$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: 09OiaiQeWs4suYwBIIxEPMHPYasplfLdgEC/loPxeuU= Subject key identifier: D8:B5:C3:4F:2F:6C:D7:21:0F:33:55:83:FD:D3:86:13:98:E3:CD:13 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 3BBAAB3386A15C2D22D6A44E8739D04B72130E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 029F Signing time: Tue 04 Nov 2025 13:00:41 +0000 Manifest this update: Tue 04 Nov 2025 12:55:41 +0000 Manifest next update: Fri 07 Nov 2025 23:29:41 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: BeKxi5IlqDPNwkG/VYS9Rpg1Pc8Y3QsbcOtlVSSb0ws=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ba:ab:33:86:a1:5c:2d:22:d6:a4:4e:87:39:d0:4b:72:13:0e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Nov 4 12:55:41 2025 GMT Not After : Nov 7 23:29:41 2025 GMT Subject: CN=D8B5C34F2F6CD7210F335583FDD3861398E3CD13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:b8:d7:0a:92:80:3e:1b:8c:63:c6:e2:16: 04:6a:6f:dd:0f:10:7c:e6:0f:ad:1b:15:ac:7c:7b: 81:76:71:c6:6e:87:d8:33:64:ff:10:0b:91:41:48: bb:6c:ec:77:df:6c:08:38:64:c6:ff:58:f1:0c:2c: 16:bd:e0:de:93:99:46:14:63:a5:e2:9f:36:f9:8a: 44:45:ff:53:72:f1:13:77:d1:b2:e8:b3:04:ad:d9: 3d:3e:11:c6:b0:d1:64:a2:74:25:a6:c1:8e:3a:61: ab:54:aa:ee:e7:11:34:43:e2:08:49:41:56:d4:67: 28:e9:d8:d6:4f:50:c7:07:b7:a9:70:60:46:25:ad: 88:4d:16:10:f1:5e:93:b0:9b:c0:b2:c2:38:75:76: f5:09:f9:24:89:22:8b:b7:a4:e3:9f:b0:be:5f:6e: 1b:f8:af:b7:f5:aa:01:ab:61:6a:9c:b6:a0:80:2c: 14:dc:d3:cf:a1:97:af:12:b8:98:98:2c:5f:4c:6c: ea:2f:7a:23:32:a1:c4:33:48:b9:d2:2c:51:90:10: c2:94:d6:cf:2f:b0:18:eb:dd:17:98:e8:43:4c:bf: b8:4a:7e:19:68:e6:89:aa:c4:c4:c4:a3:5a:2e:ef: 3c:32:61:89:62:54:1d:d7:29:5b:a0:9c:1b:01:dd: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:C3:4F:2F:6C:D7:21:0F:33:55:83:FD:D3:86:13:98:E3:CD:13 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:76:82:8c:37:21:f0:36:97:8f:a7:34:df:51:0c:52:44: 8d:1e:4f:26:c9:ee:49:d2:99:1d:7e:3e:01:8c:49:13:15:eb: 23:9f:c9:1a:af:d1:72:0b:02:01:25:24:1a:9c:e5:dc:89:7c: 6f:61:11:66:fd:a0:ef:84:8d:16:87:30:85:60:2d:b9:00:ba: 88:a2:5c:ec:54:37:34:f1:3b:7e:1b:6d:7d:3a:ae:54:4c:85: 48:ab:ae:97:ad:e0:dd:af:c9:2c:84:b2:bd:b8:24:a7:a4:01: 47:a7:70:a5:e1:88:a6:1c:9e:8f:8e:87:ec:63:15:be:40:59: 67:33:89:a9:62:66:af:a3:33:3b:2b:62:4d:62:b1:db:1d:c0: 4e:79:15:e6:79:5a:65:3a:e6:41:7a:0a:d0:dc:93:62:d5:a4: ae:64:e9:a4:e8:0e:10:28:6f:0a:1e:4c:15:19:9c:ea:40:e4: 0d:d5:d3:5c:fa:81:71:4e:d4:b3:7e:7b:15:6d:a8:f6:22:67: b5:10:29:0d:c0:c5:06:04:b8:49:ef:d3:45:32:75:ab:52:90: 4a:67:ff:d3:4e:c8:69:b5:03:75:33:94:7f:d8:7f:e4:4f:da: 37:67:84:c6:aa:49:0d:73:89:3e:39:56:f7:26:02:06:6e:31: b9:45:e5:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7qrM4ahXC0i1qROhznQS3ITDgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTExMDQxMjU1NDFaFw0yNTExMDcyMzI5NDFaMDMxMTAvBgNV BAMTKEQ4QjVDMzRGMkY2Q0Q3MjEwRjMzNTU4M0ZERDM4NjEzOThFM0NEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvLjXCpKAPhuMY8biFgRqb90P EHzmD60bFax8e4F2ccZuh9gzZP8QC5FBSLts7HffbAg4ZMb/WPEMLBa94N6TmUYU Y6Xinzb5ikRF/1Ny8RN30bLoswSt2T0+Ecaw0WSidCWmwY46YatUqu7nETRD4ghJ QVbUZyjp2NZPUMcHt6lwYEYlrYhNFhDxXpOwm8Cywjh1dvUJ+SSJIou3pOOfsL5f bhv4r7f1qgGrYWqctqCALBTc08+hl68SuJiYLF9MbOoveiMyocQzSLnSLFGQEMKU 1s8vsBjr3ReY6ENMv7hKfhlo5omqxMTEo1ou7zwyYYliVB3XKVugnBsB3UbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LXDTy9s1yEPM1WD/dOGE5jjzRMwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNqdoKMNyHwNpePpzTfUQxSRI0eTybJ7knS mR1+PgGMSRMV6yOfyRqv0XILAgElJBqc5dyJfG9hEWb9oO+EjRaHMIVgLbkAuoii XOxUNzTxO34bbX06rlRMhUirrpet4N2vySyEsr24JKekAUencKXhiKYcno+Oh+xj Fb5AWWczialiZq+jMzsrYk1isdsdwE55FeZ5WmU65kF6CtDck2LVpK5k6aToDhAo bwoeTBUZnOpA5A3V01z6gXFO1LN+exVtqPYiZ7UQKQ3AxQYEuEnv00UydatSkEpn /9NOyGm1A3UzlH/Yf+RP2jdnhMaqSQ1ziT45VvcmAgZuMblF5Wc= -----END CERTIFICATE-----Generated at Tue Nov 4 20:32:23 2025 by rpki-client