$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: /2WO3o2W+B6jywzfjQaajVq2sygSusbfLfun1zVspzc= Subject key identifier: 7A:02:7C:08:57:BB:B7:50:CE:E2:8C:39:6E:C2:29:F3:45:D9:2A:28 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 7D8622C04E17461882459604660CD4172EED6AFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: D5 Signing time: Sat 18 Oct 2025 18:01:17 +0000 Manifest this update: Sat 18 Oct 2025 17:56:17 +0000 Manifest next update: Tue 21 Oct 2025 19:53:17 +0000 Files and hashes: 1: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 2: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 3: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: T9Nal5klHVkbNSXjEzcrlUVo2AgvNLGDpUcxrmvnRRY=) 4: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:86:22:c0:4e:17:46:18:82:45:96:04:66:0c:d4:17:2e:ed:6a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Oct 18 17:56:17 2025 GMT Not After : Oct 21 19:53:17 2025 GMT Subject: CN=7A027C0857BBB750CEE28C396EC229F345D92A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:96:21:02:6a:80:2b:dd:be:30:24:57:af: a7:6c:89:30:17:2b:4a:d5:da:a4:b9:25:84:c8:6b: dd:d0:7a:85:b0:ff:17:77:f9:76:d4:fe:c4:0c:79: 88:3a:93:df:a8:a5:47:72:a0:8b:ce:aa:6e:69:b6: 7d:45:a2:97:fb:de:7c:c4:e1:44:fe:43:3e:a8:23: 88:77:f8:c5:10:fa:e9:d1:63:a7:45:6b:8d:6b:f0: de:ed:34:85:f4:2c:00:05:b1:f9:66:45:db:a4:29: 19:e8:69:0f:fc:5f:fa:5f:45:66:f4:77:e7:87:27: de:31:c9:5f:89:69:fb:93:35:6a:d6:80:6a:db:80: 39:1a:64:80:c4:47:16:23:e8:85:b4:3d:f8:71:e0: 73:11:d3:61:7f:4e:02:ea:1b:f7:c8:5d:da:bc:4c: 18:0b:37:1d:82:f5:e6:54:db:93:68:f1:1d:2d:0f: 43:46:cb:0a:0d:e5:6f:37:6d:c3:5a:43:b4:e5:d0: 56:63:18:7b:5d:4f:1a:3e:b0:cb:32:5c:f7:8f:7d: 5a:ca:c9:28:2a:c0:d4:9a:2d:d1:29:15:f6:aa:80: d2:2c:bf:5e:03:d0:9a:90:e8:ad:b2:d6:5b:64:b1: d6:55:57:3f:be:66:9d:53:99:20:cf:3d:31:86:21: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:7C:08:57:BB:B7:50:CE:E2:8C:39:6E:C2:29:F3:45:D9:2A:28 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:21:0d:ea:82:35:61:94:61:32:02:bb:9f:c7:ee:b8:27:05: e6:79:75:af:85:6c:83:61:76:e8:bf:5c:18:00:4b:49:f1:c6: 0a:38:58:b7:cb:bd:2c:a0:27:01:d2:c6:3c:2f:59:ba:c2:cf: 6b:f3:55:36:94:ef:6a:2a:51:40:0b:5c:6d:94:e3:1a:67:b7: f4:5a:96:46:8f:33:57:cc:1f:46:20:36:b0:20:c6:a2:79:cc: d0:53:71:da:7f:a0:00:a9:f9:05:51:40:2e:4a:83:8b:32:31: fe:79:cb:28:57:78:bb:da:7d:4d:f4:b3:f5:17:63:bd:89:19: 84:11:4a:8c:eb:24:eb:00:9d:87:2f:59:86:03:6c:06:99:a3: 97:b3:15:bc:1f:4f:79:7e:e2:9e:c6:ee:d1:25:bd:35:fe:92: 36:6f:91:8d:fa:80:7c:d6:19:35:ad:43:67:34:bc:95:5e:ee: 89:9c:89:0c:72:8f:0b:29:84:20:1a:8d:ea:7a:8d:e8:04:c5: ac:9b:1b:b6:c3:c2:2a:59:27:07:e2:17:42:c6:12:33:e9:19: 1d:7f:48:16:d1:a2:8d:f8:7e:a8:01:7b:66:b2:62:38:ee:b4: 32:1b:f2:c3:1d:f9:17:c7:db:ad:2c:42:fc:b2:a8:17:8a:97: 11:9f:5a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYYiwE4XRhiCRZYEZgzUFy7tav0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTEwMTgxNzU2MTdaFw0yNTEwMjExOTUzMTdaMDMxMTAvBgNV BAMTKDdBMDI3QzA4NTdCQkI3NTBDRUUyOEMzOTZFQzIyOUYzNDVEOTJBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMZYhAmqAK92+MCRXr6dsiTAX K0rV2qS5JYTIa93QeoWw/xd3+XbU/sQMeYg6k9+opUdyoIvOqm5ptn1Fopf73nzE 4UT+Qz6oI4h3+MUQ+unRY6dFa41r8N7tNIX0LAAFsflmRdukKRnoaQ/8X/pfRWb0 d+eHJ94xyV+JafuTNWrWgGrbgDkaZIDERxYj6IW0Pfhx4HMR02F/TgLqG/fIXdq8 TBgLNx2C9eZU25No8R0tD0NGywoN5W83bcNaQ7Tl0FZjGHtdTxo+sMsyXPePfVrK ySgqwNSaLdEpFfaqgNIsv14D0JqQ6K2y1ltksdZVVz++Zp1TmSDPPTGGIQsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUegJ8CFe7t1DO4ow5bsIp80XZKigwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUhDeqCNWGUYTICu5/H7rgnBeZ5da+FbINh dui/XBgAS0nxxgo4WLfLvSygJwHSxjwvWbrCz2vzVTaU72oqUUALXG2U4xpnt/Ra lkaPM1fMH0YgNrAgxqJ5zNBTcdp/oACp+QVRQC5Kg4syMf55yyhXeLvafU30s/UX Y72JGYQRSozrJOsAnYcvWYYDbAaZo5ezFbwfT3l+4p7G7tElvTX+kjZvkY36gHzW GTWtQ2c0vJVe7omciQxyjwsphCAajep6jegExaybG7bDwipZJwfiF0LGEjPpGR1/ SBbRoo34fqgBe2ayYjjutDIb8sMd+RfH260sQvyyqBeKlxGfWjE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:30:37 2025 by rpki-client