$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: Tpyz8baclThaSeWtLeTlZmbLaV9l6aHAMKLArdmhHwk= Subject key identifier: E9:7A:DB:CC:7F:A5:28:76:13:00:A9:B9:BC:1E:FC:61:95:DA:D0:63 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 2271425A076F541D316108F37A7EA43B9E7D18AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 025F Signing time: Sat 01 Nov 2025 15:32:08 +0000 Manifest this update: Sat 01 Nov 2025 15:27:08 +0000 Manifest next update: Wed 05 Nov 2025 02:01:08 +0000 Files and hashes: 1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: mMfaBwKeVnD1Gs69pjNTBCPk2CO3DgliqMoGXZXbTsc=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:71:42:5a:07:6f:54:1d:31:61:08:f3:7a:7e:a4:3b:9e:7d:18:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Nov 1 15:27:08 2025 GMT Not After : Nov 5 02:01:08 2025 GMT Subject: CN=E97ADBCC7FA528761300A9B9BC1EFC6195DAD063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:ce:fc:df:2d:f4:16:fd:e0:76:a0:e7:2b: 14:28:d6:e7:e3:35:bf:68:d9:78:91:07:c5:8c:f4: 4f:7b:ad:e2:55:95:00:ba:04:6e:9e:62:6f:13:e3: 9e:70:b8:01:fd:ab:5c:35:7e:e3:f8:1d:42:ac:4d: 47:8d:68:b8:23:64:65:1a:88:18:0b:db:8d:07:65: 1f:96:72:0d:df:5d:f5:6e:df:0c:d9:9c:33:ed:c4: 26:05:a9:31:4e:86:cb:f8:2b:e4:42:58:ad:33:0e: 49:c1:b6:18:df:b0:36:89:ff:95:5d:44:2e:e1:73: d3:b5:8f:a5:36:5a:67:96:4c:21:74:c9:d4:87:e7: c9:51:ea:f9:8a:0d:94:64:31:6b:cc:3d:ba:75:af: 40:a4:37:35:51:7d:7b:db:db:91:e1:a3:1c:5f:a3: 53:f9:37:ba:ac:d1:07:99:2d:f7:0e:6c:3c:49:01: 22:c1:79:eb:7c:36:85:2d:ff:52:f5:c5:05:c5:02: 79:5c:50:43:42:41:b8:a8:f4:6d:ad:a6:b5:1c:73: ce:1f:c8:bf:ac:03:b2:e9:8f:88:09:03:ed:a7:2e: 40:96:89:01:01:2f:af:2f:ff:6d:da:1d:bf:74:f6: 38:0c:6e:73:48:e9:4f:d5:af:a7:3d:eb:50:4a:08: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:DB:CC:7F:A5:28:76:13:00:A9:B9:BC:1E:FC:61:95:DA:D0:63 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3f:45:d3:cd:03:76:31:93:5f:dd:57:94:d8:fb:0e:e4:46: c5:36:86:29:36:c6:27:13:0c:37:7f:29:7d:1d:ec:46:e1:04: e7:85:0e:0e:cc:4d:9c:5e:07:05:bc:fa:9a:1f:32:7b:1f:68: d5:86:ee:0c:a0:95:7a:49:bc:c3:60:e6:f7:b2:04:c2:7e:42: fd:7d:46:00:db:58:31:b3:15:b1:8d:f8:f5:49:2a:b7:d7:d5: 12:39:75:36:14:55:8d:a9:75:fa:a1:af:c2:f2:8f:c2:9a:c1: 42:03:a2:0a:73:45:89:8a:05:6b:56:cd:17:be:96:e8:3d:0d: 79:03:a6:2f:4b:91:90:c6:ba:91:aa:4a:fd:37:96:e0:ac:f5: 56:6c:5f:62:ef:e5:25:9d:83:5a:4f:0a:0d:d5:b4:3f:a9:56: 5a:78:6f:89:0d:6c:f2:06:0d:bc:74:8a:28:35:e4:5d:f6:41: f3:5c:8f:9e:65:ee:d1:00:1b:f8:b2:e1:8e:82:69:95:b6:57: 66:bd:6b:0c:91:f8:6f:9d:09:9d:fc:82:38:b4:05:a8:ac:5c: d8:8f:5d:be:12:96:4b:af:a9:e4:43:9f:46:4e:60:08:8f:f3: 55:4c:21:55:de:41:de:e9:8f:aa:c5:71:9f:87:93:00:e2:f6: 01:7e:af:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInFCWgdvVB0xYQjzen6kO559GKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTExMDExNTI3MDhaFw0yNTExMDUwMjAxMDhaMDMxMTAvBgNV BAMTKEU5N0FEQkNDN0ZBNTI4NzYxMzAwQTlCOUJDMUVGQzYxOTVEQUQwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIc783y30Fv3gdqDnKxQo1ufj Nb9o2XiRB8WM9E97reJVlQC6BG6eYm8T455wuAH9q1w1fuP4HUKsTUeNaLgjZGUa iBgL240HZR+Wcg3fXfVu3wzZnDPtxCYFqTFOhsv4K+RCWK0zDknBthjfsDaJ/5Vd RC7hc9O1j6U2WmeWTCF0ydSH58lR6vmKDZRkMWvMPbp1r0CkNzVRfXvb25Hhoxxf o1P5N7qs0QeZLfcObDxJASLBeet8NoUt/1L1xQXFAnlcUENCQbio9G2tprUcc84f yL+sA7Lpj4gJA+2nLkCWiQEBL68v/23aHb909jgMbnNI6U/Vr6c961BKCF7JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XrbzH+lKHYTAKm5vB78YZXa0GMwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw/RdPNA3Yxk1/dV5TY+w7kRsU2hik2xicT DDd/KX0d7EbhBOeFDg7MTZxeBwW8+pofMnsfaNWG7gyglXpJvMNg5veyBMJ+Qv19 RgDbWDGzFbGN+PVJKrfX1RI5dTYUVY2pdfqhr8Lyj8KawUIDogpzRYmKBWtWzRe+ lug9DXkDpi9LkZDGupGqSv03luCs9VZsX2Lv5SWdg1pPCg3VtD+pVlp4b4kNbPIG Dbx0iig15F32QfNcj55l7tEAG/iy4Y6CaZW2V2a9awyR+G+dCZ38gji0BaisXNiP Xb4SlkuvqeRDn0ZOYAiP81VMIVXeQd7pj6rFcZ+HkwDi9gF+r+U= -----END CERTIFICATE-----Generated at Tue Nov 4 02:06:41 2025 by rpki-client