$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: TqJC4pYFFgBIKS88qzEt1JBFn7m79UYEeYYoSeO4Ulc= Subject key identifier: 92:EE:0C:16:97:CE:27:15:E1:D3:D0:27:97:BF:41:F4:A0:12:B4:E7 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 3433C81403685ADAC8B80C5C0566341E871CA1D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0238 Signing time: Mon 20 Oct 2025 10:51:43 +0000 Manifest this update: Mon 20 Oct 2025 10:46:43 +0000 Manifest next update: Thu 23 Oct 2025 18:58:43 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: XeKLvdz2VFFfRlgFLiPrLajdr/mT+I2FI03zf2ABZXs=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:33:c8:14:03:68:5a:da:c8:b8:0c:5c:05:66:34:1e:87:1c:a1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Oct 20 10:46:43 2025 GMT Not After : Oct 23 18:58:43 2025 GMT Subject: CN=92EE0C1697CE2715E1D3D02797BF41F4A012B4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:c6:81:e9:60:ca:9d:a3:07:ba:82:79:90: 77:c2:16:de:b7:bc:18:fe:f3:4a:7f:e8:4c:6b:a4: 33:d1:4d:85:20:02:32:f2:f9:4f:87:87:25:80:34: 92:d5:64:ae:4c:fe:51:34:6c:cc:89:32:58:6f:11: 50:56:46:45:89:7d:a1:c2:99:e0:cc:7c:da:fe:df: a2:70:d6:6b:4a:f3:98:7e:c7:78:a0:f1:ef:78:8a: 78:42:d0:8d:d7:78:28:b3:63:38:41:02:66:8b:c3: a1:85:4f:a7:d8:33:51:ca:aa:0f:38:be:f8:9f:64: 14:a0:9f:67:88:1f:19:b6:4f:c1:d3:16:43:d8:97: a3:87:18:bb:7c:92:0d:5f:41:69:0a:cf:8e:a7:47: 39:1d:97:19:a8:85:61:e8:de:04:ca:6e:3e:87:19: 22:5d:98:ac:03:60:c3:58:1f:fc:c9:7a:e3:48:5c: 19:6f:fb:30:ab:e8:95:80:22:d6:c5:65:ff:68:80: f4:b9:82:b7:7e:50:ba:82:66:c6:a0:92:46:7b:5a: f2:64:56:46:60:33:c5:1a:83:36:73:5a:c9:f7:a1: c1:d7:fa:de:7e:d7:ac:4a:c0:d7:00:2e:30:77:24: e5:1b:8a:32:89:bb:34:9d:bb:95:0e:98:6a:ad:45: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:0C:16:97:CE:27:15:E1:D3:D0:27:97:BF:41:F4:A0:12:B4:E7 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:54:86:bf:b4:92:fa:a5:35:2b:df:21:a2:b9:91:87:ef:10: 53:de:d3:e1:37:9f:32:11:fc:82:9b:24:1a:2c:dd:55:7b:a7: 26:21:2a:2f:c9:bc:2d:2d:0e:30:fa:2c:e0:ab:94:2e:31:63: 66:ce:34:5f:dc:ba:ce:79:ba:d6:9d:70:f8:15:a4:4f:5e:8a: 7b:57:99:91:4e:88:33:e6:41:f0:85:a6:2b:06:76:69:0c:e6: 2b:c3:0a:bb:22:e2:2c:5c:ef:db:31:98:4b:89:4d:dc:a8:7d: fb:b5:27:1b:54:ea:cd:c6:4d:60:f1:c3:0c:f0:08:e7:a5:8f: 6c:a2:cd:fc:e1:f2:1e:b0:49:d6:6d:2f:5a:7d:23:87:43:0f: 03:2c:fd:92:ab:e5:8b:90:fc:fe:8a:89:0b:7d:73:bd:e2:19: be:08:e2:b9:d5:bd:17:25:1d:1d:84:0f:1f:de:7c:bd:83:71: 72:49:86:bc:27:60:2c:3f:d5:72:d4:87:5a:2a:a1:c9:31:4c: e1:8c:57:fa:9e:4b:22:80:17:1a:8b:36:8a:75:ba:ad:89:d9: a7:82:ca:f2:c9:e5:44:ca:19:e3:17:2b:d9:61:cd:af:4e:4c: 00:46:41:5a:d6:86:59:d9:dd:d3:38:00:1f:6a:8a:b9:bc:c4: 91:e4:be:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDPIFANoWtrIuAxcBWY0HoccodYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTEwMjAxMDQ2NDNaFw0yNTEwMjMxODU4NDNaMDMxMTAvBgNV BAMTKDkyRUUwQzE2OTdDRTI3MTVFMUQzRDAyNzk3QkY0MUY0QTAxMkI0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpMaB6WDKnaMHuoJ5kHfCFt63 vBj+80p/6ExrpDPRTYUgAjLy+U+HhyWANJLVZK5M/lE0bMyJMlhvEVBWRkWJfaHC meDMfNr+36Jw1mtK85h+x3ig8e94inhC0I3XeCizYzhBAmaLw6GFT6fYM1HKqg84 vvifZBSgn2eIHxm2T8HTFkPYl6OHGLt8kg1fQWkKz46nRzkdlxmohWHo3gTKbj6H GSJdmKwDYMNYH/zJeuNIXBlv+zCr6JWAItbFZf9ogPS5grd+ULqCZsagkkZ7WvJk VkZgM8UagzZzWsn3ocHX+t5+16xKwNcALjB3JOUbijKJuzSdu5UOmGqtRUwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUku4MFpfOJxXh09Anl79B9KAStOcwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJUhr+0kvqlNSvfIaK5kYfvEFPe0+E3nzIR /IKbJBos3VV7pyYhKi/JvC0tDjD6LOCrlC4xY2bONF/cus55utadcPgVpE9eintX mZFOiDPmQfCFpisGdmkM5ivDCrsi4ixc79sxmEuJTdyoffu1JxtU6s3GTWDxwwzw COelj2yizfzh8h6wSdZtL1p9I4dDDwMs/ZKr5YuQ/P6KiQt9c73iGb4I4rnVvRcl HR2EDx/efL2DcXJJhrwnYCw/1XLUh1oqockxTOGMV/qeSyKAFxqLNop1uq2J2aeC yvLJ5UTKGeMXK9lhza9OTABGQVrWhlnZ3dM4AB9qirm8xJHkvmQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:58 2025 by rpki-client