$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: tG/gR6b2XQ143pdCWWNlMXdZXmG979RBnp/o9xxN5RA= Subject key identifier: B0:49:CB:83:ED:E1:B8:58:6B:13:C0:B7:EA:39:C4:D3:26:32:63:39 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 196E6C72F25D8DE72F11107C9EC043DA7D7945BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01AD Signing time: Tue 04 Nov 2025 02:01:20 +0000 Manifest this update: Tue 04 Nov 2025 01:56:20 +0000 Manifest next update: Fri 07 Nov 2025 05:14:20 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) 2: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: ixTc2QNLH3ZfZcOus+YRft3wPKTn3dbB+K1jBE3LmaY=) 3: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) 4: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6e:6c:72:f2:5d:8d:e7:2f:11:10:7c:9e:c0:43:da:7d:79:45:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Nov 4 01:56:20 2025 GMT Not After : Nov 7 05:14:20 2025 GMT Subject: CN=B049CB83EDE1B8586B13C0B7EA39C4D326326339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:2d:8e:28:b5:d2:36:91:92:9b:cd:97:df: 20:32:39:67:f2:0f:26:21:af:a1:26:68:25:c0:d7: bd:47:42:50:d6:fa:6e:85:f2:02:58:58:61:ed:d5: ca:ac:b9:f9:cc:8f:24:07:39:0e:60:8b:94:fc:4b: 29:b7:9c:7e:48:20:b0:4d:0d:8a:f8:b6:fc:ba:be: 50:36:a1:fd:ac:63:85:73:47:68:87:b1:a4:9e:75: 5e:f8:9d:6a:de:48:6b:45:32:79:de:bf:93:a0:ab: ff:ef:bb:fe:32:8b:31:4b:c0:c2:b4:90:8c:fd:3a: 92:c8:ff:41:f2:27:54:3e:c1:95:0a:84:4a:7e:c5: 61:6d:d0:f9:37:63:22:4a:07:f7:2b:f2:95:1f:8a: 19:17:29:11:54:69:64:86:9e:53:08:74:10:dc:fd: 72:ed:40:c5:63:fe:98:aa:d2:46:d6:eb:b4:4d:ba: 43:e0:3c:e6:2d:f6:68:e4:e8:75:79:c9:73:1c:f8: 38:9d:8b:f5:13:cb:92:53:2d:8e:92:60:d8:37:65: 6e:1b:1e:bb:04:21:46:bf:9a:08:04:19:dd:8f:f3: f5:13:3d:97:4f:29:4e:a6:86:2b:5b:9f:3f:02:e8: 11:fe:5f:1f:01:50:db:34:88:12:fa:f8:57:89:94: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:CB:83:ED:E1:B8:58:6B:13:C0:B7:EA:39:C4:D3:26:32:63:39 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8e:61:a8:84:33:9f:71:64:88:c3:76:63:10:42:74:c1:12: e2:26:f8:6d:39:ab:e6:b5:de:45:2e:3f:e5:06:ad:28:94:cc: 3e:9a:78:cc:94:ad:91:0a:1f:e1:dd:06:f6:26:7c:02:bd:28: 49:0a:6e:a1:ab:41:26:4b:9b:b0:71:46:77:72:51:07:0c:c7: 9e:ba:10:52:04:fb:b3:75:67:14:b5:81:0b:25:8c:a6:5a:7f: ed:84:df:21:f7:2b:45:a3:df:29:cc:f3:16:5d:58:25:d8:0a: 74:b3:f9:e1:30:18:65:15:1e:1c:d8:e3:e9:53:37:bc:01:6e: de:bd:43:64:15:c2:92:b0:4c:96:23:d1:9c:27:8c:a6:90:32: 85:d3:de:17:60:b1:b9:05:ac:45:49:5b:06:e7:1f:d8:88:f9: 36:17:13:e5:ab:eb:a0:95:c7:d8:70:62:15:32:6a:d1:c9:9f: 9a:ba:44:7e:d6:3e:db:b8:a6:d7:4a:73:e7:98:09:89:3a:ea: b9:0d:96:2c:d6:77:2e:94:52:96:ff:4b:a4:6d:d3:37:98:a1: 8b:ca:4f:d3:2a:a7:a1:ed:82:0e:ef:ab:1f:15:5c:6a:04:b2: 60:01:75:ba:d0:70:9f:72:ea:d5:1e:8a:ad:2e:d4:46:a2:65: 34:6a:d2:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGW5scvJdjecvERB8nsBD2n15RbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTExMDQwMTU2MjBaFw0yNTExMDcwNTE0MjBaMDMxMTAvBgNV BAMTKEIwNDlDQjgzRURFMUI4NTg2QjEzQzBCN0VBMzlDNEQzMjYzMjYzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYui2OKLXSNpGSm82X3yAyOWfy DyYhr6EmaCXA171HQlDW+m6F8gJYWGHt1cqsufnMjyQHOQ5gi5T8Sym3nH5IILBN DYr4tvy6vlA2of2sY4VzR2iHsaSedV74nWreSGtFMnnev5Ogq//vu/4yizFLwMK0 kIz9OpLI/0HyJ1Q+wZUKhEp+xWFt0Pk3YyJKB/cr8pUfihkXKRFUaWSGnlMIdBDc /XLtQMVj/piq0kbW67RNukPgPOYt9mjk6HV5yXMc+Didi/UTy5JTLY6SYNg3ZW4b HrsEIUa/mggEGd2P8/UTPZdPKU6mhitbnz8C6BH+Xx8BUNs0iBL6+FeJlETjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEnLg+3huFhrE8C36jnE0yYyYzkwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaOYaiEM59xZIjDdmMQQnTBEuIm+G05q+a1 3kUuP+UGrSiUzD6aeMyUrZEKH+HdBvYmfAK9KEkKbqGrQSZLm7BxRndyUQcMx566 EFIE+7N1ZxS1gQsljKZaf+2E3yH3K0Wj3ynM8xZdWCXYCnSz+eEwGGUVHhzY4+lT N7wBbt69Q2QVwpKwTJYj0ZwnjKaQMoXT3hdgsbkFrEVJWwbnH9iI+TYXE+Wr66CV x9hwYhUyatHJn5q6RH7WPtu4ptdKc+eYCYk66rkNlizWdy6UUpb/S6Rt0zeYoYvK T9Mqp6Htgg7vqx8VXGoEsmABdbrQcJ9y6tUeiq0u1EaiZTRq0is= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:17 2025 by rpki-client