$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: 52+twtVd2xbBoszhAwAueUOGStxJH9OQXHTm6LHPl8Q= Subject key identifier: 42:C2:0C:BA:06:A9:EC:91:08:44:6F:E0:DB:F1:7A:E8:82:AB:D5:FD Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 4BDA036AC9DD37C82B6B25E7924F0D121C89D06E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 039D Signing time: Sun 02 Nov 2025 14:52:12 +0000 Manifest this update: Sun 02 Nov 2025 14:47:12 +0000 Manifest next update: Thu 06 Nov 2025 01:02:12 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: FCKGuRUdLwQlnE2Za12HjHm3CgAZV1fWa1W7ToUzOHQ=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:da:03:6a:c9:dd:37:c8:2b:6b:25:e7:92:4f:0d:12:1c:89:d0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Nov 2 14:47:12 2025 GMT Not After : Nov 6 01:02:12 2025 GMT Subject: CN=42C20CBA06A9EC9108446FE0DBF17AE882ABD5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:da:a1:5d:4f:60:d6:fc:a8:21:e0:53:5b: 97:84:db:65:f2:42:fe:14:b9:5e:75:42:fd:3e:0e: 39:1a:3f:e6:cb:f2:70:4b:75:24:f1:1c:69:77:ef: 06:5c:61:2c:e5:c6:58:1e:6c:32:f8:c0:8a:f6:de: c7:f7:33:9a:71:83:12:87:8b:3b:93:f6:45:fd:6d: ea:c1:a4:e2:cc:6d:c4:c5:bf:25:a9:b5:44:27:d4: 35:00:ea:42:1f:60:2a:41:f8:27:95:39:77:85:c3: 5c:ab:b1:16:96:6a:21:da:57:fa:07:ae:7b:ae:1e: ce:e0:56:6e:35:b2:e3:60:32:4c:ea:fb:6e:c7:25: af:ab:89:6f:1b:55:0a:fb:a2:4e:c7:9e:3b:1b:cc: d9:36:94:d0:cb:6d:64:51:87:18:c5:37:66:84:4e: a7:7c:48:f5:01:d3:a3:61:4e:17:67:3b:9d:d5:41: 85:29:9e:1d:30:48:f7:32:dc:77:50:5c:f4:87:5c: a0:7a:ec:e5:94:9d:ac:40:ca:c6:b3:ef:2b:3a:f6: 63:15:e6:7e:2c:91:5a:6e:60:1c:b6:6c:3c:43:0d: 16:8a:ea:c5:a6:2b:16:12:66:96:e4:a5:fb:65:22: 0d:92:03:bf:09:89:64:98:ce:28:12:cf:3c:b3:89: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:0C:BA:06:A9:EC:91:08:44:6F:E0:DB:F1:7A:E8:82:AB:D5:FD X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f8:26:ec:f7:ac:28:2d:dc:2c:21:5e:3a:03:01:68:4d:57: 41:72:79:7b:db:fd:f5:bd:1c:49:60:b4:90:be:d1:2a:fb:dd: 33:d8:18:68:3c:55:eb:f8:fc:36:0d:9c:12:e9:11:f0:77:e0: 0d:a5:35:b5:7c:ff:26:26:d5:ea:6d:47:b5:82:28:f2:d6:85: a9:8d:e6:08:ad:62:74:34:5d:3f:60:60:91:b6:e9:fd:34:cb: 3d:25:62:b5:45:f6:84:9f:b5:e7:6c:ac:f9:ac:03:27:3c:70: 24:10:d4:4e:94:34:4d:75:0a:47:97:7a:9b:32:8a:fd:c7:51: fb:ce:a0:d3:9b:0a:9a:cf:7d:15:44:16:97:ff:0d:ca:61:cf: a2:94:3e:7e:c3:f4:ff:4e:5b:df:1c:32:4b:82:a3:66:8c:90: 9b:5e:99:7a:58:d6:4f:8c:66:47:d7:08:8e:a5:fe:97:01:c4: 2c:a3:5e:e9:e3:6f:56:02:12:9b:4d:6e:2b:be:1e:05:f9:b8: 85:97:6e:98:8f:7d:52:76:06:20:fd:80:8f:35:fe:33:47:c8: 50:9a:42:19:1e:9b:a3:40:52:e3:ae:d0:91:67:c0:75:25:7a: e0:45:e3:fb:96:52:dc:f8:ca:75:ea:54:dd:49:ec:9f:ab:ff: 86:75:57:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9oDasndN8grayXnkk8NEhyJ0G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTExMDIxNDQ3MTJaFw0yNTExMDYwMTAyMTJaMDMxMTAvBgNV BAMTKDQyQzIwQ0JBMDZBOUVDOTEwODQ0NkZFMERCRjE3QUU4ODJBQkQ1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSNqhXU9g1vyoIeBTW5eE22Xy Qv4UuV51Qv0+DjkaP+bL8nBLdSTxHGl37wZcYSzlxlgebDL4wIr23sf3M5pxgxKH izuT9kX9berBpOLMbcTFvyWptUQn1DUA6kIfYCpB+CeVOXeFw1yrsRaWaiHaV/oH rnuuHs7gVm41suNgMkzq+27HJa+riW8bVQr7ok7HnjsbzNk2lNDLbWRRhxjFN2aE Tqd8SPUB06NhThdnO53VQYUpnh0wSPcy3HdQXPSHXKB67OWUnaxAysaz7ys69mMV 5n4skVpuYBy2bDxDDRaK6sWmKxYSZpbkpftlIg2SA78JiWSYzigSzzyziezFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsIMugap7JEIRG/g2/F66IKr1f0wHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP4Juz3rCgt3CwhXjoDAWhNV0FyeXvb/fW9 HElgtJC+0Sr73TPYGGg8Vev4/DYNnBLpEfB34A2lNbV8/yYm1eptR7WCKPLWhamN 5gitYnQ0XT9gYJG26f00yz0lYrVF9oSftedsrPmsAyc8cCQQ1E6UNE11CkeXepsy iv3HUfvOoNObCprPfRVEFpf/Dcphz6KUPn7D9P9OW98cMkuCo2aMkJtemXpY1k+M ZkfXCI6l/pcBxCyjXunjb1YCEptNbiu+HgX5uIWXbpiPfVJ2BiD9gI81/jNHyFCa Qhkem6NAUuOu0JFnwHUleuBF4/uWUtz4ynXqVN1J7J+r/4Z1V54= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:41 2025 by rpki-client