$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: UYSVLUGQtDCJTn3onEr6juW/aqqCDOPdyN2Al4DaVJg= Subject key identifier: DD:8F:5E:5C:5B:1C:F4:14:FE:D1:8E:FA:B1:62:6F:7E:7C:F1:E4:39 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 67D919442BA498BC89058CFE2FE910A5D1207F3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: E8 Signing time: Sat 18 Oct 2025 09:41:56 +0000 Manifest this update: Sat 18 Oct 2025 09:36:56 +0000 Manifest next update: Tue 21 Oct 2025 18:08:56 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: 5y5zHvU+6wy2vDZqiZZKmjkSPHxE5igZaWDfwjq22pg=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 4: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:19:44:2b:a4:98:bc:89:05:8c:fe:2f:e9:10:a5:d1:20:7f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Oct 18 09:36:56 2025 GMT Not After : Oct 21 18:08:56 2025 GMT Subject: CN=DD8F5E5C5B1CF414FED18EFAB1626F7E7CF1E439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:fd:f7:57:cc:6e:1a:fe:4b:7c:49:c2:4f: c8:4c:40:10:c4:c6:db:df:4f:e6:fb:30:da:5d:b3: b7:b4:39:2b:c8:9f:48:32:1f:ac:92:1a:a0:2b:30: cb:01:a1:bf:ed:43:ef:e8:78:f9:90:33:18:c4:45: c8:24:07:72:c6:64:ba:db:ba:97:c8:de:d1:fb:a7: 4b:de:2e:b2:df:e6:dc:1d:bd:85:94:67:8c:aa:be: 24:a8:24:88:e4:e8:70:cb:45:12:60:d6:08:a2:95: 35:7f:74:d6:18:22:06:46:9e:96:18:f5:fb:62:3f: 63:1e:96:21:54:4f:25:4d:b2:6c:24:e6:92:d8:75: 01:2d:9f:b9:77:78:e6:ff:a9:32:e0:7e:ec:09:9b: 74:9e:a1:02:10:1d:c5:12:e6:d5:83:7a:c2:e8:1f: 6c:6f:bb:81:29:29:8b:54:49:1b:64:0e:e7:6b:89: 60:3b:d7:a9:57:57:85:ed:3f:f5:15:45:19:f8:77: 29:95:15:c2:66:93:7f:aa:02:a4:f5:1a:dd:7b:74: e4:04:e6:f9:df:c3:d7:3c:2f:07:0d:40:f9:b5:7a: 09:e5:ea:a3:88:bb:b1:99:fc:01:c5:43:37:eb:2a: ea:fe:cc:e8:d4:ef:00:04:03:66:04:2b:5d:f1:31: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:5E:5C:5B:1C:F4:14:FE:D1:8E:FA:B1:62:6F:7E:7C:F1:E4:39 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:33:07:35:94:28:8f:33:4e:1b:e8:9b:97:86:9b:d9:a3:a8: c7:fc:b4:ed:bb:60:2b:12:01:37:4e:1c:c3:78:a6:3a:24:b3: 02:5b:ce:97:32:a3:60:c6:e3:1e:4a:15:ef:94:d9:9c:e3:60: 6d:12:98:81:5c:4b:38:13:76:05:12:f6:4a:c6:8d:0d:0f:68: f1:f7:bc:82:d9:a2:d4:2d:1c:ca:d9:9d:ff:d4:0b:e2:9b:a6: 7b:92:a4:72:bf:92:b6:03:04:f9:29:46:82:46:9b:19:24:f7: 1f:3e:ff:fb:63:5c:eb:0d:df:53:83:1c:4f:f4:fa:ac:21:74: c7:8d:44:64:fb:42:9f:0f:f5:53:66:ba:30:45:5b:ce:da:99: 76:bc:bb:af:bd:ef:99:90:08:66:71:42:99:9c:87:d8:e8:79: 2b:91:c1:12:19:02:09:a3:ed:74:71:9c:48:c6:8d:5e:ad:d7: 9b:95:91:51:fb:bb:d2:fe:ec:91:76:86:05:93:30:05:de:13: 91:bd:91:e9:09:25:23:da:ae:a1:bf:e6:6e:e3:09:17:95:b1: af:56:b5:e2:53:94:16:b2:3c:7b:4f:94:e3:8b:75:ae:5f:1e: 6b:f8:10:9f:4d:74:42:99:1c:4c:fa:cf:0a:4d:f2:78:e7:e6: 2c:69:43:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9kZRCukmLyJBYz+L+kQpdEgfzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTEwMTgwOTM2NTZaFw0yNTEwMjExODA4NTZaMDMxMTAvBgNV BAMTKEREOEY1RTVDNUIxQ0Y0MTRGRUQxOEVGQUIxNjI2RjdFN0NGMUU0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyf33V8xuGv5LfEnCT8hMQBDE xtvfT+b7MNpds7e0OSvIn0gyH6ySGqArMMsBob/tQ+/oePmQMxjERcgkB3LGZLrb upfI3tH7p0veLrLf5twdvYWUZ4yqviSoJIjk6HDLRRJg1giilTV/dNYYIgZGnpYY 9ftiP2MeliFUTyVNsmwk5pLYdQEtn7l3eOb/qTLgfuwJm3SeoQIQHcUS5tWDesLo H2xvu4EpKYtUSRtkDudriWA716lXV4XtP/UVRRn4dymVFcJmk3+qAqT1Gt17dOQE 5vnfw9c8LwcNQPm1egnl6qOIu7GZ/AHFQzfrKur+zOjU7wAEA2YEK13xMU/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Y9eXFsc9BT+0Y76sWJvfnzx5DkwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0zBzWUKI8zThvom5eGm9mjqMf8tO27YCsS ATdOHMN4pjokswJbzpcyo2DG4x5KFe+U2ZzjYG0SmIFcSzgTdgUS9krGjQ0PaPH3 vILZotQtHMrZnf/UC+KbpnuSpHK/krYDBPkpRoJGmxkk9x8+//tjXOsN31ODHE/0 +qwhdMeNRGT7Qp8P9VNmujBFW87amXa8u6+975mQCGZxQpmch9joeSuRwRIZAgmj 7XRxnEjGjV6t15uVkVH7u9L+7JF2hgWTMAXeE5G9kekJJSParqG/5m7jCReVsa9W teJTlBayPHtPlOOLda5fHmv4EJ9NdEKZHEz6zwpN8njn5ixpQ5U= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:53 2025 by rpki-client