
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json)
Hash identifier: Qa5ptR+Eii3nF3Wm4BqQu4rx5kqERoxqYHM38HfXags=
Subject key identifier: BF:AA:F6:BB:0F:79:B9:CB:82:4A:F0:D3:03:52:74:D0:19:E4:16:2A
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 134CB22AA5FF3CE0CE07E39D36145EB32B0AB807
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
Manifest number: 0248
Signing time: Sun 26 Oct 2025 09:02:17 +0000
Manifest this update: Sun 26 Oct 2025 08:57:17 +0000
Manifest next update: Wed 29 Oct 2025 17:07:17 +0000
Files and hashes: 1: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=)
2: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=)
3: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=)
4: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=)
5: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: iQXW6uUvZuKyBTBqJ6gJdvVlu6UwVCp0hZVfXiFOINU=)
6: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 17:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4c:b2:2a:a5:ff:3c:e0:ce:07:e3:9d:36:14:5e:b3:2b:0a:b8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: Oct 26 08:57:17 2025 GMT
Not After : Oct 29 17:07:17 2025 GMT
Subject: CN=BFAAF6BB0F79B9CB824AF0D3035274D019E4162A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:54:10:07:4c:fa:a2:85:8e:fb:8e:63:ab:
f6:ce:6f:29:eb:cd:4d:c7:a7:03:27:43:81:a8:f2:
4c:34:2f:f3:3e:dc:88:43:70:b6:d5:ca:8b:85:82:
13:07:8e:f5:08:31:fb:82:de:09:6f:ab:30:bb:10:
90:a2:c1:cc:77:84:55:eb:e3:29:c6:32:05:52:85:
3a:e1:fa:78:08:52:7c:d9:0b:3f:32:74:cf:fa:41:
07:7b:1f:3e:d0:6c:d7:07:a0:18:6f:f1:5a:70:6d:
67:45:1d:9e:20:72:7b:60:33:8a:16:6a:a3:b8:90:
16:12:80:8e:92:b7:74:47:53:a2:8e:f6:53:b6:da:
96:bc:6c:35:aa:b8:60:81:93:b2:a9:ec:aa:5c:54:
e1:9f:c9:1f:d2:06:aa:7b:9c:2f:d4:9a:a0:f3:bf:
a9:92:e4:4a:c1:ac:57:31:ca:27:45:64:4e:b7:a3:
2b:6e:41:34:d7:5a:e1:6a:33:e7:9d:d5:de:ce:59:
79:03:d8:ba:2b:5a:cd:a5:8e:55:e9:38:bf:d3:3e:
ca:91:8c:6f:48:51:ef:54:8c:78:80:32:18:bc:f4:
52:40:ce:27:2c:6d:c0:6c:f7:71:03:19:c9:61:69:
b1:32:a0:c8:4e:e6:2f:a1:3e:0d:54:12:91:38:2c:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:F6:BB:0F:79:B9:CB:82:4A:F0:D3:03:52:74:D0:19:E4:16:2A
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:9d:1f:57:ce:36:52:11:8b:70:3d:d6:22:4b:4c:1b:52:
e2:79:1d:2b:21:f3:62:26:db:0c:14:da:17:9f:94:d6:da:dd:
ca:93:42:4f:44:25:bb:17:1f:2b:2b:86:12:92:b7:f0:28:ad:
32:ce:ab:7b:56:8c:dc:ed:9e:54:c4:fc:c3:12:35:09:04:51:
e2:d6:10:ec:ac:1c:82:e0:b5:c3:07:ba:93:92:84:a8:80:5d:
23:b6:f2:0a:90:e6:a4:a2:3e:3b:c5:35:9c:67:73:95:dc:39:
74:2d:26:a1:a3:f9:b6:e6:94:dd:93:ac:a9:9b:be:84:b4:bd:
15:e6:14:9b:97:2c:77:5d:7f:85:7d:70:cc:7f:d2:3c:0f:4d:
d4:41:69:2d:81:27:a2:25:d7:cf:52:f1:22:ef:0a:60:47:6b:
d0:52:79:b6:ce:48:8a:2a:34:fc:03:7b:74:bc:a6:83:8f:e9:
d7:a2:cb:1a:45:b7:ca:bb:b0:62:db:7f:87:9d:30:88:c0:fa:
b6:80:66:96:d5:db:51:44:29:ae:b1:1f:38:6d:f9:21:95:ae:
36:6d:5d:25:56:49:b4:c5:ce:ae:e5:46:be:bd:bd:8a:d3:46:
ce:a1:f2:2f:d3:ae:a5:b6:4a:d2:8a:1b:1a:72:4b:8b:fa:c6:
4d:b7:d9:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE0yyKqX/PODOB+OdNhResysKuAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC
MDQ3M0Y1RTAeFw0yNTEwMjYwODU3MTdaFw0yNTEwMjkxNzA3MTdaMDMxMTAvBgNV
BAMTKEJGQUFGNkJCMEY3OUI5Q0I4MjRBRjBEMzAzNTI3NEQwMTlFNDE2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi11QQB0z6ooWO+45jq/bObynr
zU3HpwMnQ4Go8kw0L/M+3IhDcLbVyouFghMHjvUIMfuC3glvqzC7EJCiwcx3hFXr
4ynGMgVShTrh+ngIUnzZCz8ydM/6QQd7Hz7QbNcHoBhv8VpwbWdFHZ4gcntgM4oW
aqO4kBYSgI6St3RHU6KO9lO22pa8bDWquGCBk7Kp7KpcVOGfyR/SBqp7nC/UmqDz
v6mS5ErBrFcxyidFZE63oytuQTTXWuFqM+ed1d7OWXkD2LorWs2ljlXpOL/TPsqR
jG9IUe9UjHiAMhi89FJAzicsbcBs93EDGclhabEyoMhO5i+hPg1UEpE4LLLZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv6r2uw95ucuCSvDTA1J00BnkFiowHwYDVR0j
BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx
RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3
M0Y1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm
MGYtNjRiYWNmY2YyOTQyLzAvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0
QTZCMDQ3M0Y1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABTwnR9XzjZSEYtwPdYiS0wbUuJ5HSsh82Im
2wwU2heflNba3cqTQk9EJbsXHysrhhKSt/AorTLOq3tWjNztnlTE/MMSNQkEUeLW
EOysHILgtcMHupOShKiAXSO28gqQ5qSiPjvFNZxnc5XcOXQtJqGj+bbmlN2TrKmb
voS0vRXmFJuXLHddf4V9cMx/0jwPTdRBaS2BJ6Il189S8SLvCmBHa9BSebbOSIoq
NPwDe3S8poOP6deiyxpFt8q7sGLbf4edMIjA+raAZpbV21FEKa6xHzht+SGVrjZt
XSVWSbTFzq7lRr69vYrTRs6h8i/TrqW2StKKGxpyS4v6xk232d8=
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:34:52 2025 by rpki-client