$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json) Hash identifier: VG1uavnHsxUHjSEgULarEKONZHB3jnhhU/K43t5Np3A= Subject key identifier: 3C:CE:43:1F:C7:9D:2F:15:48:4C:DC:A2:22:E6:C7:EA:AA:9B:4E:8C Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653 Certificate serial: 5B2C62CDE6DAA73C59E341802C9A15AF7A60CA8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft Manifest number: 0286 Signing time: Mon 20 Oct 2025 11:22:21 +0000 Manifest this update: Mon 20 Oct 2025 11:17:21 +0000 Manifest next update: Thu 23 Oct 2025 17:27:21 +0000 Files and hashes: 1: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=) 2: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: JfuES0kaATSQOVSGSxANPI5Fc3cOe+x8BKWfAi4CWYs=) 3: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: Pm5o8KV2XbdVOrUw/MeleT+Io7rRK62ntONshqVVE2Y=) 4: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=) 5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: MLL6/qDsxtEsMRa44Zl6aIIBEl0tDem6dFSdspx4PV8=) 6: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: A42BqVzjqFV46OV6hAZdG9PjgUwdu1Wwh4Yi98wXVBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2c:62:cd:e6:da:a7:3c:59:e3:41:80:2c:9a:15:af:7a:60:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Validity Not Before: Oct 20 11:17:21 2025 GMT Not After : Oct 23 17:27:21 2025 GMT Subject: CN=3CCE431FC79D2F15484CDCA222E6C7EAAA9B4E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:d7:d3:8a:f6:8b:58:4f:8b:21:99:29:5b: fa:3d:5e:3d:31:c2:14:9d:37:d4:dc:15:69:1d:1c: c5:98:15:16:ef:e7:4e:66:41:46:ff:dd:f9:be:c6: a7:b5:a3:94:d9:c0:1a:5e:23:d3:88:70:a5:1e:03: d9:30:2b:2e:93:8b:60:19:d4:0f:6e:27:4c:80:43: 21:35:84:a5:52:d5:e0:ab:3c:90:44:a3:83:65:0a: 17:f7:36:1c:75:68:24:fc:fd:96:9a:34:8a:1b:98: dc:08:b2:00:d6:fa:e7:4a:44:16:74:c9:7d:06:d0: 22:61:1b:9e:55:37:58:10:07:73:77:88:3d:50:7e: fe:6e:6f:47:b0:6a:56:86:70:0c:d2:fd:53:8e:16: 2f:68:0c:79:0a:e1:47:cb:09:cd:df:ef:91:b3:fc: 0d:e6:84:80:7e:51:ee:6a:45:7e:23:28:80:39:6c: 55:5f:16:95:6f:cd:4b:2b:0d:fd:2a:23:50:f5:7e: 5d:82:7c:a2:28:4a:d7:7f:81:c8:80:11:3d:7e:84: cf:fc:df:08:e0:11:2b:29:ff:e7:02:92:60:8d:a3: 1e:1d:8b:ff:16:13:2d:90:4f:9e:f3:95:9a:6b:8c: 40:c8:c6:a2:8d:bb:b6:99:5d:3a:dc:2d:88:e8:07: 93:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:43:1F:C7:9D:2F:15:48:4C:DC:A2:22:E6:C7:EA:AA:9B:4E:8C X509v3 Authority Key Identifier: keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:57:02:fb:f1:46:e4:76:0f:2d:3e:ed:8d:19:43:4b:c8:bf: e5:33:a3:15:00:11:a6:f5:7b:12:57:20:85:64:f2:42:a9:f1: f3:1b:49:cf:f5:3e:e4:f8:dd:50:4d:a9:f5:fb:b8:79:11:9d: d7:6b:63:a2:14:5e:dc:9a:36:79:8a:d8:1a:39:62:12:1e:0c: 5a:41:9a:2e:b3:32:82:15:8b:82:41:50:3a:46:54:65:ad:6a: 16:4c:63:e0:e1:f8:31:3c:e1:1d:42:2d:b1:00:7b:55:36:a7: f2:5c:37:9d:f6:54:fe:dc:fe:61:ad:50:64:0d:88:ba:42:04: fb:1d:90:6c:c6:87:ec:bb:0e:b1:91:f4:54:5f:37:52:aa:d9: 07:75:03:25:4a:e0:79:c4:8c:0c:4f:e7:b7:1e:e3:83:a3:5d: 28:cb:31:26:12:84:c1:88:27:fc:59:b8:35:09:04:73:1b:92: ae:e3:2b:3a:04:d0:6b:c2:19:e8:90:ac:82:11:fa:c7:13:55: 53:23:59:15:ad:8f:1c:3a:32:71:a5:1c:09:34:ea:0c:b9:30: 5d:d2:29:61:a8:a1:97:fc:4a:e2:7f:39:eb:1e:c2:3e:8e:c9: c8:04:79:b0:3a:70:78:2a:eb:f1:88:a4:d4:51:4a:4b:6a:f0: 72:31:c5:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyxizebapzxZ40GALJoVr3pgyo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1 QUU4QjY1MzAeFw0yNTEwMjAxMTE3MjFaFw0yNTEwMjMxNzI3MjFaMDMxMTAvBgNV BAMTKDNDQ0U0MzFGQzc5RDJGMTU0ODRDRENBMjIyRTZDN0VBQUE5QjRFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPdfTivaLWE+LIZkpW/o9Xj0x whSdN9TcFWkdHMWYFRbv505mQUb/3fm+xqe1o5TZwBpeI9OIcKUeA9kwKy6Ti2AZ 1A9uJ0yAQyE1hKVS1eCrPJBEo4NlChf3Nhx1aCT8/ZaaNIobmNwIsgDW+udKRBZ0 yX0G0CJhG55VN1gQB3N3iD1Qfv5ub0ewalaGcAzS/VOOFi9oDHkK4UfLCc3f75Gz /A3mhIB+Ue5qRX4jKIA5bFVfFpVvzUsrDf0qI1D1fl2CfKIoStd/gciAET1+hM/8 3wjgESsp/+cCkmCNox4di/8WEy2QT57zlZprjEDIxqKNu7aZXTrcLYjoB5P7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPM5DH8edLxVITNyiIubH6qqbTowwHwYDVR0j BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4 QjY1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAy QjE1QUU4QjY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNXAvvxRuR2Dy0+7Y0ZQ0vIv+UzoxUAEab1 exJXIIVk8kKp8fMbSc/1PuT43VBNqfX7uHkRnddrY6IUXtyaNnmK2Bo5YhIeDFpB mi6zMoIVi4JBUDpGVGWtahZMY+Dh+DE84R1CLbEAe1U2p/JcN532VP7c/mGtUGQN iLpCBPsdkGzGh+y7DrGR9FRfN1Kq2Qd1AyVK4HnEjAxP57ce44OjXSjLMSYShMGI J/xZuDUJBHMbkq7jKzoE0GvCGeiQrIIR+scTVVMjWRWtjxw6MnGlHAk06gy5MF3S KWGooZf8SuJ/Oesewj6OycgEebA6cHgq6/GIpNRRSktq8HIxxX8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:52:59 2025 by rpki-client