$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: LkD1iYVVhgSXMxO7iaG8gml245mFFhjxxzAp6yY6K7E= Subject key identifier: C2:E6:DF:8D:A1:0B:B7:2F:89:BD:FA:8D:0F:E6:4C:2B:3F:15:8F:09 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 466432D9B49728CF8D2C6B44811AD62F00A3B6BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 0204 Signing time: Sat 18 Oct 2025 04:32:09 +0000 Manifest this update: Sat 18 Oct 2025 04:27:09 +0000 Manifest next update: Tue 21 Oct 2025 12:46:09 +0000 Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 2: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) 3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: fI4/goe8xaw8zDP3hr/xM+0c3lgDrKfYCLAAX/Rn894=) 4: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:64:32:d9:b4:97:28:cf:8d:2c:6b:44:81:1a:d6:2f:00:a3:b6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Oct 18 04:27:09 2025 GMT Not After : Oct 21 12:46:09 2025 GMT Subject: CN=C2E6DF8DA10BB72F89BDFA8D0FE64C2B3F158F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:1a:be:00:9e:d0:b4:2e:ae:5a:0b:3b:57: d8:a4:14:7c:f4:e6:7f:39:ce:b7:bf:67:b9:21:8c: 50:fa:fe:f7:2d:ac:d9:c7:ea:36:32:d4:8c:59:db: b0:59:59:02:8e:59:28:ee:f5:3b:d2:6f:bf:fa:1b: 3c:d6:48:43:a8:93:a6:f9:bb:7d:db:80:f6:15:96: df:72:54:a6:81:7a:e2:39:f4:76:6f:4b:ad:1b:99: c3:89:41:f4:ff:94:48:35:7b:f4:ef:98:39:33:09: 20:15:f8:be:16:d6:26:4f:64:11:1e:7c:4b:3d:88: 8c:23:c4:25:0c:d6:d8:1e:d0:fc:8c:f7:4a:e0:ce: 68:9a:66:2c:42:b8:b3:02:95:f3:54:83:7e:a2:0b: de:1d:5a:3f:f0:f7:b1:8a:33:e0:b7:60:bc:cc:36: a8:05:6f:90:99:6c:54:24:96:a0:4f:17:f6:ab:d1: 2d:b1:3c:40:ba:c9:1d:17:ff:d2:1b:71:15:47:1f: be:dc:b8:91:99:41:ba:00:66:b2:2c:d9:b6:19:ae: ce:d5:49:d1:7e:63:f2:1f:48:34:27:f6:20:59:30: 87:08:da:39:9f:8e:67:0f:08:0a:28:5e:b8:b8:5c: dd:6d:12:ea:c1:01:2f:3b:20:45:88:26:08:c5:92: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E6:DF:8D:A1:0B:B7:2F:89:BD:FA:8D:0F:E6:4C:2B:3F:15:8F:09 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:80:99:83:f2:be:7b:d4:35:f3:4b:d6:c2:c6:58:b9:ea:09: 06:e1:7a:fa:37:c9:9b:67:e3:0f:4d:6a:15:c3:ea:b0:50:7c: 0f:53:7e:57:ec:e5:74:70:e0:3c:67:6f:39:82:f8:4f:9c:9e: 71:0c:30:47:fc:e0:d0:e8:c7:a5:96:9e:17:91:9f:5a:86:6a: 74:91:d6:f3:9c:cb:a9:4f:5b:68:3f:1c:b8:da:d3:27:73:a5: 4e:52:a7:bb:82:3c:cd:a0:6a:b2:98:51:ba:0f:27:bf:bd:a7: eb:f2:1b:7a:a2:e1:30:19:f0:6f:ed:9e:35:f1:27:3d:4a:dc: d2:1c:fd:4e:ff:2d:93:34:31:0f:b9:83:6c:f7:93:f6:34:5a: 10:20:07:e8:81:b2:04:39:e9:c5:b7:d1:11:1f:3e:bd:35:6a: b0:c9:c9:74:ac:f5:f7:32:47:a9:16:b2:64:fc:65:17:a8:9f: 2b:31:12:67:09:c7:b2:a2:6e:4e:2a:8f:f4:c4:67:e6:01:25: ba:ed:a6:52:d9:8e:b7:a1:e2:6c:b8:c0:0e:5a:36:7b:18:fe: 3d:b1:19:9c:e4:2f:8f:c7:5f:6a:2b:7a:7a:f5:d8:0f:bc:f8: 61:e8:4b:16:17:53:e3:19:b2:1f:78:a8:76:95:e6:23:73:b5: 7d:cb:e0:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmQy2bSXKM+NLGtEgRrWLwCjtrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTEwMTgwNDI3MDlaFw0yNTEwMjExMjQ2MDlaMDMxMTAvBgNV BAMTKEMyRTZERjhEQTEwQkI3MkY4OUJERkE4RDBGRTY0QzJCM0YxNThGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzLBq+AJ7QtC6uWgs7V9ikFHz0 5n85zre/Z7khjFD6/vctrNnH6jYy1IxZ27BZWQKOWSju9TvSb7/6GzzWSEOok6b5 u33bgPYVlt9yVKaBeuI59HZvS60bmcOJQfT/lEg1e/TvmDkzCSAV+L4W1iZPZBEe fEs9iIwjxCUM1tge0PyM90rgzmiaZixCuLMClfNUg36iC94dWj/w97GKM+C3YLzM NqgFb5CZbFQklqBPF/ar0S2xPEC6yR0X/9IbcRVHH77cuJGZQboAZrIs2bYZrs7V SdF+Y/IfSDQn9iBZMIcI2jmfjmcPCAooXri4XN1tEurBAS87IEWIJgjFkjnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwubfjaELty+JvfqND+ZMKz8VjwkwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6AmYPyvnvUNfNL1sLGWLnqCQbhevo3yZtn 4w9NahXD6rBQfA9Tflfs5XRw4DxnbzmC+E+cnnEMMEf84NDox6WWnheRn1qGanSR 1vOcy6lPW2g/HLja0ydzpU5Sp7uCPM2garKYUboPJ7+9p+vyG3qi4TAZ8G/tnjXx Jz1K3NIc/U7/LZM0MQ+5g2z3k/Y0WhAgB+iBsgQ56cW30REfPr01arDJyXSs9fcy R6kWsmT8ZReonysxEmcJx7Kibk4qj/TEZ+YBJbrtplLZjreh4my4wA5aNnsY/j2x GZzkL4/HX2orenr12A+8+GHoSxYXU+MZsh94qHaV5iNztX3L4LM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:44 2025 by rpki-client