$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: 1fvvUu3r3gyrwrwcfaxJ7EOKUAPiG4/BlEw+iSwL3c8= Subject key identifier: 87:BE:C2:C6:73:1F:69:60:45:CE:E4:89:D1:B4:0E:93:7A:05:F1:8F Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 08B0013715171D3623243BB0E051AFB5919C9653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0325 Signing time: Tue 04 Nov 2025 10:31:28 +0000 Manifest this update: Tue 04 Nov 2025 10:26:28 +0000 Manifest next update: Fri 07 Nov 2025 12:12:28 +0000 Files and hashes: 1: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: JdvcWw88jFxu0wGjyKaU+zp3VY9n16XSVQYVwoi3G4E=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b0:01:37:15:17:1d:36:23:24:3b:b0:e0:51:af:b5:91:9c:96:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Nov 4 10:26:28 2025 GMT Not After : Nov 7 12:12:28 2025 GMT Subject: CN=87BEC2C6731F696045CEE489D1B40E937A05F18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:1d:8e:4b:48:0b:a9:06:e3:21:c9:8b:26: f1:24:11:6c:5d:97:1d:32:4b:4c:d9:cc:85:7e:76: 9a:64:b1:72:09:67:c7:a1:08:62:ea:26:00:99:e4: 52:1e:2a:aa:87:d9:ad:f9:a8:8e:16:50:21:7d:ec: cf:64:79:30:63:f6:4f:f1:e8:02:70:72:9d:dc:71: 67:60:f4:b6:89:e1:c2:f2:9f:ce:a6:23:35:b0:06: cf:9e:2f:26:5e:3d:50:6c:e4:55:a1:c4:b5:a1:dc: b9:c5:33:db:92:68:9c:f2:8a:d6:c4:2b:b3:a3:7e: e9:42:dd:5a:84:61:41:77:d4:51:72:6c:b0:8f:04: 83:6d:0f:85:7e:02:d6:69:4e:cb:58:d8:b4:8f:0b: 00:77:ff:24:81:b1:87:d1:4e:28:52:77:f9:9d:6a: 81:9b:fc:e3:b7:c6:0d:f2:4c:5e:16:97:f2:9a:5f: b0:c7:8b:6e:7e:73:77:b6:24:52:a1:d5:08:d7:82: 51:e0:75:e5:ea:8e:7e:2e:08:54:39:89:ee:bd:a0: 16:9a:4a:e6:c9:6f:44:32:f6:d4:98:b5:e4:11:74: 13:15:c8:54:cb:9f:0d:ae:0c:ca:2b:74:64:9c:f6: 03:93:7d:4b:ae:2b:25:91:f0:2b:d8:83:f2:59:8b: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BE:C2:C6:73:1F:69:60:45:CE:E4:89:D1:B4:0E:93:7A:05:F1:8F X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3f:91:71:3d:a0:db:9e:27:ea:86:f9:4c:69:ab:31:19:da: c1:49:6a:74:e3:75:5d:7d:2a:92:58:2f:77:6a:82:08:6c:0b: 1c:5a:95:4f:d8:3c:1a:aa:00:b3:10:75:c2:06:7b:6a:e4:0b: 10:9d:8b:c3:cc:5d:dc:55:85:0c:55:fc:77:0f:a1:62:54:9d: 0d:b0:38:54:28:a3:2a:91:06:f0:c3:b0:a6:f6:c0:3d:9f:73: bf:1b:2c:d4:1a:16:5c:dc:d0:99:07:98:d0:bc:b3:ec:00:1f: 0f:d4:d4:c2:6a:76:5b:94:22:59:87:4a:5c:2d:88:db:ca:ae: 72:64:e2:dd:74:82:12:44:b9:7c:44:68:38:19:dd:74:98:72: 32:c8:b6:3d:78:aa:c4:5b:74:f4:d2:36:3c:a4:66:7d:de:54: ca:5c:eb:45:73:3a:e5:12:88:9e:bf:af:33:f7:c0:1a:30:f4: e9:e7:77:25:4e:27:01:b7:f3:cb:be:91:12:15:ec:09:f4:c8: c7:fb:53:ec:c2:08:a3:e0:96:23:c7:d4:c6:79:94:6c:40:3e: 00:51:57:d3:e8:e3:a4:18:c3:12:bf:c2:d3:d3:e2:52:ad:b6: 91:7a:26:ca:ee:0a:4e:ed:7a:6e:f8:7f:3c:8b:c8:7c:be:60: 17:dd:1b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLABNxUXHTYjJDuw4FGvtZGcllMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNTExMDQxMDI2MjhaFw0yNTExMDcxMjEyMjhaMDMxMTAvBgNV BAMTKDg3QkVDMkM2NzMxRjY5NjA0NUNFRTQ4OUQxQjQwRTkzN0EwNUYxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdB2OS0gLqQbjIcmLJvEkEWxd lx0yS0zZzIV+dppksXIJZ8ehCGLqJgCZ5FIeKqqH2a35qI4WUCF97M9keTBj9k/x 6AJwcp3ccWdg9LaJ4cLyn86mIzWwBs+eLyZePVBs5FWhxLWh3LnFM9uSaJzyitbE K7OjfulC3VqEYUF31FFybLCPBINtD4V+AtZpTstY2LSPCwB3/ySBsYfRTihSd/md aoGb/OO3xg3yTF4Wl/KaX7DHi25+c3e2JFKh1QjXglHgdeXqjn4uCFQ5ie69oBaa SubJb0Qy9tSYteQRdBMVyFTLnw2uDMordGSc9gOTfUuuKyWR8CvYg/JZiy/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh77CxnMfaWBFzuSJ0bQOk3oF8Y8wHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI/kXE9oNueJ+qG+UxpqzEZ2sFJanTjdV19 KpJYL3dqgghsCxxalU/YPBqqALMQdcIGe2rkCxCdi8PMXdxVhQxV/HcPoWJUnQ2w OFQooyqRBvDDsKb2wD2fc78bLNQaFlzc0JkHmNC8s+wAHw/U1MJqdluUIlmHSlwt iNvKrnJk4t10ghJEuXxEaDgZ3XSYcjLItj14qsRbdPTSNjykZn3eVMpc60VzOuUS iJ6/rzP3wBow9OnndyVOJwG388u+kRIV7An0yMf7U+zCCKPgliPH1MZ5lGxAPgBR V9Po46QYwxK/wtPT4lKttpF6JsruCk7tem74fzyLyHy+YBfdGwg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:43 2025 by rpki-client