$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: Yt/gYE54vqcm6CiJdJJQai5tTCQx/KBLSqzRpy2B/+0= Subject key identifier: 3B:38:70:FB:23:05:93:05:1D:97:83:34:F3:9C:85:2C:07:7F:9A:7C Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 1C545FB9FB3FD473FBB6504F5AA9FB12D4125686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 01DE Signing time: Tue 04 Nov 2025 14:10:43 +0000 Manifest this update: Tue 04 Nov 2025 14:05:43 +0000 Manifest next update: Fri 07 Nov 2025 21:59:43 +0000 Files and hashes: 1: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: leYVyyvd/jidnXb/qAOJO4dcqtP9ELQ+ESEDgS6WLPQ=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: l7e04tx4Mr56W+sGrraQme0eR5MHoJterHz1neaHXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 21:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:54:5f:b9:fb:3f:d4:73:fb:b6:50:4f:5a:a9:fb:12:d4:12:56:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Nov 4 14:05:43 2025 GMT Not After : Nov 7 21:59:43 2025 GMT Subject: CN=3B3870FB230593051D978334F39C852C077F9A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:22:0e:61:49:23:32:0b:e3:f8:6b:76:8e: cb:39:59:dc:56:79:2b:f1:c8:17:be:f3:0b:d1:df: a1:51:24:36:29:71:15:4b:a3:78:fa:df:f5:80:0c: 48:9c:58:72:e5:ad:40:28:6f:bf:2c:be:e8:10:dc: 6e:43:94:60:b5:10:cd:b8:94:cd:16:8a:bf:de:13: 87:ab:ec:59:ea:39:40:ed:59:2b:94:90:08:b1:2a: 19:ea:91:ec:9d:65:7f:0f:98:fc:0e:03:db:3a:f4: 59:3f:25:e9:43:29:80:42:08:38:5c:b2:51:28:2e: e7:6f:47:6a:34:2f:b3:bc:92:19:e3:d0:ae:ca:d5: d8:9d:8a:88:e8:61:47:3d:28:2b:73:2e:b6:6a:4c: ef:a2:98:34:24:ce:2a:69:55:40:8e:29:cd:89:48: d8:ca:b7:6e:0e:82:33:56:c4:95:71:5a:17:d4:9a: 95:8a:dc:22:77:04:93:58:d2:da:78:ee:7c:e9:33: 9c:2b:48:80:25:1f:82:a2:70:90:d4:2c:43:2a:96: 46:d7:3f:55:0a:bf:18:16:fe:0d:fe:07:40:f3:15: 27:79:14:95:74:09:40:a3:7d:1c:c2:b0:8e:7a:c1: 7e:db:92:81:02:c8:9a:c0:c7:da:b4:9d:23:2c:cf: 7c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:38:70:FB:23:05:93:05:1D:97:83:34:F3:9C:85:2C:07:7F:9A:7C X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:9d:b9:ed:1f:3d:af:9a:bd:cc:3e:0b:15:7c:54:32:6b: 72:81:4c:72:62:70:64:02:89:a4:8a:43:6f:3f:d1:04:09:aa: 32:3f:e0:08:18:39:9b:01:fa:c3:71:eb:76:e2:dd:01:ea:53: 06:8f:59:a3:88:e0:a8:65:62:5b:50:1e:61:c1:e7:d5:37:00: af:59:67:88:e6:db:a7:ba:9f:5a:67:1e:7a:44:64:4b:65:76: 05:42:61:bb:7e:60:a3:9b:56:11:7a:cd:93:14:45:a1:26:14: 72:2d:c4:c3:30:99:77:94:67:46:20:61:50:3c:f8:b4:c0:82: 29:6e:25:c7:b6:0d:13:d0:0a:fe:a7:13:77:97:f5:c4:f9:0f: d0:2b:fd:65:68:3c:07:d0:90:9c:d1:c0:3f:0f:68:b7:53:1a: ae:88:6a:07:05:b2:ec:fc:54:9b:19:ad:3f:5a:20:d7:30:89: 43:35:9d:f7:3e:24:4d:01:2c:82:59:23:60:2a:b4:df:2f:31: 92:90:f8:4c:04:19:30:cd:32:c6:e5:85:67:fc:c0:6f:3c:7f: fd:65:eb:be:70:db:a6:22:75:40:59:c0:d7:77:3e:99:50:e6: 0d:ad:1a:41:3b:eb:22:b8:2b:11:01:94:45:bd:01:8d:b6:be: 0b:a0:4f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFRfufs/1HP7tlBPWqn7EtQSVoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTExMDQxNDA1NDNaFw0yNTExMDcyMTU5NDNaMDMxMTAvBgNV BAMTKDNCMzg3MEZCMjMwNTkzMDUxRDk3ODMzNEYzOUM4NTJDMDc3RjlBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTiIOYUkjMgvj+Gt2jss5WdxW eSvxyBe+8wvR36FRJDYpcRVLo3j63/WADEicWHLlrUAob78svugQ3G5DlGC1EM24 lM0Wir/eE4er7FnqOUDtWSuUkAixKhnqkeydZX8PmPwOA9s69Fk/JelDKYBCCDhc slEoLudvR2o0L7O8khnj0K7K1didiojoYUc9KCtzLrZqTO+imDQkzippVUCOKc2J SNjKt24OgjNWxJVxWhfUmpWK3CJ3BJNY0tp47nzpM5wrSIAlH4KicJDULEMqlkbX P1UKvxgW/g3+B0DzFSd5FJV0CUCjfRzCsI56wX7bkoECyJrAx9q0nSMsz3zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzhw+yMFkwUdl4M085yFLAd/mnwwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmanbntHz2vmr3MPgsVfFQya3KBTHJicGQC iaSKQ28/0QQJqjI/4AgYOZsB+sNx63bi3QHqUwaPWaOI4KhlYltQHmHB59U3AK9Z Z4jm26e6n1pnHnpEZEtldgVCYbt+YKObVhF6zZMURaEmFHItxMMwmXeUZ0YgYVA8 +LTAgiluJce2DRPQCv6nE3eX9cT5D9Ar/WVoPAfQkJzRwD8PaLdTGq6IagcFsuz8 VJsZrT9aINcwiUM1nfc+JE0BLIJZI2AqtN8vMZKQ+EwEGTDNMsblhWf8wG88f/1l 675w26YidUBZwNd3PplQ5g2tGkE76yK4KxEBlEW9AY22vgugT0A= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:03 2025 by rpki-client