$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: R8q0lRJ0x5VeSyxpNBD1Xz0LiUbZO2/8ZrAitlBANRU= Subject key identifier: C1:5F:F0:B9:7B:1C:D2:34:06:83:3A:FF:6E:8E:8F:93:DB:8B:64:8B Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 3DD542B2CC145C18E1E16971C3F6D169774B5208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 31 Signing time: Sun 02 Nov 2025 22:50:00 +0000 Manifest this update: Sun 02 Nov 2025 22:45:00 +0000 Manifest next update: Thu 06 Nov 2025 04:46:00 +0000 Files and hashes: 1: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 2: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 3: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 4: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 5: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: rpb/rwPr6f4hOlE7jVfrFhmcTTdj6PlFZiv6EBaOep4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d5:42:b2:cc:14:5c:18:e1:e1:69:71:c3:f6:d1:69:77:4b:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Nov 2 22:45:00 2025 GMT Not After : Nov 6 04:46:00 2025 GMT Subject: CN=C15FF0B97B1CD23406833AFF6E8E8F93DB8B648B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:56:ec:10:e9:c6:14:ef:2a:49:df:cc:8a: 69:29:27:c7:0b:31:5f:eb:e5:c0:da:24:0f:a8:59: b6:df:12:ed:df:c5:04:d6:f7:e7:2f:05:5e:16:cf: 4b:a4:52:ec:2d:19:8e:6f:05:94:9b:f4:20:23:99: 55:46:53:5d:fe:68:d0:60:44:59:24:c6:cc:52:bc: 2e:06:e2:cc:55:51:26:31:f8:d7:f1:bf:52:17:4b: 2b:cc:90:d2:83:29:68:05:e9:d0:f6:88:75:5c:84: 4f:28:72:fa:b4:28:9c:04:dd:b6:c7:2f:50:f8:8d: ce:ff:d6:b7:a9:ab:df:51:62:d6:4c:e5:14:81:74: 7b:b8:4c:86:98:5f:50:d0:49:d5:0d:c2:38:fb:ec: f3:d7:07:83:cc:2a:ff:1d:19:5b:d0:ac:51:0b:7c: 8d:76:3c:05:7e:b3:d6:43:10:f6:6a:6c:ec:e9:ed: 7c:7f:1a:15:f4:ba:af:e9:be:1d:e8:65:13:e4:eb: 2e:d1:4f:72:e4:00:49:eb:89:49:55:a1:fe:01:4c: 1d:d5:9f:da:ca:b1:e4:bf:34:e6:cd:3d:81:ef:da: 93:9a:67:cf:39:cc:1f:20:11:ea:73:a6:c0:ff:3c: 43:78:27:a1:59:71:de:cf:36:01:ab:1f:0f:e1:78: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:F0:B9:7B:1C:D2:34:06:83:3A:FF:6E:8E:8F:93:DB:8B:64:8B X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:de:29:9d:23:2d:39:02:34:ab:52:16:0f:57:17:53:b8:d0: 42:03:e3:b1:68:84:29:41:5f:31:b7:f5:cb:6b:ff:82:35:5a: 25:8c:39:da:ac:c2:b3:1e:3d:6a:8b:1e:65:aa:89:07:40:d0: 11:f6:6a:14:3a:d6:ae:f0:80:5c:10:c2:3f:c5:3f:25:16:3a: 6a:4d:ba:48:6d:d5:02:5e:38:a9:9a:16:e8:2e:cc:14:05:a9: 30:c3:16:05:21:b8:47:90:a7:58:56:f5:58:e1:66:93:bc:43: e3:f7:9a:99:fe:c2:ff:89:41:c0:b8:6f:1f:99:99:a0:1a:13: 45:bf:32:8c:16:d6:9e:01:44:05:fd:ba:b6:e2:4a:36:b1:71: 95:5c:c2:e2:dd:f1:01:fa:54:00:82:17:c3:05:67:58:4a:4b: cd:fc:59:ed:dd:a9:8b:dd:42:1b:c7:23:63:19:c6:c0:ce:9a: 85:87:e9:90:16:21:43:86:d8:20:2f:e9:dc:3e:2f:38:5a:02: 5b:32:3b:57:4b:44:dd:e4:84:92:a8:0d:4c:cf:0a:74:65:3d: 32:26:ed:73:4e:b2:d9:c3:61:2d:7f:27:ce:27:1e:90:d6:83: 4b:a3:1a:0b:26:ce:11:8a:b8:2c:b1:5c:1e:96:29:c5:b1:0f: a4:5b:aa:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdVCsswUXBjh4Wlxw/bRaXdLUggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNTExMDIyMjQ1MDBaFw0yNTExMDYwNDQ2MDBaMDMxMTAvBgNV BAMTKEMxNUZGMEI5N0IxQ0QyMzQwNjgzM0FGRjZFOEU4RjkzREI4QjY0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8lbsEOnGFO8qSd/MimkpJ8cL MV/r5cDaJA+oWbbfEu3fxQTW9+cvBV4Wz0ukUuwtGY5vBZSb9CAjmVVGU13+aNBg RFkkxsxSvC4G4sxVUSYx+Nfxv1IXSyvMkNKDKWgF6dD2iHVchE8ocvq0KJwE3bbH L1D4jc7/1repq99RYtZM5RSBdHu4TIaYX1DQSdUNwjj77PPXB4PMKv8dGVvQrFEL fI12PAV+s9ZDEPZqbOzp7Xx/GhX0uq/pvh3oZRPk6y7RT3LkAEnriUlVof4BTB3V n9rKseS/NObNPYHv2pOaZ885zB8gEepzpsD/PEN4J6FZcd7PNgGrHw/hePJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwV/wuXsc0jQGgzr/bo6Pk9uLZIswHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3eKZ0jLTkCNKtSFg9XF1O40EID47FohClB XzG39ctr/4I1WiWMOdqswrMePWqLHmWqiQdA0BH2ahQ61q7wgFwQwj/FPyUWOmpN ukht1QJeOKmaFuguzBQFqTDDFgUhuEeQp1hW9VjhZpO8Q+P3mpn+wv+JQcC4bx+Z maAaE0W/MowW1p4BRAX9urbiSjaxcZVcwuLd8QH6VACCF8MFZ1hKS838We3dqYvd QhvHI2MZxsDOmoWH6ZAWIUOG2CAv6dw+LzhaAlsyO1dLRN3khJKoDUzPCnRlPTIm 7XNOstnDYS1/J84nHpDWg0ujGgsmzhGKuCyxXB6WKcWxD6RbqgI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:08 2025 by rpki-client