$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: 2sVCjmZs7/V5y1QKm0R1IxycQC5S8o3QpN6278zH6R4= Subject key identifier: 19:DD:32:91:11:8E:53:89:65:C7:33:24:57:53:08:89:BD:D8:2F:73 Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 193CED716224A5FFA1EE48FD74D13B188023A7BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 0210 Signing time: Sat 18 Oct 2025 06:10:59 +0000 Manifest this update: Sat 18 Oct 2025 06:05:59 +0000 Manifest next update: Tue 21 Oct 2025 15:41:59 +0000 Files and hashes: 1: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: pKHmjw1Z9c/t6l/bhoC8Tn3UCQ58jH3hEbpMdL5DZgs=) 2: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3c:ed:71:62:24:a5:ff:a1:ee:48:fd:74:d1:3b:18:80:23:a7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Oct 18 06:05:59 2025 GMT Not After : Oct 21 15:41:59 2025 GMT Subject: CN=19DD3291118E538965C7332457530889BDD82F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:04:31:89:fe:80:e1:a8:11:ed:64:d4:c1: e1:0a:99:25:52:49:84:f9:29:43:e0:43:66:7f:29: 86:11:46:f6:06:bb:f2:88:2b:cb:00:bc:0c:bf:d9: a0:36:a6:7a:ce:63:5e:e9:fa:fa:b7:c3:f1:16:9b: 1d:7a:50:e4:1f:ff:3e:f3:3c:a2:1b:36:a6:4b:8c: 42:40:ac:bb:41:df:44:f6:52:e9:5e:5d:32:6f:54: 0c:8d:9f:d0:c3:51:79:a1:a2:ca:a7:80:f4:b7:b2: 1f:ec:01:8b:b2:ad:0a:f1:08:88:32:f6:d8:d1:fe: 07:ef:fd:7d:5f:a1:46:c0:19:51:0b:df:48:5b:4b: 2e:89:da:34:ab:1b:c7:cb:32:99:79:c2:59:be:46: 81:8c:9b:cb:8a:1e:ea:e8:a6:54:dc:45:89:98:59: 9e:b9:80:c3:01:2f:46:c9:74:8e:c6:55:72:59:25: d0:d1:22:bd:bf:5f:73:e8:39:ea:93:0a:41:52:26: 75:5e:05:b8:eb:6c:18:44:09:4f:a6:bd:92:c6:1e: 87:19:6b:8d:62:50:37:46:46:40:79:7a:95:04:4d: 88:c3:91:bb:eb:bb:f7:2a:db:d1:10:7c:21:86:c3: 85:30:41:1b:bd:1c:a1:fe:ac:b2:85:21:34:e3:e4: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DD:32:91:11:8E:53:89:65:C7:33:24:57:53:08:89:BD:D8:2F:73 X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c8:df:af:dc:6c:aa:3c:57:e5:9d:6b:9b:22:af:2d:95:ba: 88:ad:39:c9:e9:00:8a:8e:fa:b9:7e:cf:4b:57:53:6f:3d:8d: e7:ae:d6:6c:4b:41:40:df:38:29:ba:20:c1:43:8d:1d:67:7b: 5a:df:b5:9c:e6:98:cb:2a:08:ee:18:31:af:a9:04:5b:b7:77: 63:0a:b9:b4:e4:6a:27:e1:36:07:7d:41:2a:53:08:fc:8a:a4: e7:a4:4b:da:16:97:b4:98:68:77:d1:61:ee:75:95:00:6f:52: 08:e4:fd:2a:27:ba:ce:e6:4f:b7:33:58:78:a5:bd:20:84:11: c2:f2:67:5d:7d:0e:10:16:02:4c:f0:4a:4f:cf:4c:62:44:ff: f9:48:5d:2d:a5:bb:40:0c:67:63:bf:de:93:71:b1:84:d0:45: 4d:dc:26:31:a4:8c:8a:59:2b:09:89:bc:d2:81:56:e3:67:bf: 59:c3:6d:b0:3e:80:da:b3:7b:b0:4f:29:11:f9:90:f8:c7:f3: 3d:12:7c:ed:a0:f9:6d:cd:8a:09:73:fc:dd:b5:eb:46:43:06: 54:21:35:e3:08:6c:50:16:1c:ce:d9:ed:f4:55:24:fc:24:3f: bc:55:6c:04:b7:44:37:d3:95:1a:e2:72:47:f7:36:db:d1:07: 4f:2f:78:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTztcWIkpf+h7kj9dNE7GIAjp70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTEwMTgwNjA1NTlaFw0yNTEwMjExNTQxNTlaMDMxMTAvBgNV BAMTKDE5REQzMjkxMTE4RTUzODk2NUM3MzMyNDU3NTMwODg5QkREODJGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPAQxif6A4agR7WTUweEKmSVS SYT5KUPgQ2Z/KYYRRvYGu/KIK8sAvAy/2aA2pnrOY17p+vq3w/EWmx16UOQf/z7z PKIbNqZLjEJArLtB30T2UuleXTJvVAyNn9DDUXmhosqngPS3sh/sAYuyrQrxCIgy 9tjR/gfv/X1foUbAGVEL30hbSy6J2jSrG8fLMpl5wlm+RoGMm8uKHuroplTcRYmY WZ65gMMBL0bJdI7GVXJZJdDRIr2/X3PoOeqTCkFSJnVeBbjrbBhECU+mvZLGHocZ a41iUDdGRkB5epUETYjDkbvru/cq29EQfCGGw4UwQRu9HKH+rLKFITTj5NtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGd0ykRGOU4llxzMkV1MIib3YL3MwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfI36/cbKo8V+Wda5siry2VuoitOcnpAIqO +rl+z0tXU289jeeu1mxLQUDfOCm6IMFDjR1ne1rftZzmmMsqCO4YMa+pBFu3d2MK ubTkaifhNgd9QSpTCPyKpOekS9oWl7SYaHfRYe51lQBvUgjk/Sonus7mT7czWHil vSCEEcLyZ119DhAWAkzwSk/PTGJE//lIXS2lu0AMZ2O/3pNxsYTQRU3cJjGkjIpZ KwmJvNKBVuNnv1nDbbA+gNqze7BPKRH5kPjH8z0SfO2g+W3Niglz/N2160ZDBlQh NeMIbFAWHM7Z7fRVJPwkP7xVbAS3RDfTlRrickf3NtvRB08veLA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:54:38 2025 by rpki-client