$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft File: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json) Hash identifier: 8VKQV845XRlymSa2xECOKafYMo31vo0shYU1CH0hfd0= Subject key identifier: 15:00:02:B8:ED:90:41:1B:98:71:EA:F1:06:52:61:60:0E:6B:A0:6D Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Certificate serial: 503F51F1F6C626F67C952EC25DD429B39D66E0B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft Manifest number: 0201 Signing time: Mon 03 Nov 2025 20:30:05 +0000 Manifest this update: Mon 03 Nov 2025 20:25:05 +0000 Manifest next update: Thu 06 Nov 2025 20:35:05 +0000 Files and hashes: 1: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: BndgMTBY3InUT3nlElcQuho2yJ3Q0qBvTw1u3VsMdOU=) 2: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=) 3: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=) 4: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:51:f1:f6:c6:26:f6:7c:95:2e:c2:5d:d4:29:b3:9d:66:e0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Validity Not Before: Nov 3 20:25:05 2025 GMT Not After : Nov 6 20:35:05 2025 GMT Subject: CN=150002B8ED90411B9871EAF1065261600E6BA06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:40:7a:32:83:23:06:87:fa:93:46:77:87: a0:d2:ce:56:1d:33:7d:a3:21:b8:67:50:5b:37:cd: 60:2f:c2:6c:77:e8:fb:06:11:41:25:da:e0:25:23: d5:42:9b:a2:58:f8:b0:e1:bb:32:af:2f:23:42:26: e1:86:6b:c4:44:f5:ea:89:78:f5:00:ec:12:4b:2a: 76:13:dc:1f:20:0d:33:75:24:3f:a4:fe:fc:d7:1a: 7d:1a:69:a8:fb:5b:97:53:c4:b6:b9:d6:c1:1a:a2: a5:b3:31:9b:29:0d:51:34:41:55:fe:70:5d:db:55: c5:53:f1:79:84:9d:5e:44:b7:9e:12:5b:e4:17:b6: 9b:50:53:1f:a4:4d:ec:93:31:c0:aa:50:97:12:5c: e8:44:20:43:52:6e:ce:00:20:25:20:20:d1:0c:fa: 26:8b:8e:47:75:89:a2:41:26:fd:85:55:03:37:90: 32:97:48:23:62:f3:08:be:83:84:b0:8c:ac:2a:f6: c8:6b:61:53:40:4e:10:01:d2:01:e9:c3:dc:1f:1d: 81:c6:b9:8f:96:08:a4:32:7f:a6:ca:fb:fd:d1:ab: 87:4d:dc:42:82:0a:81:36:e6:84:5c:be:10:f5:29: ba:61:14:bd:19:19:4d:cd:dd:25:85:cd:f5:74:5f: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:02:B8:ED:90:41:1B:98:71:EA:F1:06:52:61:60:0E:6B:A0:6D X509v3 Authority Key Identifier: keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:41:5e:f6:5a:50:0b:7c:2d:60:ab:3b:a1:ef:15:fa:ae:41: a4:14:a6:1c:34:6e:5f:b9:e3:62:9a:9e:c8:74:eb:25:36:cd: b0:cf:93:74:f6:07:51:6e:fc:c6:6e:92:ea:71:77:a8:5e:72: e0:48:83:b0:e1:c4:82:92:4b:0e:04:8a:42:ec:46:12:9c:c1: b6:32:64:80:3f:8b:42:65:05:50:c9:a9:59:67:c9:bf:3b:7f: cd:5e:d9:fe:c7:3f:f0:7a:9e:ba:9a:b3:5b:4b:9a:4b:5f:19: 62:01:dd:c3:e7:41:c9:a7:3d:a6:a7:35:01:c6:62:31:b6:d0: af:56:e8:a6:c7:88:59:eb:89:fd:5b:18:36:a5:9c:bf:96:f1: 40:1a:b4:0c:f3:3e:ce:47:99:97:d0:dd:d5:b1:73:56:14:4e: 76:54:20:67:b2:ff:fa:53:2b:6b:cc:82:eb:0b:87:fb:d1:64: ad:55:58:6c:83:12:d3:21:02:74:b5:a7:8c:72:e0:63:6c:2f: ba:0c:3c:cb:82:b1:c9:6d:4f:4a:ae:23:41:ac:03:f7:c9:ea: 33:0a:0d:7d:55:8f:e8:43:d8:d9:2f:65:95:5f:ef:03:83:8d: 2d:97:b2:0e:fd:da:b9:70:db:13:1c:49:b2:97:27:2d:0f:3b: e7:ca:53:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUD9R8fbGJvZ8lS7CXdQps51m4LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF MDY2RUZGMzAeFw0yNTExMDMyMDI1MDVaFw0yNTExMDYyMDM1MDVaMDMxMTAvBgNV BAMTKDE1MDAwMkI4RUQ5MDQxMUI5ODcxRUFGMTA2NTI2MTYwMEU2QkEwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxykB6MoMjBof6k0Z3h6DSzlYd M32jIbhnUFs3zWAvwmx36PsGEUEl2uAlI9VCm6JY+LDhuzKvLyNCJuGGa8RE9eqJ ePUA7BJLKnYT3B8gDTN1JD+k/vzXGn0aaaj7W5dTxLa51sEaoqWzMZspDVE0QVX+ cF3bVcVT8XmEnV5Et54SW+QXtptQUx+kTeyTMcCqUJcSXOhEIENSbs4AICUgINEM +iaLjkd1iaJBJv2FVQM3kDKXSCNi8wi+g4SwjKwq9shrYVNAThAB0gHpw9wfHYHG uY+WCKQyf6bK+/3Rq4dN3EKCCoE25oRcvhD1KbphFL0ZGU3N3SWFzfV0X4C7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQACuO2QQRuYcerxBlJhYA5roG0wHwYDVR0j BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4 NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2 RUZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0 RUVFMDY2RUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5BXvZaUAt8LWCrO6HvFfquQaQUphw0bl+5 42Kansh06yU2zbDPk3T2B1Fu/MZukupxd6hecuBIg7DhxIKSSw4EikLsRhKcwbYy ZIA/i0JlBVDJqVlnyb87f81e2f7HP/B6nrqas1tLmktfGWIB3cPnQcmnPaanNQHG YjG20K9W6KbHiFnrif1bGDalnL+W8UAatAzzPs5HmZfQ3dWxc1YUTnZUIGey//pT K2vMgusLh/vRZK1VWGyDEtMhAnS1p4xy4GNsL7oMPMuCscltT0quI0GsA/fJ6jMK DX1Vj+hD2NkvZZVf7wODjS2Xsg792rlw2xMcSbKXJy0PO+fKU0Q= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:33 2025 by rpki-client