$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: SgFEj5f/anHygBRcFH80fKHRie38fJkNj4vULuXcU7w= Subject key identifier: 5D:B0:6A:00:06:38:62:4C:DB:0F:84:B9:BE:A2:6A:61:19:53:3D:C8 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 2F55BB57EACD5F5073D6DBA745DE3EB33522D7E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0257 Signing time: Sun 02 Nov 2025 23:11:43 +0000 Manifest this update: Sun 02 Nov 2025 23:06:43 +0000 Manifest next update: Thu 06 Nov 2025 09:59:43 +0000 Files and hashes: 1: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) 2: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 3: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 4: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 5: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: tXDI3TndrYEmrAI+0i6QG3OHJXuZOxDA8MCjEBo1eoo=) 6: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:55:bb:57:ea:cd:5f:50:73:d6:db:a7:45:de:3e:b3:35:22:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Nov 2 23:06:43 2025 GMT Not After : Nov 6 09:59:43 2025 GMT Subject: CN=5DB06A000638624CDB0F84B9BEA26A6119533DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:2e:54:68:f2:44:ed:cd:d3:67:97:7c:16: f5:ad:55:8c:ea:ae:93:91:28:62:b9:1c:b1:3b:e8: 68:4d:eb:0c:6c:2e:48:9f:b9:22:4d:97:56:e6:bb: b2:6c:71:ec:67:54:7d:dc:ef:de:27:f2:fc:9c:0f: 6c:2f:00:18:cc:e0:8a:3d:b1:58:ff:d5:58:d5:21: 49:f6:87:eb:46:87:55:95:69:1a:0c:25:b4:bf:14: 82:b4:35:bf:f7:d3:6c:e4:20:4e:d5:68:07:08:85: a7:20:fa:cf:99:75:91:21:f9:bb:c5:b6:f1:55:e2: 9c:46:5c:d2:0d:b0:78:03:36:6f:75:2c:79:f2:83: 88:5f:9f:d0:4f:a8:b3:a6:9d:50:ca:88:4e:b8:43: 69:14:d2:58:cc:43:66:91:91:9b:96:6f:98:0e:59: 71:c7:c2:6a:50:09:41:95:43:c4:7e:0e:1f:50:d5: dd:11:0b:fb:f2:3d:37:e6:5f:2b:75:bb:b6:33:6b: 15:12:d1:59:94:43:83:81:7a:fa:6a:3b:94:9f:5c: 5f:f9:d5:fd:be:a4:2b:00:ed:6d:6c:49:04:c9:8d: 0c:3c:0e:aa:b9:57:7a:b0:40:84:86:4b:d5:02:68: cf:1f:dd:d2:26:22:43:e0:e9:fa:5e:5e:18:da:d9: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B0:6A:00:06:38:62:4C:DB:0F:84:B9:BE:A2:6A:61:19:53:3D:C8 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:e5:bd:26:40:b2:79:7f:fa:9c:dd:ba:2f:31:bc:1b:87: 5f:c0:f0:70:f7:92:05:66:0d:6c:5f:b4:12:e6:19:57:89:df: d3:c5:35:71:45:22:0a:3e:38:f9:67:22:e3:68:2f:c3:bc:3e: 90:69:24:33:f1:fe:c7:b4:ac:a7:cf:9e:ac:7f:b9:ca:ee:da: 80:35:cd:20:d8:c8:d3:eb:10:de:4a:63:12:db:6d:a5:78:e6: cf:49:80:a9:9a:8f:38:d4:3e:d3:10:50:3f:08:59:ff:aa:76: 1e:20:62:1d:b6:75:20:db:a0:ad:10:70:65:29:f8:76:78:42: 4b:bf:b3:0c:d2:ac:b9:b1:31:db:5a:0d:ea:b7:9a:67:2d:a9: d9:bc:64:1d:a3:02:88:61:71:dd:d1:ba:8d:b6:a8:28:6d:74: 83:51:01:a6:3e:34:e1:c9:9d:6d:76:94:51:3b:2b:7a:18:e1: 24:73:d3:ee:73:b5:37:45:b5:a4:09:f8:a2:b3:d4:0c:4e:e0: 09:69:8d:0e:03:a3:2f:da:0d:52:72:ef:80:a7:73:21:dd:31: ee:9a:31:e2:00:ab:ba:b9:be:11:b2:0c:3b:91:fd:13:1a:4a: 5e:84:69:d1:9f:8a:f1:2c:55:e1:d4:65:43:42:19:9c:fe:71: 70:b9:7a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1W7V+rNX1Bz1tunRd4+szUi1+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTExMDIyMzA2NDNaFw0yNTExMDYwOTU5NDNaMDMxMTAvBgNV BAMTKDVEQjA2QTAwMDYzODYyNENEQjBGODRCOUJFQTI2QTYxMTk1MzNEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0C5UaPJE7c3TZ5d8FvWtVYzq rpORKGK5HLE76GhN6wxsLkifuSJNl1bmu7JscexnVH3c794n8vycD2wvABjM4Io9 sVj/1VjVIUn2h+tGh1WVaRoMJbS/FIK0Nb/302zkIE7VaAcIhacg+s+ZdZEh+bvF tvFV4pxGXNINsHgDNm91LHnyg4hfn9BPqLOmnVDKiE64Q2kU0ljMQ2aRkZuWb5gO WXHHwmpQCUGVQ8R+Dh9Q1d0RC/vyPTfmXyt1u7YzaxUS0VmUQ4OBevpqO5SfXF/5 1f2+pCsA7W1sSQTJjQw8Dqq5V3qwQISGS9UCaM8f3dImIkPg6fpeXhja2SzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbBqAAY4YkzbD4S5vqJqYRlTPcgwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI535b0mQLJ5f/qc3bovMbwbh1/A8HD3kgVm DWxftBLmGVeJ39PFNXFFIgo+OPlnIuNoL8O8PpBpJDPx/se0rKfPnqx/ucru2oA1 zSDYyNPrEN5KYxLbbaV45s9JgKmajzjUPtMQUD8IWf+qdh4gYh22dSDboK0QcGUp +HZ4Qku/swzSrLmxMdtaDeq3mmctqdm8ZB2jAohhcd3Ruo22qChtdINRAaY+NOHJ nW12lFE7K3oY4SRz0+5ztTdFtaQJ+KKz1AxO4AlpjQ4Doy/aDVJy74CncyHdMe6a MeIAq7q5vhGyDDuR/RMaSl6EadGfivEsVeHUZUNCGZz+cXC5euI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:15 2025 by rpki-client