$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: 8LiKDM9wMs5i9cyZFzo7W75K8jL5I6NQRkbtK7ds3gs= Subject key identifier: FD:32:F0:77:A4:C6:CF:3F:93:46:83:12:DF:2B:78:59:27:C6:D9:4C Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 6323D64ED81800C258A72F966C7CA977916223FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01CF Signing time: Mon 20 Oct 2025 02:52:17 +0000 Manifest this update: Mon 20 Oct 2025 02:47:16 +0000 Manifest next update: Thu 23 Oct 2025 14:39:16 +0000 Files and hashes: 1: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=) 2: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: TlL9w+A+Ba4VTSUhuNiDHZ6c33tDY1S7D7xN/nNnO80=) 3: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:23:d6:4e:d8:18:00:c2:58:a7:2f:96:6c:7c:a9:77:91:62:23:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Oct 20 02:47:16 2025 GMT Not After : Oct 23 14:39:16 2025 GMT Subject: CN=FD32F077A4C6CF3F93468312DF2B785927C6D94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:ae:c9:5e:bd:16:3b:7d:6d:87:da:2d:a3: d8:03:4d:ba:5c:95:c9:b7:d5:06:cf:e4:82:a1:72: 83:9c:96:07:20:a4:55:df:28:fb:ed:2d:0f:d0:6b: 3b:a2:85:87:21:2c:e3:6d:5e:a3:cc:1a:4f:92:90: 24:9a:51:7f:d7:35:4f:66:9d:e7:57:74:e3:85:b4: 2f:41:e4:28:0d:ca:94:83:92:6e:1b:f3:b8:61:b2: cd:11:23:f7:be:68:1f:24:a4:ad:be:0d:28:3b:de: 17:4b:a2:4e:61:a1:da:40:8c:33:a2:96:8d:46:58: 10:da:25:c3:39:12:48:8e:ec:e7:a2:69:14:43:bb: 05:3b:2b:5a:aa:a5:b7:a3:58:64:5c:53:e1:e7:d4: 57:fe:4d:0c:0e:c0:44:40:56:d3:25:c3:11:be:61: 69:57:98:ce:d2:67:1a:9c:7a:56:d9:25:98:7e:c8: 7f:26:ae:3a:70:53:5b:33:bf:7c:72:a5:a6:cb:62: d7:43:ba:74:90:0a:58:69:76:a0:19:94:d7:27:78: 89:74:f4:f6:f0:fb:3c:86:d2:af:2f:43:e6:63:65: da:40:03:56:df:2a:96:44:7a:ab:10:f0:f2:dc:15: 8b:5e:80:f6:3c:1b:c7:96:d7:fa:3b:44:e8:11:c4: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:32:F0:77:A4:C6:CF:3F:93:46:83:12:DF:2B:78:59:27:C6:D9:4C X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:38:d7:f4:26:4b:bb:77:93:47:91:bc:60:5d:f7:ad:d7:ea: ea:1b:a8:61:4c:f0:1b:c3:7b:84:00:ef:9c:a7:9a:d3:71:de: ba:00:c2:8b:ff:09:29:9f:96:3f:c4:ff:27:f9:fb:06:a2:6c: 71:34:13:6c:55:d5:c3:33:e3:74:04:82:5d:17:cb:c2:7d:7a: 31:5d:68:0f:a5:e0:86:30:ad:89:d7:bd:5d:9e:cb:f3:2f:9c: e7:97:a2:e2:a8:a0:90:06:35:ef:c8:59:58:e1:6e:f4:e4:c6: d4:01:8c:dd:17:9b:0c:11:cf:4e:c7:55:21:1f:2c:47:40:89: 80:00:60:bb:79:24:e6:f4:ee:78:5d:81:eb:2a:44:4e:40:19: b3:b1:62:04:cc:16:f5:59:1f:84:69:4a:1c:3e:3a:cb:a5:81: ce:b8:f5:fc:31:5d:07:5e:bf:31:20:fb:ea:b7:4e:8d:71:68: 92:e4:86:60:80:a5:2b:7e:b5:cc:31:60:a1:57:3b:64:8d:be: d2:60:df:e5:6a:32:55:d9:50:5a:33:16:06:05:16:d3:8a:63: 30:e3:ed:1d:b8:72:83:f1:80:cd:0a:4a:17:f6:45:6a:a0:09: 1c:84:c3:4c:bc:07:cf:9f:c3:7f:98:84:8a:76:a3:18:62:80: c4:36:2a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyPWTtgYAMJYpy+WbHypd5FiI/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTEwMjAwMjQ3MTZaFw0yNTEwMjMxNDM5MTZaMDMxMTAvBgNV BAMTKEZEMzJGMDc3QTRDNkNGM0Y5MzQ2ODMxMkRGMkI3ODU5MjdDNkQ5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF967JXr0WO31th9oto9gDTbpc lcm31QbP5IKhcoOclgcgpFXfKPvtLQ/QazuihYchLONtXqPMGk+SkCSaUX/XNU9m nedXdOOFtC9B5CgNypSDkm4b87hhss0RI/e+aB8kpK2+DSg73hdLok5hodpAjDOi lo1GWBDaJcM5EkiO7OeiaRRDuwU7K1qqpbejWGRcU+Hn1Ff+TQwOwERAVtMlwxG+ YWlXmM7SZxqcelbZJZh+yH8mrjpwU1szv3xypabLYtdDunSQClhpdqAZlNcneIl0 9Pbw+zyG0q8vQ+ZjZdpAA1bfKpZEeqsQ8PLcFYtegPY8G8eW1/o7ROgRxINzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TLwd6TGzz+TRoMS3yt4WSfG2UwwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ41/QmS7t3k0eRvGBd963X6uobqGFM8BvD e4QA75ynmtNx3roAwov/CSmflj/E/yf5+waibHE0E2xV1cMz43QEgl0Xy8J9ejFd aA+l4IYwrYnXvV2ey/MvnOeXouKooJAGNe/IWVjhbvTkxtQBjN0XmwwRz07HVSEf LEdAiYAAYLt5JOb07nhdgesqRE5AGbOxYgTMFvVZH4RpShw+Osulgc649fwxXQde vzEg++q3To1xaJLkhmCApSt+tcwxYKFXO2SNvtJg3+VqMlXZUFozFgYFFtOKYzDj 7R24coPxgM0KShf2RWqgCRyEw0y8B8+fw3+YhIp2oxhigMQ2Kk8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:57 2025 by rpki-client