$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: nkQ/pwXiPDGTUniMQ+/cK+14dD4ZX+X6dN0i/O3g9LY= Subject key identifier: 83:53:39:50:3A:DE:2E:2C:DA:C3:C4:53:8C:D4:B8:6E:59:4F:8A:0E Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 4427CCE094789B1DFF300BC3A391175F281C6E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 0216 Signing time: Sun 02 Nov 2025 19:00:00 +0000 Manifest this update: Sun 02 Nov 2025 18:55:00 +0000 Manifest next update: Thu 06 Nov 2025 03:38:00 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) 2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: cLMxJVrKRi2wwrEPNcnou7AVzCav6Q9PCDKrc1Xjh7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:27:cc:e0:94:78:9b:1d:ff:30:0b:c3:a3:91:17:5f:28:1c:6e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Nov 2 18:55:00 2025 GMT Not After : Nov 6 03:38:00 2025 GMT Subject: CN=835339503ADE2E2CDAC3C4538CD4B86E594F8A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:74:9e:1f:0f:42:dd:6d:09:c5:79:06:3e: ae:a8:dc:2c:f6:ee:20:59:93:d1:eb:3e:54:20:fd: dd:01:a1:f0:45:b8:23:7a:b4:ab:23:6b:3b:dc:5f: 34:dd:1d:2f:7a:b2:ef:01:85:4a:c5:d5:d3:69:df: 42:e1:9d:05:d5:28:0f:f5:eb:91:f4:63:8a:6d:75: 0c:5b:66:48:09:dc:ab:55:78:7a:a2:d0:6f:de:13: 6b:1e:d6:66:a0:7d:54:65:29:9d:21:7c:04:55:f6: cc:44:85:26:7b:41:00:2f:d8:2b:73:47:23:56:3b: 9a:68:ab:41:c6:f7:12:4c:78:1f:21:f8:23:ee:b9: 27:ad:a0:ac:b2:5a:43:b4:b0:fb:d5:8b:87:c6:c5: 13:9a:d6:de:44:76:9d:63:b5:fd:27:d0:ea:b0:a3: 31:1e:0b:c4:5a:bd:ea:6d:d4:a5:bd:1e:c1:38:84: e3:bf:de:1e:4a:a5:6b:8a:77:cc:6c:1f:ba:93:00: d7:c6:58:bd:69:fa:2b:a8:05:c7:bf:a6:70:47:b1: 43:2c:55:51:a7:b8:4a:6a:e1:d6:ab:b5:4b:5a:ad: b5:01:c7:01:05:f4:2b:9b:d4:2c:70:5b:84:e1:9c: 7e:35:b5:51:32:fb:e9:5d:55:ab:8d:b3:be:f5:3b: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:39:50:3A:DE:2E:2C:DA:C3:C4:53:8C:D4:B8:6E:59:4F:8A:0E X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:23:79:eb:84:63:ab:64:84:8b:79:dd:37:e1:3c:52:ff:55: be:74:e2:52:8a:3f:e2:47:e1:44:3c:ee:28:8c:21:01:21:89: 75:de:14:88:8f:a1:f7:7a:f7:33:5e:68:5f:30:ea:3a:61:5c: 63:11:0a:ec:16:cc:40:9c:72:ad:81:a9:c9:f3:da:da:16:1b: ba:8b:de:bb:15:71:3e:4a:33:dc:b4:16:7a:c0:7f:7e:f5:7a: 3d:7b:c5:c5:b2:7f:4e:b7:f9:ea:13:32:2a:02:dc:a5:96:75: 65:d3:7f:23:22:c1:c0:52:18:35:99:07:91:95:16:15:e5:a0: 68:3c:81:ba:f4:58:c4:2d:cd:d9:65:92:d2:f2:2c:70:9f:26: a3:c6:21:40:d2:67:84:66:e9:12:43:a3:a6:2d:e2:1f:88:66: a1:f0:5b:93:58:b8:4e:c8:a8:d0:59:c7:ef:9b:ff:25:6e:25: 4d:51:51:40:c4:42:8c:1f:ca:57:f4:f7:eb:d8:c2:13:03:e8: 8f:9e:75:1e:53:fd:67:ba:5a:1f:03:ef:5a:0c:94:3b:dc:dc: 80:df:b7:f5:18:4d:da:7c:0c:f6:3e:e4:59:f8:20:56:53:8e: 3e:48:a1:e8:66:05:f1:a1:f9:f4:51:2c:4c:2f:70:4a:c9:6e: c7:06:4c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCfM4JR4mx3/MAvDo5EXXygcblswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNTExMDIxODU1MDBaFw0yNTExMDYwMzM4MDBaMDMxMTAvBgNV BAMTKDgzNTMzOTUwM0FERTJFMkNEQUMzQzQ1MzhDRDRCODZFNTk0RjhBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5nSeHw9C3W0JxXkGPq6o3Cz2 7iBZk9HrPlQg/d0BofBFuCN6tKsjazvcXzTdHS96su8BhUrF1dNp30LhnQXVKA/1 65H0Y4ptdQxbZkgJ3KtVeHqi0G/eE2se1magfVRlKZ0hfARV9sxEhSZ7QQAv2Ctz RyNWO5poq0HG9xJMeB8h+CPuuSetoKyyWkO0sPvVi4fGxROa1t5Edp1jtf0n0Oqw ozEeC8Ravept1KW9HsE4hOO/3h5KpWuKd8xsH7qTANfGWL1p+iuoBce/pnBHsUMs VVGnuEpq4dartUtarbUBxwEF9Cub1CxwW4ThnH41tVEy++ldVauNs771O9kLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1M5UDreLizaw8RTjNS4bllPig4wHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQjeeuEY6tkhIt53TfhPFL/Vb504lKKP+JH 4UQ87iiMIQEhiXXeFIiPofd69zNeaF8w6jphXGMRCuwWzECccq2Bqcnz2toWG7qL 3rsVcT5KM9y0FnrAf371ej17xcWyf063+eoTMioC3KWWdWXTfyMiwcBSGDWZB5GV FhXloGg8gbr0WMQtzdllktLyLHCfJqPGIUDSZ4Rm6RJDo6Yt4h+IZqHwW5NYuE7I qNBZx++b/yVuJU1RUUDEQowfylf09+vYwhMD6I+edR5T/We6Wh8D71oMlDvc3IDf t/UYTdp8DPY+5Fn4IFZTjj5IoehmBfGh+fRRLEwvcErJbscGTHs= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:28 2025 by rpki-client