$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: j/3LKoSBWMh6/4CbmJkQ/ykuYpOt/3SRpEHs+4MLe9g= Subject key identifier: 4C:0A:A0:4B:85:75:C8:34:4B:05:AC:E4:FD:5B:80:8D:8A:61:40:C6 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 4811865E9BB00F9A5F6426643CD90F9BCBB4715A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 0391 Signing time: Sun 02 Nov 2025 21:52:14 +0000 Manifest this update: Sun 02 Nov 2025 21:47:14 +0000 Manifest next update: Thu 06 Nov 2025 06:12:14 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: L6euFUWCkC/RqTvsZkKj6aX779NlvW3AA0rRcr4ijXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:11:86:5e:9b:b0:0f:9a:5f:64:26:64:3c:d9:0f:9b:cb:b4:71:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Nov 2 21:47:14 2025 GMT Not After : Nov 6 06:12:14 2025 GMT Subject: CN=4C0AA04B8575C8344B05ACE4FD5B808D8A6140C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:58:72:db:b4:c0:85:b5:c2:a2:24:6b:85: 0d:2a:85:04:d1:f6:1a:f8:07:c8:93:2f:e6:3b:1c: e6:27:4c:db:eb:9a:75:3b:2e:09:8e:e6:c5:c6:64: 43:be:b7:05:81:60:ba:48:c1:ed:0b:86:a3:0e:4f: e2:62:bf:5b:76:7e:53:2e:b7:43:c1:f7:cb:b8:cc: 50:95:a0:d8:60:43:75:21:ad:22:b7:c2:f2:28:09: f6:3f:6e:ad:ab:ec:bf:6c:22:cc:c6:60:ea:cd:fe: 1e:19:66:4c:b4:3d:f9:f6:a5:a6:0a:da:be:ad:94: 7d:a9:82:ea:f1:85:6b:38:6b:4e:a2:a8:c3:c4:d2: 1b:da:23:5a:ea:d0:31:6d:b0:3c:da:11:fc:42:fe: 1f:61:ea:f7:c0:72:bf:a4:57:09:90:cb:bb:c3:3a: 1e:85:11:2b:be:fb:3a:e2:c9:e7:28:b0:49:db:7a: c9:83:a7:f6:ec:df:16:76:75:ce:ae:cd:9f:fb:8e: 7f:0b:07:ed:7f:cd:d7:3b:29:f0:59:41:b9:fc:bf: a7:6e:dc:b6:3e:07:b9:8d:ae:59:39:5d:0e:4e:b8: a1:72:4c:a4:7c:82:cb:1f:2f:cc:1c:3e:42:19:fc: a3:6d:e6:ef:81:08:d5:80:9f:24:ca:9f:c4:e8:e8: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0A:A0:4B:85:75:C8:34:4B:05:AC:E4:FD:5B:80:8D:8A:61:40:C6 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9f:1a:71:d5:67:41:80:1b:57:31:cc:70:3b:4b:63:8b:35: 74:b1:89:f0:87:0d:24:e0:16:b1:92:63:b2:62:74:16:e2:83: c0:ed:72:5b:6e:73:68:fd:80:dd:bb:41:7b:cd:59:d8:42:51: 3f:d7:8f:1f:0c:5d:d7:e4:f2:a6:4b:95:92:2e:49:bc:84:f4: 9a:18:6f:7f:e5:d0:99:34:e5:7e:1b:a4:54:8b:da:db:38:1b: ee:70:21:50:35:70:92:be:91:9f:91:99:c3:e4:3f:e6:19:44: 9b:7e:dc:97:44:59:0e:33:79:45:60:c0:33:71:45:64:4b:0b: 50:24:99:d5:b5:6e:3f:68:32:98:34:94:1b:d7:94:a2:b4:20: be:03:d9:25:7a:0c:dc:2b:d8:06:f0:e4:85:5a:77:5d:fa:69: aa:8b:82:af:3e:e7:8c:77:23:09:dc:50:0f:d5:3d:af:12:be: a4:52:05:f8:32:d8:c9:33:dd:ba:9c:50:67:d1:ee:ec:a5:dd: 9c:0d:b2:76:42:e2:bc:b8:77:16:0e:13:40:54:7f:e3:2a:7b: ac:f3:04:b6:57:60:3f:72:8f:57:76:0d:7b:3c:38:e3:cc:3c: d1:a9:b1:f2:ab:8e:d9:fb:96:47:9d:16:71:11:e4:fc:23:37: 11:da:01:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBGGXpuwD5pfZCZkPNkPm8u0cVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTExMDIyMTQ3MTRaFw0yNTExMDYwNjEyMTRaMDMxMTAvBgNV BAMTKDRDMEFBMDRCODU3NUM4MzQ0QjA1QUNFNEZENUI4MDhEOEE2MTQwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwVhy27TAhbXCoiRrhQ0qhQTR 9hr4B8iTL+Y7HOYnTNvrmnU7LgmO5sXGZEO+twWBYLpIwe0LhqMOT+Jiv1t2flMu t0PB98u4zFCVoNhgQ3UhrSK3wvIoCfY/bq2r7L9sIszGYOrN/h4ZZky0Pfn2paYK 2r6tlH2pgurxhWs4a06iqMPE0hvaI1rq0DFtsDzaEfxC/h9h6vfAcr+kVwmQy7vD Oh6FESu++zriyecosEnbesmDp/bs3xZ2dc6uzZ/7jn8LB+1/zdc7KfBZQbn8v6du 3LY+B7mNrlk5XQ5OuKFyTKR8gssfL8wcPkIZ/KNt5u+BCNWAnyTKn8To6M6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAqgS4V1yDRLBazk/VuAjYphQMYwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmfGnHVZ0GAG1cxzHA7S2OLNXSxifCHDSTg FrGSY7JidBbig8Dtcltuc2j9gN27QXvNWdhCUT/Xjx8MXdfk8qZLlZIuSbyE9JoY b3/l0Jk05X4bpFSL2ts4G+5wIVA1cJK+kZ+RmcPkP+YZRJt+3JdEWQ4zeUVgwDNx RWRLC1AkmdW1bj9oMpg0lBvXlKK0IL4D2SV6DNwr2Abw5IVad136aaqLgq8+54x3 IwncUA/VPa8SvqRSBfgy2Mkz3bqcUGfR7uyl3ZwNsnZC4ry4dxYOE0BUf+Mqe6zz BLZXYD9yj1d2DXs8OOPMPNGpsfKrjtn7lkedFnER5PwjNxHaAbs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:56 2025 by rpki-client