$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: sYpFEuwRczSziGsa2s6uo49tEssg4qhNVzgh71zc/VQ= Subject key identifier: 28:D3:9B:34:D2:7D:86:82:2D:66:AC:6D:7F:EE:1F:A1:E6:46:08:B7 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 437B8366735824D9E0C21D195CFFFFC1C4AFCBEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 03A7 Signing time: Mon 03 Nov 2025 10:32:18 +0000 Manifest this update: Mon 03 Nov 2025 10:27:18 +0000 Manifest next update: Thu 06 Nov 2025 14:50:18 +0000 Files and hashes: 1: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: JnGFx141p0CaMNY8bJ5FyZlWACjjbJbSfaxDm/LDyIE=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 3: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7b:83:66:73:58:24:d9:e0:c2:1d:19:5c:ff:ff:c1:c4:af:cb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Nov 3 10:27:18 2025 GMT Not After : Nov 6 14:50:18 2025 GMT Subject: CN=28D39B34D27D86822D66AC6D7FEE1FA1E64608B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:f0:76:fd:39:ca:c5:59:67:10:ff:ad:08: 0a:11:3f:4a:63:f7:5b:5a:44:89:53:37:bb:3b:1b: 7c:27:ca:b9:84:ce:a5:31:1b:f1:33:2e:4a:f3:15: 19:9a:fa:e8:73:99:51:67:63:65:da:47:e8:b3:0d: 3d:9b:9a:23:6f:97:4b:72:2d:fc:fb:bc:e6:f7:c0: 55:fb:3c:bf:f6:38:6c:70:29:73:50:46:25:1c:3d: c3:79:97:4b:10:db:19:8e:a0:26:4f:74:cd:6e:56: 1c:ee:b3:bb:8b:3a:d6:2b:de:d6:23:a9:e1:eb:08: 4c:85:d5:48:8e:dc:e7:41:ce:05:3d:98:17:06:5b: 8a:f9:40:f5:58:32:eb:c5:59:f4:03:2c:62:77:25: 8b:d2:a5:54:c1:12:e3:b8:db:cd:da:74:27:7d:d2: 19:43:d6:7a:d4:ae:90:d9:6c:59:1e:07:7f:0e:aa: 76:f0:fc:5f:da:5a:b6:62:69:8c:25:26:9f:20:39: 7f:13:06:dd:7e:e1:30:ab:0e:81:cb:62:18:4d:bd: 8f:c3:c7:a6:28:a8:22:99:af:99:54:07:b3:8a:76: 3a:07:05:fb:fd:66:83:46:ee:a3:35:2a:c6:61:07: af:49:32:16:83:b6:13:8b:91:0c:bd:57:6e:8d:8c: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:9B:34:D2:7D:86:82:2D:66:AC:6D:7F:EE:1F:A1:E6:46:08:B7 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d7:e3:ed:37:f7:54:fa:4b:a5:41:ae:a1:c7:5a:7b:a0:32: a3:7b:c6:29:ca:dd:69:17:93:a5:1a:ed:bb:57:c0:20:92:7e: 14:0f:93:3f:92:db:19:83:17:ad:fc:55:37:65:52:8a:ec:7f: b4:d5:70:22:70:17:fc:03:f1:4b:79:3f:bd:69:38:65:d2:38: 88:08:a2:ab:71:32:75:5b:65:d8:bd:6d:b0:90:53:a0:5c:32: e6:79:5a:15:3d:00:a5:4b:1b:f2:12:88:0d:d9:dc:81:dc:e9: 92:78:86:5a:75:99:2f:aa:4d:07:27:b0:62:e8:df:fc:68:ac: c7:0a:34:0f:ec:db:fe:13:09:1f:21:29:2c:30:1a:ce:1f:08: e4:91:c5:13:06:08:b7:3c:02:3c:33:a8:91:53:ea:86:90:16: ad:51:8c:27:e1:69:b8:3b:fc:b3:90:2a:35:ab:3e:af:63:40: 38:61:1b:69:d0:c2:9d:21:b3:cb:87:0a:66:e5:f4:94:4d:64: 3e:43:f6:08:c6:56:0c:03:a3:4e:b3:bd:1f:17:3a:7b:08:39: bc:60:15:65:35:4e:f3:01:44:1b:85:81:07:8a:ca:8f:38:2b: 2c:87:4b:58:de:55:15:42:a0:99:6c:83:b2:05:57:14:95:0b: 89:7b:3a:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3uDZnNYJNngwh0ZXP//wcSvy+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTExMDMxMDI3MThaFw0yNTExMDYxNDUwMThaMDMxMTAvBgNV BAMTKDI4RDM5QjM0RDI3RDg2ODIyRDY2QUM2RDdGRUUxRkExRTY0NjA4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPvB2/TnKxVlnEP+tCAoRP0pj 91taRIlTN7s7G3wnyrmEzqUxG/EzLkrzFRma+uhzmVFnY2XaR+izDT2bmiNvl0ty Lfz7vOb3wFX7PL/2OGxwKXNQRiUcPcN5l0sQ2xmOoCZPdM1uVhzus7uLOtYr3tYj qeHrCEyF1UiO3OdBzgU9mBcGW4r5QPVYMuvFWfQDLGJ3JYvSpVTBEuO4283adCd9 0hlD1nrUrpDZbFkeB38Oqnbw/F/aWrZiaYwlJp8gOX8TBt1+4TCrDoHLYhhNvY/D x6YoqCKZr5lUB7OKdjoHBfv9ZoNG7qM1KsZhB69JMhaDthOLkQy9V26NjD//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNObNNJ9hoItZqxtf+4foeZGCLcwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHX4+0391T6S6VBrqHHWnugMqN7xinK3WkX k6Ua7btXwCCSfhQPkz+S2xmDF638VTdlUorsf7TVcCJwF/wD8Ut5P71pOGXSOIgI oqtxMnVbZdi9bbCQU6BcMuZ5WhU9AKVLG/ISiA3Z3IHc6ZJ4hlp1mS+qTQcnsGLo 3/xorMcKNA/s2/4TCR8hKSwwGs4fCOSRxRMGCLc8AjwzqJFT6oaQFq1RjCfhabg7 /LOQKjWrPq9jQDhhG2nQwp0hs8uHCmbl9JRNZD5D9gjGVgwDo06zvR8XOnsIObxg FWU1TvMBRBuFgQeKyo84KyyHS1jeVRVCoJlsg7IFVxSVC4l7Otw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:20 2025 by rpki-client