$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: KbNRKcQkXjH83zDdPeTk8IWf0xaaDd8XFjiV8Qz+HJw= Subject key identifier: 12:85:41:43:60:99:92:C3:DF:96:BF:61:27:E0:9F:59:CE:20:3E:2F Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 544CED2D69F6D5612560CBE6B8DCF304889DB23C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: DC Signing time: Tue 04 Nov 2025 16:11:47 +0000 Manifest this update: Tue 04 Nov 2025 16:06:47 +0000 Manifest next update: Fri 07 Nov 2025 22:32:47 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: K0OFhrkWlNmmrMifbMCO2TjEj84quDD3wqF1e2p78Wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 22:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4c:ed:2d:69:f6:d5:61:25:60:cb:e6:b8:dc:f3:04:88:9d:b2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Nov 4 16:06:47 2025 GMT Not After : Nov 7 22:32:47 2025 GMT Subject: CN=12854143609992C3DF96BF6127E09F59CE203E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:6d:fa:f9:20:92:64:e9:34:c0:53:c2:a5: 36:33:79:cf:48:ae:24:97:55:1c:2e:03:c1:25:a6: a5:c4:ea:61:32:d3:20:6f:87:9a:50:2b:0a:7d:b6: a4:c9:e0:e1:b6:a8:a4:7f:d4:7e:1f:60:eb:df:18: b0:d9:2e:b4:5e:04:e8:4c:19:62:47:cf:b5:42:4f: 8b:b7:d5:87:a5:e8:40:13:74:86:34:db:0b:1f:20: e3:f4:41:a9:b1:5c:f3:15:9b:ca:42:c2:8b:52:9b: fc:07:a4:bb:46:e0:27:b0:be:48:bd:2d:cd:42:e9: 41:83:60:7f:64:ea:45:57:ca:21:bf:31:f5:ad:c2: de:60:1e:bf:d0:16:95:89:d8:9d:0b:ea:88:d2:47: 84:cc:41:02:a9:e5:9d:c2:21:75:e6:ab:30:d9:81: 49:47:20:43:2e:d8:bc:8d:fe:fe:88:99:36:0e:3a: ae:7b:58:9e:85:e6:57:20:2f:3e:c4:4c:8a:8e:15: 30:c9:54:fa:9a:38:43:e1:3a:13:28:4f:53:22:25: 1b:c9:a4:1c:3b:ac:55:28:c4:38:91:b8:91:5e:2a: 59:b9:b0:a3:d9:ca:9b:63:99:9c:db:fc:ea:cc:4a: 87:d2:34:86:e4:69:4b:07:e1:3d:10:23:87:76:fc: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:85:41:43:60:99:92:C3:DF:96:BF:61:27:E0:9F:59:CE:20:3E:2F X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e1:0b:90:97:8e:47:64:19:1a:1f:5a:77:65:64:59:52:eb: c0:e7:0e:2f:a5:58:6e:06:1c:ea:a6:b3:56:7a:64:dc:0d:bb: 46:b6:c4:6c:f0:06:6a:da:f9:78:96:dc:6e:29:57:63:92:73: 12:eb:21:7d:15:5d:14:54:eb:33:5e:ef:a2:9c:bc:7b:e1:f2: 95:74:ea:19:cc:44:dc:36:7d:29:70:37:4e:a1:07:ce:a3:10: 8a:b5:eb:5c:1d:09:98:4c:5b:a3:23:b5:18:ae:56:15:93:ce: 81:de:73:93:02:b8:2f:18:66:f7:65:b4:68:9b:fe:08:11:34: 16:2f:04:52:5f:88:16:46:6d:f5:e0:f3:2f:ac:b0:55:d8:64: fb:40:24:d7:2e:b2:1d:1f:d8:68:81:8f:45:8e:c3:47:3d:dc: f3:1e:8b:67:56:9a:2d:aa:75:c5:cd:ab:78:85:f3:cc:66:3b: cb:21:82:a0:da:c6:3d:b2:e4:f5:f3:c5:10:78:7c:f1:c3:67: 28:93:81:9e:60:b6:e5:cd:58:0d:40:5c:59:ac:ea:f2:68:3e: bf:86:8b:ac:d9:dd:0f:23:0b:5d:a6:0b:68:6b:af:f8:bf:bb: bf:19:4e:16:4b:2e:92:06:2d:da:e5:d3:ca:2f:fa:00:fc:0f: 18:27:cc:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEztLWn21WElYMvmuNzzBIidsjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTExMDQxNjA2NDdaFw0yNTExMDcyMjMyNDdaMDMxMTAvBgNV BAMTKDEyODU0MTQzNjA5OTkyQzNERjk2QkY2MTI3RTA5RjU5Q0UyMDNFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIu236+SCSZOk0wFPCpTYzec9I riSXVRwuA8ElpqXE6mEy0yBvh5pQKwp9tqTJ4OG2qKR/1H4fYOvfGLDZLrReBOhM GWJHz7VCT4u31Yel6EATdIY02wsfIOP0QamxXPMVm8pCwotSm/wHpLtG4Cewvki9 Lc1C6UGDYH9k6kVXyiG/MfWtwt5gHr/QFpWJ2J0L6ojSR4TMQQKp5Z3CIXXmqzDZ gUlHIEMu2LyN/v6ImTYOOq57WJ6F5lcgLz7ETIqOFTDJVPqaOEPhOhMoT1MiJRvJ pBw7rFUoxDiRuJFeKlm5sKPZyptjmZzb/OrMSofSNIbkaUsH4T0QI4d2/Lo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEoVBQ2CZksPflr9hJ+CfWc4gPi8wHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnhC5CXjkdkGRofWndlZFlS68DnDi+lWG4G HOqms1Z6ZNwNu0a2xGzwBmra+XiW3G4pV2OScxLrIX0VXRRU6zNe76KcvHvh8pV0 6hnMRNw2fSlwN06hB86jEIq161wdCZhMW6MjtRiuVhWTzoHec5MCuC8YZvdltGib /ggRNBYvBFJfiBZGbfXg8y+ssFXYZPtAJNcush0f2GiBj0WOw0c93PMei2dWmi2q dcXNq3iF88xmO8shgqDaxj2y5PXzxRB4fPHDZyiTgZ5gtuXNWA1AXFms6vJoPr+G i6zZ3Q8jC12mC2hrr/i/u78ZThZLLpIGLdrl08ov+gD8DxgnzH0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:24:11 2025 by rpki-client