$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: Wh6sOOIS44C3bqxAjHNPNkGHrmgjIW2Fb+gAdHfif9k= Subject key identifier: 84:70:C7:59:C5:6D:09:6C:65:53:9B:16:98:48:7E:43:B6:DF:E9:90 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 569B6CF971A110F98713054AE980ECA74B664864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: EE Signing time: Tue 04 Nov 2025 05:51:47 +0000 Manifest this update: Tue 04 Nov 2025 05:46:47 +0000 Manifest next update: Fri 07 Nov 2025 09:32:47 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: BGsG3UgEN+QH4PJJEqhyYMrpJ6g4oMjQqppuab0EWyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9b:6c:f9:71:a1:10:f9:87:13:05:4a:e9:80:ec:a7:4b:66:48:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Nov 4 05:46:47 2025 GMT Not After : Nov 7 09:32:47 2025 GMT Subject: CN=8470C759C56D096C65539B1698487E43B6DFE990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d8:b1:6b:f4:23:e4:02:65:64:b2:30:c5:f9: c8:e6:6e:6f:7c:13:49:2d:dc:76:1b:48:c5:67:dd: a5:bd:af:29:ee:66:36:39:4c:20:cd:34:1e:96:bd: e1:07:05:70:c0:8d:46:b9:c9:c3:85:7a:1e:b4:2f: 1e:5f:29:1d:be:6e:6f:d7:e4:7c:b3:c3:0f:82:8a: ce:0c:c3:4b:01:ea:aa:4b:e9:da:67:35:aa:ce:6a: a1:8f:18:91:9a:1c:48:4c:fe:dd:df:7f:01:4a:ec: 3d:67:8e:64:dd:30:1c:ae:69:ff:00:57:f7:46:ae: eb:e6:ae:ec:f2:76:04:18:e9:cc:6c:68:82:59:0d: 2b:b7:f1:ae:1d:07:75:ba:14:51:11:b2:88:54:ce: 4d:45:0b:75:89:0c:28:a2:cf:09:91:25:c2:0b:ae: 0b:93:a6:63:35:30:65:31:5c:a0:54:ed:5f:b8:a0: 4b:5c:54:62:3a:25:19:bc:05:80:16:be:7a:56:fe: 5e:7c:8a:d1:ce:ab:e1:41:d7:50:86:38:3f:8d:bc: bb:39:20:4f:fb:c1:4a:ae:dc:7a:eb:80:12:79:0a: 07:95:71:de:f9:c3:88:8c:58:0d:30:9f:e4:21:55: d3:c1:6f:67:95:be:28:34:b4:0f:87:9f:05:8e:63: ef:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:70:C7:59:C5:6D:09:6C:65:53:9B:16:98:48:7E:43:B6:DF:E9:90 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7a:66:78:e6:cb:13:22:26:0d:53:f2:87:a3:b6:0d:ae:3f: 5f:96:67:47:31:7a:af:7b:35:e8:87:8d:29:01:3a:8b:49:99: 40:18:e4:33:8f:23:8f:49:e0:6e:88:ad:c7:f3:16:cd:63:0f: 40:bd:2f:96:aa:be:5f:ba:e7:22:13:6a:29:67:02:72:fa:19: f6:66:8d:6b:ca:e0:78:a6:68:a1:85:ef:60:bb:11:1a:fe:c3: bc:15:ae:bb:40:0b:3e:ae:4f:e6:c5:5b:ee:9e:73:4a:e7:1c: 26:03:2f:40:5e:ec:b5:46:a7:98:f3:a7:db:a4:95:31:47:d2: 8e:98:f9:8b:d6:ef:a2:cb:36:60:64:1f:85:a9:60:32:cf:73: e9:99:2a:8b:cb:25:e3:7a:50:b2:5a:32:dc:b2:b2:87:36:1e: 73:35:3a:41:fd:9f:5a:7a:f0:a5:d0:c8:6f:20:f2:13:48:28: 77:0c:db:f3:96:27:16:77:3e:e5:58:71:9a:ff:a2:d5:1e:b3: 01:9f:a4:db:6b:ad:c9:57:0c:94:aa:d5:99:81:c5:e0:f1:7d: 15:3d:20:91:0d:d9:d5:4e:5f:c1:49:a1:54:57:68:77:98:d9: 2b:29:fe:90:9c:2d:3b:1a:b6:66:bc:54:d0:23:c7:d2:73:16: 89:1f:e4:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpts+XGhEPmHEwVK6YDsp0tmSGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTExMDQwNTQ2NDdaFw0yNTExMDcwOTMyNDdaMDMxMTAvBgNV BAMTKDg0NzBDNzU5QzU2RDA5NkM2NTUzOUIxNjk4NDg3RTQzQjZERkU5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD42LFr9CPkAmVksjDF+cjmbm98 E0kt3HYbSMVn3aW9rynuZjY5TCDNNB6WveEHBXDAjUa5ycOFeh60Lx5fKR2+bm/X 5Hyzww+Cis4Mw0sB6qpL6dpnNarOaqGPGJGaHEhM/t3ffwFK7D1njmTdMByuaf8A V/dGruvmruzydgQY6cxsaIJZDSu38a4dB3W6FFERsohUzk1FC3WJDCiizwmRJcIL rguTpmM1MGUxXKBU7V+4oEtcVGI6JRm8BYAWvnpW/l58itHOq+FB11CGOD+NvLs5 IE/7wUqu3HrrgBJ5CgeVcd75w4iMWA0wn+QhVdPBb2eVvig0tA+HnwWOY+9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHDHWcVtCWxlU5sWmEh+Q7bf6ZAwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp6ZnjmyxMiJg1T8oejtg2uP1+WZ0cxeq97 NeiHjSkBOotJmUAY5DOPI49J4G6IrcfzFs1jD0C9L5aqvl+65yITailnAnL6GfZm jWvK4HimaKGF72C7ERr+w7wVrrtACz6uT+bFW+6ec0rnHCYDL0Be7LVGp5jzp9uk lTFH0o6Y+YvW76LLNmBkH4WpYDLPc+mZKovLJeN6ULJaMtyysoc2HnM1OkH9n1p6 8KXQyG8g8hNIKHcM2/OWJxZ3PuVYcZr/otUeswGfpNtrrclXDJSq1ZmBxeDxfRU9 IJEN2dVOX8FJoVRXaHeY2Ssp/pCcLTsatma8VNAjx9JzFokf5Gs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:34 2025 by rpki-client