$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json) Hash identifier: jo1/JMxYf8BjyqEoyeY51jhFuu1TU9mKwerAK7Iwjyw= Subject key identifier: 0D:7B:4B:C7:C6:00:8E:78:FB:BC:1E:0F:E0:87:91:42:A2:61:CC:7E Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270 Certificate serial: 488F9AA3F3F7542C5F831BA74C915548B9EE78D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft Manifest number: 0108 Signing time: Sun 02 Nov 2025 12:41:11 +0000 Manifest this update: Sun 02 Nov 2025 12:36:11 +0000 Manifest next update: Wed 05 Nov 2025 12:53:11 +0000 Files and hashes: 1: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: thuZAYiRf9cIoV+ku3A0Gac0iLlUZNRvonSPzOtwW4g=) 2: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: mxtXjA73LS1mZhkBSLMdwKqT16ev1fS5k+J/P85pAXY=) 3: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: j/xS9avZJgquieoQP4YkgPp6/jajFftRAEgy5agjH+s=) 4: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8f:9a:a3:f3:f7:54:2c:5f:83:1b:a7:4c:91:55:48:b9:ee:78:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Validity Not Before: Nov 2 12:36:11 2025 GMT Not After : Nov 5 12:53:11 2025 GMT Subject: CN=0D7B4BC7C6008E78FBBC1E0FE0879142A261CC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:b6:4d:8d:0c:34:e1:b7:26:95:e6:09:28: 06:c9:37:5a:be:06:b7:aa:33:49:30:01:9d:ed:07: 1f:5e:f4:4f:f5:89:25:7d:b4:fc:32:8c:6d:97:e6: 39:cb:ae:7a:25:85:8a:93:d3:06:aa:85:29:9d:1b: ca:8d:83:0b:5e:ec:6b:88:96:97:48:4c:29:1f:c2: 9b:26:7c:d0:bb:b6:3d:d7:f2:5a:0c:c7:09:e0:fb: fc:1b:2f:1e:b5:de:61:05:a7:cc:81:2f:5a:62:6b: 29:c0:55:68:89:e8:5a:8b:79:74:03:b9:46:bb:e1: 37:73:09:66:b9:8d:8c:cb:e5:cc:ea:9a:50:1e:57: 07:40:47:68:c7:fd:2a:f4:ae:20:8c:7c:0c:ea:53: f7:aa:21:00:13:9d:ee:c6:ec:ad:66:b6:c7:6f:45: 8b:47:16:03:cf:58:53:3b:b4:71:70:a6:af:79:1f: 09:44:7d:36:38:c0:56:4c:68:e8:12:7b:0a:1f:09: 22:c8:7d:a1:22:f5:ec:00:79:ad:6e:76:48:48:47: ed:69:48:60:e2:9d:e5:b0:31:c5:84:c0:8b:41:0b: 8b:06:9f:cb:8f:b2:c1:9f:4f:c4:49:c7:f0:4a:61: 3b:22:71:e5:94:9e:66:ec:5e:f7:7d:c3:ae:79:85: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7B:4B:C7:C6:00:8E:78:FB:BC:1E:0F:E0:87:91:42:A2:61:CC:7E X509v3 Authority Key Identifier: keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:b5:5a:dd:28:a8:c8:16:61:b7:bc:b3:30:23:ae:f2:b2: 3c:59:69:53:3e:7e:27:04:34:b3:e5:c7:cf:0c:65:8d:d8:1c: 17:fc:92:9d:15:eb:0b:8d:57:73:4a:0e:06:49:21:dd:55:af: fa:e9:ae:0a:cb:a4:c7:c0:94:b4:12:3d:7c:13:cf:80:6f:bf: b2:e7:aa:da:bb:2d:33:80:57:dd:61:e2:ef:1a:33:44:e0:cd: 7a:05:03:ca:8e:38:cf:9c:ff:73:dd:aa:a5:97:53:50:f5:b5: 0d:c8:46:6a:7e:09:1a:16:57:c5:47:40:a9:e1:20:ef:c9:be: b4:f4:f0:80:5f:68:e2:53:a7:f3:9b:39:f5:f4:f2:8d:7d:06: a4:61:e9:ec:4b:33:15:52:14:19:b2:40:37:48:f0:e5:5b:2c: a9:11:82:14:db:a8:9a:5a:17:4a:ae:6d:7a:4f:85:8c:3c:f9: 74:e0:e6:58:0e:7e:f9:88:71:a5:bd:81:c5:eb:ab:c2:bf:ab: 95:61:71:a1:29:f2:26:2d:ae:e4:d8:38:78:d2:7e:e8:08:77: c1:84:f6:a6:96:b4:e0:b1:cc:a0:f3:56:a7:e7:b1:ba:80:b2: a3:30:84:73:83:c7:26:38:d1:0c:4b:9b:e7:0e:af:3b:c2:1d: 11:0e:69:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSI+ao/P3VCxfgxunTJFVSLnueNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3 MTNFNTI3MDAeFw0yNTExMDIxMjM2MTFaFw0yNTExMDUxMjUzMTFaMDMxMTAvBgNV BAMTKDBEN0I0QkM3QzYwMDhFNzhGQkJDMUUwRkUwODc5MTQyQTI2MUNDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IrZNjQw04bcmleYJKAbJN1q+ BreqM0kwAZ3tBx9e9E/1iSV9tPwyjG2X5jnLrnolhYqT0waqhSmdG8qNgwte7GuI lpdITCkfwpsmfNC7tj3X8loMxwng+/wbLx613mEFp8yBL1piaynAVWiJ6FqLeXQD uUa74TdzCWa5jYzL5czqmlAeVwdAR2jH/Sr0riCMfAzqU/eqIQATne7G7K1mtsdv RYtHFgPPWFM7tHFwpq95HwlEfTY4wFZMaOgSewofCSLIfaEi9ewAea1udkhIR+1p SGDineWwMcWEwItBC4sGn8uPssGfT8RJx/BKYTsiceWUnmbsXvd9w655hYWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXtLx8YAjnj7vB4P4IeRQqJhzH4wHwYDVR0j BBgwFoAU44CqUmdGZvXgdL9RG7cvoHE+UnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMC9FMzgwQUE1MjY3 NDY2NkY1RTA3NEJGNTExQkI3MkZBMDcxM0U1MjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3MTNF NTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJG QTA3MTNFNTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNstVrdKKjIFmG3vLMwI67ysjxZaVM+ficE NLPlx88MZY3YHBf8kp0V6wuNV3NKDgZJId1Vr/rprgrLpMfAlLQSPXwTz4Bvv7Ln qtq7LTOAV91h4u8aM0TgzXoFA8qOOM+c/3PdqqWXU1D1tQ3IRmp+CRoWV8VHQKnh IO/JvrT08IBfaOJTp/ObOfX08o19BqRh6exLMxVSFBmyQDdI8OVbLKkRghTbqJpa F0qubXpPhYw8+XTg5lgOfvmIcaW9gcXrq8K/q5VhcaEp8iYtruTYOHjSfugId8GE 9qaWtOCxzKDzVqfnsbqAsqMwhHODxyY40QxLm+cOrzvCHREOaQ8= -----END CERTIFICATE-----Generated at Mon Nov 3 07:19:34 2025 by rpki-client