$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: MjhjcBYK3FT0n4BIScrDMG0VEStMnEP5yc7QpVXfA70= Subject key identifier: 30:D0:E0:C1:BC:79:28:A5:C1:FA:4C:91:BC:C3:52:2D:18:3B:4E:FD Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 4D3F379C6A4AD1A37DAAA22065208C3A4D28D80C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01E3 Signing time: Tue 21 Oct 2025 16:20:01 +0000 Manifest this update: Tue 21 Oct 2025 16:15:01 +0000 Manifest next update: Fri 24 Oct 2025 23:04:01 +0000 Files and hashes: 1: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: 2na5W4EVtLbJ9AAjz/iLK9EsQ8j1okJFKbYjzan/RJo=) 2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3f:37:9c:6a:4a:d1:a3:7d:aa:a2:20:65:20:8c:3a:4d:28:d8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Oct 21 16:15:01 2025 GMT Not After : Oct 24 23:04:01 2025 GMT Subject: CN=30D0E0C1BC7928A5C1FA4C91BCC3522D183B4EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:4f:30:c4:04:e9:b8:43:7f:d3:d2:17:5c: 76:c7:54:e0:ac:0a:fe:b3:c6:9b:8d:74:53:df:6e: 25:20:5f:c9:a3:3e:c7:d4:82:84:4a:89:50:ee:96: 61:d3:45:c5:8c:02:b9:ee:94:c2:7e:e7:fd:9f:d0: 39:c7:e2:e5:56:f3:fd:b9:39:1c:34:1b:15:e2:1c: 59:f2:41:43:1f:06:e7:de:8e:27:af:9a:f8:d1:32: d6:0a:13:46:8a:aa:24:a5:ba:93:24:b6:6c:99:16: 30:d8:0a:a0:35:88:93:37:58:5f:00:f7:bd:00:26: aa:94:fb:99:34:ff:1f:d5:53:87:4d:4e:4d:a9:12: 0d:44:f6:b3:49:8e:1d:86:b3:4c:15:c6:cc:18:65: c3:af:63:d0:9c:83:96:73:20:d0:f2:9c:b1:e6:a5: 10:9d:e4:03:59:f3:df:67:3c:7c:3d:cd:48:e5:b0: a3:fe:d7:75:09:3c:3d:e4:10:05:ef:37:73:5c:64: 64:aa:40:d5:c9:57:50:15:72:11:ab:76:61:f0:f8: 36:7b:ef:ff:2d:62:af:4d:c5:15:53:5a:a4:e6:ff: b3:3e:fa:ae:8e:ae:6e:97:69:66:ee:30:9f:9d:71: 7a:fd:72:ae:91:cb:d8:cd:f1:a2:b6:8c:97:fa:8b: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:E0:C1:BC:79:28:A5:C1:FA:4C:91:BC:C3:52:2D:18:3B:4E:FD X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:16:2b:9a:31:ec:e2:b0:bc:fe:55:f4:3c:8d:28:65:51:ee: a6:d2:4b:45:bc:80:2e:07:23:42:49:0c:cb:5a:f9:f9:63:71: ae:60:11:29:07:e1:3f:3f:a4:b0:00:95:1e:22:a6:f6:e1:4c: 3b:a2:f7:25:7b:4f:27:0b:63:60:37:d1:13:d3:02:02:e3:a2: 99:b4:f4:c5:13:89:e8:63:63:f6:09:7c:83:cf:18:16:a9:1f: ff:07:69:8c:42:84:54:4f:4d:3f:8e:cd:6a:0a:15:6f:24:8f: 31:1e:ad:af:bb:93:b9:fb:ed:2c:b9:58:26:83:bc:dd:f3:81: 6d:bb:35:3c:45:32:23:05:d5:fd:f2:55:12:aa:f4:e1:92:29: bf:a3:66:cd:5f:59:3a:4b:b6:cb:b3:75:f5:82:ac:54:d5:df: 40:62:67:09:e3:24:c2:60:cf:5b:fe:68:62:63:04:f2:76:38: 99:58:77:ab:da:9e:27:d3:fe:51:74:7f:f6:7e:f7:3e:de:d0: 80:37:5d:12:ca:03:7e:bd:0a:e7:67:8a:cf:f0:ef:1d:e0:14: ff:1d:bc:72:27:49:70:6b:e3:79:9b:34:7f:c4:c7:eb:62:be: 05:86:6a:c4:8d:c3:76:47:8c:e6:74:37:a6:21:b0:cc:44:49: 76:56:18:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT83nGpK0aN9qqIgZSCMOk0o2AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTEwMjExNjE1MDFaFw0yNTEwMjQyMzA0MDFaMDMxMTAvBgNV BAMTKDMwRDBFMEMxQkM3OTI4QTVDMUZBNEM5MUJDQzM1MjJEMTgzQjRFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFE8wxATpuEN/09IXXHbHVOCs Cv6zxpuNdFPfbiUgX8mjPsfUgoRKiVDulmHTRcWMArnulMJ+5/2f0DnH4uVW8/25 ORw0GxXiHFnyQUMfBufejievmvjRMtYKE0aKqiSlupMktmyZFjDYCqA1iJM3WF8A 970AJqqU+5k0/x/VU4dNTk2pEg1E9rNJjh2Gs0wVxswYZcOvY9Ccg5ZzINDynLHm pRCd5ANZ899nPHw9zUjlsKP+13UJPD3kEAXvN3NcZGSqQNXJV1AVchGrdmHw+DZ7 7/8tYq9NxRVTWqTm/7M++q6Orm6XaWbuMJ+dcXr9cq6Ry9jN8aK2jJf6iyjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNDgwbx5KKXB+kyRvMNSLRg7Tv0wHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4WK5ox7OKwvP5V9DyNKGVR7qbSS0W8gC4H I0JJDMta+fljca5gESkH4T8/pLAAlR4ipvbhTDui9yV7TycLY2A30RPTAgLjopm0 9MUTiehjY/YJfIPPGBapH/8HaYxChFRPTT+OzWoKFW8kjzEera+7k7n77Sy5WCaD vN3zgW27NTxFMiMF1f3yVRKq9OGSKb+jZs1fWTpLtsuzdfWCrFTV30BiZwnjJMJg z1v+aGJjBPJ2OJlYd6vanifT/lF0f/Z+9z7e0IA3XRLKA369Cudnis/w7x3gFP8d vHInSXBr43mbNH/Ex+tivgWGasSNw3ZHjOZ0N6YhsMxESXZWGKM= -----END CERTIFICATE-----Generated at Thu Oct 23 19:49:07 2025 by rpki-client