$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: Pcw+Kww4VIpsNh6mTBKRRo8FlIVMyG9zF32ck62JlWI= Subject key identifier: AD:1E:CC:B0:00:90:26:0A:58:D9:D0:B7:96:83:41:FF:14:AE:55:2D Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 3E6BAF7F153B4F5303D80F539F6352DD1510527E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0225 Signing time: Mon 20 Oct 2025 01:50:49 +0000 Manifest this update: Mon 20 Oct 2025 01:45:49 +0000 Manifest next update: Thu 23 Oct 2025 12:22:49 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 3: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 4: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 5: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: 8wDDQT91Xfz/jvRrGPO3xhiK0kUaMoyIFSkiQvv/+Lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6b:af:7f:15:3b:4f:53:03:d8:0f:53:9f:63:52:dd:15:10:52:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Oct 20 01:45:49 2025 GMT Not After : Oct 23 12:22:49 2025 GMT Subject: CN=AD1ECCB00090260A58D9D0B7968341FF14AE552D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:10:75:a1:fc:19:44:32:e7:76:8b:70:a3: a2:5f:01:ee:22:c6:6f:00:d6:e3:3a:76:f5:38:43: 55:5e:b2:06:57:5c:95:b9:04:90:c1:ad:9f:08:86: 23:6f:47:a1:77:60:ce:f8:be:2a:c8:31:03:f8:bc: e9:f8:97:b8:1c:12:c8:d1:7e:57:d3:fd:ef:78:1e: 97:eb:5a:9f:db:4a:95:f8:c4:ba:2f:2c:f3:c3:96: 1b:ec:f8:aa:b6:c6:2d:2c:92:34:53:72:1e:45:98: 4c:ef:9a:9e:4a:8f:ca:91:7e:ca:bb:45:0d:3d:cd: f1:cc:ad:8f:50:0c:5a:1a:d8:ae:4b:13:c7:23:1c: ac:59:58:f4:c7:c5:27:66:55:3a:f8:d1:25:7b:12: f5:72:ff:8b:5a:d6:bb:cc:f4:dd:78:e2:5d:8a:7e: b1:cf:35:43:03:d2:b8:00:77:5c:4b:d4:28:b9:a0: b1:12:d6:ae:1b:ae:bd:16:95:59:ca:63:50:da:7a: a1:c3:32:94:ba:8a:6a:0a:da:c6:d2:0f:b2:81:0e: 9d:46:8f:57:0d:84:04:cc:bd:c7:d2:f2:fb:1c:59: 27:20:25:0a:cd:5b:55:88:31:12:e9:89:d4:f1:38: 1d:0a:13:85:a1:bf:f4:cd:84:fc:e2:86:b2:d5:a4: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:CC:B0:00:90:26:0A:58:D9:D0:B7:96:83:41:FF:14:AE:55:2D X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:d9:5b:fa:e2:32:e3:04:b8:5c:e3:d3:69:b0:c2:2c:bf:1e: d9:cc:40:40:09:bf:19:b8:2a:49:c5:a0:10:c4:fc:90:7f:89: a8:2c:29:1b:de:4f:0b:1b:6f:e2:c4:23:51:3e:46:ef:18:89: 0c:d8:10:04:c7:87:16:07:0a:9d:61:ad:62:85:10:a5:bb:f1: 3d:e4:a5:26:61:49:fd:12:cc:60:2f:f6:95:d5:cd:e5:99:f7: d9:ae:57:6c:1c:c3:9b:94:91:1f:e3:33:48:93:a5:33:ac:7a: 13:61:27:ee:da:cb:dd:f2:55:58:d8:eb:ac:cc:59:6f:5d:43: fc:76:b6:71:a4:ea:6f:e0:80:3f:db:a0:a1:93:75:e4:b3:25: 51:3a:68:d0:ba:ed:57:9d:ef:4a:f3:57:31:96:73:39:fd:5a: 4c:c4:2e:c2:de:e9:c3:d4:87:d2:df:78:40:36:15:10:cb:4e: b5:3b:1d:16:3b:54:1d:8e:aa:26:bb:b7:d2:37:3d:b1:8f:99: dd:76:f9:f2:d1:ae:1a:77:e4:cf:7b:bb:a2:99:36:c8:91:1d: 22:e5:48:d5:7a:97:6b:10:ae:3a:c0:52:ef:41:35:1f:ad:12: 51:41:73:f4:81:c2:e1:84:03:ae:de:e8:51:5f:ed:ef:f9:1a: ad:47:f5:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmuvfxU7T1MD2A9Tn2NS3RUQUn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTEwMjAwMTQ1NDlaFw0yNTEwMjMxMjIyNDlaMDMxMTAvBgNV BAMTKEFEMUVDQ0IwMDA5MDI2MEE1OEQ5RDBCNzk2ODM0MUZGMTRBRTU1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTRB1ofwZRDLndotwo6JfAe4i xm8A1uM6dvU4Q1VesgZXXJW5BJDBrZ8IhiNvR6F3YM74virIMQP4vOn4l7gcEsjR flfT/e94HpfrWp/bSpX4xLovLPPDlhvs+Kq2xi0skjRTch5FmEzvmp5Kj8qRfsq7 RQ09zfHMrY9QDFoa2K5LE8cjHKxZWPTHxSdmVTr40SV7EvVy/4ta1rvM9N144l2K frHPNUMD0rgAd1xL1Ci5oLES1q4brr0WlVnKY1DaeqHDMpS6imoK2sbSD7KBDp1G j1cNhATMvcfS8vscWScgJQrNW1WIMRLpidTxOB0KE4Whv/TNhPzihrLVpMkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrR7MsACQJgpY2dC3loNB/xSuVS0wHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODZW/riMuMEuFzj02mwwiy/HtnMQEAJvxm4 KknFoBDE/JB/iagsKRveTwsbb+LEI1E+Ru8YiQzYEATHhxYHCp1hrWKFEKW78T3k pSZhSf0SzGAv9pXVzeWZ99muV2wcw5uUkR/jM0iTpTOsehNhJ+7ay93yVVjY66zM WW9dQ/x2tnGk6m/ggD/boKGTdeSzJVE6aNC67Ved70rzVzGWczn9WkzELsLe6cPU h9LfeEA2FRDLTrU7HRY7VB2Oqia7t9I3PbGPmd12+fLRrhp35M97u6KZNsiRHSLl SNV6l2sQrjrAUu9BNR+tElFBc/SBwuGEA67e6FFf7e/5Gq1H9dQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:23:22 2025 by rpki-client