$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: Uo+wFJreQn7Dm2zogWaU56muXe2DKoh0h7qnNX+pFSI= Subject key identifier: 4C:31:45:AC:2F:13:F4:BB:45:A5:97:EF:CF:BF:E7:EA:7B:B4:2A:2A Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 3072E29E5728E79F58EAB5EDF10FCF081A8FFD7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0212 Signing time: Sun 02 Nov 2025 07:22:15 +0000 Manifest this update: Sun 02 Nov 2025 07:17:15 +0000 Manifest next update: Wed 05 Nov 2025 16:12:15 +0000 Files and hashes: 1: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: jDGunhRra5hjyhyF3QwIKeOMN2rGMk5OzSPbI1sY65c=) 2: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 3: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 4: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:72:e2:9e:57:28:e7:9f:58:ea:b5:ed:f1:0f:cf:08:1a:8f:fd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Nov 2 07:17:15 2025 GMT Not After : Nov 5 16:12:15 2025 GMT Subject: CN=4C3145AC2F13F4BB45A597EFCFBFE7EA7BB42A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:13:21:47:1b:ea:20:a4:5e:a8:65:0d:8d: 64:21:65:f5:cb:85:44:b9:97:12:3c:85:a7:f7:b0: df:c7:c4:75:c8:ab:6f:27:f5:6b:71:db:b5:ef:f4: 0d:46:f3:90:35:9b:3c:fa:54:01:f7:a8:6f:c2:de: 8c:5a:75:ed:39:0c:1b:9b:36:ec:43:65:8a:43:ee: 81:e9:17:38:87:12:8f:e1:01:95:13:4b:95:26:54: 73:32:eb:cb:e1:e2:e8:a1:d5:ef:bf:66:f4:74:75: b7:33:3b:8d:75:2b:85:20:50:32:c3:69:27:1d:c7: 5c:b8:e5:8f:4f:81:07:eb:60:02:40:ad:ae:77:7e: c3:a7:85:a8:8a:c8:b8:b2:85:43:ac:e8:2a:76:f6: dc:ab:e4:e0:e3:9c:6a:61:da:5f:f9:f6:b7:7b:04: f4:be:db:c9:03:01:b7:6a:2f:bc:99:b0:2c:bf:da: 9e:cb:45:02:a2:40:3e:44:68:40:74:81:ad:9b:68: 50:c5:01:9a:43:bf:4c:60:0c:e1:8d:77:8c:44:3c: d1:69:4f:db:06:f6:54:e2:6c:b7:1c:c8:aa:c7:df: 5c:08:58:e5:49:10:e7:e9:14:5c:45:4e:31:f0:f1: 06:01:fa:ad:a0:43:66:78:4b:a1:14:db:56:25:de: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:45:AC:2F:13:F4:BB:45:A5:97:EF:CF:BF:E7:EA:7B:B4:2A:2A X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ad:4b:20:c1:a8:25:46:ec:26:32:0d:94:d9:d3:08:54:94: 2a:05:d3:9c:ac:b7:48:3d:cc:fd:aa:fe:e9:78:8d:b0:9a:0e: db:ae:1e:ac:9b:04:24:ba:c2:6f:06:39:8e:ad:4b:79:88:f3: 4e:39:25:29:4c:92:9e:b2:fb:67:1d:f7:eb:1b:a9:16:13:5e: 8b:9a:9a:af:5d:6c:57:21:94:f2:8f:6f:13:09:07:d7:25:fd: 62:87:e7:26:ae:55:de:be:b4:79:82:83:1e:cf:c1:7d:01:b4: cd:cc:48:39:f0:14:3a:0b:30:fa:30:b3:d4:96:e7:66:1f:59: 76:5e:61:91:30:b9:48:10:0c:99:af:5d:1a:cb:9a:bc:b4:02: e0:6d:bd:40:7e:50:d1:e2:a0:88:65:68:3a:aa:e9:c5:0d:f2: 0f:9f:63:6e:b8:16:c6:6d:32:32:6a:d4:64:f7:6f:e0:9a:57: 3d:b4:9a:07:24:21:e4:fa:9a:bd:66:d6:b8:ea:4b:4f:47:d0: 91:a1:8b:fa:36:5a:33:c8:64:c1:85:08:2b:55:af:ae:37:a7: 77:2b:c7:b9:b0:63:de:d6:49:2e:c2:3c:14:0a:3e:73:ce:d5: 8f:5d:5d:22:38:5c:38:15:8b:2f:b7:4d:c9:99:b8:36:76:cf: 25:23:f7:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHLinlco559Y6rXt8Q/PCBqP/X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTExMDIwNzE3MTVaFw0yNTExMDUxNjEyMTVaMDMxMTAvBgNV BAMTKDRDMzE0NUFDMkYxM0Y0QkI0NUE1OTdFRkNGQkZFN0VBN0JCNDJBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZlxMhRxvqIKReqGUNjWQhZfXL hUS5lxI8haf3sN/HxHXIq28n9Wtx27Xv9A1G85A1mzz6VAH3qG/C3oxade05DBub NuxDZYpD7oHpFziHEo/hAZUTS5UmVHMy68vh4uih1e+/ZvR0dbczO411K4UgUDLD aScdx1y45Y9PgQfrYAJAra53fsOnhaiKyLiyhUOs6Cp29tyr5ODjnGph2l/59rd7 BPS+28kDAbdqL7yZsCy/2p7LRQKiQD5EaEB0ga2baFDFAZpDv0xgDOGNd4xEPNFp T9sG9lTibLccyKrH31wIWOVJEOfpFFxFTjHw8QYB+q2gQ2Z4S6EU21Yl3o0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDFFrC8T9LtFpZfvz7/n6nu0KiowHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWtSyDBqCVG7CYyDZTZ0whUlCoF05yst0g9 zP2q/ul4jbCaDtuuHqybBCS6wm8GOY6tS3mI8045JSlMkp6y+2cd9+sbqRYTXoua mq9dbFchlPKPbxMJB9cl/WKH5yauVd6+tHmCgx7PwX0BtM3MSDnwFDoLMPows9SW 52YfWXZeYZEwuUgQDJmvXRrLmry0AuBtvUB+UNHioIhlaDqq6cUN8g+fY264FsZt MjJq1GT3b+CaVz20mgckIeT6mr1m1rjqS09H0JGhi/o2WjPIZMGFCCtVr643p3cr x7mwY97WSS7CPBQKPnPO1Y9dXSI4XDgViy+3TcmZuDZ2zyUj91s= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client