$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: su5Un2gjDx57wYfa96Z04SeW6kEg4PuUEaI/XofFK4I= Subject key identifier: A8:07:25:BC:7A:AF:19:5E:57:60:0A:EC:94:02:E8:81:22:15:37:D6 Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 1CD7A84B802547DB1C7349050C8456B019EE0F97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 03C3 Signing time: Sun 19 Oct 2025 06:01:52 +0000 Manifest this update: Sun 19 Oct 2025 05:56:52 +0000 Manifest next update: Wed 22 Oct 2025 07:45:52 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: KXby9djIRSMhLtiY+1iIK8h6Zdgp7aSyIhPxwupb118=) 2: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Z4m+4VYQxa9asx7q0PvLa+6IIDMkLHF/pNBvi09vFpg=) 3: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: 6cj5uI59cR8iuhB+dGI9lfG37MPFAcebdXbUM0Dv2Ak=) 4: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: virBCbz39C+LyWqfMj0xUVw/5pPmTa18iqJIfYRlOuU=) 5: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: bZ83knFcAIH+x3MCllavMdUXghwNZQdIi5y8BOAPyxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d7:a8:4b:80:25:47:db:1c:73:49:05:0c:84:56:b0:19:ee:0f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: Oct 19 05:56:52 2025 GMT Not After : Oct 22 07:45:52 2025 GMT Subject: CN=A80725BC7AAF195E57600AEC9402E881221537D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:0c:78:17:3f:f7:1e:7c:e5:43:03:e6:19: 49:cf:1a:b6:5a:b0:87:25:2a:ac:f0:16:61:cc:33: 57:b2:f8:8e:08:e7:35:3b:9a:b6:c1:12:5d:fa:0e: b5:72:85:d4:73:d9:46:93:9b:66:14:b5:6a:c3:72: 6c:cd:1b:13:9a:4f:68:f8:3e:93:30:ff:96:f8:68: f1:1b:b4:91:4c:30:1c:cb:45:c0:c7:12:54:d9:89: 9d:05:a8:6a:48:d3:e3:a7:99:c7:89:7b:ef:cf:31: ed:05:58:1f:52:69:f8:1f:f7:db:27:64:d9:da:9b: bc:0f:22:95:42:80:fe:e1:8d:91:79:28:ec:1d:26: fe:e6:fe:db:f8:6c:cb:18:df:77:58:c1:a7:8f:11: 99:fa:c3:39:22:1d:74:8d:ae:1f:db:ae:08:d3:94: 00:22:c0:ff:f0:39:29:c3:0a:9f:ef:e6:b7:a9:fb: 8d:ce:73:3f:f6:26:9e:5f:66:cd:3c:61:a0:55:d1: 11:91:57:9a:54:04:7f:d5:f1:39:33:1f:ac:49:27: bf:c3:d3:64:74:69:c5:d5:cc:0b:09:15:74:9e:1f: 73:44:eb:73:00:74:10:50:25:e5:40:71:42:a8:87: fd:91:ad:51:7c:d4:07:e4:29:84:f4:73:b4:e3:00: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:25:BC:7A:AF:19:5E:57:60:0A:EC:94:02:E8:81:22:15:37:D6 X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:48:77:7d:d3:13:08:4e:ee:fd:3b:08:f8:30:3f:49:d2:64: 41:f3:89:c7:81:0d:55:36:4c:43:1b:1e:17:f3:25:10:b6:de: 77:71:d8:3a:38:5b:d6:e0:c6:96:6b:41:ff:55:65:85:7f:73: b9:d8:0f:ba:49:f0:02:f8:19:c0:56:18:a6:85:1e:3d:50:54: 22:53:60:ff:09:84:e4:58:e4:02:91:44:90:67:ab:aa:3e:b6: 32:d4:43:77:4f:ee:04:96:7e:2b:33:41:fa:5a:8d:40:9c:e5: 18:a0:55:cb:8f:78:18:9c:bc:5e:74:75:cf:fd:04:e4:de:17: 7d:ca:da:99:2b:dc:3e:95:45:2a:f1:84:7f:ef:8d:35:58:46: 49:25:be:48:89:0d:9e:a9:24:b7:6c:3d:f2:0d:20:2f:c0:ec: 78:6f:17:e0:cf:75:72:08:4c:f4:97:4f:11:41:d6:b0:89:6a: fd:ca:e5:50:f4:d4:4f:b0:d4:5b:53:9a:35:93:b5:71:51:51: 81:2e:2a:a7:8c:91:6a:5c:61:0a:97:e9:e1:ee:94:59:d0:2e: 7f:de:56:4d:27:84:df:70:48:8b:14:61:38:09:18:e0:ba:03: 08:09:26:6f:b4:0d:05:b9:8b:b3:9d:12:1c:25:c9:8e:47:5e: 95:72:be:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNeoS4AlR9scc0kFDIRWsBnuD5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNTEwMTkwNTU2NTJaFw0yNTEwMjIwNzQ1NTJaMDMxMTAvBgNV BAMTKEE4MDcyNUJDN0FBRjE5NUU1NzYwMEFFQzk0MDJFODgxMjIxNTM3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9wx4Fz/3HnzlQwPmGUnPGrZa sIclKqzwFmHMM1ey+I4I5zU7mrbBEl36DrVyhdRz2UaTm2YUtWrDcmzNGxOaT2j4 PpMw/5b4aPEbtJFMMBzLRcDHElTZiZ0FqGpI0+OnmceJe+/PMe0FWB9Safgf99sn ZNnam7wPIpVCgP7hjZF5KOwdJv7m/tv4bMsY33dYwaePEZn6wzkiHXSNrh/brgjT lAAiwP/wOSnDCp/v5rep+43Ocz/2Jp5fZs08YaBV0RGRV5pUBH/V8TkzH6xJJ7/D 02R0acXVzAsJFXSeH3NE63MAdBBQJeVAcUKoh/2RrVF81AfkKYT0c7TjAN+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAclvHqvGV5XYArslALogSIVN9YwHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1Id33TEwhO7v07CPgwP0nSZEHziceBDVU2 TEMbHhfzJRC23ndx2Do4W9bgxpZrQf9VZYV/c7nYD7pJ8AL4GcBWGKaFHj1QVCJT YP8JhORY5AKRRJBnq6o+tjLUQ3dP7gSWfiszQfpajUCc5RigVcuPeBicvF50dc/9 BOTeF33K2pkr3D6VRSrxhH/vjTVYRkklvkiJDZ6pJLdsPfINIC/A7HhvF+DPdXII TPSXTxFB1rCJav3K5VD01E+w1FtTmjWTtXFRUYEuKqeMkWpcYQqX6eHulFnQLn/e Vk0nhN9wSIsUYTgJGOC6AwgJJm+0DQW5i7OdEhwlyY5HXpVyvpA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:29 2025 by rpki-client