$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: nLaJ7hMHm/aatsPo2GEHaRsP069m1876sh3n8MBk3dw= Subject key identifier: 31:C3:84:07:29:D1:60:0B:A3:67:08:FF:5E:6A:8E:42:1E:4D:53:78 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 2B49C34B785DF11684F7C8B443210C82772BC180 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: E0 Signing time: Mon 03 Nov 2025 23:30:41 +0000 Manifest this update: Mon 03 Nov 2025 23:25:41 +0000 Manifest next update: Fri 07 Nov 2025 07:25:41 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: EalI8H6xhiyG9+FYSDDBuo6nQdVcjsvKKlcBmVqMmzo=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:49:c3:4b:78:5d:f1:16:84:f7:c8:b4:43:21:0c:82:77:2b:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Nov 3 23:25:41 2025 GMT Not After : Nov 7 07:25:41 2025 GMT Subject: CN=31C3840729D1600BA36708FF5E6A8E421E4D5378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:01:49:d3:d4:ad:cc:c4:a1:26:81:77:3c: 6f:60:f6:73:c8:8e:7e:dc:91:ca:d4:72:ba:67:17: d1:7f:57:6f:d2:fb:a8:ab:80:58:ba:59:8c:82:66: 09:94:b0:39:af:da:7b:d1:40:26:bc:7f:60:33:fb: 92:c1:3a:7d:8d:d0:9b:6a:5c:0e:4f:55:78:e1:41: 20:06:f5:ca:ec:94:d4:40:18:ed:51:ca:70:44:6a: 25:0f:47:de:d3:a3:86:b4:d1:3b:bd:8e:5e:c1:07: c3:b4:b5:3e:b6:5e:24:f2:9f:e8:a6:ce:c8:a1:ea: 1c:03:73:23:9b:64:48:b7:9d:3e:b4:ef:a6:23:f1: cf:d2:c0:5d:bb:e3:74:ca:1e:b4:02:33:45:04:05: 4d:e4:fb:e0:de:73:38:77:21:f2:b4:d3:d9:67:b1: a5:36:d4:b9:96:a5:cd:f7:a3:fb:a2:f4:ce:56:c1: 2f:4c:43:be:cf:cb:1d:d2:5f:d2:5a:af:4b:ef:04: e2:ce:10:1f:c1:e0:55:8c:c4:d9:6b:8f:53:8d:99: ab:d2:df:d0:4b:f6:ca:8d:4e:58:fd:ea:8c:df:f5: 5d:94:5c:ce:f8:fb:3c:42:a3:c5:ab:6b:9e:36:33: 83:9d:74:96:eb:bc:fd:89:36:24:51:f0:88:ba:20: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:84:07:29:D1:60:0B:A3:67:08:FF:5E:6A:8E:42:1E:4D:53:78 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:33:00:5b:f6:c7:80:a8:7c:62:cd:ae:a8:6a:2a:78:9d:3f: cd:74:53:a8:19:39:02:38:e2:c4:c3:80:81:c5:da:13:0c:8e: b9:d2:94:5c:d4:dd:9a:74:6e:52:13:65:85:6e:cc:0b:75:10: 1f:d6:06:ea:3e:00:47:b1:89:ed:43:92:d9:a1:a9:03:27:71: b1:7c:aa:e7:3a:f5:ae:73:93:a7:5b:6a:a2:ac:9b:dd:de:8b: 6c:50:16:06:7b:bd:d7:72:3c:d6:a5:a7:44:7b:e7:8a:91:4e: 48:a8:91:e4:53:b4:59:8b:4c:2f:d6:8b:36:0f:d5:93:2f:0b: c4:14:bb:3c:32:31:99:12:57:78:a3:26:3f:ef:c9:b2:f3:d2: 60:83:ee:34:e8:ba:6c:fd:6c:7c:f6:7c:b3:e2:3b:14:f0:d5: 6e:41:f7:14:55:0c:86:15:d3:93:69:77:ce:0d:34:78:74:ec: 20:9c:c3:0b:80:31:44:93:a7:80:42:1b:bf:73:76:93:1e:51: 96:16:3c:02:02:e2:ea:84:91:38:ad:08:ad:38:c5:35:42:eb: c4:eb:fb:01:a2:20:ad:d3:a0:8c:eb:48:78:40:21:74:db:f5: f6:bd:d9:7b:70:d6:55:8d:e9:a1:15:63:96:45:b7:3e:3e:de: 6c:5b:10:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0nDS3hd8RaE98i0QyEMgncrwYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTExMDMyMzI1NDFaFw0yNTExMDcwNzI1NDFaMDMxMTAvBgNV BAMTKDMxQzM4NDA3MjlEMTYwMEJBMzY3MDhGRjVFNkE4RTQyMUU0RDUzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7QFJ09StzMShJoF3PG9g9nPI jn7ckcrUcrpnF9F/V2/S+6irgFi6WYyCZgmUsDmv2nvRQCa8f2Az+5LBOn2N0Jtq XA5PVXjhQSAG9crslNRAGO1RynBEaiUPR97To4a00Tu9jl7BB8O0tT62XiTyn+im zsih6hwDcyObZEi3nT6076Yj8c/SwF2743TKHrQCM0UEBU3k++Deczh3IfK009ln saU21LmWpc33o/ui9M5WwS9MQ77Pyx3SX9Jar0vvBOLOEB/B4FWMxNlrj1ONmavS 39BL9sqNTlj96ozf9V2UXM74+zxCo8Wra542M4OddJbrvP2JNiRR8Ii6ILd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcOEBynRYAujZwj/XmqOQh5NU3gwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8zAFv2x4CofGLNrqhqKnidP810U6gZOQI4 4sTDgIHF2hMMjrnSlFzU3Zp0blITZYVuzAt1EB/WBuo+AEexie1DktmhqQMncbF8 quc69a5zk6dbaqKsm93ei2xQFgZ7vddyPNalp0R754qRTkiokeRTtFmLTC/WizYP 1ZMvC8QUuzwyMZkSV3ijJj/vybLz0mCD7jToumz9bHz2fLPiOxTw1W5B9xRVDIYV 05Npd84NNHh07CCcwwuAMUSTp4BCG79zdpMeUZYWPAIC4uqEkTitCK04xTVC68Tr +wGiIK3ToIzrSHhAIXTb9fa92Xtw1lWN6aEVY5ZFtz4+3mxbEOg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:03 2025 by rpki-client