$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: LGGj0O637jGQ7PtO3w/Z7B8leqOtiFCMUXzTXJbWihQ= Subject key identifier: F5:07:89:21:24:8B:B2:FB:8F:7A:70:10:AA:93:A3:59:95:5E:60:AD Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 1248FB310C33EC86AFE45A7BC69170DC3DE4D31A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 051A Signing time: Tue 28 Oct 2025 21:41:13 +0000 Manifest this update: Tue 28 Oct 2025 21:36:13 +0000 Manifest next update: Sat 01 Nov 2025 07:09:13 +0000 Files and hashes: 1: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) 2: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: /rd7tpTDMAuZ85Awho7fzLTUyjHlDLRHA0MZsCD/4kQ=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 4: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 07:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:48:fb:31:0c:33:ec:86:af:e4:5a:7b:c6:91:70:dc:3d:e4:d3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Oct 28 21:36:13 2025 GMT Not After : Nov 1 07:09:13 2025 GMT Subject: CN=F5078921248BB2FB8F7A7010AA93A359955E60AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:e4:93:fe:85:67:2c:15:d8:a9:13:b8:57: ef:b5:a7:e0:57:ce:75:41:43:a0:03:99:e3:d9:7d: f7:4c:83:a4:92:48:5f:8c:53:f7:ba:c1:65:b0:93: 03:e2:34:83:44:29:6d:08:0c:65:cb:7e:58:eb:40: 56:aa:92:9d:96:08:00:53:74:b0:b4:36:a1:53:2b: 5e:de:36:0a:6f:51:ca:18:22:57:d7:0e:7f:8d:de: 48:0e:cd:1b:1e:c8:97:e2:eb:f3:23:5b:d0:12:0e: 80:f5:3b:ad:4a:20:e5:58:27:9e:47:d8:b7:a1:52: 99:e8:ce:5c:7c:76:6d:4a:c6:ed:53:24:d6:b6:ed: 17:b2:20:27:7d:12:9a:a9:a5:9d:d3:75:f6:18:1c: 12:e6:5f:10:5e:8a:bd:75:47:e8:11:6b:82:99:65: 2b:90:db:3b:c2:e5:89:24:78:d3:a7:ae:9b:9c:2a: ff:28:2a:1f:97:f5:7f:03:31:ba:f0:02:1d:42:dd: 8b:8e:0e:8b:c2:65:3d:27:26:17:6d:34:89:f0:4d: 1b:69:7e:13:4d:d1:a9:38:f0:41:3e:6f:a3:22:b4: 76:6b:9f:ba:98:ac:33:b5:75:b9:b4:b0:3c:ec:27: f3:92:42:8c:a1:ab:d4:84:34:8f:ee:77:b0:1c:4a: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:07:89:21:24:8B:B2:FB:8F:7A:70:10:AA:93:A3:59:95:5E:60:AD X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:07:31:a9:c0:fe:7d:2e:02:ae:51:1c:35:5d:68:b7:a0: 13:2f:52:9e:cb:91:11:0c:fd:ff:a4:25:fb:1f:b0:41:dc:3f: bb:a0:93:1f:59:81:35:e0:b5:0f:d3:da:16:f7:4d:07:7c:60: 62:72:7a:ee:e9:7f:a4:28:a4:ac:08:53:6b:77:4d:ce:d8:1e: 0c:53:0d:bc:53:76:da:bc:5c:5c:f4:b1:86:6c:39:a6:0e:66: 43:8c:c9:05:e1:96:d1:06:8e:c6:d0:75:a8:5b:81:a8:95:5a: d3:8c:91:96:6b:12:4d:96:a4:8a:3c:01:58:e6:1c:75:62:c0: dd:55:5e:bd:bb:67:2a:24:ed:3c:30:a5:79:74:56:e2:38:06: d4:70:ac:1a:4e:41:7e:bc:89:eb:08:49:8d:d5:a5:40:ab:6e: 55:68:ca:30:97:41:6c:c7:6e:fd:4a:9d:19:11:6e:52:4d:b6: e3:9d:89:e2:f3:2e:4d:cf:7c:7c:47:02:b8:c8:62:26:47:8e: 2a:fc:65:10:38:6d:92:5a:53:2d:3e:dd:54:f6:bf:1e:3c:07: 82:8d:8a:f4:39:e7:6b:c3:16:fb:f4:94:8d:20:92:8e:28:49: e0:a5:b5:85:80:3d:d2:3b:50:7c:0e:b6:83:f1:b1:07:4d:6d: e7:58:cd:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkj7MQwz7Iav5Fp7xpFw3D3k0xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTEwMjgyMTM2MTNaFw0yNTExMDEwNzA5MTNaMDMxMTAvBgNV BAMTKEY1MDc4OTIxMjQ4QkIyRkI4RjdBNzAxMEFBOTNBMzU5OTU1RTYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0OST/oVnLBXYqRO4V++1p+BX znVBQ6ADmePZffdMg6SSSF+MU/e6wWWwkwPiNINEKW0IDGXLfljrQFaqkp2WCABT dLC0NqFTK17eNgpvUcoYIlfXDn+N3kgOzRseyJfi6/MjW9ASDoD1O61KIOVYJ55H 2LehUpnozlx8dm1Kxu1TJNa27ReyICd9EpqppZ3TdfYYHBLmXxBeir11R+gRa4KZ ZSuQ2zvC5YkkeNOnrpucKv8oKh+X9X8DMbrwAh1C3YuODovCZT0nJhdtNInwTRtp fhNN0ak48EE+b6MitHZrn7qYrDO1dbm0sDzsJ/OSQoyhq9SENI/ud7AcSm/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9QeJISSLsvuPenAQqpOjWZVeYK0wHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUxBzGpwP59LgKuURw1XWi3oBMvUp7LkREM /f+kJfsfsEHcP7ugkx9ZgTXgtQ/T2hb3TQd8YGJyeu7pf6QopKwIU2t3Tc7YHgxT DbxTdtq8XFz0sYZsOaYOZkOMyQXhltEGjsbQdahbgaiVWtOMkZZrEk2WpIo8AVjm HHViwN1VXr27Zyok7TwwpXl0VuI4BtRwrBpOQX68iesISY3VpUCrblVoyjCXQWzH bv1KnRkRblJNtuOdieLzLk3PfHxHArjIYiZHjir8ZRA4bZJaUy0+3VT2vx48B4KN ivQ552vDFvv0lI0gko4oSeCltYWAPdI7UHwOtoPxsQdNbedYzdQ= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:01 2025 by rpki-client