$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: CYcJ5DePyDEGQ6YIeK0l4QBt98656zlEoEOOY4NSb5s= Subject key identifier: AC:6F:E1:FA:C2:B4:77:A9:D4:CA:FD:F4:2C:67:50:9B:0F:48:C7:F8 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 6EFC08BCDA633C2270D3BAD6441303811F83D30B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 0519 Signing time: Mon 03 Nov 2025 03:51:17 +0000 Manifest this update: Mon 03 Nov 2025 03:46:17 +0000 Manifest next update: Thu 06 Nov 2025 10:39:17 +0000 Files and hashes: 1: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: D12ZDwD48myTVivaCpum/XAGzo3QXLUgqj7FneVY3Jo=) 2: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=) 3: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=) 4: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=) 5: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=) 6: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fc:08:bc:da:63:3c:22:70:d3:ba:d6:44:13:03:81:1f:83:d3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Nov 3 03:46:17 2025 GMT Not After : Nov 6 10:39:17 2025 GMT Subject: CN=AC6FE1FAC2B477A9D4CAFDF42C67509B0F48C7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:7d:b9:8b:66:da:04:35:11:50:2e:2d:50: 0b:41:6f:2e:83:a8:63:b4:ef:17:1f:ac:dc:55:47: 41:1a:ed:22:58:fc:6a:e3:e6:3d:36:7e:de:6f:54: 05:1a:47:06:94:c7:ca:7a:f2:9b:a4:ff:e2:2c:74: 40:c6:57:4a:d4:a2:f2:4a:cd:a7:9a:32:ce:4d:ea: 0e:3c:72:dd:21:b6:3d:d8:be:17:c3:6c:8c:fe:cc: a1:77:2a:5f:fd:43:c3:5c:28:e4:28:ee:d1:b2:eb: 54:34:88:bd:36:b5:65:75:fc:06:a9:fb:64:ac:58: 59:dc:f4:60:8a:f2:42:aa:f5:23:1e:59:f4:fa:04: 11:31:df:a0:65:bc:bb:be:5e:16:85:2f:a1:8b:fb: 3b:eb:47:b7:69:be:6f:6f:3c:16:67:5b:de:bb:b8: b2:e3:fa:5b:a2:f6:8f:04:b3:3e:93:1e:b1:00:4d: 34:5e:54:aa:90:10:7f:84:e6:57:4e:21:05:d0:a9: 16:8d:07:e6:24:53:b8:e1:07:d7:d5:15:57:fd:aa: 81:76:45:99:24:c0:19:f5:59:15:0e:bf:d5:a6:a5: 31:3b:46:b4:ec:89:76:dc:37:8c:d8:8b:d4:82:c7: 5a:04:ce:9b:37:7b:9f:f1:52:35:34:c0:1e:fa:3f: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6F:E1:FA:C2:B4:77:A9:D4:CA:FD:F4:2C:67:50:9B:0F:48:C7:F8 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6c:39:42:0c:15:86:69:b8:56:a4:b7:50:9f:f3:48:30:cf: a0:ff:a6:ec:bd:79:49:9f:43:b9:71:d7:08:c1:e8:f3:75:29: 16:a7:36:4d:49:a7:91:78:ae:44:b7:68:66:7c:99:6b:f8:e0: 65:1e:ae:45:eb:69:77:e7:1c:5c:65:fb:4a:91:2f:2b:94:71: 9b:e3:0a:7f:ea:2a:b4:f4:68:97:48:ac:bd:3e:3f:9f:bb:d0: be:87:d1:b5:7b:02:a2:64:79:1c:36:4e:11:8f:42:69:f2:e0: b7:0f:6d:95:ce:df:c7:5b:d7:21:19:c1:83:3b:34:b3:a7:3d: 22:54:ed:d8:d3:03:1b:b7:39:81:14:9d:bc:b1:9f:eb:8a:2a: 67:a4:3f:b2:86:cd:1b:86:74:b4:4f:f3:49:f2:ab:a0:df:8f: 7a:c9:56:4e:67:00:59:bd:90:04:87:31:33:a1:7f:63:69:23: 2e:48:73:98:43:05:0a:bb:a9:3b:64:83:55:51:ac:30:84:03: c9:e1:d5:a0:fd:fa:1b:fd:74:1a:80:ef:c2:a2:8d:b4:d8:d1: 63:c6:10:ed:8c:ee:6f:d3:7f:56:a0:f7:cf:9a:d1:d0:43:fc: 29:81:5f:da:ae:26:f9:09:50:b2:f3:60:61:60:f4:57:df:41: 1c:0b:68:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvwIvNpjPCJw07rWRBMDgR+D0wswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTExMDMwMzQ2MTdaFw0yNTExMDYxMDM5MTdaMDMxMTAvBgNV BAMTKEFDNkZFMUZBQzJCNDc3QTlENENBRkRGNDJDNjc1MDlCMEY0OEM3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfX25i2baBDURUC4tUAtBby6D qGO07xcfrNxVR0Ea7SJY/Grj5j02ft5vVAUaRwaUx8p68puk/+IsdEDGV0rUovJK zaeaMs5N6g48ct0htj3YvhfDbIz+zKF3Kl/9Q8NcKOQo7tGy61Q0iL02tWV1/Aap +2SsWFnc9GCK8kKq9SMeWfT6BBEx36BlvLu+XhaFL6GL+zvrR7dpvm9vPBZnW967 uLLj+lui9o8Esz6THrEATTReVKqQEH+E5ldOIQXQqRaNB+YkU7jhB9fVFVf9qoF2 RZkkwBn1WRUOv9WmpTE7RrTsiXbcN4zYi9SCx1oEzps3e5/xUjU0wB76P5L3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrG/h+sK0d6nUyv30LGdQmw9Ix/gwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVsOUIMFYZpuFakt1Cf80gwz6D/puy9eUmf Q7lx1wjB6PN1KRanNk1Jp5F4rkS3aGZ8mWv44GUerkXraXfnHFxl+0qRLyuUcZvj Cn/qKrT0aJdIrL0+P5+70L6H0bV7AqJkeRw2ThGPQmny4LcPbZXO38db1yEZwYM7 NLOnPSJU7djTAxu3OYEUnbyxn+uKKmekP7KGzRuGdLRP80nyq6Dfj3rJVk5nAFm9 kASHMTOhf2NpIy5Ic5hDBQq7qTtkg1VRrDCEA8nh1aD9+hv9dBqA78KijbTY0WPG EO2M7m/Tf1ag98+a0dBD/CmBX9quJvkJULLzYGFg9FffQRwLaDs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:07 2025 by rpki-client