$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: V+yPCFAVijokqEviPxDVGpRJbgh23yoX9GzTH8PrPLo= Subject key identifier: 0A:D3:61:3C:3C:6F:8A:03:BE:60:75:03:84:33:EC:EC:7C:EA:80:53 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 16BB78B18C25F006EB30748FD91392308D210F0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 82 Signing time: Sat 18 Oct 2025 12:12:14 +0000 Manifest this update: Sat 18 Oct 2025 12:07:14 +0000 Manifest next update: Tue 21 Oct 2025 15:58:14 +0000 Files and hashes: 1: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: TWjGFiVbhGB5VehbNYyNw9Cin7eTsLTWVfmxS4Sc5kI=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:bb:78:b1:8c:25:f0:06:eb:30:74:8f:d9:13:92:30:8d:21:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Oct 18 12:07:14 2025 GMT Not After : Oct 21 15:58:14 2025 GMT Subject: CN=0AD3613C3C6F8A03BE6075038433ECEC7CEA8053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:00:74:31:d9:43:e1:88:76:c2:76:59:18: 4d:15:d8:db:33:94:90:77:df:81:ca:d4:02:68:e5: 60:ba:e9:c1:27:14:bb:fe:dc:74:af:01:68:b8:ea: 44:f8:10:f7:b1:2c:42:49:a9:25:0b:8a:7a:41:05: a8:55:47:30:26:83:5b:8e:09:76:33:60:8a:ba:de: 02:61:92:56:01:68:dc:37:01:85:fb:c5:1b:c5:6a: 76:2f:2c:4c:1e:0a:0a:e2:4f:79:93:58:a0:e7:d9: ee:db:cd:0e:1a:de:d9:1c:42:91:91:38:d8:46:04: a2:f5:bc:12:86:c8:28:bf:56:16:74:d2:b4:d6:43: 4a:58:a3:c1:24:d6:a9:ad:45:10:18:bf:d2:16:ed: d6:fb:39:16:d9:19:c3:b5:c6:c3:1d:b4:e5:6b:0c: 9b:31:08:c2:3e:1d:00:e4:41:5d:68:c5:92:72:09: 32:af:d9:fe:7b:2c:80:d8:96:b9:82:a6:7c:9d:55: e8:fa:68:51:cf:be:8a:b3:fe:d7:4f:b8:4f:42:a9: bc:56:10:01:a0:07:26:98:6d:32:69:3d:f3:20:3a: 49:46:39:82:ad:18:28:49:3f:02:fd:1d:98:6a:0a: c0:5d:29:7c:da:1c:1e:44:60:af:31:8c:cc:5a:1f: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:61:3C:3C:6F:8A:03:BE:60:75:03:84:33:EC:EC:7C:EA:80:53 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8a:ef:5a:14:dc:48:94:e7:37:e2:62:cd:89:73:0b:d5:ae: 96:c7:53:c0:7f:68:37:e5:8e:b3:b7:35:98:36:8c:e2:c0:45: ef:89:77:b3:4e:04:56:df:81:8b:38:f2:5b:1b:aa:7d:93:8e: ad:c5:36:7c:4d:a2:1c:50:e6:81:a5:5d:ff:df:46:9a:cd:bc: af:30:30:75:5d:eb:71:c8:fb:11:7f:05:a8:7d:4c:b3:9c:b2: 64:41:af:1c:49:53:2a:45:5c:98:25:ee:c4:3a:4e:5b:a3:c7: b8:0f:d5:9c:83:d7:ad:f0:db:f4:1e:43:af:79:17:b0:7d:59: 62:8a:1b:03:52:75:e9:c1:c2:19:6c:6e:60:48:d1:00:33:b3: 04:2b:2f:75:ce:78:6d:40:8f:e7:cc:26:bf:43:43:6d:0e:a6: f9:c7:43:12:c5:50:a0:5b:9c:b6:cd:21:13:8a:54:51:49:c5: 4a:2a:a3:31:1c:8c:4f:6e:1e:f9:c2:77:cf:55:e8:41:4b:66: a9:57:83:61:1e:17:eb:30:d2:00:13:db:81:03:f4:3e:dd:ea: 43:c0:d6:0b:b6:d9:5a:03:3b:28:bd:a2:d7:25:22:a6:72:f8: bc:7e:cf:35:e5:0b:9f:3e:58:29:41:9a:a6:b7:8c:9b:67:b3: d3:f2:c7:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrt4sYwl8AbrMHSP2ROSMI0hDwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTEwMTgxMjA3MTRaFw0yNTEwMjExNTU4MTRaMDMxMTAvBgNV BAMTKDBBRDM2MTNDM0M2RjhBMDNCRTYwNzUwMzg0MzNFQ0VDN0NFQTgwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIAB0MdlD4Yh2wnZZGE0V2Nsz lJB334HK1AJo5WC66cEnFLv+3HSvAWi46kT4EPexLEJJqSULinpBBahVRzAmg1uO CXYzYIq63gJhklYBaNw3AYX7xRvFanYvLEweCgriT3mTWKDn2e7bzQ4a3tkcQpGR ONhGBKL1vBKGyCi/VhZ00rTWQ0pYo8Ek1qmtRRAYv9IW7db7ORbZGcO1xsMdtOVr DJsxCMI+HQDkQV1oxZJyCTKv2f57LIDYlrmCpnydVej6aFHPvoqz/tdPuE9CqbxW EAGgByaYbTJpPfMgOklGOYKtGChJPwL9HZhqCsBdKXzaHB5EYK8xjMxaH3R5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtNhPDxvigO+YHUDhDPs7HzqgFMwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaK71oU3EiU5zfiYs2JcwvVrpbHU8B/aDfl jrO3NZg2jOLARe+Jd7NOBFbfgYs48lsbqn2Tjq3FNnxNohxQ5oGlXf/fRprNvK8w MHVd63HI+xF/Bah9TLOcsmRBrxxJUypFXJgl7sQ6Tlujx7gP1ZyD163w2/QeQ695 F7B9WWKKGwNSdenBwhlsbmBI0QAzswQrL3XOeG1Aj+fMJr9DQ20OpvnHQxLFUKBb nLbNIROKVFFJxUoqozEcjE9uHvnCd89V6EFLZqlXg2EeF+sw0gAT24ED9D7d6kPA 1gu22VoDOyi9otclIqZy+Lx+zzXlC58+WClBmqa3jJtns9PyxwQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:37 2025 by rpki-client