$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json) Hash identifier: dwKlQ1bbv6gUlg+eb3zAzQ3u3/DohNEwXp90eZ2yP6E= Subject key identifier: F7:F4:71:5A:AA:C3:AA:46:5D:D9:8A:C6:4E:3F:A2:5B:B4:BB:9B:FD Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 Certificate issuer: /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Certificate serial: 078D932ABB3A79DD6A57FCACDC72F512C88C0CA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft Manifest number: 01A3 Signing time: Sat 25 Oct 2025 06:30:52 +0000 Manifest this update: Sat 25 Oct 2025 06:25:52 +0000 Manifest next update: Tue 28 Oct 2025 08:40:52 +0000 Files and hashes: 1: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=) 2: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=) 3: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=) 4: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: Gt5zX0RWE6eZwcsdP6REfaR1TM/4Jk/Bx8b3STCyiBo=) 5: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=) 6: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 08:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8d:93:2a:bb:3a:79:dd:6a:57:fc:ac:dc:72:f5:12:c8:8c:0c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Validity Not Before: Oct 25 06:25:52 2025 GMT Not After : Oct 28 08:40:52 2025 GMT Subject: CN=F7F4715AAAC3AA465DD98AC64E3FA25BB4BB9BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:20:d2:72:4e:65:e1:95:7d:e3:5b:09:eb: 33:ef:78:12:2a:25:54:54:ad:80:81:ea:42:09:f4: 2d:f1:93:2d:d9:ba:1a:33:d4:cd:15:09:2a:3e:be: 2b:cb:eb:83:13:5a:4b:4e:4f:00:95:24:f8:b8:40: b2:14:e3:8d:9c:10:57:28:0f:13:7f:34:a6:a5:37: 82:0c:82:9b:cc:75:51:dd:a9:87:db:8f:ee:47:a2: e1:5c:12:b0:85:9a:b6:76:0c:96:bc:56:d5:61:c0: ff:4f:16:db:6c:9f:39:37:8d:d7:07:a8:22:20:50: 4d:e0:48:2b:e7:35:e5:0f:68:90:09:ba:85:e9:d4: ad:cf:52:a8:4b:7e:dc:fc:52:77:44:92:8a:cc:93: f9:81:56:0a:98:f5:40:65:b5:4f:97:8f:b2:db:25: 87:b1:df:43:8a:37:9b:56:17:d4:61:bb:28:2f:f0: 18:ff:7b:63:c9:5a:af:70:39:1f:ae:d5:8c:b6:69: 96:54:85:ee:97:c2:82:f3:85:20:2a:17:fa:6c:64: ed:26:9b:cf:00:d9:b7:85:dc:da:2d:8d:00:c8:be: e7:57:a1:24:af:f3:6d:30:75:6c:ef:12:8a:21:3c: 76:dd:47:27:f4:76:26:a0:8b:32:23:fc:cb:9f:09: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F4:71:5A:AA:C3:AA:46:5D:D9:8A:C6:4E:3F:A2:5B:B4:BB:9B:FD X509v3 Authority Key Identifier: keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:1b:be:a4:13:fb:02:27:d7:6d:a4:dc:a1:66:5a:63:ff: c1:b7:34:26:14:fd:9f:e2:dd:d3:b2:d8:6a:f8:ec:e8:61:5d: 03:eb:42:b6:6f:cb:55:85:b3:4d:f6:75:30:1e:fb:38:3e:bb: 53:fb:6a:7e:15:a0:76:2d:f9:44:2a:1c:df:b0:91:ae:66:b6: 45:84:50:55:a6:60:e8:72:8a:34:53:e1:01:88:58:bb:ce:4b: 83:19:0b:d5:40:dd:53:2a:f8:9c:36:f4:75:08:ce:e1:68:ce: 49:b1:29:1d:08:3e:f7:70:bb:6e:3d:53:a8:43:80:67:4b:3b: ae:a4:a1:24:9e:3c:12:06:ca:80:96:30:c9:8c:30:53:92:80: 3f:1c:cd:72:0f:f9:ac:da:78:3d:67:d8:6d:9c:0b:a3:41:d7: 4d:fd:53:8b:a5:34:26:52:61:d3:5d:06:a7:47:6d:ab:86:54: ac:43:c2:d1:2d:e7:ad:9b:57:a9:52:f6:59:79:21:ba:02:55: b5:6c:d7:d3:06:a8:44:16:80:e9:12:ae:15:73:96:da:ea:9d: 41:13:f6:8b:3a:79:a4:41:69:79:10:d2:ac:ff:67:4e:b0:bd: df:72:54:fd:91:78:ca:28:fb:56:82:f1:89:6b:88:09:69:b6: ce:61:c8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB42TKrs6ed1qV/ys3HL1EsiMDKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE RjJGNUYxMjAeFw0yNTEwMjUwNjI1NTJaFw0yNTEwMjgwODQwNTJaMDMxMTAvBgNV BAMTKEY3RjQ3MTVBQUFDM0FBNDY1REQ5OEFDNjRFM0ZBMjVCQjRCQjlCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5yDSck5l4ZV941sJ6zPveBIq JVRUrYCB6kIJ9C3xky3Zuhoz1M0VCSo+vivL64MTWktOTwCVJPi4QLIU442cEFco DxN/NKalN4IMgpvMdVHdqYfbj+5HouFcErCFmrZ2DJa8VtVhwP9PFttsnzk3jdcH qCIgUE3gSCvnNeUPaJAJuoXp1K3PUqhLftz8UndEkorMk/mBVgqY9UBltU+Xj7Lb JYex30OKN5tWF9Rhuygv8Bj/e2PJWq9wOR+u1Yy2aZZUhe6XwoLzhSAqF/psZO0m m88A2beF3NotjQDIvudXoSSv820wdWzvEoohPHbdRyf0diagizIj/MufCTXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/RxWqrDqkZd2YrGTj+iW7S7m/0wHwYDVR0j BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1 RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG NUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw ZDItZDQ0ZDZiNzYyYjU1LzAvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0 MDJERjJGNUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi8G76kE/sCJ9dtpNyhZlpj/8G3NCYU/Z/i 3dOy2Gr47OhhXQPrQrZvy1WFs032dTAe+zg+u1P7an4VoHYt+UQqHN+wka5mtkWE UFWmYOhyijRT4QGIWLvOS4MZC9VA3VMq+Jw29HUIzuFozkmxKR0IPvdwu249U6hD gGdLO66koSSePBIGyoCWMMmMMFOSgD8czXIP+azaeD1n2G2cC6NB1039U4ulNCZS YdNdBqdHbauGVKxDwtEt562bV6lS9ll5IboCVbVs19MGqEQWgOkSrhVzltrqnUET 9os6eaRBaXkQ0qz/Z06wvd9yVP2ReMoo+1aC8YlriAlpts5hyBo= -----END CERTIFICATE-----Generated at Mon Oct 27 09:45:46 2025 by rpki-client