$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: CthKUtJt2ZKSgunvGnIF4J4TggaujwnF0Stl6/6kU3g= Subject key identifier: 28:A2:30:59:D9:F2:23:55:6A:F9:DC:53:E9:76:18:93:B5:89:F5:C0 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 344B8606AAD2D7F40BBF5255C4C55989A27445C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: DC Signing time: Mon 03 Nov 2025 01:01:17 +0000 Manifest this update: Mon 03 Nov 2025 00:56:17 +0000 Manifest next update: Thu 06 Nov 2025 02:58:17 +0000 Files and hashes: 1: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 2: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 3: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: 01e+J4FjHzgWAa/Y0zZKCSX0QRCTwMVCUMnT1MWGa+Y=) 4: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4b:86:06:aa:d2:d7:f4:0b:bf:52:55:c4:c5:59:89:a2:74:45:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Nov 3 00:56:17 2025 GMT Not After : Nov 6 02:58:17 2025 GMT Subject: CN=28A23059D9F223556AF9DC53E9761893B589F5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:bb:97:c3:83:c2:25:29:94:38:ab:31:54: 39:12:4b:4b:f3:d7:28:3b:33:78:6a:0b:30:c2:a9: 8e:03:ba:f9:78:29:71:b0:2b:cb:e2:f2:fc:91:ce: f9:71:8b:f2:4a:69:12:be:da:40:41:1c:1c:c8:a3: 94:d6:46:f4:a3:9c:ec:d4:e8:60:ab:b0:37:4b:8a: d5:a3:b1:33:29:6d:43:93:9f:98:7e:ec:5c:8f:02: d4:44:5c:2c:00:3a:7d:81:86:ee:62:76:86:20:e7: fe:47:45:4d:ce:99:83:d5:3b:8f:c7:fe:c6:50:38: 00:26:05:5f:79:97:0e:3d:4c:9f:fc:b0:79:23:2c: 83:4d:13:ec:34:79:97:db:60:0c:fb:e3:fe:db:62: d7:0b:f9:7b:31:4c:cd:87:2a:20:ae:b4:64:8f:88: b5:0c:16:65:7d:fb:b8:b1:33:6c:81:a2:57:af:2e: 2f:37:23:ff:74:99:ea:a6:5f:32:55:a2:bb:92:0c: 1e:99:ae:6e:70:1c:55:68:b6:8e:7d:6e:78:d2:47: d4:42:ea:ef:50:dd:c4:ba:6b:45:c7:d9:17:1a:fb: f0:f6:4b:bd:53:95:56:cd:9b:10:f2:2f:6e:38:0f: 20:59:71:36:d5:de:e4:4b:00:e4:fb:06:41:f1:89: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A2:30:59:D9:F2:23:55:6A:F9:DC:53:E9:76:18:93:B5:89:F5:C0 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4a:a9:2b:42:f5:63:ed:11:8e:31:a7:8f:63:d2:da:73:d1: 8e:41:ff:af:13:31:b6:4d:44:98:88:91:58:b3:49:8a:27:e5: e5:00:18:94:50:cc:b2:5b:9d:de:e7:26:5d:6e:9a:09:8b:fe: d1:c7:49:ac:6d:c2:10:9f:ec:b6:38:66:a4:6c:bd:69:98:70: f9:4e:26:df:1d:89:06:e8:06:59:22:55:63:89:a9:e1:b6:18: 31:51:c1:81:3d:c5:ef:64:2f:a1:56:ff:4f:61:41:ba:06:76: 3e:98:71:84:91:d8:79:fe:8c:e3:31:af:d1:10:48:14:c7:ce: ad:66:27:09:b6:8f:9b:a4:e6:df:14:cd:70:f2:a5:c4:06:02: 51:4a:b5:d4:c8:3e:37:7b:c4:aa:98:dc:4c:e9:c6:93:e0:f2: 27:80:9f:60:cb:d1:9a:cc:49:08:e2:9b:73:11:20:12:b8:65: e4:ee:aa:70:36:1a:a7:f1:7d:2e:09:91:ef:57:71:32:b4:7f: 15:ff:1a:68:de:85:2f:f5:3c:4a:46:89:1d:21:a6:04:2e:fd: ce:a2:fd:bd:b0:c5:31:57:9d:90:dd:f0:c4:64:34:a4:7f:62: 5e:b8:cb:ad:d4:20:7c:2c:7d:22:f9:2f:d2:b4:6a:88:b6:ed: 86:ca:2f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEuGBqrS1/QLv1JVxMVZiaJ0RcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTExMDMwMDU2MTdaFw0yNTExMDYwMjU4MTdaMDMxMTAvBgNV BAMTKDI4QTIzMDU5RDlGMjIzNTU2QUY5REM1M0U5NzYxODkzQjU4OUY1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yLuXw4PCJSmUOKsxVDkSS0vz 1yg7M3hqCzDCqY4Duvl4KXGwK8vi8vyRzvlxi/JKaRK+2kBBHBzIo5TWRvSjnOzU 6GCrsDdLitWjsTMpbUOTn5h+7FyPAtREXCwAOn2Bhu5idoYg5/5HRU3OmYPVO4/H /sZQOAAmBV95lw49TJ/8sHkjLINNE+w0eZfbYAz74/7bYtcL+XsxTM2HKiCutGSP iLUMFmV9+7ixM2yBolevLi83I/90meqmXzJVoruSDB6Zrm5wHFVoto59bnjSR9RC 6u9Q3cS6a0XH2Rca+/D2S71TlVbNmxDyL244DyBZcTbV3uRLAOT7BkHxicdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKIwWdnyI1Vq+dxT6XYYk7WJ9cAwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRKqStC9WPtEY4xp49j0tpz0Y5B/68TMbZN RJiIkVizSYon5eUAGJRQzLJbnd7nJl1umgmL/tHHSaxtwhCf7LY4ZqRsvWmYcPlO Jt8diQboBlkiVWOJqeG2GDFRwYE9xe9kL6FW/09hQboGdj6YcYSR2Hn+jOMxr9EQ SBTHzq1mJwm2j5uk5t8UzXDypcQGAlFKtdTIPjd7xKqY3EzpxpPg8ieAn2DL0ZrM SQjim3MRIBK4ZeTuqnA2GqfxfS4Jke9XcTK0fxX/GmjehS/1PEpGiR0hpgQu/c6i /b2wxTFXnZDd8MRkNKR/Yl64y63UIHwsfSL5L9K0aoi27YbKL4g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:32 2025 by rpki-client