$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: AGVJrlY9Mpq796I6jTrnY2tOSk8jPNOs+FQRfKd8p2k= Subject key identifier: 4D:61:E6:46:2E:69:96:DE:21:B2:04:E8:06:C4:83:D0:17:70:03:72 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 338A2B1C1DCA65111A36BECE75ACDC54B1DB1DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0298 Signing time: Sun 19 Oct 2025 17:10:41 +0000 Manifest this update: Sun 19 Oct 2025 17:05:41 +0000 Manifest next update: Thu 23 Oct 2025 00:33:41 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: sO50TUcSZYloe49v/I+UzsZydHRLJ71fB64pvxIFXR0=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8a:2b:1c:1d:ca:65:11:1a:36:be:ce:75:ac:dc:54:b1:db:1d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Oct 19 17:05:41 2025 GMT Not After : Oct 23 00:33:41 2025 GMT Subject: CN=4D61E6462E6996DE21B204E806C483D017700372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:3b:62:e2:eb:bd:e1:cc:50:be:95:c5:28: fd:ac:a1:dc:f6:6b:ad:b1:61:0a:7c:21:60:20:87: 41:fc:d5:2b:94:9e:fb:8b:e1:2c:87:f1:f4:0a:c2: c7:79:59:5f:ff:e5:8a:49:b1:d8:0b:59:71:bf:ad: 14:c9:39:c0:86:c8:f3:ab:36:2a:ae:42:b9:5f:bb: f6:20:ba:5e:a9:7f:a4:6b:b3:9f:18:d6:c6:a6:0e: 75:f7:98:6c:6f:70:52:3c:01:a5:7a:e7:9d:cb:e6: 80:76:c1:b4:6d:91:ef:d6:df:b1:22:b4:a0:9d:4c: ce:b0:50:51:1d:50:fb:18:06:b9:b3:27:cc:23:76: 79:a9:e5:6c:19:24:32:c6:57:8d:98:db:a1:e7:5b: 14:1a:be:fd:99:a2:a8:04:93:69:76:70:8f:1d:13: 2f:23:5c:1b:5b:54:9a:9a:f6:9f:1b:5a:81:c0:75: 71:e5:ef:62:21:6b:50:16:ce:9d:e2:a0:0c:71:b0: 00:5f:b0:47:29:8c:07:3b:b4:b6:71:39:e0:7e:c7: 54:b0:bd:0b:5b:2e:e3:46:ae:9d:30:e6:74:c7:4e: 50:14:c2:c8:11:59:88:a9:2e:f2:4d:d3:7e:65:00: 30:98:03:2f:aa:db:78:73:5d:a5:11:75:7d:96:3d: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:61:E6:46:2E:69:96:DE:21:B2:04:E8:06:C4:83:D0:17:70:03:72 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:24:bc:bb:fb:f2:0a:a3:d6:93:93:b7:29:6b:f2:79:d5:88: cf:ea:3a:6e:b9:7e:6d:b9:21:a2:3c:26:44:37:96:7f:fc:f4: 93:0d:2b:8d:66:ab:db:07:41:52:3d:c4:f2:02:8b:2c:c1:41: a3:cc:be:ca:5a:d9:d6:7d:f5:24:40:81:e4:c0:be:d4:3f:74: 00:31:9a:82:02:86:f8:1d:dc:9a:81:57:53:3e:30:c7:c3:a4: 50:5c:b6:c6:2b:1f:ed:3b:26:11:2e:a5:60:8e:85:d9:68:ed: 4c:80:44:2e:15:bc:50:4d:3d:5b:ba:94:28:be:a6:b2:86:61: 9e:ec:2e:83:9c:9a:0d:c1:f0:d0:d0:67:26:84:9c:4c:44:b9: 24:ea:c8:17:bb:53:dd:8b:4e:d1:1e:ab:9a:68:51:f6:1d:91: 7f:58:ba:1b:80:e1:e0:89:af:fe:1b:3b:8a:14:9e:25:a9:db: f4:4d:96:7c:2f:f8:55:02:1a:ee:29:1f:1e:bf:e5:5b:8f:d5: 9c:ca:96:ac:56:4b:5f:50:20:2f:bc:9a:68:28:99:7d:1d:a4: 89:0a:8e:27:1e:7b:80:40:99:08:2d:94:e5:24:a5:c5:f2:7a: 54:b7:e8:d8:d9:36:9b:88:36:91:f8:f0:df:0f:f0:e7:5d:d8: 5a:eb:5c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4orHB3KZREaNr7OdazcVLHbHa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTEwMTkxNzA1NDFaFw0yNTEwMjMwMDMzNDFaMDMxMTAvBgNV BAMTKDRENjFFNjQ2MkU2OTk2REUyMUIyMDRFODA2QzQ4M0QwMTc3MDAzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldTti4uu94cxQvpXFKP2sodz2 a62xYQp8IWAgh0H81SuUnvuL4SyH8fQKwsd5WV//5YpJsdgLWXG/rRTJOcCGyPOr NiquQrlfu/Ygul6pf6Rrs58Y1samDnX3mGxvcFI8AaV6553L5oB2wbRtke/W37Ei tKCdTM6wUFEdUPsYBrmzJ8wjdnmp5WwZJDLGV42Y26HnWxQavv2ZoqgEk2l2cI8d Ey8jXBtbVJqa9p8bWoHAdXHl72Iha1AWzp3ioAxxsABfsEcpjAc7tLZxOeB+x1Sw vQtbLuNGrp0w5nTHTlAUwsgRWYipLvJN035lADCYAy+q23hzXaURdX2WPRFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWHmRi5plt4hsgToBsSD0BdwA3IwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABskvLv78gqj1pOTtylr8nnViM/qOm65fm25 IaI8JkQ3ln/89JMNK41mq9sHQVI9xPICiyzBQaPMvspa2dZ99SRAgeTAvtQ/dAAx moIChvgd3JqBV1M+MMfDpFBctsYrH+07JhEupWCOhdlo7UyARC4VvFBNPVu6lCi+ prKGYZ7sLoOcmg3B8NDQZyaEnExEuSTqyBe7U92LTtEeq5poUfYdkX9YuhuA4eCJ r/4bO4oUniWp2/RNlnwv+FUCGu4pHx6/5VuP1ZzKlqxWS19QIC+8mmgomX0dpIkK jicee4BAmQgtlOUkpcXyelS36NjZNpuINpH48N8P8Odd2FrrXOI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:59 2025 by rpki-client