$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: 0ZlWlU97iNRVk7axGT/kXAPNu2kmQZhxz0coBfIZ14w= Subject key identifier: B8:13:66:8E:B2:1C:47:1C:F6:EC:15:EA:34:AC:49:66:0D:7A:A9:E7 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 644EFA5DC3B9F41D24FB019FCD2AC16CE1A0648D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01A7 Signing time: Tue 04 Nov 2025 13:11:02 +0000 Manifest this update: Tue 04 Nov 2025 13:06:02 +0000 Manifest next update: Fri 07 Nov 2025 13:51:02 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 3: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: p8HLZDzTz5fp0ADqxaKByj3YNJT9E9sBtHpYSiq8m8o=) 4: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4e:fa:5d:c3:b9:f4:1d:24:fb:01:9f:cd:2a:c1:6c:e1:a0:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Nov 4 13:06:02 2025 GMT Not After : Nov 7 13:51:02 2025 GMT Subject: CN=B813668EB21C471CF6EC15EA34AC49660D7AA9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:10:42:85:3f:38:33:9f:f8:35:35:7e:7f: 1d:63:ce:29:83:f1:69:2e:28:76:bc:75:dc:a6:1c: 36:67:d3:a9:62:e3:34:d9:7b:08:ff:25:f9:14:62: a0:21:2f:59:c0:a3:b4:1e:43:a9:a7:9d:54:22:bf: ec:f3:75:5d:92:bf:89:ea:85:d1:f1:81:37:b5:0e: ca:25:1f:f5:0f:17:df:84:f5:7c:cd:24:ad:4d:13: 3e:c4:56:91:12:ba:df:75:85:6d:50:5c:f6:12:f1: 07:71:f6:a4:e4:d0:07:03:cc:35:34:92:af:eb:7a: eb:78:9a:a4:c4:10:fc:42:e8:8b:92:78:b3:93:cd: eb:56:bc:23:74:7f:05:f1:1d:03:d1:10:44:fc:17: 31:39:50:af:3b:bf:b5:53:32:e0:e4:47:f6:95:d7: 92:95:38:9d:c2:54:bb:88:ce:30:c6:92:6f:a2:53: 10:dd:7d:9d:79:1b:a3:22:7d:c9:9f:95:a4:db:0c: f2:be:ee:20:29:b6:3d:82:56:d4:cd:68:dd:27:e5: cd:11:36:1a:26:c4:a7:76:ca:ad:83:e6:90:f1:bb: 4d:ba:fa:90:f4:0a:49:7b:f4:d2:f4:04:02:b2:25: 51:07:a0:81:73:84:a2:12:43:d3:04:2b:49:54:60: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:66:8E:B2:1C:47:1C:F6:EC:15:EA:34:AC:49:66:0D:7A:A9:E7 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:76:d1:27:d1:8a:13:fc:b3:76:f0:10:08:5e:68:f1:8a:07: e2:3b:ce:4e:e0:eb:1c:cd:b4:62:26:15:4c:83:a6:11:4f:92: 12:16:62:2c:a1:26:ef:05:6f:7c:f5:9a:c8:7c:01:d1:74:51: 2d:ee:d9:33:97:35:c9:b6:8f:e6:b7:fa:7c:88:8d:87:8f:78: 8c:b6:9c:71:e8:95:2b:ce:64:48:0a:6f:53:25:06:de:3e:a3: d9:b2:af:54:8a:ce:31:99:b4:ca:52:13:bd:86:4f:aa:23:d1: d2:30:05:d3:a8:e1:56:29:6a:ea:27:1c:37:0c:8e:d5:72:52: 69:d7:42:ec:61:16:5a:3f:f2:e0:2f:3d:be:77:30:65:ef:77: cb:26:82:8a:79:df:f7:d6:e4:b9:78:a4:87:6b:22:7c:0a:9e: e3:ab:0b:b0:59:21:9b:23:8c:92:1e:c4:dc:09:07:ee:61:d0: 7c:aa:d3:98:1a:30:8b:11:95:5c:32:04:9e:6e:91:07:cd:48: 53:b8:9e:38:e2:57:7b:c1:d7:34:fc:9c:db:6c:90:fe:9d:07: 0e:1a:ad:7e:74:42:40:fb:b0:61:c4:03:64:e2:2f:82:2b:53: b0:2c:66:01:12:db:26:50:99:70:6a:7d:bb:6b:fb:5c:d2:06: 70:c2:a1:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZE76XcO59B0k+wGfzSrBbOGgZI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTExMDQxMzA2MDJaFw0yNTExMDcxMzUxMDJaMDMxMTAvBgNV BAMTKEI4MTM2NjhFQjIxQzQ3MUNGNkVDMTVFQTM0QUM0OTY2MEQ3QUE5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcRBChT84M5/4NTV+fx1jzimD 8WkuKHa8ddymHDZn06li4zTZewj/JfkUYqAhL1nAo7QeQ6mnnVQiv+zzdV2Sv4nq hdHxgTe1DsolH/UPF9+E9XzNJK1NEz7EVpESut91hW1QXPYS8Qdx9qTk0AcDzDU0 kq/reut4mqTEEPxC6IuSeLOTzetWvCN0fwXxHQPREET8FzE5UK87v7VTMuDkR/aV 15KVOJ3CVLuIzjDGkm+iUxDdfZ15G6MifcmflaTbDPK+7iAptj2CVtTNaN0n5c0R NhomxKd2yq2D5pDxu026+pD0Ckl79NL0BAKyJVEHoIFzhKISQ9MEK0lUYFyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBNmjrIcRxz27BXqNKxJZg16qecwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp20SfRihP8s3bwEAheaPGKB+I7zk7g6xzN tGImFUyDphFPkhIWYiyhJu8Fb3z1msh8AdF0US3u2TOXNcm2j+a3+nyIjYePeIy2 nHHolSvOZEgKb1MlBt4+o9myr1SKzjGZtMpSE72GT6oj0dIwBdOo4VYpauonHDcM jtVyUmnXQuxhFlo/8uAvPb53MGXvd8smgop53/fW5Ll4pIdrInwKnuOrC7BZIZsj jJIexNwJB+5h0Hyq05gaMIsRlVwyBJ5ukQfNSFO4njjiV3vB1zT8nNtskP6dBw4a rX50QkD7sGHEA2TiL4IrU7AsZgES2yZQmXBqfbtr+1zSBnDCoeA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:11 2025 by rpki-client