$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: unVwt2MKYrkBspXbcUSByPULqgeY3/5QUrBXXA5uj7s= Subject key identifier: 00:A5:71:09:EC:61:A2:BC:01:32:8C:14:AA:0E:02:52:29:16:0D:67 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 5426871691238B9A80FC39A79AB5814E475D377C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 035E Signing time: Tue 04 Nov 2025 08:51:01 +0000 Manifest this update: Tue 04 Nov 2025 08:46:01 +0000 Manifest next update: Fri 07 Nov 2025 17:59:01 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 2: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 3: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 4: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: ooqW5sHANGB5bbCfH8IoK9spOfO23ABjIzEcXia0UBk=) 5: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 6: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 7: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 9: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:87:16:91:23:8b:9a:80:fc:39:a7:9a:b5:81:4e:47:5d:37:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Nov 4 08:46:01 2025 GMT Not After : Nov 7 17:59:01 2025 GMT Subject: CN=00A57109EC61A2BC01328C14AA0E025229160D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:21:af:bd:39:5b:8f:dd:b0:04:be:ec:21: 81:43:49:85:24:7d:fa:4f:02:9c:86:16:d1:2d:5d: ff:49:46:ff:f8:70:d9:22:42:05:a5:a3:42:e1:28: 3e:31:fa:c3:12:06:ff:bf:a2:19:e5:3c:09:e8:33: 78:fc:e7:6d:b1:04:d6:38:66:7f:61:10:bd:10:ba: 88:02:9f:f8:2d:5a:7f:9c:70:d6:bf:31:74:75:ed: da:d5:2b:0c:88:48:70:cc:67:d1:95:eb:51:eb:57: f5:b6:8d:02:9a:d1:ef:fc:c3:65:e0:9f:39:82:fe: 53:f9:06:74:66:b1:9d:95:12:43:1e:e9:da:de:de: df:0b:17:bf:14:63:57:a4:76:37:b4:de:2c:90:63: 1e:99:0a:c5:f5:36:06:d5:1a:9c:2e:81:aa:15:6c: 3e:10:ac:ca:1a:a3:e3:5a:3d:d2:fa:03:96:7e:78: 2f:d6:c9:04:fa:8a:22:1b:f4:68:2c:82:0c:9c:f3: 73:86:71:53:5a:3d:af:14:34:f4:1c:13:14:ad:98: ae:66:51:d9:5c:35:bd:57:15:b5:1b:07:5e:14:32: ba:a6:e6:49:d8:b1:8b:38:44:c0:19:dd:6f:f1:92: 84:7b:5a:eb:fb:aa:42:c2:f5:1c:cd:b4:b2:55:eb: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:71:09:EC:61:A2:BC:01:32:8C:14:AA:0E:02:52:29:16:0D:67 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9c:fd:5b:85:95:38:4d:e6:2e:e7:6f:68:a0:57:84:7c:ba: bc:81:26:1c:0a:f5:d2:3f:ce:a6:3f:7c:f6:27:a7:1d:5f:e6: f2:7c:f1:d6:92:91:92:a1:41:dd:49:4b:43:39:2e:77:93:ac: d9:89:5b:5d:31:13:c5:6c:dd:e5:6a:f7:34:d4:d7:f6:91:e9: a3:7c:4c:cd:d0:cd:94:3c:b8:41:12:b5:5c:20:62:5a:9d:25: 81:70:fe:af:68:d4:9a:30:af:a1:56:26:4e:8d:ab:53:ec:d6: e6:36:5f:ce:c5:47:4e:61:35:ca:a1:e5:96:37:a8:22:3e:55: ed:e5:12:ac:94:df:40:52:e6:7b:fb:0a:f4:dc:23:22:0a:bb: 6d:f9:8f:f9:0a:b5:44:10:49:34:a2:6a:73:ee:d4:c9:6b:70: e7:02:f9:93:3f:00:6e:43:ed:65:ac:96:74:e6:27:c1:39:af: 67:c2:c2:f6:37:71:05:51:8d:a2:68:5d:49:78:0e:fd:5e:66: 5f:8f:bd:9c:0c:a8:2c:8f:12:f1:97:e9:43:10:e0:13:27:47: 0a:0d:dc:bc:43:cd:e5:4e:b2:1b:6a:07:f8:8c:a1:cc:15:89: 78:03:0c:44:f6:01:89:e8:e3:18:c1:e1:89:a8:e4:cb:db:ff: be:53:2f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCaHFpEji5qA/DmnmrWBTkddN3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTExMDQwODQ2MDFaFw0yNTExMDcxNzU5MDFaMDMxMTAvBgNV BAMTKDAwQTU3MTA5RUM2MUEyQkMwMTMyOEMxNEFBMEUwMjUyMjkxNjBENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLCGvvTlbj92wBL7sIYFDSYUk ffpPApyGFtEtXf9JRv/4cNkiQgWlo0LhKD4x+sMSBv+/ohnlPAnoM3j8522xBNY4 Zn9hEL0QuogCn/gtWn+ccNa/MXR17drVKwyISHDMZ9GV61HrV/W2jQKa0e/8w2Xg nzmC/lP5BnRmsZ2VEkMe6dre3t8LF78UY1ekdje03iyQYx6ZCsX1NgbVGpwugaoV bD4QrMoao+NaPdL6A5Z+eC/WyQT6iiIb9Ggsggyc83OGcVNaPa8UNPQcExStmK5m UdlcNb1XFbUbB14UMrqm5knYsYs4RMAZ3W/xkoR7Wuv7qkLC9RzNtLJV62kVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAKVxCexhorwBMowUqg4CUikWDWcwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGc/VuFlThN5i7nb2igV4R8uryBJhwK9dI/ zqY/fPYnpx1f5vJ88daSkZKhQd1JS0M5LneTrNmJW10xE8Vs3eVq9zTU1/aR6aN8 TM3QzZQ8uEEStVwgYlqdJYFw/q9o1Jowr6FWJk6Nq1Ps1uY2X87FR05hNcqh5ZY3 qCI+Ve3lEqyU30BS5nv7CvTcIyIKu235j/kKtUQQSTSianPu1MlrcOcC+ZM/AG5D 7WWslnTmJ8E5r2fCwvY3cQVRjaJoXUl4Dv1eZl+PvZwMqCyPEvGX6UMQ4BMnRwoN 3LxDzeVOshtqB/iMocwViXgDDET2AYno4xjB4Ymo5Mvb/75TL+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:57 2025 by rpki-client