$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: skN36MfaUWMoL51jiUPvAhzVTFnL/ATcT1qZtAG26ik= Subject key identifier: D2:1B:6C:04:27:85:DF:50:A6:57:F6:02:A6:0A:31:B0:7F:8E:15:3D Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 655DE96A82693F960AD1463531F5F16A59CCE995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0259 Signing time: Sat 18 Oct 2025 20:21:19 +0000 Manifest this update: Sat 18 Oct 2025 20:16:19 +0000 Manifest next update: Wed 22 Oct 2025 00:48:19 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: ds74FgLUBDpP7846sVh8kIGJ1Fy+pqdvz0n86mtGnDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5d:e9:6a:82:69:3f:96:0a:d1:46:35:31:f5:f1:6a:59:cc:e9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Oct 18 20:16:19 2025 GMT Not After : Oct 22 00:48:19 2025 GMT Subject: CN=D21B6C042785DF50A657F602A60A31B07F8E153D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:95:96:0c:a7:78:28:91:d9:6b:67:fa:c3: 89:39:07:bb:04:19:f8:fd:9f:e2:60:31:4d:da:eb: 4e:b7:cb:5c:6c:02:40:41:f1:bb:2c:28:f1:78:79: 87:02:a8:33:fe:8d:9a:a5:1a:d5:27:d5:8f:c6:95: 94:72:59:87:dc:f0:6e:6c:25:75:32:ae:05:b6:94: 5f:21:39:76:23:c8:b4:d4:ab:f9:fc:59:d2:f5:c6: 9b:ab:d7:77:1a:ec:85:9a:40:2e:9f:40:19:d5:f7: 83:0d:ad:d5:77:31:6a:ba:0e:35:3f:31:70:fe:60: 90:12:11:bf:fd:95:b2:2b:3d:8f:b3:e9:65:14:1f: 5a:7b:20:02:05:0f:19:86:63:33:2b:52:57:02:90: 48:a8:cb:0f:7f:b2:44:12:8d:da:3f:91:d0:73:fc: 9a:a3:a3:54:8a:8c:e7:93:ce:59:f9:06:d7:0f:12: 4b:18:c9:22:7b:29:35:cf:3f:7e:5f:fe:d6:b5:9e: cd:cb:bf:8a:ce:98:ef:40:30:ec:6f:88:44:8b:65: a5:a7:00:2d:61:fa:b1:79:3b:49:3d:1e:1b:a7:fd: 2f:92:37:cf:62:84:a5:1b:ce:ed:f6:19:56:0f:c6: 38:6c:25:bb:54:e4:a2:65:af:69:f5:8f:8c:52:ee: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:6C:04:27:85:DF:50:A6:57:F6:02:A6:0A:31:B0:7F:8E:15:3D X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:03:64:ad:b2:62:2f:55:98:bf:a8:e0:19:ea:ad:fd:f3:e3: 29:76:58:59:e7:f3:02:1a:ff:1b:7e:1f:26:7d:ec:e6:5b:14: a7:82:fd:db:60:81:5f:af:ea:b0:22:ff:29:9f:e0:95:40:51: 33:42:e5:c6:05:1d:23:d5:7b:21:5a:28:f8:3f:d5:09:27:94: b1:db:2f:d0:09:83:00:8b:6e:7f:3d:51:e4:17:4d:fb:81:32: b3:01:d6:9a:45:48:af:6e:ce:7e:bb:b7:77:91:0e:3a:bc:c1: 3f:54:8c:07:6f:aa:f3:e4:2c:09:74:d5:8e:8e:ca:d0:5a:99: d5:41:39:6f:0f:28:40:b0:5d:65:13:17:c8:fb:fe:f1:0e:5b: 9a:f1:97:b7:5c:6c:e0:96:cd:e5:50:da:a6:46:2b:5c:31:d9: 45:b5:08:3c:2c:9c:5d:44:e3:ca:6c:96:74:39:e4:d9:d1:45: 62:c8:b8:82:33:c1:25:73:76:ac:65:f8:20:18:17:1a:57:5f: 06:b0:31:8c:af:5c:c6:53:c1:eb:0f:32:00:76:a0:c7:58:49: ef:3d:64:53:94:d2:ac:91:19:53:37:95:34:e2:26:d3:ba:14: e3:0b:96:1d:1c:c7:63:a1:15:76:0a:ac:90:ae:b0:22:96:78: f7:51:13:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZV3paoJpP5YK0UY1MfXxalnM6ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTEwMTgyMDE2MTlaFw0yNTEwMjIwMDQ4MTlaMDMxMTAvBgNV BAMTKEQyMUI2QzA0Mjc4NURGNTBBNjU3RjYwMkE2MEEzMUIwN0Y4RTE1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FpWWDKd4KJHZa2f6w4k5B7sE Gfj9n+JgMU3a6063y1xsAkBB8bssKPF4eYcCqDP+jZqlGtUn1Y/GlZRyWYfc8G5s JXUyrgW2lF8hOXYjyLTUq/n8WdL1xpur13ca7IWaQC6fQBnV94MNrdV3MWq6DjU/ MXD+YJASEb/9lbIrPY+z6WUUH1p7IAIFDxmGYzMrUlcCkEioyw9/skQSjdo/kdBz /Jqjo1SKjOeTzln5BtcPEksYySJ7KTXPP35f/ta1ns3Lv4rOmO9AMOxviESLZaWn AC1h+rF5O0k9Hhun/S+SN89ihKUbzu32GVYPxjhsJbtU5KJlr2n1j4xS7o4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0htsBCeF31CmV/YCpgoxsH+OFT0wHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkDZK2yYi9VmL+o4Bnqrf3z4yl2WFnn8wIa /xt+HyZ97OZbFKeC/dtggV+v6rAi/ymf4JVAUTNC5cYFHSPVeyFaKPg/1QknlLHb L9AJgwCLbn89UeQXTfuBMrMB1ppFSK9uzn67t3eRDjq8wT9UjAdvqvPkLAl01Y6O ytBamdVBOW8PKECwXWUTF8j7/vEOW5rxl7dcbOCWzeVQ2qZGK1wx2UW1CDwsnF1E 48pslnQ55NnRRWLIuIIzwSVzdqxl+CAYFxpXXwawMYyvXMZTwesPMgB2oMdYSe89 ZFOU0qyRGVM3lTTiJtO6FOMLlh0cx2OhFXYKrJCusCKWePdREz0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:27 2025 by rpki-client