$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: wAQst2bSkCUKcvbWhdAujdInRpDFFrJMHwpTwBqo6aw= Subject key identifier: A5:DB:3D:75:72:1A:EB:0C:BA:F3:AE:A3:4B:F5:86:30:17:62:BA:0A Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 7174591976D154D458C1B15EBDC05E64D1D769CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0230 Signing time: Tue 04 Nov 2025 01:52:05 +0000 Manifest this update: Tue 04 Nov 2025 01:47:05 +0000 Manifest next update: Fri 07 Nov 2025 09:21:05 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: sY0JcRfnN+uZkvErRlUuhd2PLPVCVT7ZPlVSZFb9Tdk=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:74:59:19:76:d1:54:d4:58:c1:b1:5e:bd:c0:5e:64:d1:d7:69:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Nov 4 01:47:05 2025 GMT Not After : Nov 7 09:21:05 2025 GMT Subject: CN=A5DB3D75721AEB0CBAF3AEA34BF586301762BA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:43:ef:1a:5a:35:9a:73:61:b2:99:2d:39: 54:5a:eb:80:9f:1f:74:7d:de:f1:63:8e:92:bd:c9: 61:90:e2:de:43:4a:ec:c6:58:72:5b:f3:7a:5d:f9: 51:b1:49:d3:23:d5:1c:47:13:4a:ae:33:1b:58:16: 38:8d:df:3e:2a:14:6b:13:65:b7:9e:2d:bc:79:ba: 4b:2c:8f:d4:f6:bd:20:9d:68:4c:ec:d9:1c:8d:a5: 2f:00:a6:b1:db:27:80:61:75:ff:87:13:c1:44:18: 9a:9c:26:60:55:52:2d:94:b7:2d:83:d5:e3:4d:2a: bf:05:b1:88:46:72:17:3f:c0:b3:9f:5f:af:c8:7b: 2d:4c:7e:bf:93:ab:8e:9a:b9:d1:49:a1:ed:ce:a4: 12:b4:d2:0b:e6:cd:72:dd:bf:70:20:af:50:42:9c: 4d:07:98:ef:18:cf:f3:a6:c4:d7:9f:06:55:6c:a7: bd:b5:3e:f2:48:11:a2:9c:cd:9b:28:e7:9e:62:3a: b7:b9:e4:0f:00:0a:01:a7:f3:71:a8:e7:cf:0a:8b: d7:00:7d:20:c9:b2:0b:67:24:fd:3d:f2:1e:f6:34: 30:63:a8:45:74:f3:a7:4d:1f:0d:17:9f:22:43:5f: 6e:cb:4c:a4:31:d3:66:0e:2a:d6:15:e0:1c:f6:73: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:3D:75:72:1A:EB:0C:BA:F3:AE:A3:4B:F5:86:30:17:62:BA:0A X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:56:02:54:d5:fe:73:cc:e0:55:d6:bd:96:ff:67:6a:9c:bc: 48:96:52:fb:24:27:9a:b1:5a:91:9f:8a:c9:b0:bb:38:b5:85: 4a:d3:b7:bb:7d:8b:97:8b:0a:5e:ee:53:c5:7d:6f:9f:49:aa: bb:90:2c:df:60:e9:5b:fe:a2:80:c5:84:3e:db:a4:3e:f2:7f: b7:92:0c:a6:7a:01:d7:8b:35:01:78:4e:fd:60:ef:44:2c:a0: 5a:92:1b:9d:8f:79:b6:f5:8c:2e:fa:ae:94:7d:0f:51:5d:1d: c6:53:79:01:13:4c:e8:c7:98:56:a7:4f:60:6b:19:48:97:0a: 68:d5:aa:d4:45:b4:f3:45:d3:b3:79:44:0f:51:06:34:f3:d0: 09:99:ff:75:de:57:3e:7c:0c:95:ed:c5:d7:b4:6c:08:8a:b2: d6:b6:73:1d:51:75:1c:e5:2f:0e:08:9f:d2:81:78:fe:48:e2: c5:66:28:66:5d:d9:9f:cc:92:45:42:ce:bf:4e:15:9c:1f:c5: 29:c3:16:e3:70:19:ba:c2:e2:e4:db:64:23:49:b8:a0:d9:da: 09:d7:30:81:3a:14:6f:99:84:2d:c8:37:b1:90:4c:b6:6c:42: bf:6f:11:0c:b3:88:17:db:db:dc:f5:ff:2a:89:1b:49:5f:aa: 73:a2:1f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXRZGXbRVNRYwbFevcBeZNHXacwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTExMDQwMTQ3MDVaFw0yNTExMDcwOTIxMDVaMDMxMTAvBgNV BAMTKEE1REIzRDc1NzIxQUVCMENCQUYzQUVBMzRCRjU4NjMwMTc2MkJBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFkPvGlo1mnNhspktOVRa64Cf H3R93vFjjpK9yWGQ4t5DSuzGWHJb83pd+VGxSdMj1RxHE0quMxtYFjiN3z4qFGsT ZbeeLbx5ukssj9T2vSCdaEzs2RyNpS8AprHbJ4Bhdf+HE8FEGJqcJmBVUi2Uty2D 1eNNKr8FsYhGchc/wLOfX6/Iey1Mfr+Tq46audFJoe3OpBK00gvmzXLdv3Agr1BC nE0HmO8Yz/OmxNefBlVsp721PvJIEaKczZso555iOre55A8ACgGn83Go588Ki9cA fSDJsgtnJP098h72NDBjqEV086dNHw0XnyJDX27LTKQx02YOKtYV4Bz2czepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpds9dXIa6wy6866jS/WGMBdiugowHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNWAlTV/nPM4FXWvZb/Z2qcvEiWUvskJ5qx WpGfismwuzi1hUrTt7t9i5eLCl7uU8V9b59JqruQLN9g6Vv+ooDFhD7bpD7yf7eS DKZ6AdeLNQF4Tv1g70QsoFqSG52Pebb1jC76rpR9D1FdHcZTeQETTOjHmFanT2Br GUiXCmjVqtRFtPNF07N5RA9RBjTz0AmZ/3XeVz58DJXtxde0bAiKsta2cx1RdRzl Lw4In9KBeP5I4sVmKGZd2Z/MkkVCzr9OFZwfxSnDFuNwGbrC4uTbZCNJuKDZ2gnX MIE6FG+ZhC3IN7GQTLZsQr9vEQyziBfb29z1/yqJG0lfqnOiHwY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:01 2025 by rpki-client