$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: J3IHtgt0o6DF/CA/5uKOvfEogZBMJp1atWuZ1Q8ixdQ= Subject key identifier: DA:E2:3A:58:05:7E:87:36:1B:E6:C3:27:35:EA:CF:C1:57:F8:D0:3A Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 38CE6913B2EDD4715AE730B2DC728436943558F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: D5 Signing time: Mon 20 Oct 2025 19:12:08 +0000 Manifest this update: Mon 20 Oct 2025 19:07:08 +0000 Manifest next update: Fri 24 Oct 2025 00:15:08 +0000 Files and hashes: 1: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: sCQtzVU5NhV+IujLvt3xMyTh4xnHXD0gUUGfphCVzSE=) 3: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ce:69:13:b2:ed:d4:71:5a:e7:30:b2:dc:72:84:36:94:35:58:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Oct 20 19:07:08 2025 GMT Not After : Oct 24 00:15:08 2025 GMT Subject: CN=DAE23A58057E87361BE6C32735EACFC157F8D03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:30:31:1d:66:2b:c9:e8:4c:42:7c:18:c7: 99:96:13:b3:6e:69:80:22:b0:df:5e:13:f9:a6:1a: ba:40:0b:87:b4:81:e3:60:eb:14:46:99:b9:5f:f2: 44:88:a1:0c:c1:b2:ad:3e:84:7a:13:a6:7c:7a:5d: 51:1e:3e:23:d7:87:5d:c6:7d:1f:f0:62:41:db:c5: 6a:29:5d:a6:a8:fd:02:00:d9:ed:b5:a7:ce:cb:b9: 06:43:88:a2:75:69:af:2c:a5:47:6d:20:aa:48:ab: 50:cf:7f:31:2c:1e:4b:48:f8:a4:f7:fd:64:d9:61: 91:e4:8c:a8:57:0f:6e:e2:b6:f6:af:5b:8c:e0:14: e8:01:45:23:43:f7:83:98:3a:d9:97:68:7d:fe:1a: 64:65:56:03:dc:78:17:7d:45:d8:28:54:85:22:ae: d4:45:5e:ab:10:32:49:e1:8c:dc:2f:9e:3f:d5:87: 8a:ac:04:7b:74:4c:a7:09:6b:bb:7d:1a:38:17:40: 63:ed:8c:0c:11:08:73:38:45:1e:bf:0d:c1:c4:16: 4c:92:b3:24:9b:3d:80:c4:fa:c7:c2:89:15:14:a2: a0:0d:c3:c9:1e:27:19:9d:93:6f:86:9f:5c:f2:2c: f4:23:4e:ed:78:ab:5d:7e:9f:e5:a1:0a:4a:a2:07: 3c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E2:3A:58:05:7E:87:36:1B:E6:C3:27:35:EA:CF:C1:57:F8:D0:3A X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:58:5d:4b:80:5e:41:e1:85:fc:50:75:45:cb:84:6c:d5:df: d0:9e:c8:bd:fa:de:fb:c0:41:30:26:75:89:70:37:64:d1:5e: ee:a6:38:f6:da:7e:f7:eb:47:85:c7:32:ef:0d:53:50:d1:67: 4c:39:d7:dc:dc:1b:05:0b:7b:1b:86:7c:4b:91:56:1c:3a:ff: 37:6e:f0:9a:2d:90:37:f3:40:98:eb:96:da:74:6a:a4:fe:cb: 89:52:ab:e6:af:32:ac:7d:ff:fa:ac:02:94:b1:34:74:46:b4: 83:89:9e:3f:da:e8:07:9d:6d:76:6d:e3:d1:43:b9:2e:e2:e9: 67:72:69:4f:a2:06:35:1b:72:97:aa:9c:88:0d:ac:d9:aa:a6: 00:2c:4c:22:c9:4f:7e:bd:07:6e:bc:bb:33:c2:a7:9b:76:63: 7f:a9:90:f3:f2:bd:41:68:a2:86:ef:85:65:ea:13:e7:0c:6b: b9:3b:fa:50:ce:67:d5:6b:bd:41:3b:d2:28:4b:a7:eb:7d:25: 7c:21:01:19:c8:63:2b:34:6a:9d:4d:63:28:a0:82:51:e1:a9: 6a:79:7d:e4:c0:cb:a5:2f:68:b0:ce:69:b1:c4:4b:d2:d4:a7: 3b:3a:86:59:ed:6c:8f:0d:4a:eb:ec:22:6e:7f:3e:34:36:6d: 71:18:cb:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOM5pE7Lt1HFa5zCy3HKENpQ1WPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTEwMjAxOTA3MDhaFw0yNTEwMjQwMDE1MDhaMDMxMTAvBgNV BAMTKERBRTIzQTU4MDU3RTg3MzYxQkU2QzMyNzM1RUFDRkMxNTdGOEQwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5DAxHWYryehMQnwYx5mWE7Nu aYAisN9eE/mmGrpAC4e0geNg6xRGmblf8kSIoQzBsq0+hHoTpnx6XVEePiPXh13G fR/wYkHbxWopXaao/QIA2e21p87LuQZDiKJ1aa8spUdtIKpIq1DPfzEsHktI+KT3 /WTZYZHkjKhXD27itvavW4zgFOgBRSND94OYOtmXaH3+GmRlVgPceBd9RdgoVIUi rtRFXqsQMknhjNwvnj/Vh4qsBHt0TKcJa7t9GjgXQGPtjAwRCHM4RR6/DcHEFkyS sySbPYDE+sfCiRUUoqANw8keJxmdk2+Gn1zyLPQjTu14q11+n+WhCkqiBzyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2uI6WAV+hzYb5sMnNerPwVf40DowHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRYXUuAXkHhhfxQdUXLhGzV39CeyL363vvA QTAmdYlwN2TRXu6mOPbafvfrR4XHMu8NU1DRZ0w519zcGwULexuGfEuRVhw6/zdu 8JotkDfzQJjrltp0aqT+y4lSq+avMqx9//qsApSxNHRGtIOJnj/a6AedbXZt49FD uS7i6WdyaU+iBjUbcpeqnIgNrNmqpgAsTCLJT369B268uzPCp5t2Y3+pkPPyvUFo oobvhWXqE+cMa7k7+lDOZ9VrvUE70ihLp+t9JXwhARnIYys0ap1NYyigglHhqWp5 feTAy6UvaLDOabHES9LUpzs6hlntbI8NSuvsIm5/PjQ2bXEYy44= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:46 2025 by rpki-client