$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: 9qGBUl0YaJWPBblku8LJa7G2pdGqNtzINnynTD8pdUQ= Subject key identifier: 05:38:58:E3:38:BD:3F:D5:02:CA:2B:C7:31:E2:46:E0:A4:E4:A8:1E Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 7840F150354C8FA3C70AD87B73ED3F0E90F347DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 04:32:04 +0000 Manifest this update: Sun 19 Oct 2025 04:27:04 +0000 Manifest next update: Wed 22 Oct 2025 15:39:04 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: Q0zv4tDsle/iszY1t2kGwUmEk1g4viF0GWDGYP6QdzY=) 2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:40:f1:50:35:4c:8f:a3:c7:0a:d8:7b:73:ed:3f:0e:90:f3:47:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Oct 19 04:27:04 2025 GMT Not After : Oct 22 15:39:04 2025 GMT Subject: CN=053858E338BD3FD502CA2BC731E246E0A4E4A81E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3d:83:7f:85:f1:c0:ae:c7:d7:94:a6:c2:c5: 37:5e:2b:77:90:5c:ac:72:6a:b1:44:cc:f1:3f:2a: 7f:cd:4d:41:cd:a6:dd:19:a5:5a:a0:a9:a3:9a:94: 20:3f:1a:05:c1:ec:97:32:9d:07:49:e3:57:c6:06: f6:b2:46:b4:97:36:9f:1e:5a:17:f0:2a:17:1e:fc: d6:c8:54:80:44:64:63:dc:ec:d0:b2:ee:90:09:e1: 56:de:52:b1:9f:56:36:ca:b1:6b:09:37:4b:e7:10: 0b:34:fc:23:b5:cd:d2:fe:76:b2:7d:c7:44:7f:8a: bf:ec:be:93:39:b0:ab:cc:f8:39:d1:7c:36:55:f1: 53:ae:da:e0:d2:4f:c2:a0:ec:a6:55:69:48:3d:a0: bc:65:c8:c6:f8:82:3f:82:d4:a4:e2:b2:5e:39:a9: 5c:24:39:1f:f7:b0:37:87:b6:d6:55:8a:28:b4:2a: ca:a3:76:af:c3:b0:d7:7e:f8:87:0c:2d:a2:89:c9: b9:53:9d:53:56:5b:75:e3:27:9f:40:c8:1b:e0:11: 45:a3:c0:92:6d:2f:0c:91:c1:eb:fd:81:7c:fd:4a: 01:f8:e2:ed:77:a9:84:1c:e9:b9:25:d7:fc:68:f7: 6a:33:e1:18:69:e2:de:47:b1:14:56:a8:36:c8:e8: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:58:E3:38:BD:3F:D5:02:CA:2B:C7:31:E2:46:E0:A4:E4:A8:1E X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ad:48:3f:70:9a:5a:31:de:09:3e:cb:c4:29:1a:06:9e:0f: aa:96:59:e5:7a:05:a6:10:15:9b:60:ef:86:c7:76:92:db:eb: 76:36:de:69:d8:8e:1b:36:8c:7e:d9:fd:42:bb:71:80:5c:e0: a9:fd:a5:62:ce:44:a0:62:fc:38:f7:74:15:13:69:22:8c:50: 6c:f3:34:12:c2:18:11:53:e0:fd:2e:91:ad:5c:a1:7c:14:8b: de:cd:2f:46:0b:71:62:5d:42:e5:04:9b:a0:3a:67:dd:7f:7f: f1:3d:1b:c3:a2:42:e9:d1:c9:41:07:83:fd:0a:42:e8:40:f0: 04:bb:6e:15:7b:7d:95:95:85:e3:15:90:e2:02:4e:ae:01:e2: 3e:70:67:97:9c:b9:c9:74:c9:6c:b2:7d:e5:ad:e4:a1:54:f6: 00:19:17:9d:88:74:4a:4a:17:5f:29:79:f2:ed:ac:64:a4:8f: e8:2f:ba:40:d5:b0:93:cd:0d:cf:e3:06:d6:a8:b9:df:b6:6d: df:2d:9c:af:89:df:ae:2f:8b:86:21:4f:03:02:d9:63:e5:c4: 61:9d:84:90:b1:96:b0:12:92:4b:61:a5:43:a8:bc:c6:54:1a: f1:66:ea:af:39:ba:2f:b9:00:6a:f3:4a:0a:45:6d:94:e4:29: 4b:dd:d6:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEDxUDVMj6PHCth7c+0/DpDzR98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTEwMTkwNDI3MDRaFw0yNTEwMjIxNTM5MDRaMDMxMTAvBgNV BAMTKDA1Mzg1OEUzMzhCRDNGRDUwMkNBMkJDNzMxRTI0NkUwQTRFNEE4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2PYN/hfHArsfXlKbCxTdeK3eQ XKxyarFEzPE/Kn/NTUHNpt0ZpVqgqaOalCA/GgXB7JcynQdJ41fGBvayRrSXNp8e WhfwKhce/NbIVIBEZGPc7NCy7pAJ4VbeUrGfVjbKsWsJN0vnEAs0/CO1zdL+drJ9 x0R/ir/svpM5sKvM+DnRfDZV8VOu2uDST8Kg7KZVaUg9oLxlyMb4gj+C1KTisl45 qVwkOR/3sDeHttZViii0Ksqjdq/DsNd++IcMLaKJyblTnVNWW3XjJ59AyBvgEUWj wJJtLwyRwev9gXz9SgH44u13qYQc6bkl1/xo92oz4Rhp4t5HsRRWqDbI6GhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBThY4zi9P9UCyivHMeJG4KTkqB4wHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmtSD9wmlox3gk+y8QpGgaeD6qWWeV6BaYQ FZtg74bHdpLb63Y23mnYjhs2jH7Z/UK7cYBc4Kn9pWLORKBi/Dj3dBUTaSKMUGzz NBLCGBFT4P0uka1coXwUi97NL0YLcWJdQuUEm6A6Z91/f/E9G8OiQunRyUEHg/0K QuhA8AS7bhV7fZWVheMVkOICTq4B4j5wZ5ecucl0yWyyfeWt5KFU9gAZF52IdEpK F18pefLtrGSkj+gvukDVsJPNDc/jBtaoud+2bd8tnK+J364vi4YhTwMC2WPlxGGd hJCxlrASkkthpUOovMZUGvFm6q85ui+5AGrzSgpFbZTkKUvd1sc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:25 2025 by rpki-client