3d:2e:1a: cf:49:ae:46:d8:2c:2a:94:e0:e6:19:62:6d:70:e5:9c:8d:c6: ef:e9:e5:52:f4:23:1b:0d:97:83:f6:c0:1e:70:df:bc:e9:55: 50:20:07:90:94:5b:a6:fe:8d:f7:46:c9:ae:3b:40:72:3b:ac: b0:3b:d5:00:68:b2:3f:b7:1a:d6:66:09:d7:f3:26:1d:8c:ba: f9:d6:54:e3:85:a3:46:10:35:f3:42:87:a7:b2:e1:7d:a0:0b: a6:a1:38:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcgHdcKNWZ6NCm/s1etqOALQP7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTEwMTkxMjQ2MTJaFw0yNTEwMjIyMDA3MTJaMDMxMTAvBgNV BAMTKDJBQ0I3NEIxOTRGMDdEMDY4RTRBNkMxMDBGMjU2QUNENzBENzlGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXK9rMG6yUCpe9tg8dzPj55CT Tgi+0sDcb5mDwpodfQ22jIg857Wb27MNCa2ccr9DxmJu6M/hmQ2exP5Xe4RHgx1h UYos8xBb/w3gI98umqOuMePP+Tjtp0EkYBVwPVG1iKuGz/q2F5RnC4di8WDAHSFu 6ZqIvQaAV+J/LOjZ2d9yeaNjQwd3jRUV/+/0+0bRe9C07kmViT6NJdjKtALCDxW5 b6NCsc42AhRD3BBftljjaITg0Ju1cA3LGP6egS1VX3bRxuLLzYZ6XEt/1jrzfcHW Uqi8EbJFVW9gcptiwTZkgQDH/6Ve9fXTPtLSbOek7ud+3qkVKZjQ1Ftj1t9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKst0sZTwfQaOSmwQDyVqzXDXn40wHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHX0/Cgb579JeLoNaL4nGxqqwFbXzoPQkD4W 6YQnx3YrAYUK1U8z1fXIZ2Px8ghZ+TPGp3o2gnTWBAp4bt6umkHC5KnLrXI+iO9E vIyT8kS5dSXyw9uP2FEqgDNLlYhSOyIUOmj9ct2WkStmWtUV08JemrSmJ5S86hOP HGkA/1PNAdEgCdi5+akqvDCLs3V/g7SjKQSrdG6ydLZ4x998zD0uGs9JrkbYLCqU 4OYZYm1w5ZyNxu/p5VL0IxsNl4P2wB5w37zpVVAgB5CUW6b+jfdGya47QHI7rLA7 1QBosj+3GtZmCdfzJh2MuvnWVOOFo0YQNfNCh6ey4X2gC6ahOPI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:12 2025 by rpki-client