$ rpki-client -vvf repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft File: DA3283EBD45CCF7056D92A914183FB7825C66692.mft (raw, json) Hash identifier: yJRF8JLDFxbl2/uJRb9VI/n3pw2PHhQCyBdBDVPGInk= Subject key identifier: A7:65:CD:5A:24:34:9F:F4:B3:DD:62:BC:7D:AA:0D:9A:E6:31:53:D2 Authority key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 Certificate issuer: /CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Certificate serial: 632D8A97CAE7F0D7C4E7E7138B9CB808C3F54D4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft Manifest number: 039C Signing time: Mon 03 Nov 2025 17:31:16 +0000 Manifest this update: Mon 03 Nov 2025 17:26:16 +0000 Manifest next update: Thu 06 Nov 2025 17:48:16 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: EATIBsyZSn7WKWmqFnQ9A4zCQGUX3rLtKm9XeWUjlEU=) 2: DA3283EBD45CCF7056D92A914183FB7825C66692.crl (hash: VGJkKahDINVoRUFqmxPXNKE3zk1h3gKFLZx5FgIfjLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2d:8a:97:ca:e7:f0:d7:c4:e7:e7:13:8b:9c:b8:08:c3:f5:4d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Validity Not Before: Nov 3 17:26:16 2025 GMT Not After : Nov 6 17:48:16 2025 GMT Subject: CN=A765CD5A24349FF4B3DD62BC7DAA0D9AE63153D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:99:27:1f:73:af:83:10:fb:b6:15:66:06: 76:5f:93:a6:5d:58:9d:b4:a1:af:51:d8:5c:bb:b4: 4f:29:8b:0c:70:a0:75:ef:28:f2:aa:26:7c:68:40: 87:0f:d1:24:ff:ef:2e:45:60:1b:2d:47:32:b1:f3: e7:30:e6:9b:d4:fd:f6:6a:88:08:ef:4c:44:38:7f: d1:74:be:1c:72:3b:d6:5d:5a:ab:a7:84:0c:42:fd: f2:a0:51:a0:ec:80:cc:7b:2d:18:04:14:55:6e:8d: 26:1d:2f:35:aa:34:54:18:37:6f:5f:c8:a2:9f:42: 9d:57:7e:cc:8c:fd:05:3e:bc:35:74:1a:f1:c5:25: f7:a8:2c:8c:35:9e:38:16:bc:e6:ad:10:dd:5e:24: 6c:a1:1a:f2:41:0c:2a:ad:44:33:6a:09:2c:d5:87: 32:b9:3e:a3:4c:dd:fb:ea:21:9b:f1:af:5e:57:9a: 12:f6:9e:ec:09:c9:e5:a3:5e:a4:cd:de:04:55:35: 1f:c6:7e:fe:58:3c:06:a0:d1:ba:a6:8f:a3:da:83: 1c:b7:70:9b:fa:11:11:b4:e9:c3:33:95:7a:6b:18: 27:2c:3e:4d:8a:bd:52:7e:da:f3:e5:33:40:d7:89: a5:ce:ed:d3:a0:85:ec:c4:f9:8b:72:7f:78:69:ba: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:65:CD:5A:24:34:9F:F4:B3:DD:62:BC:7D:AA:0D:9A:E6:31:53:D2 X509v3 Authority Key Identifier: keyid:DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:b9:27:1f:08:f0:7c:b1:23:eb:48:28:b8:66:20:62:6d: c0:5c:58:a7:f0:22:a6:f4:87:a3:5c:f7:c7:56:87:89:c8:5b: 34:97:6e:7d:89:17:ed:1e:d0:30:2e:db:7c:d5:89:9f:be:9e: 00:91:f8:9a:b7:7e:c7:c2:21:4b:04:6e:c7:f0:27:ca:9c:1f: 25:6e:2f:c6:52:79:9a:99:41:50:38:7d:57:97:6b:0a:ab:9c: 9a:bb:bf:72:43:94:2f:e4:25:a5:3f:37:df:20:9b:60:05:17: 8e:11:a3:e2:2b:eb:6b:19:6d:b7:41:f7:1e:05:14:8f:7c:14: 0a:d5:17:23:96:2f:80:37:56:13:6e:bd:74:f5:24:5d:82:10: 1c:de:54:c6:2a:19:07:7f:05:72:07:3b:cd:02:a2:fc:b8:aa: b1:65:cb:c2:c2:3b:36:2c:88:f4:5a:e4:97:47:53:df:ac:13: d3:79:e5:eb:04:70:31:69:6f:60:9e:96:ab:81:a8:97:f2:4f: e3:b2:41:04:94:29:f7:21:1d:f2:d1:1f:8f:0a:a1:5f:80:14: f8:3b:f2:d5:92:86:6a:ba:9b:e6:8b:42:96:89:d9:cf:32:91: 99:0f:15:90:4c:90:44:7b:f9:15:91:fe:e6:ff:54:02:8f:a9: de:d8:70:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYy2Kl8rn8NfE5+cTi5y4CMP1TUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgy NUM2NjY5MjAeFw0yNTExMDMxNzI2MTZaFw0yNTExMDYxNzQ4MTZaMDMxMTAvBgNV BAMTKEE3NjVDRDVBMjQzNDlGRjRCM0RENjJCQzdEQUEwRDlBRTYzMTUzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOJknH3OvgxD7thVmBnZfk6Zd WJ20oa9R2Fy7tE8piwxwoHXvKPKqJnxoQIcP0ST/7y5FYBstRzKx8+cw5pvU/fZq iAjvTEQ4f9F0vhxyO9ZdWqunhAxC/fKgUaDsgMx7LRgEFFVujSYdLzWqNFQYN29f yKKfQp1XfsyM/QU+vDV0GvHFJfeoLIw1njgWvOatEN1eJGyhGvJBDCqtRDNqCSzV hzK5PqNM3fvqIZvxr15XmhL2nuwJyeWjXqTN3gRVNR/Gfv5YPAag0bqmj6Pagxy3 cJv6ERG06cMzlXprGCcsPk2KvVJ+2vPlM0DXiaXO7dOghezE+Ytyf3hpuufPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2XNWiQ0n/Sz3WK8faoNmuYxU9IwHwYDVR0j BBgwFoAU2jKD69Rcz3BW2SqRQYP7eCXGZpIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Zjc5YTQwMi1kZTViLTQ5ZTUtYTZmNS1lZWFiYWMwODRmNDEvMC9EQTMyODNFQkQ0 NUNDRjcwNTZEOTJBOTE0MTgzRkI3ODI1QzY2NjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgyNUM2 NjY5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZC NzgyNUM2NjY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6quScfCPB8sSPrSCi4ZiBibcBcWKfwIqb0 h6Nc98dWh4nIWzSXbn2JF+0e0DAu23zViZ++ngCR+Jq3fsfCIUsEbsfwJ8qcHyVu L8ZSeZqZQVA4fVeXawqrnJq7v3JDlC/kJaU/N98gm2AFF44Ro+Ir62sZbbdB9x4F FI98FArVFyOWL4A3VhNuvXT1JF2CEBzeVMYqGQd/BXIHO80Covy4qrFly8LCOzYs iPRa5JdHU9+sE9N55esEcDFpb2CelquBqJfyT+OyQQSUKfchHfLRH48KoV+AFPg7 8tWShmq6m+aLQpaJ2c8ykZkPFZBMkER7+RWR/ub/VAKPqd7YcIo= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:09 2025 by rpki-client