$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: SnIfWOx03r+4MXu/3wC7zSCL9YvRxOTR4Y+hRXXTHoo= Subject key identifier: DD:45:50:03:A7:A5:39:DE:90:54:EC:41:AC:71:4B:CB:FD:7E:86:DC Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4C88A0F3B09C5C92CEE6963E77DD507B88B772D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04DE Signing time: Sat 18 Oct 2025 04:20:04 +0000 Manifest this update: Sat 18 Oct 2025 04:15:04 +0000 Manifest next update: Tue 21 Oct 2025 12:24:04 +0000 Files and hashes: 1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: TUetLlzKOdiWPWObWPtOqLd/hxEU/ZpAcgUzTwLSIos=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:88:a0:f3:b0:9c:5c:92:ce:e6:96:3e:77:dd:50:7b:88:b7:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Oct 18 04:15:04 2025 GMT Not After : Oct 21 12:24:04 2025 GMT Subject: CN=DD455003A7A539DE9054EC41AC714BCBFD7E86DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:aa:92:61:e9:f2:a6:a6:4d:75:8f:4b:ba: 7f:b6:fa:f8:7c:96:41:3f:a1:4f:56:ca:13:21:39: 16:d1:28:d8:84:bd:1e:93:6f:fe:8a:33:de:26:e0: 89:7d:23:b3:3e:8f:c8:1d:cb:0a:93:fb:66:76:4b: 93:05:0c:a4:2b:39:f7:cf:da:0a:ca:44:ba:9c:53: 21:e7:4e:e0:48:44:cb:3c:a0:a6:7a:da:2d:70:d4: 83:e4:32:29:b3:fa:6f:4f:ee:34:04:f1:a6:98:ac: 39:7c:0e:f4:81:e5:a0:97:5b:7b:f3:3e:45:a5:4b: 4c:1b:af:53:61:71:43:98:21:65:b1:38:1c:65:aa: a8:b5:db:86:b3:51:46:5c:b2:99:20:f6:94:64:f9: 19:71:88:e8:bc:2a:3e:1b:5e:33:4c:2b:78:88:0d: 19:d6:9d:12:b3:12:d4:7a:2d:b5:3a:22:34:43:76: f8:e0:70:d9:25:0a:92:7c:be:ea:cf:1e:7c:01:90: 54:d6:98:a3:29:03:a1:36:4b:9b:f7:f4:05:7d:67: 33:3c:e4:00:7a:7a:a7:5d:4a:dd:85:1d:d1:a4:18: 1e:fa:a6:a4:32:38:c6:d6:27:8b:6d:11:2b:cc:d4: a3:0a:db:72:14:99:89:3b:3d:a0:47:1c:82:8a:2d: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:45:50:03:A7:A5:39:DE:90:54:EC:41:AC:71:4B:CB:FD:7E:86:DC X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c5:23:ae:a4:9e:97:96:85:57:79:c6:29:86:e5:d3:aa:2b: 1e:15:d4:ee:c5:6c:86:ac:7b:5c:c5:da:1a:03:c8:8c:6f:a6: 4d:51:da:36:70:21:5e:84:7f:92:f1:a6:42:43:87:94:b3:43: f0:92:ab:45:77:b7:aa:aa:9a:18:fb:70:0d:cf:c7:4f:59:9e: e0:6e:7b:74:b3:9a:b1:e1:76:21:db:4e:b1:25:15:96:bb:e4: 8f:12:4e:4c:52:e1:de:3b:13:1b:93:57:a1:e9:16:39:b0:80: 83:15:4a:50:99:fa:69:4a:0e:d3:3b:51:4f:91:09:f3:37:6c: 8e:2d:58:a3:d9:5e:ad:d2:71:35:28:d4:b7:d2:c8:c8:08:ab: 40:72:08:de:c3:00:f2:0c:50:c1:99:75:61:16:05:6a:a7:2a: 45:7f:f1:b4:98:cf:8d:3c:d9:5f:48:f9:e1:94:73:2b:53:92: 1e:6f:9b:f1:4b:3f:89:97:2b:6e:6d:17:9d:b0:82:b1:e5:91: a9:9e:22:ca:19:6d:d8:21:c9:98:48:8a:92:32:75:93:f4:b3: 88:c0:3a:45:ac:24:81:93:b7:9a:4b:72:ce:68:cd:c9:b3:6a: b6:e9:9a:d2:ed:a7:d0:7d:01:68:80:d5:fb:16:07:31:8d:13: 82:f4:ed:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIig87CcXJLO5pY+d91Qe4i3ctMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTEwMTgwNDE1MDRaFw0yNTEwMjExMjI0MDRaMDMxMTAvBgNV BAMTKERENDU1MDAzQTdBNTM5REU5MDU0RUM0MUFDNzE0QkNCRkQ3RTg2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXqqSYenypqZNdY9Lun+2+vh8 lkE/oU9WyhMhORbRKNiEvR6Tb/6KM94m4Il9I7M+j8gdywqT+2Z2S5MFDKQrOffP 2grKRLqcUyHnTuBIRMs8oKZ62i1w1IPkMimz+m9P7jQE8aaYrDl8DvSB5aCXW3vz PkWlS0wbr1NhcUOYIWWxOBxlqqi124azUUZcspkg9pRk+RlxiOi8Kj4bXjNMK3iI DRnWnRKzEtR6LbU6IjRDdvjgcNklCpJ8vurPHnwBkFTWmKMpA6E2S5v39AV9ZzM8 5AB6eqddSt2FHdGkGB76pqQyOMbWJ4ttESvM1KMK23IUmYk7PaBHHIKKLdwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UVQA6elOd6QVOxBrHFLy/1+htwwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3FI66knpeWhVd5ximG5dOqKx4V1O7FbIas e1zF2hoDyIxvpk1R2jZwIV6Ef5LxpkJDh5SzQ/CSq0V3t6qqmhj7cA3Px09ZnuBu e3SzmrHhdiHbTrElFZa75I8STkxS4d47ExuTV6HpFjmwgIMVSlCZ+mlKDtM7UU+R CfM3bI4tWKPZXq3ScTUo1LfSyMgIq0ByCN7DAPIMUMGZdWEWBWqnKkV/8bSYz408 2V9I+eGUcytTkh5vm/FLP4mXK25tF52wgrHlkameIsoZbdghyZhIipIydZP0s4jA OkWsJIGTt5pLcs5ozcmzarbpmtLtp9B9AWiA1fsWBzGNE4L07Vg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:40 2025 by rpki-client