$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft File: EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json) Hash identifier: Cv5XJ0BCEheZYoiD3yxMaMVLSf0liZBnh1R69H6Jg4s= Subject key identifier: F3:AD:F4:02:0A:39:E6:C2:FC:77:0B:DE:6F:71:56:D2:C0:F0:8B:30 Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD Certificate issuer: /CN=EAD173629E4F955F44EC781A3739775E738ACCFD Certificate serial: 409C061D1276A4D92D94C74ACC1F6D1DF44F84C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft Manifest number: EE Signing time: Tue 28 Oct 2025 12:30:44 +0000 Manifest this update: Tue 28 Oct 2025 12:25:44 +0000 Manifest next update: Fri 31 Oct 2025 21:26:44 +0000 Files and hashes: 1: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: ameeqGkG/z3/R3GcCqKW0Fq3s/f885L4WZRNATKbeXU=) 2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9c:06:1d:12:76:a4:d9:2d:94:c7:4a:cc:1f:6d:1d:f4:4f:84:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD Validity Not Before: Oct 28 12:25:44 2025 GMT Not After : Oct 31 21:26:44 2025 GMT Subject: CN=F3ADF4020A39E6C2FC770BDE6F7156D2C0F08B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:34:eb:02:16:9b:2e:5c:17:ee:70:c8:ca: 4a:e4:e0:7a:30:89:f5:b1:33:65:be:75:78:d3:df: 6e:9b:12:00:fa:9e:f8:89:a7:ad:d3:c7:74:10:4a: cd:28:4d:71:c0:55:e0:43:07:73:79:63:ae:b3:4f: eb:2e:c7:47:48:2e:27:29:c9:0a:2f:62:01:69:2f: 2a:b8:2c:11:01:55:82:c1:c0:e0:71:99:39:2b:c5: 5b:39:a4:65:fd:07:2e:3c:3c:47:6c:9e:90:f6:ef: 49:6c:5d:9b:6b:cc:8f:20:20:5e:1e:83:1b:cb:ed: d8:1e:0d:ae:a5:f1:7b:c3:0a:53:23:19:4e:98:85: 2e:75:7e:c7:d9:8b:2b:b2:86:74:98:03:c7:eb:4e: bb:be:4f:cb:5c:61:51:b6:58:11:d6:e4:d7:68:4c: ce:68:6f:d6:db:ad:c9:2a:c9:17:20:6f:46:f6:36: 0d:e2:ce:df:7e:17:f0:62:19:09:07:df:17:58:9d: 58:1f:85:0d:ed:2d:fe:0a:8c:72:b2:7d:e9:89:29: 52:16:8a:30:84:f4:be:73:34:bc:77:22:8c:ec:a4: 67:0d:21:cc:55:6a:27:d3:91:3f:49:ee:fa:fe:5a: 94:70:b8:60:4c:e3:95:e5:44:28:9c:21:90:7a:65: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:F4:02:0A:39:E6:C2:FC:77:0B:DE:6F:71:56:D2:C0:F0:8B:30 X509v3 Authority Key Identifier: keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:10:e6:7a:b1:69:95:2e:93:5f:cd:2b:f4:a4:cb:3a:bb: 5e:64:d6:8c:b1:c8:6a:e9:aa:96:5a:f1:ce:ad:17:01:51:71: cc:ba:bc:d1:de:a0:13:71:cf:f2:fe:a6:ba:d8:61:a4:ba:5d: 8e:0b:ac:f3:d1:24:fc:d3:62:a9:8d:c7:ab:be:2f:77:fb:1c: 59:39:06:ef:36:8e:6b:6b:70:7a:87:81:63:2c:22:29:82:13: 82:9c:d1:24:6f:bc:d6:4c:4c:e5:c8:f7:e0:2d:6b:03:0b:f7: 54:fe:81:9e:13:b2:20:8b:38:35:f8:7b:0c:86:0a:1a:0b:36: dc:ce:3e:86:8e:2b:c5:8b:c3:9e:02:b1:d4:6d:e5:d7:24:8b: d7:ad:52:b6:e0:32:5e:33:62:f0:30:4a:6b:a3:d9:ed:5e:ee: 16:e2:06:89:ea:f9:b5:0c:86:b9:a4:aa:e5:a9:9a:3c:6b:7a: ba:b2:69:49:e6:cb:6e:47:ec:c4:56:2f:df:2a:a8:14:36:ae: c1:d6:99:ca:3d:f0:ee:2e:da:c1:03:d9:68:d3:fb:d1:09:d5: 40:66:33:7d:93:75:5c:4a:a5:bd:ae:64:d3:d2:9d:3f:16:5e: ae:df:49:94:fa:43:74:37:fc:fd:05:db:85:34:12:94:23:f5: 2f:04:6f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJwGHRJ2pNktlMdKzB9tHfRPhMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3 MzhBQ0NGRDAeFw0yNTEwMjgxMjI1NDRaFw0yNTEwMzEyMTI2NDRaMDMxMTAvBgNV BAMTKEYzQURGNDAyMEEzOUU2QzJGQzc3MEJERTZGNzE1NkQyQzBGMDhCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tjTrAhabLlwX7nDIykrk4How ifWxM2W+dXjT326bEgD6nviJp63Tx3QQSs0oTXHAVeBDB3N5Y66zT+sux0dILicp yQovYgFpLyq4LBEBVYLBwOBxmTkrxVs5pGX9By48PEdsnpD270lsXZtrzI8gIF4e gxvL7dgeDa6l8XvDClMjGU6YhS51fsfZiyuyhnSYA8frTru+T8tcYVG2WBHW5Ndo TM5ob9bbrckqyRcgb0b2Ng3izt9+F/BiGQkH3xdYnVgfhQ3tLf4KjHKyfemJKVIW ijCE9L5zNLx3IozspGcNIcxVaifTkT9J7vr+WpRwuGBM45XlRCicIZB6ZZrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8630Ago55sL8dwveb3FW0sDwizAwHwYDVR0j BBgwFoAU6tFzYp5PlV9E7HgaNzl3XnOKzP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMC9FQUQxNzM2MjlF NEY5NTVGNDRFQzc4MUEzNzM5Nzc1RTczOEFDQ0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3MzhB Q0NGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5 ZDMtOTQ2OWM4YjhiNzYyLzAvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3 NUU3MzhBQ0NGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdwEOZ6sWmVLpNfzSv0pMs6u15k1oyxyGrp qpZa8c6tFwFRccy6vNHeoBNxz/L+prrYYaS6XY4LrPPRJPzTYqmNx6u+L3f7HFk5 Bu82jmtrcHqHgWMsIimCE4Kc0SRvvNZMTOXI9+AtawML91T+gZ4TsiCLODX4ewyG ChoLNtzOPoaOK8WLw54CsdRt5dcki9etUrbgMl4zYvAwSmuj2e1e7hbiBonq+bUM hrmkquWpmjxrerqyaUnmy25H7MRWL98qqBQ2rsHWmco98O4u2sED2WjT+9EJ1UBm M32TdVxKpb2uZNPSnT8WXq7fSZT6Q3Q3/P0F24U0EpQj9S8Eb4E= -----END CERTIFICATE-----Generated at Wed Oct 29 07:52:13 2025 by rpki-client