$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: SUFwbSpuRlVj5QWm9ovEdcZYbcRo31nePBVhVGR2Yy0= Subject key identifier: 8B:D3:C0:4B:66:55:18:57:CA:5C:FF:4C:A8:7E:2C:C6:E4:CA:7C:4D Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 2E47C3ED630BE821BD9C7A607C9FBED64EB5BC0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01AD Signing time: Sun 19 Oct 2025 16:52:16 +0000 Manifest this update: Sun 19 Oct 2025 16:47:16 +0000 Manifest next update: Wed 22 Oct 2025 23:29:16 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: lNq3FL598vbnJlCaqvFNkCWzGQ/X96MsUVGI5JIF30E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:47:c3:ed:63:0b:e8:21:bd:9c:7a:60:7c:9f:be:d6:4e:b5:bc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Oct 19 16:47:16 2025 GMT Not After : Oct 22 23:29:16 2025 GMT Subject: CN=8BD3C04B66551857CA5CFF4CA87E2CC6E4CA7C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:1b:2c:06:29:c0:8b:48:54:ec:ce:fe:26: 80:6a:fe:9b:2e:28:45:a3:01:80:af:c4:d3:8e:3d: d1:45:67:bc:f1:83:a8:1d:65:32:13:fa:01:44:7c: 9a:46:32:7e:8d:42:60:73:af:95:01:ef:37:53:d6: 63:ac:e7:20:79:b5:95:d4:66:09:12:40:61:c0:e6: e9:d3:c2:69:ba:0a:a1:44:db:fd:7a:af:f5:ed:7b: 2b:fd:e3:20:59:5d:10:bb:b7:44:23:0c:54:95:57: 69:8b:54:21:e6:81:7f:7f:86:e9:0c:c9:f4:e8:59: 20:3c:20:9c:1b:23:3c:76:a1:63:e4:41:f0:f6:d1: f1:76:63:e3:07:3a:56:f1:b0:68:ed:91:7c:61:aa: 12:e0:7f:8b:3d:6e:02:52:9e:76:fb:28:72:1a:c5: d3:e7:e8:34:b4:0c:98:eb:22:9c:97:ac:1b:4a:24: 76:eb:5e:f5:4c:8a:44:b1:61:e2:1f:0e:9f:dc:26: 44:f1:58:31:99:f6:c8:d4:f7:19:47:45:cc:0c:07: b4:da:d3:8f:d4:03:f6:83:dc:40:77:21:3f:0e:c6: 52:d8:33:74:a3:30:fc:35:c5:e2:2f:59:c7:44:57: 26:1c:b9:fd:a7:24:73:ed:81:21:43:4d:47:68:fc: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:C0:4B:66:55:18:57:CA:5C:FF:4C:A8:7E:2C:C6:E4:CA:7C:4D X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:e2:47:08:09:12:a8:9f:35:85:6c:a2:32:7e:8b:5a:dc:47: 11:b3:6a:16:96:8a:51:9c:9c:29:0b:06:76:43:97:5d:6d:22: 91:c8:17:dd:40:f6:da:10:e0:3d:6f:9d:7a:2a:e0:4e:ba:b0: c4:88:ff:c4:15:59:1c:5d:14:ed:47:6b:12:98:16:a3:28:e6: b4:f2:8f:26:35:84:b7:22:61:f3:69:2f:0b:99:9c:03:e8:34: ee:3e:c3:ac:a2:c6:03:3f:05:67:9c:71:d1:e4:b7:8e:a9:c1: b7:f5:60:4e:8e:9f:5e:cb:4c:17:8d:2f:7f:d8:8c:30:e7:20: 58:1e:b2:a7:c9:94:31:0b:b8:fb:98:16:14:10:37:61:8d:a2: 76:e4:89:7b:a3:4d:1e:d3:6a:7e:ae:be:c4:26:0f:96:24:d1: bf:8a:9c:d0:bc:5a:28:b0:c6:f3:df:05:f9:5c:03:fa:e4:0f: 45:f7:55:2b:9e:66:de:88:52:1c:bc:f7:82:67:fc:e0:a6:08: 8e:2e:e2:4a:b2:56:d8:d9:02:47:0f:df:d7:9b:16:20:f7:a8: 9e:80:0e:0f:c6:23:a1:6a:b3:bd:6f:d2:05:07:f1:84:fa:c7: fe:51:4d:35:07:3c:4a:11:22:ca:bf:3c:e6:9c:19:f1:cf:6d: 97:f5:36:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkfD7WML6CG9nHpgfJ++1k61vAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTEwMTkxNjQ3MTZaFw0yNTEwMjIyMzI5MTZaMDMxMTAvBgNV BAMTKDhCRDNDMDRCNjY1NTE4NTdDQTVDRkY0Q0E4N0UyQ0M2RTRDQTdDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7BssBinAi0hU7M7+JoBq/psu KEWjAYCvxNOOPdFFZ7zxg6gdZTIT+gFEfJpGMn6NQmBzr5UB7zdT1mOs5yB5tZXU ZgkSQGHA5unTwmm6CqFE2/16r/Xteyv94yBZXRC7t0QjDFSVV2mLVCHmgX9/hukM yfToWSA8IJwbIzx2oWPkQfD20fF2Y+MHOlbxsGjtkXxhqhLgf4s9bgJSnnb7KHIa xdPn6DS0DJjrIpyXrBtKJHbrXvVMikSxYeIfDp/cJkTxWDGZ9sjU9xlHRcwMB7Ta 04/UA/aD3EB3IT8OxlLYM3SjMPw1xeIvWcdEVyYcuf2nJHPtgSFDTUdo/IMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9PAS2ZVGFfKXP9MqH4sxuTKfE0wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPiRwgJEqifNYVsojJ+i1rcRxGzahaWilGc nCkLBnZDl11tIpHIF91A9toQ4D1vnXoq4E66sMSI/8QVWRxdFO1HaxKYFqMo5rTy jyY1hLciYfNpLwuZnAPoNO4+w6yixgM/BWeccdHkt46pwbf1YE6On17LTBeNL3/Y jDDnIFgesqfJlDELuPuYFhQQN2GNonbkiXujTR7Tan6uvsQmD5Yk0b+KnNC8Wiiw xvPfBflcA/rkD0X3VSueZt6IUhy894Jn/OCmCI4u4kqyVtjZAkcP39ebFiD3qJ6A Dg/GI6Fqs71v0gUH8YT6x/5RTTUHPEoRIsq/POacGfHPbZf1Nv0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:22 2025 by rpki-client