$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: UbDBBDDyj7JWNaBpbZvv4ecPx9P/Z1TjeXjHcDcovF4= Subject key identifier: AB:A8:40:D8:35:73:1E:0E:96:8C:4E:0C:1E:75:54:8E:48:5D:5B:DD Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 3EBC40CBC0AAE1FE01B602CBD5681EB96940CC7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02FB Signing time: Mon 03 Nov 2025 08:41:05 +0000 Manifest this update: Mon 03 Nov 2025 08:36:05 +0000 Manifest next update: Thu 06 Nov 2025 11:46:05 +0000 Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: YemWh5Sko5n6jHdi90L8o34qOBAzvzExLUVTrYS/f4A=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bc:40:cb:c0:aa:e1:fe:01:b6:02:cb:d5:68:1e:b9:69:40:cc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Nov 3 08:36:05 2025 GMT Not After : Nov 6 11:46:05 2025 GMT Subject: CN=ABA840D835731E0E968C4E0C1E75548E485D5BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:5e:26:e0:68:51:f9:c7:ee:62:11:7f:a8: 28:45:fb:62:f1:71:00:70:34:79:b6:ce:4c:cf:ea: c7:cf:99:83:f0:d6:86:01:60:a7:14:81:20:8e:d0: 28:2b:ca:9b:76:f7:92:84:75:49:88:0d:e9:ee:b9: db:52:9f:b9:f6:3c:38:a5:e6:1d:57:e5:a0:d8:f3: e6:cb:00:f2:a2:a6:a4:7f:23:6e:96:ad:25:b0:ef: 1d:57:2f:95:07:28:18:be:e4:17:12:99:97:ce:35: 9c:6b:3c:fb:5c:74:ad:86:b3:29:0a:39:ef:19:b5: d9:56:71:ee:41:01:0b:4c:ce:62:20:bf:0f:03:4f: 09:94:c6:c5:ce:0a:22:11:c0:91:8c:19:13:e9:e0: ad:b8:89:4f:4e:d8:d7:52:75:58:2e:29:82:bf:3b: c2:b5:29:c6:b0:e4:4a:9b:0f:9c:3d:d8:58:94:cd: b2:d2:7e:d8:69:e4:da:74:ef:e5:1a:51:b6:fe:2a: 31:17:db:26:2f:d4:72:fc:09:dd:78:20:8a:ea:c9: cc:b8:c9:46:5c:23:48:1c:43:ea:30:e0:69:29:cc: 57:d8:fd:76:7e:a6:92:c5:c4:c1:dd:7a:63:84:62: d9:3d:58:97:ff:d9:ec:2f:97:a1:be:3e:d3:bc:f8: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:40:D8:35:73:1E:0E:96:8C:4E:0C:1E:75:54:8E:48:5D:5B:DD X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:41:d0:d1:91:37:33:8d:ad:d2:e3:07:2d:cf:38:69:ca:03: 0f:8b:40:cd:a2:fd:33:36:fb:38:20:54:49:46:5f:50:a9:84: b7:56:fb:cf:6c:7f:6d:e6:dd:a5:c6:24:8c:bc:c2:07:96:6a: 3f:f2:dc:d6:1b:6d:d5:fe:7e:06:69:1b:f3:22:1e:f6:05:fd: 11:0e:c6:c7:92:de:b1:60:6c:09:4d:ec:0b:62:fd:94:e6:8f: 50:0a:c0:ca:5a:35:81:e1:d7:c6:49:67:a7:ea:a1:8a:06:8a: b9:3f:3e:66:1f:bf:1b:a8:35:4e:45:d6:68:08:a4:e2:f0:27: a0:be:c3:73:69:21:d9:a4:d4:1c:ee:16:79:99:b6:ac:4b:de: e8:04:ab:0c:0b:56:39:e4:ff:04:6d:c1:39:1d:9d:aa:85:21: 84:a8:69:8f:c9:a6:fc:cc:36:6f:99:10:c5:45:35:b3:7c:21: b2:f7:91:be:b3:c7:d6:36:b7:39:65:3e:24:9b:85:a6:a4:6a: 28:09:44:9b:53:bf:35:19:73:4c:59:7b:b3:96:c2:12:d6:f6: b2:11:76:84:b9:c6:24:03:00:fa:36:89:10:1b:4f:43:be:6a: 67:f8:4e:0d:c8:c2:13:d5:a4:66:fc:3d:9c:04:2a:a4:ba:55: fb:31:fc:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrxAy8Cq4f4BtgLL1WgeuWlAzHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTExMDMwODM2MDVaFw0yNTExMDYxMTQ2MDVaMDMxMTAvBgNV BAMTKEFCQTg0MEQ4MzU3MzFFMEU5NjhDNEUwQzFFNzU1NDhFNDg1RDVCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejV4m4GhR+cfuYhF/qChF+2Lx cQBwNHm2zkzP6sfPmYPw1oYBYKcUgSCO0Cgrypt295KEdUmIDenuudtSn7n2PDil 5h1X5aDY8+bLAPKipqR/I26WrSWw7x1XL5UHKBi+5BcSmZfONZxrPPtcdK2GsykK Oe8ZtdlWce5BAQtMzmIgvw8DTwmUxsXOCiIRwJGMGRPp4K24iU9O2NdSdVguKYK/ O8K1Kcaw5EqbD5w92FiUzbLSfthp5Np07+UaUbb+KjEX2yYv1HL8Cd14IIrqycy4 yUZcI0gcQ+ow4GkpzFfY/XZ+ppLFxMHdemOEYtk9WJf/2ewvl6G+PtO8+ANRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6hA2DVzHg6WjE4MHnVUjkhdW90wHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFB0NGRNzONrdLjBy3POGnKAw+LQM2i/TM2 +zggVElGX1CphLdW+89sf23m3aXGJIy8wgeWaj/y3NYbbdX+fgZpG/MiHvYF/REO xseS3rFgbAlN7Ati/ZTmj1AKwMpaNYHh18ZJZ6fqoYoGirk/PmYfvxuoNU5F1mgI pOLwJ6C+w3NpIdmk1BzuFnmZtqxL3ugEqwwLVjnk/wRtwTkdnaqFIYSoaY/JpvzM Nm+ZEMVFNbN8IbL3kb6zx9Y2tzllPiSbhaakaigJRJtTvzUZc0xZe7OWwhLW9rIR doS5xiQDAPo2iRAbT0O+amf4Tg3IwhPVpGb8PZwEKqS6Vfsx/DE= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:28 2025 by rpki-client