$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: nKA1T6g5+03qGkz8FKgiViuAOyWR3y9vX4oR4YGO+A4= Subject key identifier: 29:B1:A0:B7:1C:7A:59:8A:CF:C7:01:FF:FD:86:4C:D7:A0:87:55:6B Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 1E1ADEDA18E2867B604468F01C9656D6D6B72897 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: EF Signing time: Mon 03 Nov 2025 08:41:55 +0000 Manifest this update: Mon 03 Nov 2025 08:36:54 +0000 Manifest next update: Thu 06 Nov 2025 16:11:54 +0000 Files and hashes: 1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: 3GYzHT7Dh5QHpnH1ERaSfESrTpaKWYNR9KY9uqTMbTQ=) 2: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 4: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1a:de:da:18:e2:86:7b:60:44:68:f0:1c:96:56:d6:d6:b7:28:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Nov 3 08:36:54 2025 GMT Not After : Nov 6 16:11:54 2025 GMT Subject: CN=29B1A0B71C7A598ACFC701FFFD864CD7A087556B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:9e:49:be:d5:d5:4b:06:d9:86:8f:11:b2: 98:d2:6d:91:5e:9a:a3:cc:69:99:2f:9c:e0:73:a3: 54:7c:80:d6:0b:97:cb:f1:55:58:d5:15:b3:17:26: 3f:a1:84:0c:ef:12:46:6c:a1:e2:ca:38:d3:b9:8e: b1:48:58:3b:8b:30:f9:a4:62:b3:8b:86:f6:fe:5a: bd:e0:ae:4b:a2:4a:a7:a7:4a:40:63:83:e7:f1:19: 8f:26:67:e7:81:98:bf:d0:0e:31:d0:5f:bd:f6:88: 2f:41:c1:ee:eb:ba:aa:47:96:5d:b8:c3:2c:fa:8c: a6:a2:3a:5f:c6:00:86:84:68:6e:67:c1:33:22:85: 71:c9:53:cd:3a:83:a9:70:69:9d:ca:ee:9b:11:f6: 78:45:78:5d:e8:b3:33:e3:54:98:65:8f:10:7a:17: 24:c3:7f:db:8b:d8:31:06:57:92:1d:a6:a9:41:4f: c6:73:a1:02:fc:da:7c:5d:d8:89:88:17:74:5c:e2: e2:3d:3c:68:9e:74:57:33:5d:04:95:0f:55:ed:cb: 80:52:39:bc:d3:20:d5:93:2f:3a:39:c3:fc:0e:ee: 36:98:30:48:80:02:eb:03:8f:23:6d:7b:a5:7e:d0: 8a:3c:ec:ba:a9:d8:10:a5:67:88:76:da:95:6e:c3: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B1:A0:B7:1C:7A:59:8A:CF:C7:01:FF:FD:86:4C:D7:A0:87:55:6B X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ce:a9:44:dc:6b:14:1b:f5:03:b0:36:9a:78:dd:7f:05:1b: 39:a4:c6:da:38:63:2e:db:3f:db:07:b8:0a:fb:75:40:37:9f: 3c:7c:b8:e9:f5:13:f9:55:f6:5c:97:24:f8:05:b6:a1:71:7f: 71:f9:4d:6b:0b:ca:39:54:24:09:90:9a:cb:db:38:58:65:e7: 57:7d:e6:ef:3e:05:fd:d9:ea:f3:49:a9:4b:0d:b1:7d:20:65: 3c:cb:d7:84:3b:63:b3:e1:d6:13:7e:9c:70:c8:db:ed:2b:41: 71:9e:79:13:cc:d5:31:38:8b:92:82:6b:f5:cb:57:f2:eb:ef: cc:1f:f5:16:4d:ca:a9:b5:60:32:8c:6c:5f:de:56:a8:3b:f9: 99:0c:b7:41:d3:51:5a:c5:35:53:1a:5b:c2:e3:c3:ab:9d:f9: e6:10:0f:69:e8:d5:75:83:27:01:bc:41:e7:70:bd:b1:91:33: 00:e1:82:ab:60:f3:de:21:92:11:9e:f4:18:11:92:c2:95:61: 75:89:9c:7c:97:62:eb:9d:ea:d9:56:d2:2e:63:47:da:91:93: 7e:76:9f:af:b0:c3:97:d8:8c:0a:d8:d2:57:48:b7:a0:11:0a: e5:9a:ee:4f:ad:ad:d1:b6:e1:08:89:02:9f:9d:31:18:5a:88: a6:a3:6d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhre2hjihntgRGjwHJZW1ta3KJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTExMDMwODM2NTRaFw0yNTExMDYxNjExNTRaMDMxMTAvBgNV BAMTKDI5QjFBMEI3MUM3QTU5OEFDRkM3MDFGRkZEODY0Q0Q3QTA4NzU1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVDp5JvtXVSwbZho8RspjSbZFe mqPMaZkvnOBzo1R8gNYLl8vxVVjVFbMXJj+hhAzvEkZsoeLKONO5jrFIWDuLMPmk YrOLhvb+Wr3grkuiSqenSkBjg+fxGY8mZ+eBmL/QDjHQX732iC9Bwe7ruqpHll24 wyz6jKaiOl/GAIaEaG5nwTMihXHJU806g6lwaZ3K7psR9nhFeF3oszPjVJhljxB6 FyTDf9uL2DEGV5IdpqlBT8ZzoQL82nxd2ImIF3Rc4uI9PGiedFczXQSVD1Xty4BS ObzTINWTLzo5w/wO7jaYMEiAAusDjyNte6V+0Io87Lqp2BClZ4h22pVuw4bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKbGgtxx6WYrPxwH//YZM16CHVWswHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfOqUTcaxQb9QOwNpp43X8FGzmkxto4Yy7b P9sHuAr7dUA3nzx8uOn1E/lV9lyXJPgFtqFxf3H5TWsLyjlUJAmQmsvbOFhl51d9 5u8+Bf3Z6vNJqUsNsX0gZTzL14Q7Y7Ph1hN+nHDI2+0rQXGeeRPM1TE4i5KCa/XL V/Lr78wf9RZNyqm1YDKMbF/eVqg7+ZkMt0HTUVrFNVMaW8Ljw6ud+eYQD2no1XWD JwG8QedwvbGRMwDhgqtg894hkhGe9BgRksKVYXWJnHyXYuud6tlW0i5jR9qRk352 n6+ww5fYjArY0ldIt6ARCuWa7k+trdG24QiJAp+dMRhaiKajbUA= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:12 2025 by rpki-client