$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: K9MyykOpK+1lZS89ZtHnf9wbGOh75KuT+KLgs6+03ys= Subject key identifier: 44:D9:05:FD:D9:AC:14:65:15:F6:95:AE:48:4D:05:78:E2:D5:CF:E0 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 223F2BF5716EC3CC9698B7F6A90F696C294D9DE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 0221 Signing time: Tue 04 Nov 2025 10:02:17 +0000 Manifest this update: Tue 04 Nov 2025 09:57:17 +0000 Manifest next update: Fri 07 Nov 2025 19:03:17 +0000 Files and hashes: 1: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: ca8898kBuIdyald/RFqeUl+G2xGEsmqrmQ+YEEEnicI=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3f:2b:f5:71:6e:c3:cc:96:98:b7:f6:a9:0f:69:6c:29:4d:9d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Nov 4 09:57:17 2025 GMT Not After : Nov 7 19:03:17 2025 GMT Subject: CN=44D905FDD9AC146515F695AE484D0578E2D5CFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4c:af:3c:1a:3f:8f:af:2e:53:ce:19:23:0b: bc:95:70:d5:db:91:74:83:a1:f3:bf:14:46:67:e0: 4b:cf:2b:3a:a9:2b:01:82:4b:78:a2:3b:e9:a4:1f: e8:e5:d5:36:0c:68:a0:8d:9d:5c:b0:e2:9f:14:8a: 47:af:f8:0c:d2:c2:ce:35:c5:63:1f:6d:6b:70:a3: 3f:11:72:b7:55:9f:1a:44:b5:67:b6:89:14:2a:cb: 63:1d:cb:f0:5c:a2:43:b5:2f:f0:18:69:b1:ee:20: 6c:5a:ab:3f:de:9d:2e:7f:da:40:0d:5f:0e:53:0e: cf:8a:94:f8:b2:02:9a:ab:eb:51:38:9f:1a:53:ca: e8:51:92:bf:c2:90:08:f7:38:15:c1:1f:02:e9:6a: c4:05:37:4f:03:a7:6c:37:d5:b5:a8:94:b2:15:f9: c0:86:22:0c:9f:76:3b:b9:40:9f:ba:d3:93:e7:9f: fa:67:3d:ee:96:4e:0a:3f:f4:0c:33:d4:4d:6f:d5: 57:29:27:62:ea:0c:1f:06:1e:be:f1:c6:be:50:21: 12:bc:8c:dc:5a:6f:1f:af:4b:71:5d:25:c3:1f:34: 22:ca:16:ba:da:92:ab:15:47:c1:69:76:35:11:9c: a3:a3:ed:ef:41:af:ee:c9:b4:76:67:16:5a:00:87: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D9:05:FD:D9:AC:14:65:15:F6:95:AE:48:4D:05:78:E2:D5:CF:E0 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:32:c4:85:ea:d0:92:fa:0a:a0:90:50:df:98:e4:1d:e1:07: 23:2d:24:95:a6:e6:c4:9a:d7:c5:dd:61:37:0f:cc:91:94:79: c1:6e:2a:a6:15:f5:70:f4:f7:5f:df:d9:e7:4e:ec:7a:e6:14: 30:03:55:df:13:ad:cc:05:3d:32:aa:27:45:5a:6c:7e:c9:47: e8:29:9c:b9:a5:8b:ad:ab:98:ea:ea:ca:bd:b0:70:04:ea:45: 8b:17:cd:7a:81:ec:b8:e9:84:fb:79:47:15:fd:6c:08:12:e5: 98:03:64:7d:ee:60:fd:34:3e:56:fc:55:71:1a:b9:22:24:f7: ca:e1:5a:16:3b:87:f2:58:4c:1d:9b:35:b5:d6:e7:c3:fb:fc: 01:4c:55:27:83:d0:30:1c:15:cb:e1:62:3b:fd:3b:88:51:e3: 22:16:1b:54:dc:c4:8c:85:58:3e:6f:32:d1:88:39:15:a0:42: d2:d0:3c:91:8b:52:92:68:54:4a:62:f7:a5:ea:8b:ec:34:39: df:a0:9f:80:46:50:89:91:40:ae:cd:94:06:4d:26:4e:37:27: e8:b9:b5:19:a2:3d:88:32:2f:72:80:98:21:18:a0:c3:2e:ed: 70:d1:51:c0:e6:83:bf:cb:91:63:a1:a3:13:8b:33:f6:22:cc: bb:e4:41:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIj8r9XFuw8yWmLf2qQ9pbClNnegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTExMDQwOTU3MTdaFw0yNTExMDcxOTAzMTdaMDMxMTAvBgNV BAMTKDQ0RDkwNUZERDlBQzE0NjUxNUY2OTVBRTQ4NEQwNTc4RTJENUNGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTK88Gj+Pry5TzhkjC7yVcNXb kXSDofO/FEZn4EvPKzqpKwGCS3iiO+mkH+jl1TYMaKCNnVyw4p8Uikev+AzSws41 xWMfbWtwoz8RcrdVnxpEtWe2iRQqy2Mdy/BcokO1L/AYabHuIGxaqz/enS5/2kAN Xw5TDs+KlPiyApqr61E4nxpTyuhRkr/CkAj3OBXBHwLpasQFN08Dp2w31bWolLIV +cCGIgyfdju5QJ+605Pnn/pnPe6WTgo/9Awz1E1v1VcpJ2LqDB8GHr7xxr5QIRK8 jNxabx+vS3FdJcMfNCLKFrrakqsVR8FpdjURnKOj7e9Br+7JtHZnFloAhx5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNkF/dmsFGUV9pWuSE0FeOLVz+AwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIyxIXq0JL6CqCQUN+Y5B3hByMtJJWm5sSa 18XdYTcPzJGUecFuKqYV9XD091/f2edO7HrmFDADVd8TrcwFPTKqJ0VabH7JR+gp nLmli62rmOrqyr2wcATqRYsXzXqB7LjphPt5RxX9bAgS5ZgDZH3uYP00Plb8VXEa uSIk98rhWhY7h/JYTB2bNbXW58P7/AFMVSeD0DAcFcvhYjv9O4hR4yIWG1TcxIyF WD5vMtGIORWgQtLQPJGLUpJoVEpi96Xqi+w0Od+gn4BGUImRQK7NlAZNJk43J+i5 tRmiPYgyL3KAmCEYoMMu7XDRUcDmg7/LkWOhoxOLM/YizLvkQZ8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:32 2025 by rpki-client