$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: zRtqMHrzTMnBua488KCCmK3MIEmDRG8ggxIkCgMXWPE= Subject key identifier: 3C:B3:F7:96:93:99:24:C5:41:44:7B:89:AE:5B:69:1B:DF:29:73:8E Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 2D1D0DDF4713BE1A2F97F4AD66D9C362BFFE2B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 01B8 Signing time: Sun 02 Nov 2025 06:42:00 +0000 Manifest this update: Sun 02 Nov 2025 06:37:00 +0000 Manifest next update: Wed 05 Nov 2025 18:38:00 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: zMNSCyiWJDVijn9vss01AxtW935yJwY/vtfE8Y4kF/g=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1d:0d:df:47:13:be:1a:2f:97:f4:ad:66:d9:c3:62:bf:fe:2b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Nov 2 06:37:00 2025 GMT Not After : Nov 5 18:38:00 2025 GMT Subject: CN=3CB3F796939924C541447B89AE5B691BDF29738E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:6e:8d:a5:d8:3f:41:d2:4c:86:47:7e:51: 84:79:1f:ef:75:cb:d3:d0:82:24:57:c3:45:d5:6e: 95:2a:8d:2a:85:f1:e7:8b:58:d2:a8:52:78:59:5a: d5:ff:73:b6:e0:73:a2:b9:89:e1:24:31:c7:59:0f: 9c:ac:d0:87:53:3f:b9:5a:f8:34:ff:90:fe:8a:42: f6:99:28:e9:a1:15:b3:04:e5:ef:04:1e:47:b5:79: 40:52:38:3d:ac:b5:df:6a:d1:ed:3f:52:aa:02:46: fa:90:6d:d9:45:0a:69:0f:6a:18:77:e7:39:7c:10: 4a:b8:c4:69:81:de:28:9c:0f:fe:05:a9:a8:ea:e7: 92:24:1c:10:39:b6:46:bb:fb:e6:f4:26:8e:95:43: c7:ab:16:3f:5e:8f:1e:8b:71:45:b8:79:b4:2f:26: 22:eb:61:09:b3:86:8e:4f:4d:35:60:20:15:8b:61: e6:d7:ef:1a:25:a9:9a:15:32:f6:ca:44:15:ea:bd: 03:2e:d9:11:ab:6c:44:66:d1:98:3d:33:ed:39:ad: 50:8a:0b:d8:bd:9d:e0:27:af:0f:cd:f7:ec:e5:b2: 21:8a:57:85:11:3b:bd:d6:7e:78:db:fe:14:3a:32: 74:d9:f5:4e:3f:ca:eb:40:17:52:04:7d:8d:75:98: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:F7:96:93:99:24:C5:41:44:7B:89:AE:5B:69:1B:DF:29:73:8E X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:1e:51:98:99:a6:77:26:c7:07:ee:9c:21:72:73:3b:74: b2:02:40:78:95:6f:90:d6:34:b1:d4:7f:37:cd:2c:cc:05:c1: 1c:a0:6f:4d:34:92:c5:a4:18:56:df:a4:aa:de:5a:a9:cb:90: e1:d5:67:de:83:35:0f:78:c0:c8:81:ba:82:69:c2:b9:bf:ce: 12:c6:b7:e0:b5:99:14:63:95:48:ce:eb:ed:84:5a:f2:5f:95: 1c:96:f7:87:60:37:30:fe:cc:cb:a6:35:8e:44:60:f3:3d:82: f9:ea:45:f7:5b:a4:56:fd:02:04:92:4c:77:7c:73:e9:66:cf: 79:b7:a3:78:df:a9:35:d1:04:5a:4b:e8:80:5a:c7:1c:29:b3: 14:f7:79:ae:e9:f2:33:69:a4:44:02:e6:4a:5e:fa:bf:b7:e4: d9:03:a4:34:ad:f6:8d:86:50:a7:3e:1f:2b:32:e2:8d:5c:5f: 62:a2:3e:7c:c5:da:29:cd:5a:77:8d:79:78:20:21:9e:6a:7b: 05:dc:ef:e1:a7:a4:d7:ea:44:25:4f:87:9f:4d:2d:5a:98:fd: bb:e5:ac:ad:c7:2e:d8:99:db:f0:ec:cd:2b:b4:b2:5a:04:b8: e1:2d:5a:2e:5e:a7:f4:9a:28:26:2d:aa:94:17:50:e1:f1:47: 9c:9d:4f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULR0N30cTvhovl/StZtnDYr/+K4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTExMDIwNjM3MDBaFw0yNTExMDUxODM4MDBaMDMxMTAvBgNV BAMTKDNDQjNGNzk2OTM5OTI0QzU0MTQ0N0I4OUFFNUI2OTFCREYyOTczOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MG6Npdg/QdJMhkd+UYR5H+91 y9PQgiRXw0XVbpUqjSqF8eeLWNKoUnhZWtX/c7bgc6K5ieEkMcdZD5ys0IdTP7la +DT/kP6KQvaZKOmhFbME5e8EHke1eUBSOD2std9q0e0/UqoCRvqQbdlFCmkPahh3 5zl8EEq4xGmB3iicD/4Fqajq55IkHBA5tka7++b0Jo6VQ8erFj9ejx6LcUW4ebQv JiLrYQmzho5PTTVgIBWLYebX7xolqZoVMvbKRBXqvQMu2RGrbERm0Zg9M+05rVCK C9i9neAnrw/N9+zlsiGKV4URO73Wfnjb/hQ6MnTZ9U4/yutAF1IEfY11mJkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLP3lpOZJMVBRHuJrltpG98pc44wHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKxHlGYmaZ3JscH7pwhcnM7dLICQHiVb5DW NLHUfzfNLMwFwRygb000ksWkGFbfpKreWqnLkOHVZ96DNQ94wMiBuoJpwrm/zhLG t+C1mRRjlUjO6+2EWvJflRyW94dgNzD+zMumNY5EYPM9gvnqRfdbpFb9AgSSTHd8 c+lmz3m3o3jfqTXRBFpL6IBaxxwpsxT3ea7p8jNppEQC5kpe+r+35NkDpDSt9o2G UKc+Hysy4o1cX2KiPnzF2inNWneNeXggIZ5qewXc7+GnpNfqRCVPh59NLVqY/bvl rK3HLtiZ2/DszSu0sloEuOEtWi5ep/SaKCYtqpQXUOHxR5ydTxs= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:44 2025 by rpki-client