$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: CxKyyGJgsWWs6qRg/hDECAJeQldUUFloovU/RnsjEvI= Subject key identifier: 63:9E:44:52:51:C0:82:42:E5:B6:CF:FA:DB:89:05:6F:E7:3C:4A:98 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 74FAD0CF638281E71CAEF5E35E412C7BACA78D6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 15:51:14 +0000 Manifest this update: Sun 19 Oct 2025 15:46:14 +0000 Manifest next update: Wed 22 Oct 2025 23:44:14 +0000 Files and hashes: 1: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 2: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: 43nfbw7u8i7ry/7QVjmXflk/pzwzrDG95afSGYMhrAk=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fa:d0:cf:63:82:81:e7:1c:ae:f5:e3:5e:41:2c:7b:ac:a7:8d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Oct 19 15:46:14 2025 GMT Not After : Oct 22 23:44:14 2025 GMT Subject: CN=639E445251C08242E5B6CFFADB89056FE73C4A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c8:81:0f:7c:b6:37:20:01:23:a2:8a:15:3a: a1:60:70:2e:53:25:43:2f:0e:d6:f4:93:ed:a3:66: c4:4e:ea:be:2a:be:a7:14:79:39:30:3d:f3:3a:44: 7a:8a:a3:88:0e:2e:76:26:8b:45:2c:04:39:e4:93: 9f:57:44:46:7a:ba:ba:61:3a:c9:b6:d5:71:22:ae: 82:54:fc:29:a3:ce:9c:90:b3:15:8c:cd:b6:d7:42: d0:bb:19:09:9f:60:7d:3d:f6:98:94:f5:19:a6:e6: 8f:ad:3b:09:cc:18:cc:b6:33:dc:d6:87:8e:8a:5a: 90:a4:fb:5b:21:f8:2d:de:c9:b1:27:19:3f:e9:30: bb:9f:49:34:ce:83:27:e3:03:77:89:9e:b7:be:9c: 05:27:35:45:73:3d:14:b7:16:8d:65:87:de:40:ce: f8:07:59:08:6f:90:72:80:32:93:d0:ed:c7:27:dd: 5b:4b:a8:0c:2b:53:8c:99:e2:9a:06:77:ff:36:f8: cb:34:72:e5:be:e9:e9:50:2e:b5:8e:0e:1f:7d:c3: 99:38:c1:65:0d:d5:1b:47:42:0f:4b:06:42:63:fd: b9:0a:c3:61:91:8e:2b:45:0c:b5:c9:2f:ab:40:61: 07:0c:fa:e3:0a:45:f9:9b:19:ed:13:21:71:ae:f7: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:44:52:51:C0:82:42:E5:B6:CF:FA:DB:89:05:6F:E7:3C:4A:98 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e3:02:ff:0c:3b:c7:a5:61:dc:4d:96:1a:7d:ec:13:b8:de: 07:4d:99:a0:0f:a8:a9:dc:de:9e:ae:64:1d:5a:dc:24:ab:ce: cc:20:d0:2a:32:c4:a9:f7:ea:17:a8:cf:57:25:f8:40:bd:45: 12:9e:57:51:31:b0:26:35:13:24:9a:d4:e5:57:66:72:18:d4: c6:c6:5c:a4:ad:c1:05:1b:d5:00:1a:4b:fb:e5:36:3d:6d:6c: c9:c8:b9:90:e3:ba:4c:f3:d8:19:37:cc:fc:89:99:7e:7f:de: 87:79:bd:18:4b:3d:9e:0b:18:06:16:41:f6:91:e2:6a:16:1c: 31:73:c8:65:3c:49:3b:ff:f0:a4:81:01:c7:83:bc:dd:63:9d: ee:f7:6b:b7:c7:cc:4a:1b:8b:86:a9:26:0d:96:a7:2b:32:64: dd:9f:d5:d9:5a:84:fe:a0:6d:61:6e:70:d9:48:04:04:bd:b4: 0a:16:7a:81:8d:1b:a4:27:bc:3f:8d:dc:4d:61:ec:f7:2f:c3: df:f0:54:07:00:03:72:b0:bc:eb:f2:3f:73:e3:fb:c2:8e:c4: 2a:3d:83:ef:47:ff:3a:86:19:c1:c2:46:ad:3e:df:82:0e:72: 0d:cd:0e:d0:ee:56:47:1e:af:93:e6:3b:56:c6:87:a1:0d:1d: 93:50:4e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPrQz2OCgeccrvXjXkEse6ynjW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTEwMTkxNTQ2MTRaFw0yNTEwMjIyMzQ0MTRaMDMxMTAvBgNV BAMTKDYzOUU0NDUyNTFDMDgyNDJFNUI2Q0ZGQURCODkwNTZGRTczQzRBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoyIEPfLY3IAEjoooVOqFgcC5T JUMvDtb0k+2jZsRO6r4qvqcUeTkwPfM6RHqKo4gOLnYmi0UsBDnkk59XREZ6urph Osm21XEiroJU/CmjzpyQsxWMzbbXQtC7GQmfYH099piU9Rmm5o+tOwnMGMy2M9zW h46KWpCk+1sh+C3eybEnGT/pMLufSTTOgyfjA3eJnre+nAUnNUVzPRS3Fo1lh95A zvgHWQhvkHKAMpPQ7ccn3VtLqAwrU4yZ4poGd/82+Ms0cuW+6elQLrWODh99w5k4 wWUN1RtHQg9LBkJj/bkKw2GRjitFDLXJL6tAYQcM+uMKRfmbGe0TIXGu97fbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY55EUlHAgkLlts/624kFb+c8SpgwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLjAv8MO8elYdxNlhp97BO43gdNmaAPqKnc 3p6uZB1a3CSrzswg0CoyxKn36heoz1cl+EC9RRKeV1ExsCY1EySa1OVXZnIY1MbG XKStwQUb1QAaS/vlNj1tbMnIuZDjukzz2Bk3zPyJmX5/3od5vRhLPZ4LGAYWQfaR 4moWHDFzyGU8STv/8KSBAceDvN1jne73a7fHzEobi4apJg2WpysyZN2f1dlahP6g bWFucNlIBAS9tAoWeoGNG6QnvD+N3E1h7Pcvw9/wVAcAA3KwvOvyP3Pj+8KOxCo9 g+9H/zqGGcHCRq0+34IOcg3NDtDuVkcer5PmO1bGh6ENHZNQTkw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:14 2025 by rpki-client