$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft (raw, json) Hash identifier: ltRI0J26rCC8O+0rdJOlOcOn+KvB1zbTIv+USsx8pbQ= Subject key identifier: 91:3B:22:D0:A8:0F:57:59:00:53:42:BE:D9:99:75:5A:1E:B2:7D:4B Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD Certificate issuer: /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Certificate serial: 44192D9C7A3C79F8DA610CD005A5999813F4E8C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft Manifest number: 01AA Signing time: Tue 04 Nov 2025 12:40:01 +0000 Manifest this update: Tue 04 Nov 2025 12:35:01 +0000 Manifest next update: Fri 07 Nov 2025 16:05:01 +0000 Files and hashes: 1: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: q4M2q2KFusV9WALClaWNLjI5YHGqNj7u0KWUCOIzdx0=) 2: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: rfgoK21VT80jcjTnSSTUWLHb0odprGUSbTG8ns7Fdx8=) 3: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl (hash: WHaVRvTgle+R3n4b+h6FnN8PlRw72OG4Uwa2bC/WLhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:19:2d:9c:7a:3c:79:f8:da:61:0c:d0:05:a5:99:98:13:f4:e8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Validity Not Before: Nov 4 12:35:01 2025 GMT Not After : Nov 7 16:05:01 2025 GMT Subject: CN=913B22D0A80F5759005342BED999755A1EB27D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:ca:aa:25:64:0a:b0:12:d4:8c:7b:10:06: 42:c6:e4:d1:a0:fb:57:f6:d4:2e:a9:8a:bf:28:07: 59:7b:f7:75:0b:8e:41:da:79:b7:30:c2:73:38:ab: 2d:09:5d:6f:42:41:e8:22:9f:72:f8:ca:b0:d1:6f: a4:cf:7c:6e:7e:c3:39:83:e3:c7:5b:dd:96:f6:af: bb:a3:9d:30:0f:28:14:3c:1a:61:cd:ba:c9:a9:d4: fa:ed:c9:07:c9:24:ee:46:d1:10:ef:1d:27:05:00: 53:c0:c4:12:69:89:c2:a5:e9:5b:c5:5b:2c:a4:af: 9c:f9:7e:67:fa:a4:7d:89:b1:e8:ab:f2:9b:ab:ba: 87:e9:80:d5:d3:61:e1:f2:83:9e:28:d0:d0:24:ab: e0:f1:79:7c:e0:62:1b:8d:7b:f3:bd:73:dc:a0:bb: f5:49:72:fb:66:d7:c4:d4:39:c5:0e:b6:08:ae:89: 3b:60:f9:20:db:70:1c:16:41:fb:41:27:fd:cd:82: 64:9f:88:19:16:36:ef:8e:64:08:6a:a0:13:d3:ce: 9d:35:39:a8:17:30:dc:46:15:6f:99:fa:ac:57:bf: 5a:d0:e4:c7:aa:3f:22:f3:55:72:e9:e5:6a:02:df: bb:7e:10:4c:69:11:81:9a:20:52:7c:1b:a3:a8:c6: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:22:D0:A8:0F:57:59:00:53:42:BE:D9:99:75:5A:1E:B2:7D:4B X509v3 Authority Key Identifier: keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:a3:0a:6e:b0:a2:10:8f:9d:07:d3:e2:d7:ab:37:ac:6c: 43:f5:84:d1:2b:85:62:9e:01:fe:e7:3a:90:1d:e1:31:b2:a6: 2d:34:3a:e5:24:a1:b1:b1:15:e7:ce:42:f7:5c:31:33:59:3f: f1:79:db:9b:34:58:03:f3:ba:e4:aa:a0:80:f4:65:e8:23:f0: e9:67:e6:7c:08:6e:2f:f9:38:fc:1c:74:b4:ff:9b:3f:94:08: 5b:ee:64:b8:46:52:5e:bd:22:79:1a:9f:5a:9d:93:62:cf:2b: 95:e7:ea:f2:d2:2c:a6:fe:91:ec:2f:e4:de:1e:ba:b7:30:06: fa:e8:8a:fc:43:d2:de:03:bd:90:6e:32:a9:f8:b7:aa:bb:09: bc:b1:8b:e3:14:53:e0:0c:f6:f6:ce:64:23:ce:a1:ca:de:2f: 59:44:af:22:89:37:36:c1:9c:fa:fb:68:7a:31:00:7f:4f:69: c3:82:08:18:f1:09:80:5c:54:fe:8f:cd:7d:11:00:93:63:d2: 1c:e2:33:f6:2c:64:e5:b8:5a:db:3e:c6:56:1a:e4:d9:86:b3: e5:40:f8:d9:b8:1b:aa:09:0b:15:b8:cb:ad:f5:4b:4d:57:3c: 2e:70:d6:a0:07:3a:1e:06:ab:c4:4f:5a:ff:9a:d7:27:30:5d: a1:4b:4d:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBktnHo8efjaYQzQBaWZmBP06MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJF OUJGMjZERDAeFw0yNTExMDQxMjM1MDFaFw0yNTExMDcxNjA1MDFaMDMxMTAvBgNV BAMTKDkxM0IyMkQwQTgwRjU3NTkwMDUzNDJCRUQ5OTk3NTVBMUVCMjdENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatMqqJWQKsBLUjHsQBkLG5NGg +1f21C6pir8oB1l793ULjkHaebcwwnM4qy0JXW9CQegin3L4yrDRb6TPfG5+wzmD 48db3Zb2r7ujnTAPKBQ8GmHNusmp1PrtyQfJJO5G0RDvHScFAFPAxBJpicKl6VvF Wyykr5z5fmf6pH2Jseir8puruofpgNXTYeHyg54o0NAkq+DxeXzgYhuNe/O9c9yg u/VJcvtm18TUOcUOtgiuiTtg+SDbcBwWQftBJ/3NgmSfiBkWNu+OZAhqoBPTzp01 OagXMNxGFW+Z+qxXv1rQ5MeqPyLzVXLp5WoC37t+EExpEYGaIFJ8G6OoxkJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTsi0KgPV1kAU0K+2Zl1Wh6yfUswHwYDVR0j BBgwFoAUF5KEor9gb2mm/zQM09ZGC+m/Jt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2UwZmFmMC03ODhkLTQ5NWItYWM5OC1mMzUxNjE5NWRiNjAvMC8xNzkyODRBMkJG NjA2RjY5QTZGRjM0MENEM0Q2NDYwQkU5QkYyNkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJFOUJG MjZERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2 MEJFOUJGMjZERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMWowpusKIQj50H0+LXqzesbEP1hNErhWKe Af7nOpAd4TGypi00OuUkobGxFefOQvdcMTNZP/F525s0WAPzuuSqoID0Zegj8Oln 5nwIbi/5OPwcdLT/mz+UCFvuZLhGUl69Inkan1qdk2LPK5Xn6vLSLKb+kewv5N4e urcwBvroivxD0t4DvZBuMqn4t6q7Cbyxi+MUU+AM9vbOZCPOocreL1lEryKJNzbB nPr7aHoxAH9PacOCCBjxCYBcVP6PzX0RAJNj0hziM/YsZOW4Wts+xlYa5NmGs+VA +Nm4G6oJCxW4y631S01XPC5w1qAHOh4Gq8RPWv+a1ycwXaFLTac= -----END CERTIFICATE-----Generated at Thu Nov 6 04:42:38 2025 by rpki-client