$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: My3Cwd7YNONBA5YlTELKdAN65B8G9+hNdcYY7EDVwyY= Subject key identifier: BC:A5:F8:57:C4:77:0C:F4:4C:A3:BE:D7:5C:20:C2:1A:D7:B9:AE:77 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 10EC14400A5997E95480077B9EFDDAE1C3C953F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0224 Signing time: Tue 04 Nov 2025 12:50:47 +0000 Manifest this update: Tue 04 Nov 2025 12:45:47 +0000 Manifest next update: Fri 07 Nov 2025 17:23:47 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: oGQw1uoQrwXaI1qhlcJL1PJchZBADOd0J2iPKlon/kU=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ec:14:40:0a:59:97:e9:54:80:07:7b:9e:fd:da:e1:c3:c9:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Nov 4 12:45:47 2025 GMT Not After : Nov 7 17:23:47 2025 GMT Subject: CN=BCA5F857C4770CF44CA3BED75C20C21AD7B9AE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:63:27:ad:d7:68:8c:72:98:df:5b:e4:bb: c7:46:53:27:3f:1f:e7:ba:48:9b:4d:b6:b8:ab:1c: 76:31:cb:e4:8b:9c:0e:80:39:44:c7:91:4a:0f:00: cc:da:18:8b:01:54:a7:ca:3e:1e:71:40:b7:08:17: eb:d0:18:b4:4d:7c:75:31:4b:ac:12:d2:17:1e:d8: 52:5b:3b:91:14:2b:c1:f5:18:d8:f5:3c:0e:42:4e: 1b:4f:6c:5a:95:c1:31:e3:ae:b1:fd:b7:14:45:5a: e5:1e:b2:58:aa:39:50:e3:d0:11:d5:0e:82:e8:f4: a9:c1:7c:ec:35:d2:d3:12:d8:82:2b:a4:be:13:10: 46:d8:b0:dc:ec:7c:8f:cd:7b:8f:64:6c:ed:e8:5b: 5d:06:38:d0:2e:6e:1b:26:0a:a7:c8:39:07:71:ec: da:57:1b:38:85:e5:3d:00:59:1c:ba:db:3a:2a:7e: 14:aa:28:72:42:35:ae:86:fe:63:64:ba:02:13:bb: 11:20:8a:cb:8d:db:d2:0e:63:41:10:7a:17:95:c0: 1b:72:bd:11:06:81:5d:bd:0b:1c:dd:2a:d9:d6:28: 21:2f:ea:a6:c5:98:0d:91:4e:59:77:d9:87:b1:71: ee:d9:78:3c:86:5c:2f:16:4d:03:b6:2a:b7:4c:63: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:F8:57:C4:77:0C:F4:4C:A3:BE:D7:5C:20:C2:1A:D7:B9:AE:77 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:7d:26:c9:fb:82:4c:75:29:69:34:0c:2d:92:5c:a6:bb: ca:d5:b1:a1:4a:00:23:2c:7e:1f:46:99:d1:d5:45:43:55:07: b7:28:18:fa:fa:43:43:61:c7:e3:c0:09:1a:f8:29:01:8c:d1: 25:bb:6a:da:1c:67:40:f1:dd:80:90:8c:d6:1e:29:9a:97:1e: 71:8b:a3:d9:46:b7:45:29:51:7c:fb:8a:3c:b5:e7:04:4a:ab: da:e4:08:87:19:2b:bc:7e:94:8e:7f:ba:a5:c7:c4:e3:49:8b: 3f:45:e6:e4:5d:4e:ff:55:2a:3c:f6:e5:ed:3b:b3:3d:f4:a1: 4c:6e:46:e5:9f:3f:55:d3:bc:06:30:83:a6:02:ac:17:c7:8f: b7:ed:87:68:a2:55:6b:f4:e1:bf:82:46:b9:21:01:38:ea:ce: e9:f7:9d:ff:f9:17:a0:5f:40:c0:18:c5:92:e9:02:2c:0e:68: b2:da:28:a1:ee:0f:1a:33:1b:c9:1d:de:5c:81:31:39:50:c1: 81:89:e8:e1:7d:d3:e9:73:da:91:3d:3a:e4:94:8e:d3:e0:55: 8e:c0:d9:fc:7b:8b:58:f9:c4:6f:11:06:90:e0:a8:f6:b9:b0: 90:e7:5f:23:bc:cf:39:0c:f7:1d:bd:c8:52:c1:c0:37:5e:38: 44:4c:08:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOwUQApZl+lUgAd7nv3a4cPJU/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTExMDQxMjQ1NDdaFw0yNTExMDcxNzIzNDdaMDMxMTAvBgNV BAMTKEJDQTVGODU3QzQ3NzBDRjQ0Q0EzQkVENzVDMjBDMjFBRDdCOUFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eGMnrddojHKY31vku8dGUyc/ H+e6SJtNtrirHHYxy+SLnA6AOUTHkUoPAMzaGIsBVKfKPh5xQLcIF+vQGLRNfHUx S6wS0hce2FJbO5EUK8H1GNj1PA5CThtPbFqVwTHjrrH9txRFWuUesliqOVDj0BHV DoLo9KnBfOw10tMS2IIrpL4TEEbYsNzsfI/Ne49kbO3oW10GONAubhsmCqfIOQdx 7NpXGziF5T0AWRy62zoqfhSqKHJCNa6G/mNkugITuxEgisuN29IOY0EQeheVwBty vREGgV29CxzdKtnWKCEv6qbFmA2RTll32Yexce7ZeDyGXC8WTQO2KrdMYwrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvKX4V8R3DPRMo77XXCDCGte5rncwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCHfSbJ+4JMdSlpNAwtklymu8rVsaFKACMs fh9GmdHVRUNVB7coGPr6Q0Nhx+PACRr4KQGM0SW7atocZ0Dx3YCQjNYeKZqXHnGL o9lGt0UpUXz7ijy15wRKq9rkCIcZK7x+lI5/uqXHxONJiz9F5uRdTv9VKjz25e07 sz30oUxuRuWfP1XTvAYwg6YCrBfHj7fth2iiVWv04b+CRrkhATjqzun3nf/5F6Bf QMAYxZLpAiwOaLLaKKHuDxozG8kd3lyBMTlQwYGJ6OF90+lz2pE9OuSUjtPgVY7A 2fx7i1j5xG8RBpDgqPa5sJDnXyO8zzkM9x29yFLBwDdeOERMCEc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:01 2025 by rpki-client