$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: O+KCckAZAmxCaFoxA6OGCuHiyuPUEABnZ9bAHQXbolE= Subject key identifier: BB:CD:7B:89:CA:1A:AE:B9:BF:64:80:15:E1:A9:3E:71:2C:87:81:1D Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 55BA52C3D14E7268A83ED351EFD6E29C29A588BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01B4 Signing time: Tue 04 Nov 2025 16:22:11 +0000 Manifest this update: Tue 04 Nov 2025 16:17:11 +0000 Manifest next update: Sat 08 Nov 2025 02:45:11 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: TUJ7TOo8yp+DwDoaWXsn7cpSODB0MSiAANWhVWE0z+I=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ba:52:c3:d1:4e:72:68:a8:3e:d3:51:ef:d6:e2:9c:29:a5:88:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Nov 4 16:17:11 2025 GMT Not After : Nov 8 02:45:11 2025 GMT Subject: CN=BBCD7B89CA1AAEB9BF648015E1A93E712C87811D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:25:3e:82:b6:13:f9:4f:09:48:d0:be:ec: 15:2e:1a:1c:d1:ae:79:ff:9f:0a:5e:9e:f7:de:48: 2a:6d:1a:71:49:c5:b8:69:35:36:0e:59:8c:93:84: cd:88:dc:62:21:68:61:e6:dc:39:de:14:82:e1:bb: 99:29:64:33:07:57:7f:0c:ee:fc:5f:1e:75:bd:a2: 1f:5f:fb:59:57:3a:f9:f1:1f:4b:b8:ac:3f:67:c3: 79:9b:5b:ba:f2:a5:03:14:07:5a:94:44:d9:93:89: 76:88:64:6a:d7:68:a1:f5:80:6d:38:f2:23:04:2f: 25:37:e3:ea:d9:0b:9a:8c:eb:7e:c1:63:6f:54:df: 10:5b:d0:53:91:21:28:f8:d2:a6:67:1f:ac:58:38: 5e:2f:cd:24:40:0e:ba:8c:9e:44:26:3b:a7:1b:ab: b5:5e:0b:4a:b6:33:bb:65:7c:c4:91:a9:ce:98:d0: 99:9d:9b:b1:6a:15:f9:4f:e5:74:a1:c3:1e:97:8b: 16:62:2f:d1:99:c0:f5:7c:bd:ac:8e:27:4f:a4:84: 48:46:f7:b0:54:76:3d:3a:90:9e:bb:f4:fe:62:8d: 51:82:0e:21:65:d4:de:69:a2:83:2c:33:f5:82:99: 48:ca:63:f4:f7:61:93:89:cf:59:ad:52:2c:3a:47: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:7B:89:CA:1A:AE:B9:BF:64:80:15:E1:A9:3E:71:2C:87:81:1D X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:80:79:e8:a0:b5:b4:ac:b4:a3:b5:bd:57:2f:d1:fe:44:61: c9:b1:f7:ad:7a:ed:60:a5:d0:ad:f9:73:7d:93:e1:58:28:b2: 9a:a0:0e:e1:ea:a4:2c:31:34:26:b6:37:39:0d:85:89:cc:1c: 42:88:e1:68:6e:ec:db:b1:d7:34:58:14:0f:f5:42:4e:cb:8c: d6:e6:aa:60:c5:ce:0d:1e:1e:d7:0a:bd:c4:be:1a:29:0c:68: 62:c4:17:26:03:bf:0f:04:f5:6e:c6:0e:48:1b:aa:e1:2f:ad: a1:e1:3d:aa:39:1f:8f:df:9c:f5:32:c3:b2:48:ff:cb:87:f9: d8:33:a3:a0:ba:e3:18:26:a3:a5:7e:c6:0a:61:06:8d:30:14: e3:cb:a6:c4:e1:f0:8f:f7:25:9d:e6:c2:2f:92:df:01:02:cf: 70:c5:c8:4b:53:d7:f5:42:8d:29:66:6a:85:97:f7:6c:f0:8c: 5f:40:cd:30:39:c2:ea:15:5a:c1:a8:9a:d5:17:15:0f:95:73: 23:c0:f2:a9:0a:e9:38:b3:08:ef:48:a2:2c:07:18:fe:4c:c3: f8:9b:53:2e:b2:5f:b5:ea:04:1e:1f:a0:7c:c5:80:1a:72:92: b1:87:a0:93:0c:00:d3:ab:40:94:e8:49:14:62:8b:69:03:16: 5e:35:82:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbpSw9FOcmioPtNR79binCmliL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTExMDQxNjE3MTFaFw0yNTExMDgwMjQ1MTFaMDMxMTAvBgNV BAMTKEJCQ0Q3Qjg5Q0ExQUFFQjlCRjY0ODAxNUUxQTkzRTcxMkM4NzgxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarCU+grYT+U8JSNC+7BUuGhzR rnn/nwpenvfeSCptGnFJxbhpNTYOWYyThM2I3GIhaGHm3DneFILhu5kpZDMHV38M 7vxfHnW9oh9f+1lXOvnxH0u4rD9nw3mbW7rypQMUB1qURNmTiXaIZGrXaKH1gG04 8iMELyU34+rZC5qM637BY29U3xBb0FORISj40qZnH6xYOF4vzSRADrqMnkQmO6cb q7VeC0q2M7tlfMSRqc6Y0Jmdm7FqFflP5XShwx6XixZiL9GZwPV8vayOJ0+khEhG 97BUdj06kJ679P5ijVGCDiFl1N5pooMsM/WCmUjKY/T3YZOJz1mtUiw6R3mbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu817icoarrm/ZIAV4ak+cSyHgR0wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqAeeigtbSstKO1vVcv0f5EYcmx96167WCl 0K35c32T4VgospqgDuHqpCwxNCa2NzkNhYnMHEKI4Whu7Nux1zRYFA/1Qk7LjNbm qmDFzg0eHtcKvcS+GikMaGLEFyYDvw8E9W7GDkgbquEvraHhPao5H4/fnPUyw7JI /8uH+dgzo6C64xgmo6V+xgphBo0wFOPLpsTh8I/3JZ3mwi+S3wECz3DFyEtT1/VC jSlmaoWX92zwjF9AzTA5wuoVWsGomtUXFQ+VcyPA8qkK6TizCO9IoiwHGP5Mw/ib Uy6yX7XqBB4foHzFgBpykrGHoJMMANOrQJToSRRii2kDFl41gk0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:10:55 2025 by rpki-client