$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: Dpnwr6IIZm6LpLHDZ4UPGdMJxai0WMu3k32hAsT899U= Subject key identifier: EE:C7:AB:8E:27:DE:0E:A4:88:11:A6:F1:DD:E6:ED:32:63:4A:A1:D2 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 4B95D16B3C76A6DA893CD994E32BA60139A3B250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 01CE Signing time: Sun 19 Oct 2025 10:12:05 +0000 Manifest this update: Sun 19 Oct 2025 10:07:05 +0000 Manifest next update: Wed 22 Oct 2025 20:27:05 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: EwUQN0RI2LAiRq413R5CNCnB6aIh76b5xyF/+SZswPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:95:d1:6b:3c:76:a6:da:89:3c:d9:94:e3:2b:a6:01:39:a3:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Oct 19 10:07:05 2025 GMT Not After : Oct 22 20:27:05 2025 GMT Subject: CN=EEC7AB8E27DE0EA48811A6F1DDE6ED32634AA1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:07:4f:e9:8a:9a:8b:71:60:3d:06:75:c3: c2:fd:52:f5:99:db:81:37:44:5a:10:3c:47:e4:ea: 66:7a:93:fb:fe:56:ce:26:a6:e2:c1:d7:c1:83:33: 16:b2:9b:7f:29:01:9a:f4:bb:53:0e:2a:7b:d1:6e: e3:ea:11:9e:39:5d:25:5f:f3:2a:79:ec:23:30:9a: b1:c9:8d:b8:33:dd:7f:1d:49:34:33:a1:27:04:e3: 67:d6:49:04:29:6c:17:28:54:a6:f7:a4:65:d6:a3: ee:37:3c:8a:d1:40:7c:b6:a2:96:c4:b2:fb:8b:f1: 08:04:24:15:89:11:60:3a:0f:f4:28:07:d6:96:10: 23:b6:41:3b:2f:48:4e:b0:25:1f:cd:1e:38:a0:e1: d2:e7:cd:81:f0:30:a1:ca:4b:00:fe:e5:1d:63:ad: 16:af:25:a4:21:9d:11:55:d8:7d:ee:20:12:ba:b6: 02:d6:79:ee:12:e4:ea:c2:7b:e8:97:7a:f6:02:55: 44:af:39:42:18:db:99:fd:cb:6b:10:e9:5b:f3:5c: 41:d1:a3:eb:66:f3:d4:e2:48:4e:e4:82:3f:39:f2: 74:6b:0d:f9:d0:fb:c4:61:6e:b2:a7:31:16:61:db: 5c:1a:7b:74:02:33:e0:5a:17:17:d9:28:cf:3b:2a: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C7:AB:8E:27:DE:0E:A4:88:11:A6:F1:DD:E6:ED:32:63:4A:A1:D2 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c0:0b:2e:d5:8a:59:a0:3c:0b:e3:0e:b8:56:9b:7a:7f:0b: 85:56:74:d2:90:a7:3d:58:d1:f6:bb:19:e6:e7:03:eb:e2:48: 40:1d:4c:6b:22:11:88:50:b3:ac:6c:53:ac:a7:6a:3d:47:d3: bc:63:16:92:d8:d0:33:9f:a3:25:8d:f5:ed:c5:21:92:e1:46: da:90:b7:ac:3e:b8:4f:a5:e8:1c:c0:91:9c:24:93:17:1d:24: a9:d2:88:b4:65:3c:32:61:59:6c:5b:a0:ab:02:74:fc:35:f8: 41:e4:0e:e9:47:d7:98:a9:90:d6:4e:99:00:fd:de:6a:9a:25: a7:1e:57:58:85:c1:aa:24:d4:a0:58:49:c4:30:d5:12:b9:68: b5:12:ae:f0:77:9d:c4:d2:62:8e:8f:d7:68:4f:34:8e:30:b5: 48:fd:b3:b8:e7:81:89:16:9b:6d:24:42:ec:36:16:28:84:55: a2:c2:b7:42:da:fc:c1:24:57:f9:04:e0:4d:a4:b7:b2:f9:ce: e2:c5:5d:57:e2:54:da:19:bf:bf:0a:a7:0f:61:9d:d9:8f:d8: 8a:ff:6d:a8:67:18:fa:b7:90:24:3d:d3:2f:0c:4a:63:29:7e: ea:0c:fd:03:71:1b:15:ee:1b:42:e8:31:29:c8:8d:f3:16:3f: 81:74:a5:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5XRazx2ptqJPNmU4yumATmjslAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTEwMTkxMDA3MDVaFw0yNTEwMjIyMDI3MDVaMDMxMTAvBgNV BAMTKEVFQzdBQjhFMjdERTBFQTQ4ODExQTZGMURERTZFRDMyNjM0QUExRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkwdP6Yqai3FgPQZ1w8L9UvWZ 24E3RFoQPEfk6mZ6k/v+Vs4mpuLB18GDMxaym38pAZr0u1MOKnvRbuPqEZ45XSVf 8yp57CMwmrHJjbgz3X8dSTQzoScE42fWSQQpbBcoVKb3pGXWo+43PIrRQHy2opbE svuL8QgEJBWJEWA6D/QoB9aWECO2QTsvSE6wJR/NHjig4dLnzYHwMKHKSwD+5R1j rRavJaQhnRFV2H3uIBK6tgLWee4S5OrCe+iXevYCVUSvOUIY25n9y2sQ6VvzXEHR o+tm89TiSE7kgj858nRrDfnQ+8RhbrKnMRZh21wae3QCM+BaFxfZKM87KpEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7serjifeDqSIEabx3ebtMmNKodIwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3ACy7VilmgPAvjDrhWm3p/C4VWdNKQpz1Y 0fa7GebnA+viSEAdTGsiEYhQs6xsU6ynaj1H07xjFpLY0DOfoyWN9e3FIZLhRtqQ t6w+uE+l6BzAkZwkkxcdJKnSiLRlPDJhWWxboKsCdPw1+EHkDulH15ipkNZOmQD9 3mqaJaceV1iFwaok1KBYScQw1RK5aLUSrvB3ncTSYo6P12hPNI4wtUj9s7jngYkW m20kQuw2FiiEVaLCt0La/MEkV/kE4E2kt7L5zuLFXVfiVNoZv78Kpw9hndmP2Ir/ bahnGPq3kCQ90y8MSmMpfuoM/QNxGxXuG0LoMSnIjfMWP4F0pf8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:36:51 2025 by rpki-client