$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json) Hash identifier: +9wPGXbeNdtKI9O5m9M6ws+UCRtKINiEPWt2BCR/RbM= Subject key identifier: 4D:0E:31:BE:4E:F5:BE:1E:3C:28:DA:AC:52:78:13:26:06:27:29:C0 Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391 Certificate serial: 284DBC83E49826AF90D292393489FE97BE97EE32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 02:10:57 +0000 Manifest this update: Tue 04 Nov 2025 02:05:57 +0000 Manifest next update: Fri 07 Nov 2025 05:31:57 +0000 Files and hashes: 1: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: 6Tj9Szl8ryQMguITJG5FLluRmEOHaCBzd2S5DThxpmo=) 2: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: 40JRxNw6stZoA1fUKj/zKco7HRJV/HtMAMb74Ejikyo=) 3: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 4SzxYxsm34j+//J0Zj7fCtaaSGBPCJKKVqr4apFWEx0=) 4: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4d:bc:83:e4:98:26:af:90:d2:92:39:34:89:fe:97:be:97:ee:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391 Validity Not Before: Nov 4 02:05:57 2025 GMT Not After : Nov 7 05:31:57 2025 GMT Subject: CN=4D0E31BE4EF5BE1E3C28DAAC52781326062729C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:91:b4:32:39:a9:61:2c:71:35:51:fd:4a: 44:90:e9:11:31:60:54:a1:46:91:3b:85:4d:82:7d: 71:45:85:5c:1b:8c:fe:aa:5f:51:62:55:91:15:0a: 9b:a0:f3:ce:f8:e3:35:dc:19:ae:2a:d4:c9:72:2e: 5a:f3:6b:75:cf:f3:50:a7:3a:b1:1c:35:ae:bc:4a: f3:19:6e:22:f9:06:a3:98:91:66:34:d9:9e:44:8b: 4b:95:8e:84:48:b1:4e:c8:fa:59:91:ee:0a:1b:1e: 4b:aa:51:f6:dd:c0:60:a5:3b:56:04:f0:51:78:a0: 2c:75:e5:26:49:22:e7:35:2e:af:d5:ef:e9:60:71: 44:86:4e:fa:8b:1f:67:51:f4:b5:d3:eb:e2:98:c6: 45:91:33:fc:45:1b:37:17:6a:2a:36:19:4b:ca:88: 15:b7:f1:a9:4b:81:09:27:f8:b1:f7:b7:ac:c1:b9: 53:48:0b:0b:89:80:a6:8f:c3:09:b6:e4:90:98:dc: 2a:3e:1c:2e:54:40:5c:34:ea:a0:a1:23:b1:18:16: fa:89:6a:a7:ad:88:4b:46:c7:5f:6e:df:50:2d:a6: 4b:17:e8:d6:9f:6e:f4:23:9e:e9:0e:c0:22:db:01: 71:46:25:72:48:7b:21:65:17:1c:fa:9f:f7:b3:94: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:31:BE:4E:F5:BE:1E:3C:28:DA:AC:52:78:13:26:06:27:29:C0 X509v3 Authority Key Identifier: keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:20:ae:e9:28:a2:e0:53:3b:07:41:f2:ae:41:01:77:57: 9b:c3:ce:61:e2:4b:ce:ba:26:e3:7b:eb:47:e9:22:50:39:aa: 6b:9d:1f:82:98:7e:db:7b:63:2f:16:2f:6f:cd:0a:1d:ed:df: 88:ce:83:b0:a9:03:94:b7:ad:75:12:13:2a:e4:54:cf:7f:81: a3:07:75:d7:eb:81:61:8e:33:c1:db:82:df:50:b4:2d:de:5f: 46:a7:58:a9:02:37:29:8d:b7:3f:a8:25:2d:31:ba:eb:d0:33: eb:0e:da:15:4a:0a:0d:22:61:1c:b0:c6:76:8f:ef:9a:2e:46: 3e:fc:c9:30:e2:36:e6:17:6d:a5:0a:04:63:25:3a:5b:e9:9e: 1b:c2:fe:43:2d:8a:d3:64:c5:52:8d:ec:dc:20:e2:50:35:99: 3d:53:39:b6:3a:4f:9c:e2:5b:0c:7b:b1:4b:1c:b7:11:0b:d5: 68:db:bd:4f:b4:2d:21:c0:12:b7:48:f2:98:32:92:a5:38:d5: 5d:b9:7b:ad:90:e5:5e:3d:0b:57:c1:71:b1:bc:39:e9:cb:e3: 48:c0:e1:14:98:6e:da:af:13:44:48:17:62:39:3f:1d:6b:37: d4:24:0e:24:49:f2:73:e2:30:f9:dd:cd:83:69:e0:64:11:c8: 9f:78:66:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKE28g+SYJq+Q0pI5NIn+l76X7jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3 MTE2MTM5MTAeFw0yNTExMDQwMjA1NTdaFw0yNTExMDcwNTMxNTdaMDMxMTAvBgNV BAMTKDREMEUzMUJFNEVGNUJFMUUzQzI4REFBQzUyNzgxMzI2MDYyNzI5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rJG0MjmpYSxxNVH9SkSQ6REx YFShRpE7hU2CfXFFhVwbjP6qX1FiVZEVCpug88744zXcGa4q1MlyLlrza3XP81Cn OrEcNa68SvMZbiL5BqOYkWY02Z5Ei0uVjoRIsU7I+lmR7gobHkuqUfbdwGClO1YE 8FF4oCx15SZJIuc1Lq/V7+lgcUSGTvqLH2dR9LXT6+KYxkWRM/xFGzcXaio2GUvK iBW38alLgQkn+LH3t6zBuVNICwuJgKaPwwm25JCY3Co+HC5UQFw06qChI7EYFvqJ aqetiEtGx19u31AtpksX6NafbvQjnukOwCLbAXFGJXJIeyFlFxz6n/ezlGI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQ4xvk71vh48KNqsUngTJgYnKcAwHwYDVR0j BBgwFoAUeCZZp/ZDMCkkijihxo8umXEWE5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTRlMDRmYS03MTg4LTRmNGYtODFiYi0zMzAzODlmODcwMTUvMC83ODI2NTlBN0Y2 NDMzMDI5MjQ4QTM4QTFDNjhGMkU5OTcxMTYxMzkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3MTE2 MTM5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJF OTk3MTE2MTM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9AIK7pKKLgUzsHQfKuQQF3V5vDzmHiS866 JuN760fpIlA5qmudH4KYftt7Yy8WL2/NCh3t34jOg7CpA5S3rXUSEyrkVM9/gaMH ddfrgWGOM8Hbgt9QtC3eX0anWKkCNymNtz+oJS0xuuvQM+sO2hVKCg0iYRywxnaP 75ouRj78yTDiNuYXbaUKBGMlOlvpnhvC/kMtitNkxVKN7Nwg4lA1mT1TObY6T5zi Wwx7sUsctxEL1WjbvU+0LSHAErdI8pgykqU41V25e62Q5V49C1fBcbG8OenL40jA 4RSYbtqvE0RIF2I5Px1rN9QkDiRJ8nPiMPndzYNp4GQRyJ94Zr8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:32 2025 by rpki-client