$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: yLEd6K2E0Aa6CnDBlvqS0Bm3RcqUVPXotkz5sZgvMyY= Subject key identifier: 9B:05:D2:69:64:D6:29:EB:61:B6:05:0D:FC:D6:FE:47:13:9C:AD:43 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 7B575488CC8C7DFA2C6CDAEA6ADBE9A0C17142A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 01AB Signing time: Sun 02 Nov 2025 13:00:38 +0000 Manifest this update: Sun 02 Nov 2025 12:55:38 +0000 Manifest next update: Wed 05 Nov 2025 13:22:38 +0000 Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) 2: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: py9CKqZTUsCKlMSlvIE+19wEbNnHfRlhwsQV7U/bVb0=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:57:54:88:cc:8c:7d:fa:2c:6c:da:ea:6a:db:e9:a0:c1:71:42:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Nov 2 12:55:38 2025 GMT Not After : Nov 5 13:22:38 2025 GMT Subject: CN=9B05D26964D629EB61B6050DFCD6FE47139CAD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:d4:92:c1:0a:9f:d1:59:d9:18:b4:05:1f: 7b:48:79:a7:3d:ed:3e:39:74:bf:72:9e:6d:6f:35: 75:d6:e3:18:5a:e8:46:4c:34:e4:9f:da:ed:91:75: 90:93:6b:91:5f:7f:bc:8b:c1:15:5e:59:9e:57:44: 0f:eb:48:40:85:aa:5b:18:b1:9e:92:4a:7e:1c:c4: a5:7c:37:4f:df:cc:a8:d6:72:60:89:53:4b:91:17: 0b:b3:91:4e:be:a3:fc:7a:67:fd:7f:90:14:ea:e8: 31:d1:71:17:7d:7c:c5:63:98:d0:db:57:66:af:c8: 17:45:8e:8c:95:d5:87:5f:e2:9d:b2:08:fc:56:89: ef:5b:4d:0e:eb:81:32:28:21:91:b0:d4:45:88:48: 87:21:bb:21:94:ae:4e:2d:6d:b6:a6:cc:50:5e:2c: 1a:cf:bc:01:86:50:c5:89:54:87:5e:39:71:37:9f: e0:d4:6a:b7:b8:47:8f:c7:ba:74:b9:54:36:98:a9: 25:5f:ff:ea:5c:aa:25:d5:9e:85:8d:24:1d:c7:0f: 2b:1f:0a:ed:e7:b2:a4:fc:9c:3e:af:d0:25:73:b0: e7:1e:e7:a8:46:79:67:d3:24:46:f8:37:25:7f:b5: 8c:f2:f0:c4:cf:39:52:96:a8:27:1b:df:17:42:d0: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:D2:69:64:D6:29:EB:61:B6:05:0D:FC:D6:FE:47:13:9C:AD:43 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8e:c4:c6:6e:a3:78:3f:9c:70:8d:9b:4d:2f:5e:de:57:b0: bc:91:d4:7a:a2:8a:68:17:ac:2d:38:4d:0f:8a:09:39:c0:79: f7:c6:04:30:55:d4:28:4c:02:36:35:fd:21:4d:76:33:c5:68: b3:2b:9b:e3:3c:c1:8c:dc:1d:34:f0:73:5c:d5:2f:6b:07:27: f3:19:dc:d8:ac:04:6c:b9:48:29:d9:90:36:1f:3b:a0:40:2e: 7f:b5:d6:a2:4d:8a:f1:42:92:62:53:84:c9:7f:b3:2d:00:2d: e4:6e:f5:c7:8f:f8:4b:da:2e:83:dc:78:0e:4d:97:2e:f5:e0: 8f:74:6d:2d:a3:89:33:e6:15:6f:ca:a2:06:a5:e2:e6:15:14: 3e:a1:96:b9:2f:65:5e:76:59:80:a1:83:dd:59:49:14:08:ce: c3:40:4d:76:97:f7:34:1b:40:f0:19:78:3e:7c:af:c3:ac:2e: 31:ca:a3:30:f3:cb:f4:9e:4b:58:f0:63:0e:2e:65:cc:92:e9: b6:c2:8f:ea:ee:57:b4:98:09:60:db:d9:05:fd:35:9d:9c:51: 78:6d:9a:10:fc:9e:f7:3a:cd:af:5c:cb:3d:9f:a9:fe:0d:30: f8:d0:a6:84:a7:0f:f6:c8:a4:8b:c3:e3:cd:0c:ca:ab:79:43: 7e:d1:b1:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1dUiMyMffosbNrqatvpoMFxQqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTExMDIxMjU1MzhaFw0yNTExMDUxMzIyMzhaMDMxMTAvBgNV BAMTKDlCMDVEMjY5NjRENjI5RUI2MUI2MDUwREZDRDZGRTQ3MTM5Q0FENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAtSSwQqf0VnZGLQFH3tIeac9 7T45dL9ynm1vNXXW4xha6EZMNOSf2u2RdZCTa5Fff7yLwRVeWZ5XRA/rSECFqlsY sZ6SSn4cxKV8N0/fzKjWcmCJU0uRFwuzkU6+o/x6Z/1/kBTq6DHRcRd9fMVjmNDb V2avyBdFjoyV1Ydf4p2yCPxWie9bTQ7rgTIoIZGw1EWISIchuyGUrk4tbbamzFBe LBrPvAGGUMWJVIdeOXE3n+DUare4R4/HunS5VDaYqSVf/+pcqiXVnoWNJB3HDysf Cu3nsqT8nD6v0CVzsOce56hGeWfTJEb4NyV/tYzy8MTPOVKWqCcb3xdC0AmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwXSaWTWKethtgUN/Nb+RxOcrUMwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKOxMZuo3g/nHCNm00vXt5XsLyR1HqiimgX rC04TQ+KCTnAeffGBDBV1ChMAjY1/SFNdjPFaLMrm+M8wYzcHTTwc1zVL2sHJ/MZ 3NisBGy5SCnZkDYfO6BALn+11qJNivFCkmJThMl/sy0ALeRu9ceP+EvaLoPceA5N ly714I90bS2jiTPmFW/Kogal4uYVFD6hlrkvZV52WYChg91ZSRQIzsNATXaX9zQb QPAZeD58r8OsLjHKozDzy/SeS1jwYw4uZcyS6bbCj+ruV7SYCWDb2QX9NZ2cUXht mhD8nvc6za9cyz2fqf4NMPjQpoSnD/bIpIvD480Myqt5Q37RsVM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:34 2025 by rpki-client