$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: b7A/sVJNSB7MaEIBLKJj5W26Nq8LNu/ACE0iGaOW2Sk= Subject key identifier: 26:E3:C8:FA:60:FF:42:12:DD:37:15:6E:C3:94:CA:C1:F9:2F:EB:FF Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 37E8CCFB27CCAE578A8C84202375FFCE5F42CEAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 033B Signing time: Sun 02 Nov 2025 03:41:12 +0000 Manifest this update: Sun 02 Nov 2025 03:36:12 +0000 Manifest next update: Wed 05 Nov 2025 12:06:12 +0000 Files and hashes: 1: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) 2: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 3: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 4: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 6: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: bekFmm8ZGB14lQlxA5dtYzaQHLK56G/Tsi3wR/sWkzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e8:cc:fb:27:cc:ae:57:8a:8c:84:20:23:75:ff:ce:5f:42:ce:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Nov 2 03:36:12 2025 GMT Not After : Nov 5 12:06:12 2025 GMT Subject: CN=26E3C8FA60FF4212DD37156EC394CAC1F92FEBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:00:43:90:46:57:cd:17:6c:d6:f1:0d:34: c0:40:f2:4b:1f:a4:69:27:c2:9e:c5:ce:87:dd:b3: bb:d6:86:1a:52:e4:6d:e2:54:7f:70:68:ef:df:16: 7c:60:a3:10:99:7f:e0:49:99:64:74:cb:86:ca:49: d0:e8:84:e0:d2:bc:c4:7d:e2:41:40:9c:c3:0b:d6: c1:a2:8b:da:9a:27:ad:38:ba:33:08:5b:37:16:3b: 5f:b1:f8:41:66:db:9f:ac:7d:ce:17:4f:39:2e:cd: 56:91:62:2d:ab:61:6f:7a:36:d4:ca:25:c7:fc:42: 8e:6a:94:84:b8:d0:d7:3a:a7:4b:85:a9:3f:a5:1e: 50:9b:a8:82:24:69:e9:3b:0a:e2:bc:77:8e:d3:cb: d4:af:50:32:c8:ae:53:cf:8d:2e:08:9b:e0:d9:b0: ac:44:d4:2a:5e:de:ff:0d:1b:c6:c2:8d:cc:2f:65: 27:d8:68:8b:87:d3:06:70:4b:24:64:52:80:17:20: 18:9b:ad:0d:ef:e2:6e:4a:58:47:5f:eb:7c:aa:d8: 10:9c:1b:76:14:ec:21:64:bd:c5:64:f2:a3:90:b4: 85:ee:4a:43:a9:0a:c0:68:7f:e3:2a:10:dd:ad:0e: 2e:5d:77:38:1f:54:93:01:10:76:c1:07:fd:80:60: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E3:C8:FA:60:FF:42:12:DD:37:15:6E:C3:94:CA:C1:F9:2F:EB:FF X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:92:75:63:a8:0b:58:48:3d:85:4c:d7:93:e2:34:f2:e7: be:78:ff:c1:df:90:31:dc:21:d7:bb:1a:68:7f:65:bf:3d:bf: af:e9:bf:3a:22:f7:86:b1:ca:b6:a5:1d:7e:41:57:f0:99:ab: dc:53:be:7f:0c:3a:25:38:6a:b5:0f:49:cb:f8:54:4f:00:d3: d6:6f:b8:59:01:80:6c:a9:74:47:4c:90:8d:75:4e:e2:71:a4: 13:29:8f:42:eb:61:d4:d3:e0:7d:93:59:f4:33:dc:9e:64:ea: 23:15:d2:50:a6:3d:e8:a8:41:15:65:4e:82:37:6a:59:73:ab: 57:c1:5b:38:2b:f2:8e:4e:33:5b:28:6e:a4:a3:e1:eb:9b:da: 9b:dc:2c:13:89:99:43:37:6b:b4:cf:51:51:24:fe:d6:40:5d: ab:6e:2b:f5:81:ba:1c:19:5f:ea:91:be:7f:3c:25:27:28:2b: bc:09:d9:56:b0:36:08:29:3b:50:0d:01:23:9a:aa:d2:91:15: a9:d0:90:52:cd:3c:9f:38:7d:96:47:e3:d1:43:b3:a4:b3:c7: 65:e1:44:10:27:19:e1:24:c4:01:b6:0d:28:a4:54:d1:88:a1: fd:86:db:4c:5b:e0:f1:37:c2:21:38:07:5a:56:cb:5e:e3:7b: 36:71:83:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+jM+yfMrleKjIQgI3X/zl9Czq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTExMDIwMzM2MTJaFw0yNTExMDUxMjA2MTJaMDMxMTAvBgNV BAMTKDI2RTNDOEZBNjBGRjQyMTJERDM3MTU2RUMzOTRDQUMxRjkyRkVCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPQBDkEZXzRds1vENNMBA8ksf pGknwp7Fzofds7vWhhpS5G3iVH9waO/fFnxgoxCZf+BJmWR0y4bKSdDohODSvMR9 4kFAnMML1sGii9qaJ604ujMIWzcWO1+x+EFm25+sfc4XTzkuzVaRYi2rYW96NtTK Jcf8Qo5qlIS40Nc6p0uFqT+lHlCbqIIkaek7CuK8d47Ty9SvUDLIrlPPjS4Im+DZ sKxE1Cpe3v8NG8bCjcwvZSfYaIuH0wZwSyRkUoAXIBibrQ3v4m5KWEdf63yq2BCc G3YU7CFkvcVk8qOQtIXuSkOpCsBof+MqEN2tDi5ddzgfVJMBEHbBB/2AYKzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuPI+mD/QhLdNxVuw5TKwfkv6/8wHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYTknVjqAtYSD2FTNeT4jTy5754/8HfkDHc Ide7Gmh/Zb89v6/pvzoi94axyralHX5BV/CZq9xTvn8MOiU4arUPScv4VE8A09Zv uFkBgGypdEdMkI11TuJxpBMpj0LrYdTT4H2TWfQz3J5k6iMV0lCmPeioQRVlToI3 allzq1fBWzgr8o5OM1sobqSj4eub2pvcLBOJmUM3a7TPUVEk/tZAXatuK/WBuhwZ X+qRvn88JScoK7wJ2VawNggpO1ANASOaqtKRFanQkFLNPJ84fZZH49FDs6Szx2Xh RBAnGeEkxAG2DSikVNGIof2G20xb4PE3wiE4B1pWy17jezZxg/k= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:50 2025 by rpki-client