$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: h+VSxJi2r3BIQp6pAVN8kjumsG065dlxzCmxo1jN/Ws= Subject key identifier: FB:DE:ED:9A:22:B4:3B:75:87:D7:1D:7A:60:CC:8E:7A:99:9C:D9:9B Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 7876662917FEBD164EAA42316A75A77AC6445F91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 051B Signing time: Sun 02 Nov 2025 13:11:27 +0000 Manifest this update: Sun 02 Nov 2025 13:06:27 +0000 Manifest next update: Wed 05 Nov 2025 17:35:27 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: bB1e7x/wcjmPI6m6llqlnBWSdMdL6ghaltlx7z6xhaU=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:76:66:29:17:fe:bd:16:4e:aa:42:31:6a:75:a7:7a:c6:44:5f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Nov 2 13:06:27 2025 GMT Not After : Nov 5 17:35:27 2025 GMT Subject: CN=FBDEED9A22B43B7587D71D7A60CC8E7A999CD99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:2d:63:84:15:94:c6:2d:c4:e8:6f:c4:8b: 86:85:0a:10:d9:65:2f:95:e7:b5:de:4b:56:ca:0a: 71:1d:62:bc:a0:87:8c:ce:98:4f:06:0e:67:c2:ed: b2:27:b0:b8:94:a7:5c:aa:1f:f4:88:6a:b9:38:29: d9:49:fc:9d:fe:e6:e4:9b:22:1c:f9:95:89:88:e7: 42:18:26:0e:3b:26:a3:02:77:4c:5c:43:b2:47:bb: 2e:4f:b3:4b:7c:b7:56:58:90:36:ca:94:62:87:38: ec:a4:bd:b9:b9:c8:3b:3e:b7:f2:fc:02:c7:ea:81: ae:1f:13:41:f3:21:53:e5:b6:37:8f:22:3e:c7:61: b9:b3:c9:19:eb:fa:79:5a:49:2b:79:97:22:2e:4b: 82:6e:a8:52:d1:72:ee:7d:a5:5a:20:f5:9b:04:88: 65:ee:15:3e:bb:c2:db:9b:db:a5:63:5c:e4:8b:92: 7c:d8:8a:19:c8:21:d6:a7:fd:26:45:bb:22:8a:41: fe:62:a9:a1:21:37:8a:b3:02:4f:02:f9:4b:f0:35: 58:75:6e:b2:1d:84:6d:83:c2:fb:01:57:dc:d7:21: c5:70:06:c1:44:34:ef:05:9b:63:9f:b1:3b:d4:c2: b5:7a:58:10:15:18:55:2c:63:93:69:23:d7:b8:79: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:ED:9A:22:B4:3B:75:87:D7:1D:7A:60:CC:8E:7A:99:9C:D9:9B X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dd:d9:c7:cd:1e:2f:84:40:7c:9c:5d:d4:63:fe:65:d7:10: e3:34:6b:f6:26:22:55:c7:70:9a:91:f5:72:2f:d5:71:87:3d: bf:e5:43:b8:1f:57:90:a9:f0:bf:35:3a:60:8b:11:b8:5f:ca: 13:85:52:b0:86:cb:20:31:07:54:43:35:59:bf:8d:54:7f:7f: 97:d9:01:d7:e1:ed:60:3f:e5:01:74:fb:73:01:52:90:83:ac: f9:43:a1:12:ed:aa:4c:ae:5d:45:67:91:7a:82:45:02:fb:41: 13:93:63:61:f2:b3:10:be:fb:6e:33:fd:09:bc:b4:c1:e1:e6: 14:ad:a3:5f:06:c6:ee:51:87:97:b7:cc:ca:52:ca:85:d0:57: f0:19:d9:ff:e1:d7:08:7c:11:04:ec:e3:9f:32:9c:19:02:4c: 40:79:09:fd:b6:98:c1:20:5e:3d:22:d8:1b:fd:ff:ea:71:35: 69:91:33:35:6c:bd:9b:56:da:55:e4:e2:66:a3:d3:de:e1:47: eb:74:16:59:9d:66:44:47:f2:a7:bb:2d:50:3d:29:9d:57:22: 01:d0:15:77:ba:1f:46:ab:2d:89:58:7b:b5:bd:13:64:b6:57: 8d:de:55:7a:bd:09:32:57:91:da:3d:8e:16:c1:f7:b0:f1:58: 56:bb:b0:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHZmKRf+vRZOqkIxanWnesZEX5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTExMDIxMzA2MjdaFw0yNTExMDUxNzM1MjdaMDMxMTAvBgNV BAMTKEZCREVFRDlBMjJCNDNCNzU4N0Q3MUQ3QTYwQ0M4RTdBOTk5Q0Q5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwIC1jhBWUxi3E6G/Ei4aFChDZ ZS+V57XeS1bKCnEdYrygh4zOmE8GDmfC7bInsLiUp1yqH/SIark4KdlJ/J3+5uSb Ihz5lYmI50IYJg47JqMCd0xcQ7JHuy5Ps0t8t1ZYkDbKlGKHOOykvbm5yDs+t/L8 Asfqga4fE0HzIVPltjePIj7HYbmzyRnr+nlaSSt5lyIuS4JuqFLRcu59pVog9ZsE iGXuFT67wtub26VjXOSLknzYihnIIdan/SZFuyKKQf5iqaEhN4qzAk8C+UvwNVh1 brIdhG2DwvsBV9zXIcVwBsFENO8Fm2OfsTvUwrV6WBAVGFUsY5NpI9e4eQGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+97tmiK0O3WH1x16YMyOepmc2ZswHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrd2cfNHi+EQHycXdRj/mXXEOM0a/YmIlXH cJqR9XIv1XGHPb/lQ7gfV5Cp8L81OmCLEbhfyhOFUrCGyyAxB1RDNVm/jVR/f5fZ Adfh7WA/5QF0+3MBUpCDrPlDoRLtqkyuXUVnkXqCRQL7QROTY2HysxC++24z/Qm8 tMHh5hSto18Gxu5Rh5e3zMpSyoXQV/AZ2f/h1wh8EQTs458ynBkCTEB5Cf22mMEg Xj0i2Bv9/+pxNWmRMzVsvZtW2lXk4maj097hR+t0FlmdZkRH8qe7LVA9KZ1XIgHQ FXe6H0arLYlYe7W9E2S2V43eVXq9CTJXkdo9jhbB97DxWFa7sPE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:54 2025 by rpki-client