$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: lmwE9wUWF/85DPNONabSHYMyyGZKA6bmKLM+uxE+/7M= Subject key identifier: 26:6E:85:B6:48:0C:21:E5:48:9E:05:BB:27:C0:B5:78:E9:FA:90:E6 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 25DB5F984161CDF42935DD2A623215F294EBA498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 032B Signing time: Tue 04 Nov 2025 07:52:02 +0000 Manifest this update: Tue 04 Nov 2025 07:47:02 +0000 Manifest next update: Fri 07 Nov 2025 16:06:02 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: FqO28lwzWXgHwQWPj63pmh9ALcmMRx1f3lU6Tds+Ynk=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:db:5f:98:41:61:cd:f4:29:35:dd:2a:62:32:15:f2:94:eb:a4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Nov 4 07:47:02 2025 GMT Not After : Nov 7 16:06:02 2025 GMT Subject: CN=266E85B6480C21E5489E05BB27C0B578E9FA90E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:34:5a:3c:a3:66:db:9a:24:0b:58:e6:24: 13:31:2e:a5:a5:da:7c:e1:a3:ba:7f:a5:bc:89:ea: 74:25:61:1d:e6:d3:68:d4:f8:62:5a:da:24:8a:4d: 72:63:5a:88:17:bb:7b:70:99:36:a8:b9:3a:19:b5: 09:7a:c1:0e:0b:86:7e:b3:dc:2d:d1:96:5d:a8:0d: 3d:5b:2c:17:0a:33:95:db:4e:8d:43:e8:6e:6e:be: 83:b5:54:21:cd:06:c6:a2:78:7c:d8:5a:2e:e1:ad: 79:2c:9b:84:0a:6d:df:08:3d:87:b7:74:cd:b1:ff: 6d:a1:21:34:cb:ca:8d:f9:52:3a:4a:a5:17:3b:cd: 33:ea:f0:f9:cd:69:7c:19:80:97:51:65:2d:cd:77: f0:00:45:03:6f:d4:4b:76:3f:c8:1d:5a:a5:3b:f7: 0e:49:db:2b:90:4e:5b:42:b3:b5:9f:08:62:4d:99: 94:80:d2:ca:d9:b2:1c:88:f6:e3:ef:23:22:85:d5: d3:11:7c:5d:a6:14:14:29:cb:e9:42:d6:e1:c3:87: dc:dc:60:c6:8f:92:cf:18:6b:40:c2:78:25:2b:4c: 1c:35:c2:40:05:5f:0b:67:11:6d:96:8a:e2:85:16: b8:ab:1e:ce:02:90:e9:a8:68:63:40:17:8e:4e:6b: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6E:85:B6:48:0C:21:E5:48:9E:05:BB:27:C0:B5:78:E9:FA:90:E6 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f3:cf:f3:e0:17:61:7d:8c:6f:f5:f9:ca:68:a8:78:68:54: 82:87:56:a1:37:62:cc:5e:1b:eb:75:15:a9:44:6a:20:d3:53: 41:33:c9:bd:68:7d:a2:02:c4:49:4d:66:63:16:fe:fc:c6:af: a3:08:fc:82:58:52:0a:1c:a6:7f:e8:79:3b:1e:9f:8e:84:b8: 11:7c:dc:a8:40:d1:08:72:20:a1:6e:77:39:ac:30:e1:85:a8: 3f:6c:4d:e3:8b:9d:b4:95:bb:c9:3d:ca:64:6a:e2:1f:0f:3e: f1:4a:78:45:29:61:99:99:52:67:9d:fa:7e:c9:3f:85:a9:2e: 9f:86:dc:67:21:bc:b4:35:7a:ec:50:35:c1:80:ae:77:18:b6: 27:b0:24:0c:a4:76:14:6d:d1:6a:f6:63:a0:29:49:ff:c5:fb: 12:c6:09:b8:7e:78:eb:67:ee:46:95:91:73:59:fc:4a:c3:0a: bb:10:2e:27:0e:5b:d5:a5:b6:43:95:22:40:99:df:84:7e:a6: 45:84:6c:51:72:81:73:f7:ce:8a:94:37:05:58:13:14:54:ee: 68:a6:8c:64:df:a0:4e:17:30:63:a9:42:ba:c3:9f:6c:f0:38: bc:81:15:67:f9:17:ee:67:5c:9d:1a:56:af:35:17:14:b4:39: c3:b1:f8:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdtfmEFhzfQpNd0qYjIV8pTrpJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTExMDQwNzQ3MDJaFw0yNTExMDcxNjA2MDJaMDMxMTAvBgNV BAMTKDI2NkU4NUI2NDgwQzIxRTU0ODlFMDVCQjI3QzBCNTc4RTlGQTkwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6DRaPKNm25okC1jmJBMxLqWl 2nzho7p/pbyJ6nQlYR3m02jU+GJa2iSKTXJjWogXu3twmTaouToZtQl6wQ4Lhn6z 3C3Rll2oDT1bLBcKM5XbTo1D6G5uvoO1VCHNBsaieHzYWi7hrXksm4QKbd8IPYe3 dM2x/22hITTLyo35UjpKpRc7zTPq8PnNaXwZgJdRZS3Nd/AARQNv1Et2P8gdWqU7 9w5J2yuQTltCs7WfCGJNmZSA0srZshyI9uPvIyKF1dMRfF2mFBQpy+lC1uHDh9zc YMaPks8Ya0DCeCUrTBw1wkAFXwtnEW2WiuKFFrirHs4CkOmoaGNAF45Oa1vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJm6FtkgMIeVIngW7J8C1eOn6kOYwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/zz/PgF2F9jG/1+cpoqHhoVIKHVqE3Ysxe G+t1FalEaiDTU0Ezyb1ofaICxElNZmMW/vzGr6MI/IJYUgocpn/oeTsen46EuBF8 3KhA0QhyIKFudzmsMOGFqD9sTeOLnbSVu8k9ymRq4h8PPvFKeEUpYZmZUmed+n7J P4WpLp+G3GchvLQ1euxQNcGArncYtiewJAykdhRt0Wr2Y6ApSf/F+xLGCbh+eOtn 7kaVkXNZ/ErDCrsQLicOW9WltkOVIkCZ34R+pkWEbFFygXP3zoqUNwVYExRU7mim jGTfoE4XMGOpQrrDn2zwOLyBFWf5F+5nXJ0aVq81FxS0OcOx+Ok= -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:16 2025 by rpki-client