$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: q/v2pe+fMKfa24/xyBTKoo8hnmXskZt8NSyE3HaPVR4= Subject key identifier: FC:63:4A:26:4B:A6:03:34:46:34:33:A4:5D:48:2C:A1:14:35:F9:7C Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 636D3CF50B8D9DB4B09EA1550A3CA5C01B4620AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 01D7 Signing time: Mon 03 Nov 2025 00:01:49 +0000 Manifest this update: Sun 02 Nov 2025 23:56:49 +0000 Manifest next update: Thu 06 Nov 2025 01:03:49 +0000 Files and hashes: 1: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 2: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: fhmQGeMawDce0UKW6D44XxHhPQGMbMGoLk8phTR/ZMM=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: xEKvL1Sy6gjieKkSQRdg2opwP1NrCxUV9PFI8nvYCrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6d:3c:f5:0b:8d:9d:b4:b0:9e:a1:55:0a:3c:a5:c0:1b:46:20:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Nov 2 23:56:49 2025 GMT Not After : Nov 6 01:03:49 2025 GMT Subject: CN=FC634A264BA60334463433A45D482CA11435F97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:ee:cf:bd:00:5d:8d:ae:1e:ea:9f:3f:63: 47:f9:8c:94:30:b8:f3:fc:37:b2:da:5e:ac:f1:f9: db:dc:4e:2b:1a:7f:ed:a7:94:c9:d5:84:7a:f5:c3: f6:4f:ff:3c:92:f3:80:7d:59:91:25:82:7b:10:98: 84:5b:78:77:58:e3:9c:29:12:21:8e:74:03:b4:66: 80:3a:e2:1a:22:e0:91:87:b7:ee:72:e2:da:bf:53: 29:f3:52:8a:d9:d7:fa:00:73:88:c6:e3:a7:40:87: 56:8c:8e:30:92:e3:4f:ee:b0:56:96:c9:6e:58:28: 01:b5:0d:cb:0d:da:e4:08:d3:1a:a3:f4:27:8f:f0: 56:ac:91:6d:6e:24:04:1a:9f:0a:57:6b:9e:57:96: 49:8b:89:64:cc:92:1b:7d:87:af:4c:00:8d:f4:72: 0f:74:fd:24:47:30:7d:53:47:09:6a:53:e4:00:aa: e2:9a:32:4c:9c:d0:5f:56:51:4c:a8:da:6a:df:28: 3a:b2:54:27:12:50:81:dc:d8:90:46:45:b7:42:aa: 6a:6b:e4:d5:da:eb:cd:68:66:6d:63:b4:4d:76:c5: 7a:92:f1:d7:df:44:1f:84:8c:0b:62:a0:e3:97:4c: c6:66:0d:a4:0f:3d:96:6f:58:bb:d6:b3:c6:30:c3: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:63:4A:26:4B:A6:03:34:46:34:33:A4:5D:48:2C:A1:14:35:F9:7C X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c8:b4:b5:d9:b9:a4:ff:cb:99:fd:22:e6:ac:c0:10:76:fb: 29:14:bc:79:77:33:41:af:6f:5f:81:f5:d3:07:be:0b:b6:72: 5d:a7:99:4f:18:1c:fa:e2:f8:e8:73:26:87:ff:ce:86:12:d7: ed:93:aa:5b:1d:6e:d4:c2:a6:a3:94:9f:32:7d:90:29:4d:de: 99:b9:63:b5:22:d7:2e:2c:08:89:28:ae:2e:d5:3b:9b:6b:48: 2c:f2:78:fd:e8:ff:34:8d:2e:1c:e3:70:f8:c8:e0:2a:31:70: c1:03:e4:49:b0:54:a6:7a:e7:33:d6:a8:91:c4:6a:32:76:9b: c4:79:0d:8a:e2:77:22:01:b4:70:82:72:70:80:c2:7a:f8:7b: a5:66:bb:bc:af:65:08:8a:30:73:7c:0d:96:af:78:fb:17:9f: 1a:a2:0c:55:c3:48:85:51:f9:84:62:68:9f:38:a3:ac:e3:01: 02:e4:64:b1:f6:7a:3a:f6:45:ad:d0:df:db:1c:8d:2e:c5:38: 40:c3:80:4e:12:52:0d:3d:55:1a:e4:0f:7f:04:a0:10:1f:62: bd:e0:f8:e0:5b:9d:f7:97:90:04:6f:0b:6e:4a:c4:51:32:6d: 89:a2:ee:4c:36:b0:39:67:28:4e:08:1b:9d:74:fd:f6:9f:49: f1:0b:66:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2089QuNnbSwnqFVCjylwBtGIKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTExMDIyMzU2NDlaFw0yNTExMDYwMTAzNDlaMDMxMTAvBgNV BAMTKEZDNjM0QTI2NEJBNjAzMzQ0NjM0MzNBNDVENDgyQ0ExMTQzNUY5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oe7PvQBdja4e6p8/Y0f5jJQw uPP8N7LaXqzx+dvcTisaf+2nlMnVhHr1w/ZP/zyS84B9WZElgnsQmIRbeHdY45wp EiGOdAO0ZoA64hoi4JGHt+5y4tq/UynzUorZ1/oAc4jG46dAh1aMjjCS40/usFaW yW5YKAG1DcsN2uQI0xqj9CeP8FaskW1uJAQanwpXa55XlkmLiWTMkht9h69MAI30 cg90/SRHMH1TRwlqU+QAquKaMkyc0F9WUUyo2mrfKDqyVCcSUIHc2JBGRbdCqmpr 5NXa681oZm1jtE12xXqS8dffRB+EjAtioOOXTMZmDaQPPZZvWLvWs8Yww0tHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/GNKJkumAzRGNDOkXUgsoRQ1+XwwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzItLXZuaT/y5n9IuaswBB2+ykUvHl3M0Gv b1+B9dMHvgu2cl2nmU8YHPri+OhzJof/zoYS1+2TqlsdbtTCpqOUnzJ9kClN3pm5 Y7Ui1y4sCIkori7VO5trSCzyeP3o/zSNLhzjcPjI4CoxcMED5EmwVKZ65zPWqJHE ajJ2m8R5DYridyIBtHCCcnCAwnr4e6Vmu7yvZQiKMHN8DZavePsXnxqiDFXDSIVR +YRiaJ84o6zjAQLkZLH2ejr2Ra3Q39scjS7FOEDDgE4SUg09VRrkD38EoBAfYr3g +OBbnfeXkARvC25KxFEybYmi7kw2sDlnKE4IG510/fafSfELZuk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:11:47 2025 by rpki-client