$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: T4ney40wNFCU6POPuk8wanj0sVujzP4bEjg3JCEIz1w= Subject key identifier: E1:4E:E5:03:EA:42:07:83:E0:55:9E:4D:95:7C:32:02:10:74:CE:05 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 7ECC64DA4A922B70F60B125A03498AC8B9521F43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: DB Signing time: Mon 03 Nov 2025 10:42:06 +0000 Manifest this update: Mon 03 Nov 2025 10:37:06 +0000 Manifest next update: Thu 06 Nov 2025 22:27:06 +0000 Files and hashes: 1: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: WlL8v0wUSe7FN9EZ2BSRHEapkJ1mAyoOWIHYA4NgaQU=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cc:64:da:4a:92:2b:70:f6:0b:12:5a:03:49:8a:c8:b9:52:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Nov 3 10:37:06 2025 GMT Not After : Nov 6 22:27:06 2025 GMT Subject: CN=E14EE503EA420783E0559E4D957C32021074CE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:6b:b2:5b:35:5f:2c:e1:a4:52:8f:92:7b: 5f:ba:c5:34:08:a5:4d:ef:ec:c7:90:b9:7d:34:a8: 91:d6:ab:9c:75:e6:52:77:ab:34:b9:3d:b4:ad:e5: 20:af:c9:9b:72:06:b6:00:14:47:5f:ba:fa:3f:05: 67:65:22:99:fd:7c:87:87:9f:08:8c:24:0e:27:48: 96:07:69:0c:04:7b:89:f8:50:9c:63:f2:0c:6c:92: ed:57:f2:c1:c8:c3:76:f5:0b:a0:5d:9b:65:cb:2b: 30:b0:37:8d:59:aa:17:39:7c:ab:56:2c:18:f4:64: ba:78:26:e4:fc:49:24:78:30:b7:7c:0c:26:80:fb: b5:ce:ee:93:16:bc:4f:91:3c:79:cb:e5:5e:3e:dd: e5:82:85:bd:cd:ff:28:53:7e:bf:49:8b:cd:23:9f: 9e:5b:9b:58:c4:d5:ba:f5:c5:8f:4b:b0:84:95:c5: e7:a0:ee:f9:2b:11:98:9f:f4:7d:89:f5:e0:1c:9f: 32:34:2f:9a:8c:70:e2:e0:57:93:7a:fe:55:b1:64: eb:ee:99:2f:50:fd:4f:29:71:c8:20:c3:21:31:3c: e3:9f:e4:e6:64:a5:91:27:03:96:6a:36:59:ac:54: 33:cd:ec:72:cf:40:c2:24:bb:65:38:bd:8c:68:cf: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:E5:03:EA:42:07:83:E0:55:9E:4D:95:7C:32:02:10:74:CE:05 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4a:11:43:ee:5f:27:88:a4:23:76:d3:be:b2:c2:95:8e:5c: af:0a:9b:19:1b:2c:d3:b0:26:c1:d0:03:be:ac:ac:76:0e:9a: 35:d5:c6:79:7a:20:b6:c2:fa:85:dd:fc:40:52:2a:b9:ea:40: 35:04:a8:4a:60:04:0e:a4:cb:56:22:89:bf:7f:cf:30:3f:75: 53:71:bc:c2:31:e0:0d:54:ca:22:ab:69:34:02:25:bb:37:42: 20:46:f3:f2:36:67:88:d4:68:f3:ff:54:43:ed:de:4a:f4:fd: 41:98:7e:61:b6:16:66:9a:95:c7:16:72:51:9b:72:61:87:e1: 39:7b:08:c9:79:d1:e8:ae:e0:a4:40:8b:d0:59:7d:99:25:97: e6:47:2d:d4:b4:33:b9:ba:62:d1:78:16:1a:6e:cd:3b:1f:09: 23:81:62:5c:f5:6b:5f:a7:20:6e:6d:72:d2:12:d7:c0:7b:11: 04:82:61:eb:6c:87:70:97:39:9f:1b:53:50:1e:8a:a6:29:8c: a2:10:c7:91:86:a4:d0:02:a0:21:52:20:ff:36:63:5d:57:64: 21:ca:b3:ff:9a:98:16:bc:8a:32:8c:d4:87:bd:6b:01:b9:a7: 70:f2:4a:ab:dd:9f:a1:36:b2:c1:6e:f2:3b:7b:5b:af:32:58: fe:10:3a:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsxk2kqSK3D2CxJaA0mKyLlSH0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTExMDMxMDM3MDZaFw0yNTExMDYyMjI3MDZaMDMxMTAvBgNV BAMTKEUxNEVFNTAzRUE0MjA3ODNFMDU1OUU0RDk1N0MzMjAyMTA3NENFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOGuyWzVfLOGkUo+Se1+6xTQI pU3v7MeQuX00qJHWq5x15lJ3qzS5PbSt5SCvyZtyBrYAFEdfuvo/BWdlIpn9fIeH nwiMJA4nSJYHaQwEe4n4UJxj8gxsku1X8sHIw3b1C6Bdm2XLKzCwN41Zqhc5fKtW LBj0ZLp4JuT8SSR4MLd8DCaA+7XO7pMWvE+RPHnL5V4+3eWChb3N/yhTfr9Ji80j n55bm1jE1br1xY9LsISVxeeg7vkrEZif9H2J9eAcnzI0L5qMcOLgV5N6/lWxZOvu mS9Q/U8pccggwyExPOOf5OZkpZEnA5ZqNlmsVDPN7HLPQMIku2U4vYxoz16TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4U7lA+pCB4PgVZ5NlXwyAhB0zgUwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9KEUPuXyeIpCN2076ywpWOXK8KmxkbLNOw JsHQA76srHYOmjXVxnl6ILbC+oXd/EBSKrnqQDUEqEpgBA6ky1Yiib9/zzA/dVNx vMIx4A1UyiKraTQCJbs3QiBG8/I2Z4jUaPP/VEPt3kr0/UGYfmG2FmaalccWclGb cmGH4Tl7CMl50eiu4KRAi9BZfZkll+ZHLdS0M7m6YtF4FhpuzTsfCSOBYlz1a1+n IG5tctIS18B7EQSCYetsh3CXOZ8bU1AeiqYpjKIQx5GGpNACoCFSIP82Y11XZCHK s/+amBa8ijKM1Ie9awG5p3DySqvdn6E2ssFu8jt7W68yWP4QOt4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:32:52 2025 by rpki-client