$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: j/CVrMCrgIK/D+piY6npbUum0kIlylh4Vqs3H7c/mtk= Subject key identifier: EF:8D:53:C6:C1:FA:A3:47:F6:35:C1:51:14:87:76:EE:27:D3:2C:40 Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 13753099C9363F42E792B04B61FB0C308D0E481C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 018D Signing time: Tue 04 Nov 2025 13:31:20 +0000 Manifest this update: Tue 04 Nov 2025 13:26:20 +0000 Manifest next update: Fri 07 Nov 2025 21:35:20 +0000 Files and hashes: 1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=) 2: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: 2hrLWGWPnUHNRao/zSkM/YVDwUibv44EQ8sqPSShAvc=) 3: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:75:30:99:c9:36:3f:42:e7:92:b0:4b:61:fb:0c:30:8d:0e:48:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Nov 4 13:26:20 2025 GMT Not After : Nov 7 21:35:20 2025 GMT Subject: CN=EF8D53C6C1FAA347F635C151148776EE27D32C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:58:83:22:11:59:c1:a2:fc:07:03:48:5b: 75:70:ea:16:f3:96:73:0d:b2:f2:0e:6e:f7:64:f8: 2d:6c:c6:72:ad:ed:eb:7b:5f:fa:29:64:7f:02:45: 18:74:9d:57:15:9a:5b:ba:f3:cb:7f:a7:88:e2:4e: 1f:98:0d:23:b5:33:5e:16:9e:c1:8d:72:b1:b8:f8: e5:58:f4:0d:3b:85:3a:fc:4c:4f:57:4d:3a:c6:e1: 0e:ef:47:8f:59:c2:de:20:a3:0c:34:02:57:1f:7b: 01:cd:09:b0:46:4d:67:e9:6e:49:d0:dd:56:dc:28: 7f:25:f7:f9:ae:f8:1d:61:ed:57:99:e1:a2:75:03: 64:6a:2d:4b:ec:09:50:42:16:50:21:99:28:ea:24: e8:d9:d6:f2:e0:ff:66:f3:20:54:47:30:a4:0a:a5: 70:05:80:2b:06:f1:a0:37:3d:60:11:cd:ab:8a:c1: f3:25:b4:a2:31:1b:b8:c8:1e:25:71:b8:f5:49:e3: de:53:2c:e6:0c:e3:bf:bb:80:1f:23:66:ff:c5:be: 27:ef:0e:2c:f0:20:35:80:ad:2e:cc:08:f2:9c:ea: 36:3b:91:9f:00:9b:6d:90:da:f9:d4:7a:88:a7:7c: 93:4b:cf:59:a3:ad:1a:98:94:bb:60:8c:ca:17:79: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:53:C6:C1:FA:A3:47:F6:35:C1:51:14:87:76:EE:27:D3:2C:40 X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f6:63:8d:a3:75:7d:05:d1:ba:8c:3e:07:b0:95:ae:85:ed: aa:0c:27:c0:cf:34:d9:36:48:3d:d3:7c:d1:da:ef:14:d2:d1: a7:96:95:b3:04:88:25:84:a3:d8:71:cc:eb:d7:d4:34:01:72: d6:f1:f3:13:9f:dd:b5:bd:d3:a2:2c:b9:83:a2:0c:57:f9:72: 4e:60:32:e9:86:24:43:20:e7:82:0d:f7:3e:41:23:d3:3d:61: f5:76:f5:3d:7e:8c:bc:3d:43:cf:58:09:98:f3:00:c3:26:bf: 52:9f:a4:fd:d7:f9:a9:a9:f1:36:b3:91:b2:72:f9:eb:16:ca: 41:02:b5:cc:2c:f6:71:9c:e2:97:21:19:49:bc:70:8d:ff:cb: ad:3d:a6:ae:e4:6e:cd:ac:85:a8:88:ec:fe:17:a0:29:80:2a: 2c:12:6f:31:be:14:7f:bd:28:63:d1:29:62:ee:90:91:be:2c: df:84:6b:5a:ac:11:67:2e:e3:d3:24:c9:ec:9f:89:e5:f7:87: 5b:dd:4b:bc:94:bb:33:24:99:04:1f:a2:ac:80:da:a9:b6:5f: a4:a5:45:58:e4:13:1f:88:fa:5b:11:9f:37:3d:09:55:7c:95: 7f:81:42:bd:55:9b:a5:b0:09:ce:e2:12:65:cc:a7:e9:d1:ff: 6f:c3:9d:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3Uwmck2P0LnkrBLYfsMMI0OSBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTExMDQxMzI2MjBaFw0yNTExMDcyMTM1MjBaMDMxMTAvBgNV BAMTKEVGOEQ1M0M2QzFGQUEzNDdGNjM1QzE1MTE0ODc3NkVFMjdEMzJDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkFiDIhFZwaL8BwNIW3Vw6hbz lnMNsvIObvdk+C1sxnKt7et7X/opZH8CRRh0nVcVmlu688t/p4jiTh+YDSO1M14W nsGNcrG4+OVY9A07hTr8TE9XTTrG4Q7vR49Zwt4goww0AlcfewHNCbBGTWfpbknQ 3VbcKH8l9/mu+B1h7VeZ4aJ1A2RqLUvsCVBCFlAhmSjqJOjZ1vLg/2bzIFRHMKQK pXAFgCsG8aA3PWARzauKwfMltKIxG7jIHiVxuPVJ495TLOYM47+7gB8jZv/Fvifv DizwIDWArS7MCPKc6jY7kZ8Am22Q2vnUeoinfJNLz1mjrRqYlLtgjMoXeTMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU741TxsH6o0f2NcFRFId27ifTLEAwHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf2Y42jdX0F0bqMPgewla6F7aoMJ8DPNNk2 SD3TfNHa7xTS0aeWlbMEiCWEo9hxzOvX1DQBctbx8xOf3bW906IsuYOiDFf5ck5g MumGJEMg54IN9z5BI9M9YfV29T1+jLw9Q89YCZjzAMMmv1KfpP3X+amp8TazkbJy +esWykECtcws9nGc4pchGUm8cI3/y609pq7kbs2shaiI7P4XoCmAKiwSbzG+FH+9 KGPRKWLukJG+LN+Ea1qsEWcu49MkyeyfieX3h1vdS7yUuzMkmQQfoqyA2qm2X6Sl RVjkEx+I+lsRnzc9CVV8lX+BQr1Vm6WwCc7iEmXMp+nR/2/Dnbs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:37 2025 by rpki-client