$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: UPOPOLU2HtgQMU7ZOTIMr4bJV0DeifIjMoP9TXe7PLI= Subject key identifier: 27:FD:57:34:75:B7:0D:97:EA:0A:C0:42:38:44:25:CC:B4:BB:2D:97 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 3987F242B85B9B8ACF2864EFD52DF796AFED4A4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 04AC Signing time: Mon 03 Nov 2025 20:11:04 +0000 Manifest this update: Mon 03 Nov 2025 20:06:04 +0000 Manifest next update: Fri 07 Nov 2025 05:31:04 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: O9So3SnoT29UIjtZd1nEHPsGC881EcAD4uRnHpNlW6c=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:87:f2:42:b8:5b:9b:8a:cf:28:64:ef:d5:2d:f7:96:af:ed:4a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Nov 3 20:06:04 2025 GMT Not After : Nov 7 05:31:04 2025 GMT Subject: CN=27FD573475B70D97EA0AC042384425CCB4BB2D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:b0:b3:94:d7:2d:dc:17:c0:5e:5c:17:b9: 9b:e9:5f:9c:bc:bf:62:e0:3b:10:73:e0:46:d7:fe: 8d:dc:a3:a5:bf:c0:83:0b:32:3c:b7:5b:f5:ec:c0: 71:f0:cf:74:f4:1a:da:84:5d:ed:b5:25:b6:54:7a: 6b:6c:96:ab:4b:97:84:e5:9c:e3:52:47:6f:69:73: e5:50:6e:46:64:32:83:54:27:31:f1:6d:b5:52:99: 91:16:bd:dd:33:8b:9b:c6:5a:d1:98:d2:f9:44:ee: e0:7c:65:bd:76:56:47:41:11:50:47:79:a1:09:b4: 8b:70:87:16:64:51:b8:a3:02:e6:7f:1d:4e:2d:b3: fb:5c:2b:4e:5e:56:1f:c0:5d:b3:92:92:0f:cb:b5: 61:f8:f5:9a:d6:9d:43:2b:4e:55:36:a0:b0:08:f9: 0f:0a:a6:2e:56:0c:d3:a2:6b:7a:b4:34:e8:6c:3b: 04:1d:40:f1:b3:5b:d1:b9:e6:7b:31:f9:9b:76:28: ae:e5:e0:31:89:15:e1:d1:b5:dc:60:ce:c6:7a:fc: 52:fd:8a:38:18:2a:52:f8:81:52:bf:7a:89:98:89: 82:c6:d7:4e:05:5f:62:93:35:64:11:e6:7d:95:c3: 43:65:69:cf:c7:41:8b:e8:bd:3a:c1:fa:25:8c:ce: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:57:34:75:B7:0D:97:EA:0A:C0:42:38:44:25:CC:B4:BB:2D:97 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0e:cb:fa:cc:fb:12:e7:81:aa:7c:cd:6a:19:f1:8d:45:d5: f2:20:6a:09:ac:7e:94:96:5f:7f:1a:6f:db:05:98:2c:e0:a2: 0a:11:14:c1:c1:be:2d:e9:b9:e6:da:0f:5b:27:3f:ce:dc:4b: fa:6e:0f:a4:63:09:a1:50:a8:f0:94:da:de:16:99:07:e0:5e: 10:48:61:68:ad:b8:5d:e0:00:87:ca:14:26:19:fe:82:49:96: dc:a3:3b:a2:09:45:c5:77:5d:a9:a6:d1:be:91:78:5d:f1:a6: ff:8d:ed:ad:57:46:9d:22:69:85:c9:dd:47:a0:16:59:77:7e: 53:db:70:0d:d4:48:d1:6b:ec:66:5f:e8:9d:a4:ae:b5:60:16: 67:c0:4f:b8:f9:2b:5d:c2:dd:b8:6b:cf:8e:27:02:4d:b6:9f: f8:62:f9:36:ed:22:4c:6c:9c:0b:07:5c:4b:4d:d0:c2:eb:fe: 97:d0:d9:d4:3b:68:5c:e4:b7:22:d7:c0:ac:73:dd:03:91:99: 07:ca:48:94:67:85:35:43:1f:a3:5d:8b:ba:a3:ea:b6:a8:7d: bf:9c:4d:51:75:e5:d4:66:bb:51:e4:90:f6:b8:44:42:b6:04: ad:0e:b1:3f:c2:00:6f:7d:9c:67:1c:9f:5c:f4:71:8c:0b:48: 35:51:16:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYfyQrhbm4rPKGTv1S33lq/tSkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTExMDMyMDA2MDRaFw0yNTExMDcwNTMxMDRaMDMxMTAvBgNV BAMTKDI3RkQ1NzM0NzVCNzBEOTdFQTBBQzA0MjM4NDQyNUNDQjRCQjJEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgrCzlNct3BfAXlwXuZvpX5y8 v2LgOxBz4EbX/o3co6W/wIMLMjy3W/XswHHwz3T0GtqEXe21JbZUemtslqtLl4Tl nONSR29pc+VQbkZkMoNUJzHxbbVSmZEWvd0zi5vGWtGY0vlE7uB8Zb12VkdBEVBH eaEJtItwhxZkUbijAuZ/HU4ts/tcK05eVh/AXbOSkg/LtWH49ZrWnUMrTlU2oLAI +Q8Kpi5WDNOia3q0NOhsOwQdQPGzW9G55nsx+Zt2KK7l4DGJFeHRtdxgzsZ6/FL9 ijgYKlL4gVK/eomYiYLG104FX2KTNWQR5n2Vw0Nlac/HQYvovTrB+iWMztJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/1XNHW3DZfqCsBCOEQlzLS7LZcwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Oy/rM+xLngap8zWoZ8Y1F1fIgagmsfpSW X38ab9sFmCzgogoRFMHBvi3puebaD1snP87cS/puD6RjCaFQqPCU2t4WmQfgXhBI YWituF3gAIfKFCYZ/oJJltyjO6IJRcV3Xamm0b6ReF3xpv+N7a1XRp0iaYXJ3Ueg Fll3flPbcA3USNFr7GZf6J2krrVgFmfAT7j5K13C3bhrz44nAk22n/hi+TbtIkxs nAsHXEtN0MLr/pfQ2dQ7aFzktyLXwKxz3QORmQfKSJRnhTVDH6Ndi7qj6raofb+c TVF15dRmu1HkkPa4REK2BK0OsT/CAG99nGccn1z0cYwLSDVRFjw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:54 2025 by rpki-client