$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: BewoC735zaT+ktOwbanK09xGWspUwxP+OSi6X/LJraw= Subject key identifier: 51:84:BE:52:D1:5C:2A:7C:38:C6:1A:BA:A7:3E:3F:DC:25:A6:84:DA Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 2B2F46E1FE5EAEE5EC2E97B7B022EE3E4B2F200B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0117 Signing time: Sun 02 Nov 2025 12:21:43 +0000 Manifest this update: Sun 02 Nov 2025 12:16:43 +0000 Manifest next update: Wed 05 Nov 2025 14:48:43 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: AKIRU9pQHEjy7g35gStKiN+KKg2fYtSKwUu0prwKy/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2f:46:e1:fe:5e:ae:e5:ec:2e:97:b7:b0:22:ee:3e:4b:2f:20:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Nov 2 12:16:43 2025 GMT Not After : Nov 5 14:48:43 2025 GMT Subject: CN=5184BE52D15C2A7C38C61ABAA73E3FDC25A684DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:8f:e2:fc:96:ba:50:7d:1c:9f:ef:2c:bf: 41:46:4d:0f:83:86:f1:b1:07:65:bc:7c:18:d8:6c: 10:1c:e9:bc:94:8e:ec:16:4c:e7:8c:7f:39:94:cb: ae:97:ef:0b:4a:ab:9a:69:03:7f:08:5f:de:6a:2f: 94:8f:ad:f5:68:ac:75:70:b1:c1:10:7d:70:74:b8: 3a:d6:9e:25:aa:2a:aa:ab:ef:5d:2e:f5:fe:72:d0: 66:59:1f:47:63:bf:47:06:ba:3e:e1:69:1b:95:6a: 80:58:9f:2b:57:62:09:55:44:ee:84:83:79:97:9f: ca:c0:83:2a:84:ad:48:fe:4b:f2:f5:5b:89:43:06: d8:dd:52:90:31:d9:5e:9f:c6:59:51:be:c1:12:2a: 83:21:22:9f:02:22:1e:91:74:c0:c2:64:46:25:47: fa:7b:5e:9f:a7:50:0e:02:9d:cb:11:65:35:3e:22: 73:e6:88:33:aa:9a:cd:92:90:00:79:bc:38:00:a8: 5b:cc:d5:62:22:01:cc:0d:9c:f1:13:4e:dc:b5:f8: 5d:fa:2a:8b:2a:bf:93:ef:22:89:d6:6e:a0:c7:9f: 0e:42:e8:ee:5e:1a:0d:0d:06:fa:09:e1:73:7e:e1: c7:34:33:55:dc:fe:70:74:6e:45:04:50:13:2b:fd: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:84:BE:52:D1:5C:2A:7C:38:C6:1A:BA:A7:3E:3F:DC:25:A6:84:DA X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9d:5a:5f:19:20:a8:6d:8a:72:62:49:2e:c1:f1:f8:74:01: 88:cb:ce:44:3f:49:79:65:40:b0:98:92:1b:93:ec:2d:41:d5: c7:51:0d:83:95:7f:63:e5:f8:fb:ef:05:61:5b:e9:9f:0d:a8: a1:30:cb:f3:9c:49:56:0a:80:01:fc:21:16:5e:eb:d0:d4:69: f1:bf:4a:65:f2:04:0a:19:8d:4d:78:9c:c7:ee:2c:99:ce:4a: 6b:dd:75:e9:02:18:d1:6f:ff:25:d2:fb:c7:81:2b:ec:a1:7c: 7b:ec:ac:0d:58:d5:9d:b2:db:8c:6a:58:e5:22:36:22:c4:63: 36:97:55:1d:73:4c:a0:84:bf:fa:e8:08:db:7d:46:8d:cd:51: c8:d7:87:4f:e2:48:8e:24:fd:f4:45:ee:21:6a:c2:cb:7d:ee: 79:8d:30:5d:b6:ea:8f:56:fa:2e:1a:63:5f:1c:ed:95:b0:45: 3a:bc:3c:ae:aa:95:50:20:f5:04:32:d1:a5:17:a4:fe:76:ab: df:41:17:04:b8:06:e6:a6:fe:15:99:a5:b4:b4:2b:50:33:54: 88:35:84:31:a7:68:da:d4:c6:ef:17:80:44:07:ae:17:57:d2: d7:b1:50:0c:a0:2d:ad:bd:13:f3:69:38:8c:ef:5d:4e:ae:94: 17:50:37:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKy9G4f5eruXsLpe3sCLuPksvIAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTExMDIxMjE2NDNaFw0yNTExMDUxNDQ4NDNaMDMxMTAvBgNV BAMTKDUxODRCRTUyRDE1QzJBN0MzOEM2MUFCQUE3M0UzRkRDMjVBNjg0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WY/i/Ja6UH0cn+8sv0FGTQ+D hvGxB2W8fBjYbBAc6byUjuwWTOeMfzmUy66X7wtKq5ppA38IX95qL5SPrfVorHVw scEQfXB0uDrWniWqKqqr710u9f5y0GZZH0djv0cGuj7haRuVaoBYnytXYglVRO6E g3mXn8rAgyqErUj+S/L1W4lDBtjdUpAx2V6fxllRvsESKoMhIp8CIh6RdMDCZEYl R/p7Xp+nUA4CncsRZTU+InPmiDOqms2SkAB5vDgAqFvM1WIiAcwNnPETTty1+F36 Kosqv5PvIonWbqDHnw5C6O5eGg0NBvoJ4XN+4cc0M1Xc/nB0bkUEUBMr/b4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUYS+UtFcKnw4xhq6pz4/3CWmhNowHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADidWl8ZIKhtinJiSS7B8fh0AYjLzkQ/SXll QLCYkhuT7C1B1cdRDYOVf2Pl+PvvBWFb6Z8NqKEwy/OcSVYKgAH8IRZe69DUafG/ SmXyBAoZjU14nMfuLJnOSmvddekCGNFv/yXS+8eBK+yhfHvsrA1Y1Z2y24xqWOUi NiLEYzaXVR1zTKCEv/roCNt9Ro3NUcjXh0/iSI4k/fRF7iFqwst97nmNMF226o9W +i4aY18c7ZWwRTq8PK6qlVAg9QQy0aUXpP52q99BFwS4Buam/hWZpbS0K1AzVIg1 hDGnaNrUxu8XgEQHrhdX0texUAygLa29E/NpOIzvXU6ulBdQNwE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:44 2025 by rpki-client