$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: tNwTWEp5tc5CHZOOhQywiKcIjfJ2AvmXtb1BKeMWdIs= Subject key identifier: F2:CE:A0:9E:B4:D1:6E:62:94:0F:55:6F:47:69:79:0E:1D:6A:67:4D Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 5654BB4BC3E4FAE3199B72F123A892795DFC6835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01FD Signing time: Mon 03 Nov 2025 07:22:16 +0000 Manifest this update: Mon 03 Nov 2025 07:17:16 +0000 Manifest next update: Thu 06 Nov 2025 15:22:16 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: uz8bO7WLFtCYdq3lAU32+WExfOcZFLXYq5E8klZVqB8=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:54:bb:4b:c3:e4:fa:e3:19:9b:72:f1:23:a8:92:79:5d:fc:68:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Nov 3 07:17:16 2025 GMT Not After : Nov 6 15:22:16 2025 GMT Subject: CN=F2CEA09EB4D16E62940F556F4769790E1D6A674D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:60:fb:c4:6e:1a:37:56:33:21:2f:6c:df: ee:fa:7a:f0:4d:e5:ba:0a:69:00:35:2b:16:d3:11: 53:e4:c7:94:d8:c0:d5:7b:5d:66:e6:a6:1e:27:6b: 7a:3b:b8:b8:ad:91:b1:fe:16:6c:dc:39:05:0d:fc: d5:e9:41:d3:77:c5:cf:3d:b3:07:cd:f0:dc:c0:75: c4:f0:3d:ed:a8:10:57:5c:be:9a:5c:11:b7:c2:16: 7d:d5:13:9c:a0:10:f1:9d:e1:58:14:a3:b4:1c:b7: 8b:18:64:7b:3a:b7:e7:15:60:25:a5:b3:1e:94:c5: 3d:a1:73:b2:17:b4:46:27:50:cf:9a:9b:ec:bf:2f: 5d:39:80:b7:31:6e:23:f7:7c:1e:0d:d8:a0:a9:4c: 94:cc:eb:6f:82:7b:75:d3:b4:32:ce:cf:28:59:4b: 9d:a8:bd:e9:05:d5:11:37:5e:ad:e8:4a:72:55:8c: 0e:9b:9c:fb:76:f5:12:ed:d0:cf:4d:27:40:b8:a7: 85:93:69:d1:9a:52:b3:f5:b9:64:30:1a:43:4f:09: ab:b3:d6:f9:18:40:21:0b:e3:ed:e5:39:35:0d:d4: 03:36:6b:35:43:ce:40:bd:c4:71:2d:bc:3a:14:fc: 02:5d:36:6e:d5:7a:08:03:9e:14:b6:4f:2c:0d:9b: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CE:A0:9E:B4:D1:6E:62:94:0F:55:6F:47:69:79:0E:1D:6A:67:4D X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:59:00:35:e2:d8:3a:e9:30:a6:6c:2b:09:47:52:33:12:83: 11:cf:1d:5c:aa:26:13:ae:55:00:45:f4:32:de:47:d2:d3:41: 81:63:c3:88:97:eb:88:f9:94:d6:34:43:f5:8c:c9:6e:39:fb: 8f:cb:58:b9:22:08:82:5b:d0:3d:e6:4f:b4:a9:80:37:10:21: 21:66:a6:87:79:55:fb:11:c5:f3:dd:06:62:d5:3f:f4:ce:f5: 51:81:bd:86:dd:ca:9d:00:d5:8e:4e:62:87:cf:bb:c8:38:14: 68:4a:24:7e:b7:ff:d0:8b:a1:73:d0:15:8f:2c:ac:71:f7:ff: ef:c2:fb:71:2a:d0:94:d9:4e:93:77:3a:55:29:67:34:77:dc: c4:e0:14:fe:89:e8:d7:50:24:43:b2:07:14:92:85:97:ee:59: 38:bf:54:34:0b:e9:17:05:84:90:5c:cc:cc:ff:93:2e:b0:9b: 36:bf:cf:8c:31:f4:d6:5a:97:4c:a7:e9:16:a0:2d:6c:a7:92: 6d:48:d2:25:40:a9:82:b9:7a:16:f7:0a:67:4a:75:74:33:90: 51:fc:7b:40:94:2d:fb:6b:69:53:d7:2d:87:1e:c3:36:68:b6: 41:7c:1e:79:ec:5d:b0:44:ec:5b:6f:2d:36:2c:25:d5:96:d7: 71:42:23:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlS7S8Pk+uMZm3LxI6iSeV38aDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTExMDMwNzE3MTZaFw0yNTExMDYxNTIyMTZaMDMxMTAvBgNV BAMTKEYyQ0VBMDlFQjREMTZFNjI5NDBGNTU2RjQ3Njk3OTBFMUQ2QTY3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVmD7xG4aN1YzIS9s3+76evBN 5boKaQA1KxbTEVPkx5TYwNV7XWbmph4na3o7uLitkbH+FmzcOQUN/NXpQdN3xc89 swfN8NzAdcTwPe2oEFdcvppcEbfCFn3VE5ygEPGd4VgUo7Qct4sYZHs6t+cVYCWl sx6UxT2hc7IXtEYnUM+am+y/L105gLcxbiP3fB4N2KCpTJTM62+Ce3XTtDLOzyhZ S52ovekF1RE3Xq3oSnJVjA6bnPt29RLt0M9NJ0C4p4WTadGaUrP1uWQwGkNPCauz 1vkYQCEL4+3lOTUN1AM2azVDzkC9xHEtvDoU/AJdNm7VeggDnhS2TywNm4gBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8s6gnrTRbmKUD1VvR2l5Dh1qZ00wHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5ZADXi2DrpMKZsKwlHUjMSgxHPHVyqJhOu VQBF9DLeR9LTQYFjw4iX64j5lNY0Q/WMyW45+4/LWLkiCIJb0D3mT7SpgDcQISFm pod5VfsRxfPdBmLVP/TO9VGBvYbdyp0A1Y5OYofPu8g4FGhKJH63/9CLoXPQFY8s rHH3/+/C+3Eq0JTZTpN3OlUpZzR33MTgFP6J6NdQJEOyBxSShZfuWTi/VDQL6RcF hJBczMz/ky6wmza/z4wx9NZal0yn6RagLWynkm1I0iVAqYK5ehb3CmdKdXQzkFH8 e0CULftraVPXLYcewzZotkF8HnnsXbBE7FtvLTYsJdWW13FCI2M= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:27 2025 by rpki-client