$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: vDDlRQwqGKbaamdMLcGK2mJ8+ABpJqJbqIIAcfmpCSM= Subject key identifier: 1F:D7:82:66:14:74:0B:31:05:0A:CD:11:84:07:C7:D4:8B:D8:03:98 Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 7F8F232AA752D798196EBBEF66A96B936E9C0A8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 0394 Signing time: Tue 04 Nov 2025 07:01:32 +0000 Manifest this update: Tue 04 Nov 2025 06:56:32 +0000 Manifest next update: Fri 07 Nov 2025 15:37:32 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: FsYTY3TCZbzdp4eDwhZkVNWxp9yjD2ArDaLarD5S//4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8f:23:2a:a7:52:d7:98:19:6e:bb:ef:66:a9:6b:93:6e:9c:0a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Nov 4 06:56:32 2025 GMT Not After : Nov 7 15:37:32 2025 GMT Subject: CN=1FD7826614740B31050ACD118407C7D48BD80398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:3e:60:b4:e5:ad:d1:d8:b4:82:a6:0a:c0: 22:db:46:d4:b3:4c:80:3f:9e:54:56:6a:36:33:b1: bf:95:42:8a:41:13:59:e5:5a:d3:78:b2:b5:61:54: 2b:ac:d1:18:70:76:ea:f4:ea:79:cd:93:54:ce:5c: a5:39:a0:4d:82:6e:6c:a7:d7:c3:f0:c1:87:3b:3d: 7a:2f:a3:d7:91:9d:af:9f:a0:77:54:b4:57:7b:3e: fe:8a:9c:31:16:03:79:14:f9:2d:35:01:d8:27:20: 53:b9:be:8c:62:e2:fb:80:c3:78:c9:c3:09:f6:96: 62:98:5b:3b:a1:bd:8a:9c:10:e4:3a:c8:09:48:b2: 5e:80:70:4e:46:08:28:3f:5a:40:55:f9:99:6a:fe: 01:d4:ad:21:e3:de:4a:16:69:6d:1b:67:1c:00:47: b1:09:d6:9a:f2:ce:15:f4:ac:ca:15:53:87:a4:52: ef:b1:ec:cb:cc:d0:5b:fa:d5:b7:25:62:7e:57:10: 57:07:fc:82:70:6b:c2:25:4e:f8:43:df:c0:a3:35: eb:c2:cf:23:57:28:6a:5a:84:0b:b2:57:ab:d8:1c: cd:6b:a9:0b:3d:8e:f8:62:ed:83:11:41:85:08:f4: df:1f:60:5b:06:c7:88:d6:f4:70:08:36:7d:97:aa: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:82:66:14:74:0B:31:05:0A:CD:11:84:07:C7:D4:8B:D8:03:98 X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ba:55:d0:43:ad:a8:e5:12:93:92:df:80:d5:75:2c:db:10: 38:3f:e1:44:83:bd:35:c7:87:86:cf:82:e8:91:f3:43:3d:92: d3:d9:16:17:e4:95:2e:1b:f7:53:ca:c0:e4:53:c0:2a:46:65: 69:4b:7d:34:14:6a:53:93:81:d5:d3:c6:8e:d2:ad:40:ca:7f: 8d:0e:dd:24:d4:7e:1b:62:d7:8e:cb:ee:48:47:4a:31:b8:3c: 32:64:72:17:e7:ff:4d:9d:23:93:cf:34:60:21:43:fb:09:92: e2:e1:85:a7:38:e1:96:6b:3a:94:03:db:06:25:23:55:a6:d6: f9:45:18:5e:7c:21:f6:73:69:d2:fa:93:95:0b:55:2f:4f:f8: d0:c2:5a:01:a5:50:2e:44:6b:5a:c5:5a:68:85:36:51:27:f8: b4:6f:2f:e4:d9:c9:a8:99:2b:3b:60:c9:ec:20:cd:e2:26:08: cf:5c:1a:69:fd:e9:e5:09:a5:53:91:21:89:35:2c:a8:b7:2f: 19:cc:0b:4a:ac:9b:76:32:1e:86:21:48:d2:3d:3b:95:6c:a6: 34:b0:ca:bd:4a:fd:4a:b4:26:04:04:64:0d:b3:92:11:40:a8: 4a:9d:ae:50:dc:00:80:2e:db:d0:07:cf:4f:84:b0:87:7a:d5: cb:21:a1:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf48jKqdS15gZbrvvZqlrk26cCowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTExMDQwNjU2MzJaFw0yNTExMDcxNTM3MzJaMDMxMTAvBgNV BAMTKDFGRDc4MjY2MTQ3NDBCMzEwNTBBQ0QxMTg0MDdDN0Q0OEJEODAzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrD5gtOWt0di0gqYKwCLbRtSz TIA/nlRWajYzsb+VQopBE1nlWtN4srVhVCus0Rhwdur06nnNk1TOXKU5oE2Cbmyn 18PwwYc7PXovo9eRna+foHdUtFd7Pv6KnDEWA3kU+S01AdgnIFO5voxi4vuAw3jJ wwn2lmKYWzuhvYqcEOQ6yAlIsl6AcE5GCCg/WkBV+Zlq/gHUrSHj3koWaW0bZxwA R7EJ1pryzhX0rMoVU4ekUu+x7MvM0Fv61bclYn5XEFcH/IJwa8IlTvhD38CjNevC zyNXKGpahAuyV6vYHM1rqQs9jvhi7YMRQYUI9N8fYFsGx4jW9HAINn2Xql9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9eCZhR0CzEFCs0RhAfH1IvYA5gwHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa6VdBDrajlEpOS34DVdSzbEDg/4USDvTXH h4bPguiR80M9ktPZFhfklS4b91PKwORTwCpGZWlLfTQUalOTgdXTxo7SrUDKf40O 3STUfhti147L7khHSjG4PDJkchfn/02dI5PPNGAhQ/sJkuLhhac44ZZrOpQD2wYl I1Wm1vlFGF58IfZzadL6k5ULVS9P+NDCWgGlUC5Ea1rFWmiFNlEn+LRvL+TZyaiZ KztgyewgzeImCM9cGmn96eUJpVORIYk1LKi3LxnMC0qsm3YyHoYhSNI9O5VspjSw yr1K/Uq0JgQEZA2zkhFAqEqdrlDcAIAu29AHz0+EsId61cshoVI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:27:36 2025 by rpki-client