$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: S8aV3Y9aEM231nXeWqyj1+p4JohFYJiHOdMB55M15XI= Subject key identifier: B8:5C:1C:6F:5B:33:8A:D9:CE:C0:8F:30:84:82:91:07:35:20:FB:F2 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 24E6DD9E4EE56812EDED03EA06D5673CB08373B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 046F Signing time: Mon 03 Nov 2025 10:31:37 +0000 Manifest this update: Mon 03 Nov 2025 10:26:37 +0000 Manifest next update: Thu 06 Nov 2025 17:04:37 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: r6QXEv/RfYbBMiqkuZW+JtpvHAUIN2yKvcbqyKO/Tzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e6:dd:9e:4e:e5:68:12:ed:ed:03:ea:06:d5:67:3c:b0:83:73:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Nov 3 10:26:37 2025 GMT Not After : Nov 6 17:04:37 2025 GMT Subject: CN=B85C1C6F5B338AD9CEC08F30848291073520FBF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a4:67:db:ce:4b:f7:c4:a7:11:0c:df:e8:ae: 4a:d9:90:9d:69:7d:e1:99:af:4f:75:24:a1:94:a5: 51:09:5d:2a:16:c5:06:4b:1e:5a:5e:8c:30:d1:d3: 04:bc:da:b1:75:50:6c:a9:fe:9b:3e:8b:f9:f0:e2: 0f:6e:85:12:85:3a:08:90:43:3e:3f:08:db:eb:c7: 3e:ce:f3:fb:0e:a7:e5:2d:cf:a8:f0:43:35:98:d7: 6f:db:5e:1e:e8:01:d9:db:13:3a:4c:8c:1f:2d:b5: b0:85:b5:e6:b5:5d:fc:41:e4:b0:e4:c0:9a:8c:ca: 4c:8c:65:4e:c2:6c:15:c3:98:37:37:43:0f:77:40: 87:49:43:98:b8:2c:84:63:70:65:ce:80:5f:23:f2: 34:54:71:84:40:c1:23:3c:91:67:9a:cd:da:f6:13: 13:f3:a8:39:55:92:01:53:1e:61:34:9c:1f:61:01: 5e:80:c9:f4:5d:af:b1:0d:1e:e1:76:d4:8a:32:94: 49:02:1e:b0:05:66:a4:85:65:71:ea:8d:ec:b1:0f: 91:63:0d:5d:52:ea:df:bb:8a:7e:a2:cb:9a:67:1d: 66:f3:0e:32:46:f6:ad:f0:6f:5c:cb:9f:79:39:e7: 5f:b5:56:f6:d5:7c:f8:53:92:a5:fe:4b:01:2d:7c: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:1C:6F:5B:33:8A:D9:CE:C0:8F:30:84:82:91:07:35:20:FB:F2 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0a:ea:47:10:41:1a:9a:2f:b8:69:a1:03:4b:31:c9:d7:63: 4a:1a:26:48:eb:d7:87:70:57:10:40:9f:7b:70:d6:88:d2:f1: bd:a1:d1:a9:b0:f8:73:ac:27:0d:70:c5:bd:c0:27:c7:12:02: b0:59:b1:06:08:b8:81:a1:a5:ee:7a:08:e4:c0:ae:0e:f1:47: 74:64:cc:49:52:c3:61:65:13:ac:ea:05:46:91:26:15:7f:f7: bd:95:cf:e4:a5:8b:a5:ce:be:89:d0:bc:33:0f:d4:26:b2:8e: 00:79:c0:29:b4:62:d0:33:32:48:60:be:80:99:cd:b7:86:ea: 81:db:08:6c:cb:b0:c6:04:e1:1c:b7:fc:37:30:10:6f:6c:a0: 53:97:8e:e4:25:bf:03:7b:0b:eb:b5:f5:e4:39:fe:79:07:b2: 54:e4:c8:00:87:c5:83:bf:87:55:c9:2c:78:81:9e:37:9f:34: fa:03:4e:a8:b9:72:68:11:81:ea:c1:1b:de:11:22:8a:cd:cb: cf:9b:b2:78:05:e5:7b:b0:fc:41:d2:78:99:12:3f:ca:ef:a9: 1b:c0:72:c0:52:a5:ce:f6:cc:eb:5f:1d:75:dd:2b:48:1c:f8: 4b:d8:54:67:9f:b4:40:7d:bb:d3:10:55:a8:ee:bb:a3:38:66: a4:5d:9d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJObdnk7laBLt7QPqBtVnPLCDc7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTExMDMxMDI2MzdaFw0yNTExMDYxNzA0MzdaMDMxMTAvBgNV BAMTKEI4NUMxQzZGNUIzMzhBRDlDRUMwOEYzMDg0ODI5MTA3MzUyMEZCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpGfbzkv3xKcRDN/orkrZkJ1p feGZr091JKGUpVEJXSoWxQZLHlpejDDR0wS82rF1UGyp/ps+i/nw4g9uhRKFOgiQ Qz4/CNvrxz7O8/sOp+Utz6jwQzWY12/bXh7oAdnbEzpMjB8ttbCFtea1XfxB5LDk wJqMykyMZU7CbBXDmDc3Qw93QIdJQ5i4LIRjcGXOgF8j8jRUcYRAwSM8kWeazdr2 ExPzqDlVkgFTHmE0nB9hAV6AyfRdr7ENHuF21IoylEkCHrAFZqSFZXHqjeyxD5Fj DV1S6t+7in6iy5pnHWbzDjJG9q3wb1zLn3k551+1VvbVfPhTkqX+SwEtfCuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFwcb1szitnOwI8whIKRBzUg+/IwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYK6kcQQRqaL7hpoQNLMcnXY0oaJkjr14dw VxBAn3tw1ojS8b2h0amw+HOsJw1wxb3AJ8cSArBZsQYIuIGhpe56COTArg7xR3Rk zElSw2FlE6zqBUaRJhV/972Vz+Sli6XOvonQvDMP1CayjgB5wCm0YtAzMkhgvoCZ zbeG6oHbCGzLsMYE4Ry3/DcwEG9soFOXjuQlvwN7C+u19eQ5/nkHslTkyACHxYO/ h1XJLHiBnjefNPoDTqi5cmgRgerBG94RIorNy8+bsngF5Xuw/EHSeJkSP8rvqRvA csBSpc72zOtfHXXdK0gc+EvYVGeftEB9u9MQVajuu6M4ZqRdnTw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:18 2025 by rpki-client