$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json) Hash identifier: lgPsFFCWlQaZzlDBDLnjQz8hzheLsXNl1uyEvl/hRX0= Subject key identifier: F4:BE:17:25:A8:FC:87:D1:A6:0C:25:11:57:9C:63:37:DB:82:24:EE Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 2173C36023DED67B4A85724C3B2C14EB95E2A9B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft Manifest number: 021A Signing time: Sat 01 Nov 2025 14:42:07 +0000 Manifest this update: Sat 01 Nov 2025 14:37:07 +0000 Manifest next update: Tue 04 Nov 2025 20:41:07 +0000 Files and hashes: 1: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: wUbtFiMPU1jloVsB6wrBvVF8Un4XVCQdMLA3Dk/l+8E=) 2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: LwR/Ij+tJvdbqCidmKE7lrWijDVtZaGN/EKnL9Uohnc=) 3: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: iXlr6ynCJTWhRXgxuJ3jQPCoK8YD+Mi69YQAcWlh+5g=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: oyewj7z2z/pNCV5NDy0zw0UISqbqq4GZm0zaT4XOSl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 20:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:73:c3:60:23:de:d6:7b:4a:85:72:4c:3b:2c:14:eb:95:e2:a9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Nov 1 14:37:07 2025 GMT Not After : Nov 4 20:41:07 2025 GMT Subject: CN=F4BE1725A8FC87D1A60C2511579C6337DB8224EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:45:ca:93:7f:55:b7:b9:f6:80:bc:14:c3: eb:81:ff:8b:0f:6a:93:89:d0:9a:c6:4b:cb:ae:1c: 2c:37:29:1d:c5:8c:e8:96:d3:56:18:18:1e:cf:78: 57:c8:b2:e5:37:ba:89:3f:20:69:37:37:9c:6c:c7: c8:40:7a:25:cf:dd:19:00:43:2c:63:b3:f3:92:94: 98:7f:ea:f4:49:8d:75:c4:f0:b8:2e:71:05:1d:13: ac:23:07:56:13:ae:19:b0:fa:c9:8c:03:10:6a:86: 93:43:1e:a9:1e:4d:13:f0:a6:c1:0e:4d:d3:60:b4: e1:7e:d4:32:13:d5:53:cf:ea:5c:2a:a8:69:c8:82: 55:e6:25:9d:ce:f9:9c:ab:f2:7e:ed:0b:8a:c5:7e: fc:fb:34:85:01:06:7d:a9:80:76:f5:65:f5:cd:84: 86:2b:56:87:83:d2:d0:99:7f:72:c6:3a:56:29:a6: 90:cd:a0:ec:26:9d:b7:e9:82:03:5d:01:15:85:95: 57:89:1f:97:cf:03:ba:ca:3c:ec:41:93:27:be:05: 97:d0:50:32:a2:aa:e2:f6:76:b1:9c:d0:31:eb:d1: 84:e9:03:f7:51:d8:e8:ec:2d:16:2a:d6:44:f5:a8: ce:42:d0:c7:b5:c6:8f:8d:d2:a0:cc:09:dd:2e:14: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BE:17:25:A8:FC:87:D1:A6:0C:25:11:57:9C:63:37:DB:82:24:EE X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:77:47:62:fd:cf:55:ea:39:42:f9:79:47:8c:27:a2:b7:dd: 94:c3:c7:69:ac:6b:ef:9e:6c:36:f3:ca:88:f9:2f:b9:b8:5a: 37:47:1f:6b:8d:0c:af:6f:cf:3a:c5:9e:d6:50:f3:ca:0c:b9: 97:38:b2:5e:6d:62:08:79:c6:06:79:e6:51:26:cd:b4:d4:60: b2:85:4d:0e:7a:12:0f:42:50:5d:d7:a8:9a:69:94:b4:4f:8d: 15:47:c9:0e:37:da:ea:d5:b0:9f:3c:91:d4:86:ae:c9:5e:55: a7:f7:6d:fe:ff:09:89:8d:8c:3a:a9:0d:28:e6:db:4e:12:0b: ea:f9:8a:71:95:85:98:0c:39:a9:8f:59:91:8a:6b:16:fa:ab: 56:03:10:50:94:0a:12:77:99:db:eb:b9:cc:61:9f:89:76:da: 01:2c:a1:bc:c6:db:f6:f8:88:ae:ca:ab:22:4b:7d:19:59:8b: 23:c4:83:dd:65:a9:96:b7:00:41:f1:53:a5:c5:01:e7:b7:22: b5:77:fa:dd:ac:8c:cb:e3:b5:d6:59:c4:0c:31:ea:e9:51:fc: b7:e3:db:86:21:d0:eb:36:6a:93:71:9a:82:6b:4b:af:03:b6: c0:16:80:dc:69:31:c8:44:89:b0:a5:86:53:40:3a:61:0b:29: b5:54:44:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXPDYCPe1ntKhXJMOywU65XiqbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNTExMDExNDM3MDdaFw0yNTExMDQyMDQxMDdaMDMxMTAvBgNV BAMTKEY0QkUxNzI1QThGQzg3RDFBNjBDMjUxMTU3OUM2MzM3REI4MjI0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp10XKk39Vt7n2gLwUw+uB/4sP apOJ0JrGS8uuHCw3KR3FjOiW01YYGB7PeFfIsuU3uok/IGk3N5xsx8hAeiXP3RkA Qyxjs/OSlJh/6vRJjXXE8LgucQUdE6wjB1YTrhmw+smMAxBqhpNDHqkeTRPwpsEO TdNgtOF+1DIT1VPP6lwqqGnIglXmJZ3O+Zyr8n7tC4rFfvz7NIUBBn2pgHb1ZfXN hIYrVoeD0tCZf3LGOlYpppDNoOwmnbfpggNdARWFlVeJH5fPA7rKPOxBkye+BZfQ UDKiquL2drGc0DHr0YTpA/dR2OjsLRYq1kT1qM5C0Me1xo+N0qDMCd0uFAExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9L4XJaj8h9GmDCURV5xjN9uCJO4wHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ3R2L9z1XqOUL5eUeMJ6K33ZTDx2msa++e bDbzyoj5L7m4WjdHH2uNDK9vzzrFntZQ88oMuZc4sl5tYgh5xgZ55lEmzbTUYLKF TQ56Eg9CUF3XqJpplLRPjRVHyQ432urVsJ88kdSGrsleVaf3bf7/CYmNjDqpDSjm 204SC+r5inGVhZgMOamPWZGKaxb6q1YDEFCUChJ3mdvrucxhn4l22gEsobzG2/b4 iK7KqyJLfRlZiyPEg91lqZa3AEHxU6XFAee3IrV3+t2sjMvjtdZZxAwx6ulR/Lfj 24Yh0Os2apNxmoJrS68DtsAWgNxpMchEibClhlNAOmELKbVURL0= -----END CERTIFICATE-----Generated at Mon Nov 3 10:32:04 2025 by rpki-client