$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: jwFrMTMNG4ZxJDiDUALr6pRvxrnS4767s/u3Po/Kjyo= Subject key identifier: 98:D4:6F:9A:94:8B:6E:9F:A0:36:BF:72:EF:A8:8A:DB:33:91:A9:86 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 392110D7DD53C8EB325DEF466F35C705BDA50D89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03B0 Signing time: Tue 04 Nov 2025 08:41:40 +0000 Manifest this update: Tue 04 Nov 2025 08:36:40 +0000 Manifest next update: Fri 07 Nov 2025 12:36:40 +0000 Files and hashes: 1: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 2: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 4: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: FffAL7HliKE6FbeyXzAUSl3bFOsNHZ+wblCgSZtbqUU=) 5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:21:10:d7:dd:53:c8:eb:32:5d:ef:46:6f:35:c7:05:bd:a5:0d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Nov 4 08:36:40 2025 GMT Not After : Nov 7 12:36:40 2025 GMT Subject: CN=98D46F9A948B6E9FA036BF72EFA88ADB3391A986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:aa:5e:ee:fa:a1:4c:cd:cb:c3:67:e6:2e: 86:51:ee:46:74:47:bd:1c:c9:c4:9c:53:04:e8:e6: 59:d6:55:2f:5d:fe:ba:35:69:7f:f7:2d:49:2c:10: 10:e8:22:d2:e4:8c:43:ef:2b:eb:9d:56:51:6b:d1: 70:f6:d4:ff:01:41:a3:01:c0:4f:61:a5:9c:82:48: e2:ff:dd:b6:78:a5:03:2c:b5:c1:04:f9:01:42:56: d5:a5:fd:44:33:bc:2b:06:35:c9:af:f0:42:67:b4: c4:e5:b3:bf:64:a7:96:66:6f:69:7f:27:3c:b1:97: 92:86:45:6e:8d:2d:79:6d:d2:f6:ec:0e:59:14:6b: 58:34:5c:93:96:4b:69:e5:90:05:50:c2:cc:a3:74: 14:46:38:b7:ea:4c:5c:3a:19:bf:61:4a:9a:34:9f: 7f:1b:dc:17:21:8f:b6:06:65:78:88:38:2e:3f:d8: a4:b2:84:15:75:d7:62:91:9c:10:ad:94:46:bb:db: 1b:95:4b:0e:af:b3:2a:f0:da:c7:40:27:c4:1d:e5: b2:90:89:8b:91:c6:80:44:c7:ea:d2:6a:55:e0:36: fa:e6:8f:fc:c3:5e:42:31:78:73:b0:37:75:da:7c: 1e:64:8c:5c:fd:8d:4f:0e:26:9f:be:ef:fb:5c:87: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D4:6F:9A:94:8B:6E:9F:A0:36:BF:72:EF:A8:8A:DB:33:91:A9:86 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3d:aa:8d:88:f5:e7:26:e5:c5:d9:6a:e4:e6:61:fa:e0:97: f8:41:f1:c1:e7:6f:ad:17:ed:48:ca:d1:84:1f:dd:ab:b4:53: fc:4b:31:74:5c:b4:aa:1c:38:e1:cb:5a:bc:37:1a:e0:e8:75: 81:e2:bf:c3:fd:4a:6c:8e:3c:5b:10:ac:22:9e:a6:67:81:87: 7e:91:b0:c0:b8:9d:c6:50:af:ca:65:aa:d7:1f:22:40:15:1e: ca:5b:d8:f4:c2:b9:f7:ad:af:21:1e:08:5e:e8:74:5f:d6:5e: d8:9b:0b:5e:a9:57:9d:9d:dc:2b:b9:42:da:6e:90:c3:e5:6b: fb:07:51:b4:a1:6c:f1:dd:d8:86:37:d8:a2:e8:ff:b7:b8:b1: fd:0c:22:b8:b2:a9:82:ae:0d:2e:a3:17:30:92:89:17:3a:a6: 75:40:82:b5:2d:8f:0b:be:6f:7d:51:82:5a:e9:ab:46:6b:f4: 2e:e6:72:39:45:80:fe:25:19:ac:e5:d9:b8:15:16:8c:54:89: 6f:f4:1d:bd:70:3c:86:03:d8:d0:33:1c:1b:61:ed:07:0d:d7: 17:13:60:78:6c:55:71:2a:07:2b:8f:ea:2c:1f:d7:a8:ac:03: 8c:62:92:3d:67:4d:ee:d0:08:ee:8b:43:d6:9a:79:17:f1:c2: 30:0b:ca:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSEQ191TyOsyXe9GbzXHBb2lDYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTExMDQwODM2NDBaFw0yNTExMDcxMjM2NDBaMDMxMTAvBgNV BAMTKDk4RDQ2RjlBOTQ4QjZFOUZBMDM2QkY3MkVGQTg4QURCMzM5MUE5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fKpe7vqhTM3Lw2fmLoZR7kZ0 R70cycScUwTo5lnWVS9d/ro1aX/3LUksEBDoItLkjEPvK+udVlFr0XD21P8BQaMB wE9hpZyCSOL/3bZ4pQMstcEE+QFCVtWl/UQzvCsGNcmv8EJntMTls79kp5Zmb2l/ Jzyxl5KGRW6NLXlt0vbsDlkUa1g0XJOWS2nlkAVQwsyjdBRGOLfqTFw6Gb9hSpo0 n38b3Bchj7YGZXiIOC4/2KSyhBV112KRnBCtlEa72xuVSw6vsyrw2sdAJ8Qd5bKQ iYuRxoBEx+rSalXgNvrmj/zDXkIxeHOwN3XafB5kjFz9jU8OJp++7/tch58BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNRvmpSLbp+gNr9y76iK2zORqYYwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY9qo2I9ecm5cXZauTmYfrgl/hB8cHnb60X 7UjK0YQf3au0U/xLMXRctKocOOHLWrw3GuDodYHiv8P9SmyOPFsQrCKepmeBh36R sMC4ncZQr8plqtcfIkAVHspb2PTCufetryEeCF7odF/WXtibC16pV52d3Cu5Qtpu kMPla/sHUbShbPHd2IY32KLo/7e4sf0MIriyqYKuDS6jFzCSiRc6pnVAgrUtjwu+ b31Rglrpq0Zr9C7mcjlFgP4lGazl2bgVFoxUiW/0Hb1wPIYD2NAzHBth7QcN1xcT YHhsVXEqByuP6iwf16isA4xikj1nTe7QCO6LQ9aaeRfxwjALyl0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:42 2025 by rpki-client