$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: WBs9dUpo2zqwuICUIY8NqWTzJlQ6Ltt9ZCjWnc0ZKZQ= Subject key identifier: 6D:69:98:4B:8B:A7:BF:09:27:31:58:C1:22:59:67:31:5A:2B:C8:87 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 7D4D9564D4D2E5CD0A0160E69D874BF617394AE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0205 Signing time: Sun 02 Nov 2025 23:50:36 +0000 Manifest this update: Sun 02 Nov 2025 23:45:36 +0000 Manifest next update: Thu 06 Nov 2025 08:27:36 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: Apf9ngTmySO2BczOpHL3vZesnVGocxNag91FDYXUH2w=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 4: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4d:95:64:d4:d2:e5:cd:0a:01:60:e6:9d:87:4b:f6:17:39:4a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Nov 2 23:45:36 2025 GMT Not After : Nov 6 08:27:36 2025 GMT Subject: CN=6D69984B8BA7BF09273158C1225967315A2BC887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:b3:b0:f3:15:32:b5:ae:02:d1:b4:db:fa: 31:1c:fd:a2:5b:b8:25:27:59:25:01:ee:72:07:df: 72:e7:1c:ef:1c:2a:4f:28:6d:28:1b:ae:38:dd:b9: 48:97:50:31:66:a4:bd:3e:8a:93:81:dc:b7:e9:b1: cf:0f:86:0b:25:46:f6:da:69:67:a2:d8:91:78:ee: 6b:6c:9a:21:aa:82:7c:c2:a1:6f:7e:f2:e3:5e:56: 9a:10:fe:8b:9d:1c:b4:07:4e:42:08:36:7a:33:3e: d1:13:1d:e8:ed:b3:7c:f1:e4:a2:f2:28:08:5b:54: fd:53:c9:e2:98:ab:4e:3e:98:4c:75:3e:eb:59:41: 9c:e6:85:3a:b0:26:03:b2:a9:ea:5f:66:6c:01:85: f7:54:bf:ac:6e:b9:87:14:b9:0e:3d:2b:dc:c0:cd: 12:46:52:f4:af:62:e7:10:e4:ff:6b:71:2e:23:f9: ef:cb:53:c2:36:66:97:4f:e6:a2:e0:ff:9c:c9:47: 64:57:07:0c:84:ba:78:13:21:e3:e4:33:0d:01:d9: 3d:0a:1b:dd:80:47:b3:b8:29:c4:ed:25:d3:ef:33: c6:b7:31:41:55:c5:bc:98:fb:5c:89:15:29:49:fa: 80:2f:5f:c0:3a:1b:38:08:5e:bc:e2:77:d1:fa:92: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:69:98:4B:8B:A7:BF:09:27:31:58:C1:22:59:67:31:5A:2B:C8:87 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7b:94:b5:5d:a2:e3:f1:14:45:78:da:81:cb:1f:31:13:2f: 54:81:2a:b4:f4:99:af:9f:fa:a6:ba:da:7d:77:06:8d:3a:bb: 0b:7a:f5:75:8f:99:50:1b:77:f2:48:60:5e:ed:7e:cb:d9:46: 35:5e:77:aa:de:87:f3:d3:2d:46:46:cb:d6:49:85:bf:51:34: a6:40:28:a2:bb:33:96:1d:8c:78:9e:5a:c3:af:ff:bd:4b:a2: 2a:24:f2:30:d0:67:4b:60:4a:8b:38:7e:7e:3f:a8:b0:fa:a7: df:17:31:6d:4e:eb:75:8c:83:7c:79:80:6c:d4:b8:43:bb:85: bb:f1:00:05:15:14:01:03:99:10:9a:57:9b:4c:be:73:d3:b8: b5:f3:d2:49:6c:a0:22:5c:26:bf:68:f1:e4:c5:37:65:18:85: 3e:d8:d3:ae:4c:d3:11:26:c0:66:97:98:f0:d9:fd:3e:11:89: 47:9a:ec:0e:37:4e:80:e3:9c:c7:e7:97:32:bd:8d:77:b2:28: 73:20:eb:30:85:dc:3b:75:9a:82:18:2f:6a:c6:73:b4:c5:ea: 9d:39:5a:d6:b1:95:60:ce:3d:ae:85:0f:26:18:f0:c4:e3:46: 00:5f:07:1b:6d:b1:37:cf:29:f3:9c:8f:fe:cd:3d:83:c7:ed: 04:95:f0:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU2VZNTS5c0KAWDmnYdL9hc5SuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTExMDIyMzQ1MzZaFw0yNTExMDYwODI3MzZaMDMxMTAvBgNV BAMTKDZENjk5ODRCOEJBN0JGMDkyNzMxNThDMTIyNTk2NzMxNUEyQkM4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKrOw8xUyta4C0bTb+jEc/aJb uCUnWSUB7nIH33LnHO8cKk8obSgbrjjduUiXUDFmpL0+ipOB3Lfpsc8PhgslRvba aWei2JF47mtsmiGqgnzCoW9+8uNeVpoQ/oudHLQHTkIINnozPtETHejts3zx5KLy KAhbVP1TyeKYq04+mEx1PutZQZzmhTqwJgOyqepfZmwBhfdUv6xuuYcUuQ49K9zA zRJGUvSvYucQ5P9rcS4j+e/LU8I2ZpdP5qLg/5zJR2RXBwyEungTIePkMw0B2T0K G92AR7O4KcTtJdPvM8a3MUFVxbyY+1yJFSlJ+oAvX8A6GzgIXrzid9H6kqFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWmYS4unvwknMVjBIllnMVoryIcwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAd7lLVdouPxFEV42oHLHzETL1SBKrT0ma+f +qa62n13Bo06uwt69XWPmVAbd/JIYF7tfsvZRjVed6reh/PTLUZGy9ZJhb9RNKZA KKK7M5YdjHieWsOv/71Loiok8jDQZ0tgSos4fn4/qLD6p98XMW1O63WMg3x5gGzU uEO7hbvxAAUVFAEDmRCaV5tMvnPTuLXz0klsoCJcJr9o8eTFN2UYhT7Y065M0xEm wGaXmPDZ/T4RiUea7A43ToDjnMfnlzK9jXeyKHMg6zCF3Dt1moIYL2rGc7TF6p05 WtaxlWDOPa6FDyYY8MTjRgBfBxttsTfPKfOcj/7NPYPH7QSV8CM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:02 2025 by rpki-client