$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: k92GKtN5Z9LJqchyiSOVA7zz3qJEVKEkN9Wrbx5jwkA= Subject key identifier: A6:99:B7:E3:ED:71:9C:C2:2E:E8:64:05:80:04:FC:8D:E4:44:36:7E Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 414D6802599FEE55E08781E66F5054E00976A340 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0522 Signing time: Mon 03 Nov 2025 15:01:54 +0000 Manifest this update: Mon 03 Nov 2025 14:56:54 +0000 Manifest next update: Thu 06 Nov 2025 16:27:54 +0000 Files and hashes: 1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 2: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: I7Q7b4rxBmi93xORJilPuyoqiqY3Pe8YSnRZEzJxtTc=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4d:68:02:59:9f:ee:55:e0:87:81:e6:6f:50:54:e0:09:76:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Nov 3 14:56:54 2025 GMT Not After : Nov 6 16:27:54 2025 GMT Subject: CN=A699B7E3ED719CC22EE864058004FC8DE444367E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:0f:c3:ba:1a:6c:64:7a:80:6b:94:29:6b: ea:a3:e3:b7:10:6f:12:21:f8:97:3c:c8:9c:96:2b: ba:4c:27:4c:d8:78:2a:52:61:d1:f7:f8:0e:8f:2a: aa:e0:5a:fd:92:5c:d7:c2:6f:8d:0e:7d:17:fe:96: a8:e7:7e:c7:e1:cb:21:f9:33:34:cf:f2:c0:3f:b9: 9a:8b:99:e8:d1:ec:c8:5a:d5:67:3f:50:f9:d8:a0: a3:ca:a2:5a:60:fa:e0:73:17:b7:69:30:93:1d:94: d9:d2:96:c0:9f:47:ff:2e:d9:a4:dc:c3:d2:50:0f: 1c:31:9b:99:b2:08:10:e3:3c:fd:0d:9e:50:e4:6d: 77:95:fe:df:0d:62:99:ab:3b:4a:e1:0c:86:34:14: 20:77:02:49:b6:19:44:02:2b:7d:71:39:41:21:59: 25:6c:8b:85:a4:fa:57:69:d6:f5:85:ca:a1:67:d2: a7:26:43:0d:e0:10:c6:ff:ad:05:65:fa:71:22:00: 5a:ae:3d:7c:17:63:39:f3:01:3c:79:7f:b5:4d:4f: 9e:fc:a6:56:89:e5:e4:f5:34:b3:51:79:9c:8f:70: 89:5e:61:e9:d2:ea:13:52:6d:b3:6f:36:f5:78:3e: 02:44:e2:d6:9a:db:a4:66:27:61:cb:ca:fe:13:f9: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:B7:E3:ED:71:9C:C2:2E:E8:64:05:80:04:FC:8D:E4:44:36:7E X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7b:d1:ab:37:72:78:24:13:15:f8:d8:8f:cc:a6:44:e7:bb: 1b:48:88:59:a7:29:04:01:83:52:36:86:de:fa:4d:70:4a:27: f8:0b:46:1b:e7:5c:ce:80:2c:92:59:9b:05:48:6e:a3:ad:be: 40:ec:12:d0:84:af:f2:39:83:be:24:db:59:d4:9c:e0:c8:a8: 64:e0:77:65:25:d1:8e:b1:24:e1:f9:6d:05:6b:24:9e:3e:d9: bf:ef:0c:71:59:bd:22:e8:64:bb:01:c4:a2:b9:6e:e6:b9:fc: 74:eb:4a:dc:b4:bf:20:c1:95:9f:96:1f:75:70:0b:a8:a9:64: 75:92:4b:f6:40:d7:6c:94:2b:4f:99:91:bb:47:34:57:6e:05: da:d7:15:ce:e2:da:57:3d:c8:31:73:e5:53:08:f5:1f:0a:6f: c1:17:59:f5:fd:0c:c4:d4:79:f9:bf:08:46:52:f6:c0:0e:6d: 6b:6f:b2:08:84:bb:75:a3:6e:d2:fa:10:3c:b6:89:1b:94:1e: e4:f6:ac:66:04:72:d6:1b:ca:82:9f:fa:fe:6f:68:b1:48:99: dc:c1:1d:e0:09:89:ca:e4:9b:15:64:71:ab:ec:7d:af:17:34: 92:fc:ec:ce:7c:8f:c5:42:0a:2e:1a:85:64:20:33:c7:03:15: 77:10:b0:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQU1oAlmf7lXgh4Hmb1BU4Al2o0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTExMDMxNDU2NTRaFw0yNTExMDYxNjI3NTRaMDMxMTAvBgNV BAMTKEE2OTlCN0UzRUQ3MTlDQzIyRUU4NjQwNTgwMDRGQzhERTQ0NDM2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDQ/DuhpsZHqAa5Qpa+qj47cQ bxIh+Jc8yJyWK7pMJ0zYeCpSYdH3+A6PKqrgWv2SXNfCb40OfRf+lqjnfsfhyyH5 MzTP8sA/uZqLmejR7Mha1Wc/UPnYoKPKolpg+uBzF7dpMJMdlNnSlsCfR/8u2aTc w9JQDxwxm5myCBDjPP0NnlDkbXeV/t8NYpmrO0rhDIY0FCB3Akm2GUQCK31xOUEh WSVsi4Wk+ldp1vWFyqFn0qcmQw3gEMb/rQVl+nEiAFquPXwXYznzATx5f7VNT578 plaJ5eT1NLNReZyPcIleYenS6hNSbbNvNvV4PgJE4taa26RmJ2HLyv4T+TsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUppm34+1xnMIu6GQFgAT8jeRENn4wHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN70as3cngkExX42I/MpkTnuxtIiFmnKQQB g1I2ht76TXBKJ/gLRhvnXM6ALJJZmwVIbqOtvkDsEtCEr/I5g74k21nUnODIqGTg d2Ul0Y6xJOH5bQVrJJ4+2b/vDHFZvSLoZLsBxKK5bua5/HTrSty0vyDBlZ+WH3Vw C6ipZHWSS/ZA12yUK0+ZkbtHNFduBdrXFc7i2lc9yDFz5VMI9R8Kb8EXWfX9DMTU efm/CEZS9sAObWtvsgiEu3WjbtL6EDy2iRuUHuT2rGYEctYbyoKf+v5vaLFImdzB HeAJicrkmxVkcavsfa8XNJL87M58j8VCCi4ahWQgM8cDFXcQsJg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:39 2025 by rpki-client