$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: lzkuABwDWb9hQNqxNCaFk/6iNRDZKV8zU3LFiXgwdjg= Subject key identifier: 63:C7:F9:CD:A1:66:77:BA:1E:BA:00:A1:79:0E:6D:DC:72:10:39:1D Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 24D2A5D0355E82C36E4D441EDD6FF41B3EE5FC82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01E9 Signing time: Mon 03 Nov 2025 17:31:41 +0000 Manifest this update: Mon 03 Nov 2025 17:26:41 +0000 Manifest next update: Fri 07 Nov 2025 02:26:41 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: fEFmhH+zoVIl2+2iDnzfsC8l8MICnreAlknnOnhPUSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d2:a5:d0:35:5e:82:c3:6e:4d:44:1e:dd:6f:f4:1b:3e:e5:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Nov 3 17:26:41 2025 GMT Not After : Nov 7 02:26:41 2025 GMT Subject: CN=63C7F9CDA16677BA1EBA00A1790E6DDC7210391D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:92:6a:2b:02:96:1e:d3:e6:e4:8e:b1:f5: 6a:ac:ed:95:2a:eb:35:61:fe:a6:2c:32:ab:05:a3: 14:f1:0b:17:66:3c:89:08:77:57:f2:52:df:f4:93: 5f:fd:b3:4c:13:8f:ee:26:ff:0d:9a:53:dc:31:f4: 74:18:3b:77:e1:f2:4a:9d:2c:1e:9d:9d:93:0f:a0: 96:65:09:e7:99:ab:ee:5d:9b:16:be:38:16:f0:c1: be:9a:44:07:60:f4:64:f8:cb:7d:d3:9d:1e:4a:ad: 95:67:13:eb:d2:6e:30:9d:81:04:67:38:83:aa:8b: 92:14:a6:a7:9f:f6:bb:ab:fb:83:43:ff:2b:ee:9b: 1c:ec:a7:93:3c:7b:69:d2:af:33:15:9c:34:73:4e: e4:f1:98:08:36:f2:c1:3b:23:b2:ee:fe:fa:51:a6: 6d:ea:62:b2:c9:96:66:86:7a:3c:82:3d:76:ff:b5: 5c:25:c9:7a:24:86:24:fb:35:8b:4e:e1:18:b5:be: c0:68:0d:ab:96:a2:1d:6c:eb:24:ca:47:ee:76:ee: 6f:7b:0e:b3:73:59:99:11:d8:8f:f4:bb:0b:92:78: b3:fd:9c:31:14:38:6f:a9:b9:5d:f5:15:38:3f:fb: 52:80:49:bb:fa:4c:a9:e3:89:32:75:ae:96:ef:f6: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C7:F9:CD:A1:66:77:BA:1E:BA:00:A1:79:0E:6D:DC:72:10:39:1D X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b0:90:d0:04:33:c8:7d:35:7a:84:0b:c6:26:e9:eb:7c:95: 1e:94:41:21:c5:bc:36:b8:61:bb:60:7a:5c:fc:7e:03:da:e9: 78:cc:a6:af:31:2e:e0:21:83:ef:cb:45:4d:6a:e7:d4:1c:1f: 8b:e4:ee:58:4e:92:22:57:d8:f0:31:80:64:41:c3:db:b3:f7: 61:f9:50:19:90:b1:d0:8b:b3:cc:a2:f0:9b:35:e1:0e:db:9c: 4d:83:91:4d:b3:ba:b7:c2:fb:4e:8d:21:ab:b3:bc:1e:60:f5: d2:9a:d6:d9:fb:53:96:cc:68:19:20:e3:16:2d:d7:22:c7:89: 43:a6:a9:23:42:ed:7d:41:b1:c0:d3:c1:e6:f0:9f:d5:89:92: 97:44:90:43:45:f4:51:da:3b:ca:33:51:a3:45:c3:1b:53:75: f6:1f:b9:92:38:23:32:f0:15:9d:05:93:47:58:f4:86:c0:e6: 33:c1:2f:a3:66:9d:d8:65:d7:69:e0:b4:d7:1f:49:c5:1e:73: 0b:16:50:c1:5b:c4:35:c5:ab:a0:2e:d9:4f:94:cf:42:be:b8: f1:ca:dd:9d:9f:96:ac:5e:b9:55:2d:68:b1:32:60:f8:8a:8d: 80:a5:1f:40:df:d6:65:37:22:ff:cd:f9:9d:a4:50:bf:1a:b5: ee:18:36:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNKl0DVegsNuTUQe3W/0Gz7l/IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTExMDMxNzI2NDFaFw0yNTExMDcwMjI2NDFaMDMxMTAvBgNV BAMTKDYzQzdGOUNEQTE2Njc3QkExRUJBMDBBMTc5MEU2RERDNzIxMDM5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTxpJqKwKWHtPm5I6x9Wqs7ZUq 6zVh/qYsMqsFoxTxCxdmPIkId1fyUt/0k1/9s0wTj+4m/w2aU9wx9HQYO3fh8kqd LB6dnZMPoJZlCeeZq+5dmxa+OBbwwb6aRAdg9GT4y33TnR5KrZVnE+vSbjCdgQRn OIOqi5IUpqef9rur+4ND/yvumxzsp5M8e2nSrzMVnDRzTuTxmAg28sE7I7Lu/vpR pm3qYrLJlmaGejyCPXb/tVwlyXokhiT7NYtO4Ri1vsBoDauWoh1s6yTKR+527m97 DrNzWZkR2I/0uwuSeLP9nDEUOG+puV31FTg/+1KASbv6TKnjiTJ1rpbv9ghBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8f5zaFmd7oeugCheQ5t3HIQOR0wHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGwkNAEM8h9NXqEC8Ym6et8lR6UQSHFvDa4 Ybtgelz8fgPa6XjMpq8xLuAhg+/LRU1q59QcH4vk7lhOkiJX2PAxgGRBw9uz92H5 UBmQsdCLs8yi8Js14Q7bnE2DkU2zurfC+06NIauzvB5g9dKa1tn7U5bMaBkg4xYt 1yLHiUOmqSNC7X1BscDTwebwn9WJkpdEkENF9FHaO8ozUaNFwxtTdfYfuZI4IzLw FZ0Fk0dY9IbA5jPBL6Nmndhl12ngtNcfScUecwsWUMFbxDXFq6Au2U+Uz0K+uPHK 3Z2flqxeuVUtaLEyYPiKjYClH0Df1mU3Iv/N+Z2kUL8ate4YNnU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:25 2025 by rpki-client