$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: gMhuBv9VXa5rlsSbBR/qWsEUtlgRyLYyb2FTBWbkM/Y= Subject key identifier: 90:37:57:FA:BA:BD:4C:1D:B4:28:CC:9E:F2:AE:2A:91:E3:AB:62:AA Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 3EE064B267D1C7855280F33E7C81A8347BEA647F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0238 Signing time: Sun 02 Nov 2025 12:22:07 +0000 Manifest this update: Sun 02 Nov 2025 12:17:07 +0000 Manifest next update: Wed 05 Nov 2025 23:02:07 +0000 Files and hashes: 1: 3130332e3138342e31342e302f32332d3234203d3e20313439373135.roa (hash: er7VxHw3cverVEgEo/3oWbnc8s1aWy89KU07LwZCwdQ=) 2: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: th1yoooUofhZOjJ3ehQY7oON22hrcK4+eNz7Xw9jYTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e0:64:b2:67:d1:c7:85:52:80:f3:3e:7c:81:a8:34:7b:ea:64:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Nov 2 12:17:07 2025 GMT Not After : Nov 5 23:02:07 2025 GMT Subject: CN=903757FABABD4C1DB428CC9EF2AE2A91E3AB62AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:ef:72:10:43:7e:d8:a2:c2:7e:a1:bd:20: de:c6:93:55:1c:28:a9:12:8f:14:52:c6:3e:b5:b5: 8c:a0:2e:44:d4:5d:61:36:9b:71:48:eb:b3:e3:a7: 2e:5f:03:b8:5a:69:b3:02:47:e4:2e:dd:59:dd:eb: 25:2b:d1:c6:3e:40:8f:d7:4d:54:c3:83:56:33:a8: 07:a6:4c:35:63:43:4f:54:c0:6d:58:fe:43:76:d2: ff:b9:52:e9:3b:d8:1b:32:80:c2:f9:be:a2:f4:05: 46:41:e2:eb:c9:25:0d:08:4e:c7:ad:33:4c:64:36: 28:fa:d4:51:42:bd:90:38:d3:f3:3e:9d:33:dc:a5: e6:ea:f7:74:85:1b:ff:89:a6:6b:6d:2c:3f:88:86: 98:e6:6b:23:38:8a:f1:fc:86:7b:37:c9:bf:04:be: 6d:57:b9:22:b5:b8:d4:54:ee:be:97:7b:e8:5e:e6: e5:c7:28:83:41:80:f0:6e:d9:32:a3:ba:c7:4b:e3: 28:07:2c:e1:39:bc:df:8c:a3:9b:62:34:b0:ca:c8: 0c:24:be:e3:ba:7b:7e:e8:5a:d5:ea:ce:60:96:5b: 4f:86:b3:32:49:fd:30:46:25:16:14:35:c4:32:e3: 42:87:bd:93:b1:64:e7:bf:62:c7:cd:d1:af:6d:d1: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:37:57:FA:BA:BD:4C:1D:B4:28:CC:9E:F2:AE:2A:91:E3:AB:62:AA X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2a:c2:d0:ff:a9:b5:0f:c0:fc:47:50:2a:fe:28:da:1c:91: b8:da:36:62:77:3d:41:f8:a0:c7:bd:bc:24:f2:56:6e:56:1c: 94:46:b2:73:e0:f7:aa:14:93:38:8b:13:50:36:f8:5f:cc:d5: 04:0e:c4:d4:f1:8a:2d:c4:69:a4:5c:96:44:2c:24:1c:dc:77: cf:00:c1:a3:87:ac:80:3c:76:17:6a:9d:95:87:03:82:c3:47: 2d:9d:99:24:94:8a:46:4b:ca:49:d8:33:c7:72:51:a4:59:2d: 57:f8:96:84:fd:51:07:db:08:bb:a6:7b:f1:98:4f:14:9f:de: 5d:17:9b:67:2c:63:8e:0e:57:84:b7:b4:86:ed:fe:31:9c:4a: f0:48:c4:9a:01:84:18:4f:1b:26:28:ff:3a:f0:ca:e3:fd:df: 36:c0:b7:7f:db:44:c7:f6:12:99:62:97:3e:36:da:2e:1e:e7: 9e:97:38:e0:2a:e6:b1:de:ae:0b:91:b2:ec:ff:9d:5a:14:5a: d4:2e:74:9f:2e:7b:13:29:91:12:28:51:04:c7:36:00:12:47: 77:68:ec:1b:14:7f:8b:63:7b:d6:58:52:75:13:3c:ce:6f:d5: ea:42:cb:dc:2c:b9:b4:4a:f6:bf:9f:af:c8:58:18:00:61:49: 7d:06:04:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuBksmfRx4VSgPM+fIGoNHvqZH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTExMDIxMjE3MDdaFw0yNTExMDUyMzAyMDdaMDMxMTAvBgNV BAMTKDkwMzc1N0ZBQkFCRDRDMURCNDI4Q0M5RUYyQUUyQTkxRTNBQjYyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uu9yEEN+2KLCfqG9IN7Gk1Uc KKkSjxRSxj61tYygLkTUXWE2m3FI67Pjpy5fA7haabMCR+Qu3Vnd6yUr0cY+QI/X TVTDg1YzqAemTDVjQ09UwG1Y/kN20v+5Uuk72BsygML5vqL0BUZB4uvJJQ0ITset M0xkNij61FFCvZA40/M+nTPcpebq93SFG/+JpmttLD+IhpjmayM4ivH8hns3yb8E vm1XuSK1uNRU7r6Xe+he5uXHKINBgPBu2TKjusdL4ygHLOE5vN+Mo5tiNLDKyAwk vuO6e37oWtXqzmCWW0+GszJJ/TBGJRYUNcQy40KHvZOxZOe/YsfN0a9t0WMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDdX+rq9TB20KMye8q4qkeOrYqowHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcqwtD/qbUPwPxHUCr+KNockbjaNmJ3PUH4 oMe9vCTyVm5WHJRGsnPg96oUkziLE1A2+F/M1QQOxNTxii3EaaRclkQsJBzcd88A waOHrIA8dhdqnZWHA4LDRy2dmSSUikZLyknYM8dyUaRZLVf4loT9UQfbCLume/GY TxSf3l0Xm2csY44OV4S3tIbt/jGcSvBIxJoBhBhPGyYo/zrwyuP93zbAt3/bRMf2 Eplilz422i4e556XOOAq5rHerguRsuz/nVoUWtQudJ8uexMpkRIoUQTHNgASR3do 7BsUf4tje9ZYUnUTPM5v1epCy9wsubRK9r+fr8hYGABhSX0GBGM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:39 2025 by rpki-client