$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: uLg8vudMv8S5quShDGiPD+rhTIsNYnO4dpgdWx+ETOk= Subject key identifier: 36:6F:CB:1C:F8:5A:01:CE:44:D2:22:A6:5A:22:B5:17:C6:8B:A8:B8 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 4D83A9ADB39C6D8D1F281A30EC8D56D0FAF6A519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0218 Signing time: Wed 05 Nov 2025 12:01:13 +0000 Manifest this update: Wed 05 Nov 2025 11:56:13 +0000 Manifest next update: Sat 08 Nov 2025 14:54:13 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: fQM/q0jEGNsaeHd+scWD8OLFeedPrmpdbkcVG7bksV4=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 14:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:83:a9:ad:b3:9c:6d:8d:1f:28:1a:30:ec:8d:56:d0:fa:f6:a5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Nov 5 11:56:13 2025 GMT Not After : Nov 8 14:54:13 2025 GMT Subject: CN=366FCB1CF85A01CE44D222A65A22B517C68BA8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:1a:04:cd:c2:df:3d:f4:fe:53:0b:f8:d1: 48:e5:61:30:8e:b0:80:59:68:bc:53:2b:15:6e:5d: 8e:89:b5:7e:e6:90:a5:17:87:13:1c:cd:f3:f2:a9: a6:a0:a3:db:c2:44:47:c2:ec:81:04:92:48:95:96: 82:61:4b:63:1c:5e:73:33:5b:49:4f:31:81:b3:99: 86:18:ae:f1:79:5e:e4:23:d9:ed:3a:f8:6e:30:09: 5a:df:2f:2a:60:c2:f6:a0:08:df:c3:40:7e:a4:0e: c6:ff:7f:27:46:a4:be:f8:cc:fb:5a:09:2d:e4:69: 33:3f:4d:6a:54:78:19:38:d3:6f:d1:34:c9:88:87: 32:b3:7c:da:86:ca:90:f0:ca:bd:91:cd:e9:32:59: 83:3a:ea:78:48:12:59:0f:fc:3d:2f:57:c9:83:25: 73:16:79:41:1b:c6:8e:ee:ab:a4:7c:34:d7:57:26: e1:9f:1c:22:29:ae:f0:10:3a:2d:69:b1:61:99:90: a5:2d:57:27:c8:d1:75:87:46:e6:cb:0b:9a:3f:6d: 68:87:a5:6b:0f:cd:22:93:64:ce:f3:75:5f:30:91: 76:11:eb:a4:c0:1c:34:a6:8c:67:99:a1:e4:b7:86: a2:54:1e:8e:2b:38:1b:5a:8d:7d:9a:59:f5:17:8a: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6F:CB:1C:F8:5A:01:CE:44:D2:22:A6:5A:22:B5:17:C6:8B:A8:B8 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:90:94:07:af:90:64:49:f9:dc:fd:54:e9:1d:90:00:48:5e: 8d:a1:b4:62:27:82:37:a4:26:8c:64:55:df:c9:78:33:c3:af: f3:c0:eb:8a:44:a1:6c:09:66:fe:d5:6d:22:37:41:ad:87:ad: 31:b7:4b:eb:b9:58:98:61:5a:7b:de:16:3e:46:7d:d7:4c:62: 1a:13:ea:30:53:8d:79:65:9a:1f:ec:bd:2b:a5:c7:d3:e1:ba: 9b:0d:90:f7:7e:c3:18:0e:38:b7:a1:d9:2e:ae:71:1b:15:db: e9:9f:1d:6c:2e:4d:e0:88:81:83:72:68:16:bb:9b:84:5a:5f: b3:34:32:80:ab:58:cc:69:93:72:81:4e:0a:62:9f:32:5a:36: 44:83:18:48:f3:15:df:95:cd:7d:d8:99:34:2a:7d:92:64:f8: 43:09:ae:1d:4d:6e:30:8f:8a:8a:7f:50:63:6b:99:b3:fe:5f: a7:7c:ae:69:00:00:65:f2:38:37:b1:c2:35:91:c6:99:89:03: 82:ee:7a:b9:a2:c8:8e:b8:a0:39:7c:11:2e:30:33:ca:6c:b8: 46:24:21:3a:bf:fc:53:3b:70:53:cc:f1:83:9f:fc:8e:dc:1c: 24:7a:09:1f:c8:bd:d0:99:eb:e5:ad:83:1e:96:0f:0a:77:00: 4b:34:90:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYOprbOcbY0fKBow7I1W0Pr2pRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTExMDUxMTU2MTNaFw0yNTExMDgxNDU0MTNaMDMxMTAvBgNV BAMTKDM2NkZDQjFDRjg1QTAxQ0U0NEQyMjJBNjVBMjJCNTE3QzY4QkE4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSBoEzcLfPfT+Uwv40UjlYTCO sIBZaLxTKxVuXY6JtX7mkKUXhxMczfPyqaago9vCREfC7IEEkkiVloJhS2McXnMz W0lPMYGzmYYYrvF5XuQj2e06+G4wCVrfLypgwvagCN/DQH6kDsb/fydGpL74zPta CS3kaTM/TWpUeBk402/RNMmIhzKzfNqGypDwyr2RzekyWYM66nhIElkP/D0vV8mD JXMWeUEbxo7uq6R8NNdXJuGfHCIprvAQOi1psWGZkKUtVyfI0XWHRubLC5o/bWiH pWsPzSKTZM7zdV8wkXYR66TAHDSmjGeZoeS3hqJUHo4rOBtajX2aWfUXihWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNm/LHPhaAc5E0iKmWiK1F8aLqLgwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCQlAevkGRJ+dz9VOkdkABIXo2htGIngjek JoxkVd/JeDPDr/PA64pEoWwJZv7VbSI3Qa2HrTG3S+u5WJhhWnveFj5GfddMYhoT 6jBTjXllmh/svSulx9PhupsNkPd+wxgOOLeh2S6ucRsV2+mfHWwuTeCIgYNyaBa7 m4RaX7M0MoCrWMxpk3KBTgpinzJaNkSDGEjzFd+VzX3YmTQqfZJk+EMJrh1NbjCP iop/UGNrmbP+X6d8rmkAAGXyODexwjWRxpmJA4LuermiyI64oDl8ES4wM8psuEYk ITq//FM7cFPM8YOf/I7cHCR6CR/IvdCZ6+Wtgx6WDwp3AEs0kHY= -----END CERTIFICATE-----Generated at Fri Nov 7 11:46:56 2025 by rpki-client