$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: XDqPHzxUKtIMYqE6iFhV78KQ/e7uYKhsAFJ/BorKyjI= Subject key identifier: 4A:6D:51:A0:A1:B6:35:A4:15:8F:9F:12:9D:68:22:9E:4D:D6:2B:E3 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 1AD8DED524B9DE8741A095DDC416E1BBFC207304 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01E0 Signing time: Sun 02 Nov 2025 23:11:36 +0000 Manifest this update: Sun 02 Nov 2025 23:06:36 +0000 Manifest next update: Thu 06 Nov 2025 07:28:36 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 2: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: OU2Tkd5ITeLkm9eVkZQu8wp0F5kbpQdYQcCvfmT2Klg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d8:de:d5:24:b9:de:87:41:a0:95:dd:c4:16:e1:bb:fc:20:73:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Nov 2 23:06:36 2025 GMT Not After : Nov 6 07:28:36 2025 GMT Subject: CN=4A6D51A0A1B635A4158F9F129D68229E4DD62BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:c4:6d:4d:ea:f7:3f:e8:81:75:8d:e3:12: c5:d2:00:47:b1:c5:f1:9d:0a:60:5b:5e:3a:16:a2: 62:ad:7b:71:4d:b4:64:d7:f7:4c:a6:c7:f8:93:9e: 60:fb:34:c7:09:82:7b:f2:f7:c6:32:b2:6b:c5:79: 04:c7:45:0a:6d:5e:da:ad:24:14:26:89:4f:a7:e4: b9:16:32:96:08:02:ca:b2:43:40:9a:78:be:fb:cc: 30:7d:a8:7f:ac:bb:5b:0c:b7:ca:60:3f:92:66:80: f2:97:16:36:69:9b:42:11:e8:c0:98:76:06:e1:94: 28:7b:1a:b5:ea:c4:3c:46:f0:24:f6:38:5e:26:30: 0e:4e:7f:f4:e3:28:89:48:ab:cf:46:d6:1c:7e:c7: d3:29:c3:b7:bf:bc:a6:7e:90:89:4e:00:2d:2b:24: b0:61:4f:62:dd:41:91:77:38:33:95:10:8c:ba:c9: ea:fc:2d:66:c0:10:9e:17:6a:84:a9:0d:9c:94:7e: ed:4b:9d:ad:a5:ae:40:a4:36:2f:6c:66:c8:ac:cf: c3:01:90:a3:88:cc:c3:a8:3b:b3:8e:91:71:87:ff: d9:b9:d2:07:3a:d6:68:1d:83:bb:ec:02:71:78:7a: fc:7c:1e:07:d6:89:23:d2:92:c4:24:2d:c7:c4:54: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:51:A0:A1:B6:35:A4:15:8F:9F:12:9D:68:22:9E:4D:D6:2B:E3 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:74:36:a1:d0:5b:a9:b1:66:83:46:27:a6:ed:92:80:a3: 28:29:d8:49:88:1c:21:44:81:3d:a3:7e:42:36:4d:2a:a6:33: c1:0e:7d:15:a5:8b:b5:22:7e:2e:df:53:83:80:49:e0:6f:c9: b7:11:42:dd:e6:72:75:69:15:db:35:87:4d:10:e4:da:71:de: d4:a6:0a:c9:6a:d1:23:ef:a4:a9:84:6a:77:0d:17:51:b3:46: 41:0b:22:03:02:33:68:e6:fd:58:7e:fc:a9:c6:db:b2:6c:83: 64:4c:08:2d:3e:ba:80:b6:57:9b:20:ca:f9:c2:c4:dd:00:cb: 13:9d:9a:e8:f6:ba:85:61:18:a2:bc:ad:7f:78:49:ef:06:7e: 95:60:ff:1c:9e:1a:52:4c:ea:d0:31:3c:17:3d:43:a9:d6:6f: 44:0c:67:9d:13:04:7c:2d:3c:33:25:a2:45:17:4b:7e:fc:fa: 1d:32:ce:aa:94:8a:51:1a:7f:1e:25:c5:cf:04:21:e9:01:c1: e7:ba:7b:82:fa:50:3b:9a:b0:36:39:8b:a6:1d:e6:59:81:e9: df:0c:f7:a8:bf:72:57:fe:0b:c7:a7:7d:fd:e2:c7:05:22:fc: cb:e2:af:7d:6a:63:4c:d3:8b:cd:f8:17:ab:26:62:18:df:0b: 1e:19:88:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtje1SS53odBoJXdxBbhu/wgcwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTExMDIyMzA2MzZaFw0yNTExMDYwNzI4MzZaMDMxMTAvBgNV BAMTKDRBNkQ1MUEwQTFCNjM1QTQxNThGOUYxMjlENjgyMjlFNERENjJCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjsRtTer3P+iBdY3jEsXSAEex xfGdCmBbXjoWomKte3FNtGTX90ymx/iTnmD7NMcJgnvy98YysmvFeQTHRQptXtqt JBQmiU+n5LkWMpYIAsqyQ0CaeL77zDB9qH+su1sMt8pgP5JmgPKXFjZpm0IR6MCY dgbhlCh7GrXqxDxG8CT2OF4mMA5Of/TjKIlIq89G1hx+x9Mpw7e/vKZ+kIlOAC0r JLBhT2LdQZF3ODOVEIy6yer8LWbAEJ4XaoSpDZyUfu1Lna2lrkCkNi9sZsisz8MB kKOIzMOoO7OOkXGH/9m50gc61mgdg7vsAnF4evx8HgfWiSPSksQkLcfEVAt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSm1RoKG2NaQVj58SnWgink3WK+MwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk9dDah0FupsWaDRiem7ZKAoygp2EmIHCFE gT2jfkI2TSqmM8EOfRWli7Uifi7fU4OASeBvybcRQt3mcnVpFds1h00Q5Npx3tSm Cslq0SPvpKmEancNF1GzRkELIgMCM2jm/Vh+/KnG27Jsg2RMCC0+uoC2V5sgyvnC xN0AyxOdmuj2uoVhGKK8rX94Se8GfpVg/xyeGlJM6tAxPBc9Q6nWb0QMZ50TBHwt PDMlokUXS378+h0yzqqUilEafx4lxc8EIekBwee6e4L6UDuasDY5i6Yd5lmB6d8M 96i/clf+C8enff3ixwUi/Mvir31qY0zTi834F6smYhjfCx4ZiKg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:35 2025 by rpki-client