$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: rZ4nTLd7PT9mfoKWJVQHbayZbAOsbmINgBC5RfYhmNw= Subject key identifier: 3E:60:BA:91:15:63:0F:81:83:2B:91:59:12:F4:F4:05:D0:4D:2F:82 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 657D434319E46DF5746BB4AA5974F29911D40A67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: E8 Signing time: Mon 03 Nov 2025 20:10:42 +0000 Manifest this update: Mon 03 Nov 2025 20:05:42 +0000 Manifest next update: Thu 06 Nov 2025 23:58:42 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: hxa0hFiK5+nkzi5GbsTrzBhzeGTPMHzA5IVbx2zJhOg=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7d:43:43:19:e4:6d:f5:74:6b:b4:aa:59:74:f2:99:11:d4:0a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Nov 3 20:05:42 2025 GMT Not After : Nov 6 23:58:42 2025 GMT Subject: CN=3E60BA9115630F81832B915912F4F405D04D2F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:26:fa:6b:23:8e:9b:e4:d7:6f:14:a3:3c: ae:38:db:6c:4c:1c:86:5e:80:6a:e0:62:69:68:31: 0b:6c:23:52:c2:59:4f:15:d8:9e:68:a6:ed:6a:7d: 05:5c:67:e6:1b:9e:a8:78:b7:b3:c8:b7:3b:6f:e0: 46:46:d2:f8:99:b4:54:c1:65:de:cb:c5:7b:d5:c2: 59:e2:10:f7:f3:8b:a4:ad:83:60:16:44:a2:c3:4b: e7:25:70:95:5e:3a:1f:3b:a3:ee:d0:60:e2:da:49: 23:ac:e0:b6:ab:77:87:2d:bd:f0:a3:ac:f7:1d:f2: 3a:0e:3b:ed:e8:28:59:9c:7c:67:f9:d9:fa:0a:80: 20:0b:d1:74:40:a3:f6:a4:fd:1b:10:83:2f:ba:4d: 39:90:06:2d:72:96:de:9c:6c:be:7a:81:20:d1:39: 9c:89:08:da:21:92:76:e6:b1:f7:86:eb:31:7c:66: 75:45:93:12:a2:54:b2:59:6f:5c:0a:23:f2:43:11: ec:f1:ee:a6:4c:c2:83:c5:7c:5f:fd:f1:bb:33:1e: ce:cb:03:3a:72:2c:81:35:9b:40:7e:71:60:ba:f3: 41:a1:1c:6e:b9:b8:23:2d:fa:c1:08:21:69:47:78: 1c:47:fd:96:0a:1a:9f:b4:db:f5:4a:d0:df:c7:d0: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:60:BA:91:15:63:0F:81:83:2B:91:59:12:F4:F4:05:D0:4D:2F:82 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:77:0a:eb:96:e6:b9:d5:e4:05:43:c7:bc:8b:1a:28:1a:45: af:ef:c6:90:db:f4:af:2c:15:d6:51:d0:0e:95:51:85:25:fa: 80:9b:25:35:8c:f8:7d:7e:7a:ec:d2:52:4c:38:5e:b3:70:40: 7f:cd:43:14:a2:a6:bc:8d:b2:a4:ce:a8:ae:4c:16:54:a0:0f: 17:ec:1d:66:79:1c:73:2f:dd:e4:cb:4e:bf:5c:35:d7:b0:06: c7:9d:65:96:41:09:1a:5d:c1:b5:dd:b6:48:bc:a5:d4:1e:b3: d8:39:16:2b:cc:97:8e:f2:f5:7c:01:d3:dd:05:64:a0:ee:06: 11:bc:b9:c7:93:31:58:c2:36:db:30:3d:60:5f:df:30:a4:50: ad:21:6e:be:a7:e4:db:c4:13:16:b1:d4:73:0a:da:89:47:4b: cf:65:e8:32:4a:67:2a:b7:97:6e:01:62:1a:da:48:1a:17:a0: dd:27:ca:e4:11:98:e4:2d:28:eb:4a:79:e3:67:63:5d:3d:52: ee:f6:fe:26:96:54:ba:7e:b9:68:65:96:7b:da:1d:0a:13:7e: 02:ca:3d:28:1e:dd:98:90:be:67:27:6d:94:05:fd:74:c0:40: 7d:b1:f9:05:b0:e7:a9:b8:12:f1:58:a1:93:c6:3f:bd:cf:fb: a5:ad:2f:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZX1DQxnkbfV0a7SqWXTymRHUCmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTExMDMyMDA1NDJaFw0yNTExMDYyMzU4NDJaMDMxMTAvBgNV BAMTKDNFNjBCQTkxMTU2MzBGODE4MzJCOTE1OTEyRjRGNDA1RDA0RDJGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAib6ayOOm+TXbxSjPK4422xM HIZegGrgYmloMQtsI1LCWU8V2J5opu1qfQVcZ+Ybnqh4t7PItztv4EZG0viZtFTB Zd7LxXvVwlniEPfzi6Stg2AWRKLDS+clcJVeOh87o+7QYOLaSSOs4Lard4ctvfCj rPcd8joOO+3oKFmcfGf52foKgCAL0XRAo/ak/RsQgy+6TTmQBi1ylt6cbL56gSDR OZyJCNohknbmsfeG6zF8ZnVFkxKiVLJZb1wKI/JDEezx7qZMwoPFfF/98bszHs7L AzpyLIE1m0B+cWC680GhHG65uCMt+sEIIWlHeBxH/ZYKGp+02/VK0N/H0EM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmC6kRVjD4GDK5FZEvT0BdBNL4IwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALx3CuuW5rnV5AVDx7yLGigaRa/vxpDb9K8s FdZR0A6VUYUl+oCbJTWM+H1+euzSUkw4XrNwQH/NQxSipryNsqTOqK5MFlSgDxfs HWZ5HHMv3eTLTr9cNdewBsedZZZBCRpdwbXdtki8pdQes9g5FivMl47y9XwB090F ZKDuBhG8uceTMVjCNtswPWBf3zCkUK0hbr6n5NvEExax1HMK2olHS89l6DJKZyq3 l24BYhraSBoXoN0nyuQRmOQtKOtKeeNnY109Uu72/iaWVLp+uWhllnvaHQoTfgLK PSge3ZiQvmcnbZQF/XTAQH2x+QWw56m4EvFYoZPGP73P+6WtLw8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:44 2025 by rpki-client