$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: AtPwiO12irTpAMssnvtxeAFHP2F0r4wut+ERyNn167g= Subject key identifier: AB:A6:56:E2:2C:8C:E1:63:5F:B9:0B:7D:80:16:A5:F1:22:B3:F4:47 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 226291DB9E2D9D3ECC5A85F39DA48FC36C973763 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0255 Signing time: Tue 04 Nov 2025 04:21:15 +0000 Manifest this update: Tue 04 Nov 2025 04:16:15 +0000 Manifest next update: Fri 07 Nov 2025 10:56:15 +0000 Files and hashes: 1: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 2: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 3: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 4: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 5: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: 7kvlqhIgBgGZTsXV8dYE1aw/F5l3wv1VLRjP35rfvhc=) 6: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:62:91:db:9e:2d:9d:3e:cc:5a:85:f3:9d:a4:8f:c3:6c:97:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Nov 4 04:16:15 2025 GMT Not After : Nov 7 10:56:15 2025 GMT Subject: CN=ABA656E22C8CE1635FB90B7D8016A5F122B3F447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:40:46:17:b5:a8:9d:da:83:24:93:b3:a2: 18:ed:9b:6d:f5:dd:6a:5a:ff:13:39:0e:f2:c9:99: aa:2b:20:00:45:91:dc:b0:e0:66:89:50:d9:06:3b: a0:05:ce:51:2b:9b:45:8f:81:3f:99:31:4a:15:be: 1f:09:c0:23:ea:66:0b:44:27:69:7c:f4:84:64:a8: 57:a6:27:2a:f2:81:9a:a3:f3:bd:fe:c7:e1:13:2f: e0:2c:2f:a0:43:df:10:23:c5:b4:46:3b:53:16:40: 7b:32:5a:24:98:5b:2a:f2:55:68:bc:e9:1e:76:60: 6c:2a:2c:82:66:46:97:81:cb:22:54:09:c8:e1:d3: 0b:03:0b:b3:d8:fe:15:d4:71:7e:b4:15:94:2a:da: e0:64:7c:91:f3:a5:eb:ef:a1:4c:d3:a7:2d:97:ae: 43:ca:c9:9c:d0:e7:ed:e1:43:e0:c0:2c:a8:93:7e: d1:ca:96:3c:f6:be:d6:c6:05:47:b9:e3:c8:85:ba: 7e:c4:3e:8c:da:60:fe:27:12:55:88:5c:de:17:95: e0:19:8c:96:4e:cc:6f:a6:44:22:67:f3:57:a0:c0: 5b:b3:18:26:f9:08:ad:2d:9c:98:a4:a6:97:ad:73: 4f:d0:c9:bf:6c:24:37:7b:ca:84:f3:e4:bb:67:9d: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A6:56:E2:2C:8C:E1:63:5F:B9:0B:7D:80:16:A5:F1:22:B3:F4:47 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:44:ff:20:e9:f7:a3:53:ff:9e:fa:71:8a:e6:5a:f5:a4: 31:af:d8:69:a3:be:b1:21:f7:bd:a5:e9:a5:b3:12:3b:71:7b: 14:42:db:4a:df:ec:8f:81:98:af:00:62:3c:81:0f:b8:ca:56: 7b:53:59:8c:b3:cd:b9:4e:ea:7c:17:68:c4:2d:fb:f5:b5:09: c4:1d:58:e3:17:8f:59:60:b5:2f:8a:c2:0e:64:08:6f:32:5c: bd:55:61:d8:97:c8:1f:aa:2b:25:f8:3c:08:b6:2f:a4:33:0b: 21:65:7a:66:7d:ea:91:8d:51:ac:1a:6f:53:a8:39:97:41:95: 6d:29:09:3f:c4:bf:19:03:d7:e1:02:2d:19:ba:84:de:84:db: a1:a3:52:7d:63:25:ce:00:49:3b:e0:de:9d:dc:74:87:52:86: 56:79:f3:98:f9:b4:d9:5a:00:56:94:b5:cd:d0:25:b9:6a:30: 7c:c6:21:52:fa:3a:d2:0d:12:18:62:e3:3c:43:59:82:2f:0b: a8:31:cc:91:0b:97:5c:07:3c:20:ee:c9:3f:d6:3a:ef:0f:ca: da:02:fb:12:cd:27:d1:9e:4b:00:1f:90:89:74:51:16:fc:3d: 38:93:6f:71:9f:fa:a8:70:ed:28:1f:38:fe:2b:ce:5f:fb:43: e7:b4:b9:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImKR254tnT7MWoXznaSPw2yXN2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTExMDQwNDE2MTVaFw0yNTExMDcxMDU2MTVaMDMxMTAvBgNV BAMTKEFCQTY1NkUyMkM4Q0UxNjM1RkI5MEI3RDgwMTZBNUYxMjJCM0Y0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyEBGF7WondqDJJOzohjtm231 3Wpa/xM5DvLJmaorIABFkdyw4GaJUNkGO6AFzlErm0WPgT+ZMUoVvh8JwCPqZgtE J2l89IRkqFemJyrygZqj873+x+ETL+AsL6BD3xAjxbRGO1MWQHsyWiSYWyryVWi8 6R52YGwqLIJmRpeByyJUCcjh0wsDC7PY/hXUcX60FZQq2uBkfJHzpevvoUzTpy2X rkPKyZzQ5+3hQ+DALKiTftHKljz2vtbGBUe548iFun7EPozaYP4nElWIXN4XleAZ jJZOzG+mRCJn81egwFuzGCb5CK0tnJikppetc0/Qyb9sJDd7yoTz5LtnnbwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6ZW4iyM4WNfuQt9gBal8SKz9EcwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmhRP8g6fejU/+e+nGK5lr1pDGv2GmjvrEh 972l6aWzEjtxexRC20rf7I+BmK8AYjyBD7jKVntTWYyzzblO6nwXaMQt+/W1CcQd WOMXj1lgtS+Kwg5kCG8yXL1VYdiXyB+qKyX4PAi2L6QzCyFlemZ96pGNUawab1Oo OZdBlW0pCT/EvxkD1+ECLRm6hN6E26GjUn1jJc4ASTvg3p3cdIdShlZ585j5tNla AFaUtc3QJblqMHzGIVL6OtINEhhi4zxDWYIvC6gxzJELl1wHPCDuyT/WOu8PytoC +xLNJ9GeSwAfkIl0URb8PTiTb3Gf+qhw7SgfOP4rzl/7Q+e0uSA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:34 2025 by rpki-client