$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: sDrQ1Bcp2khh/6AhCKLhspFIp+QseSCYdMDF9kWc8j8= Subject key identifier: 60:06:63:6A:4F:AB:33:22:D2:ED:4A:B7:55:8C:94:96:FA:DD:F0:F2 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 7D544B6DFD9F8AA49BCF8AAC7951279172B5E8C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 038B Signing time: Mon 20 Oct 2025 13:52:14 +0000 Manifest this update: Mon 20 Oct 2025 13:47:14 +0000 Manifest next update: Thu 23 Oct 2025 15:51:14 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: eLBeekIvN/aC6osfUz2YBgJCxaFARhAUG8gm3PXnJhY=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:54:4b:6d:fd:9f:8a:a4:9b:cf:8a:ac:79:51:27:91:72:b5:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Oct 20 13:47:14 2025 GMT Not After : Oct 23 15:51:14 2025 GMT Subject: CN=6006636A4FAB3322D2ED4AB7558C9496FADDF0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:87:23:e8:3d:c5:20:e5:70:f8:17:78:6a: 66:c7:4b:98:31:c6:b9:4d:8c:49:1e:00:39:c3:9f: 33:19:90:8f:85:09:ae:12:fe:35:15:a6:02:8e:ec: 39:8d:0e:1f:0f:ca:9a:d0:9b:4c:ca:34:8e:a8:56: 3d:d1:9d:e5:b5:47:af:07:6b:6e:7e:a7:a7:ad:27: a1:93:ef:01:02:fe:56:11:e6:74:db:e7:63:21:b0: 15:83:23:62:51:fa:b8:de:0c:77:a2:7e:7a:cf:d7: d6:bd:0e:ce:52:ed:c9:74:84:68:85:31:b1:7e:96: 40:ee:43:03:c2:25:2e:33:36:b3:6e:93:f1:ed:04: 5d:cd:6b:df:69:40:d8:ef:87:a7:8c:3f:06:7b:e7: 59:84:a1:21:a8:4c:96:37:2c:7c:be:7c:1b:38:29: ce:8a:63:5a:41:84:26:ad:97:28:82:09:12:44:4c: 0e:09:26:c8:82:42:b0:15:97:cb:a5:ca:ed:72:a9: 8d:c3:d4:48:af:cd:ed:cf:b5:1f:ca:00:7a:f9:09: 77:80:ad:91:20:da:02:80:aa:04:b7:3e:69:22:94: f1:1f:7a:65:ec:2b:70:91:7f:11:fb:85:d6:b1:94: 0e:90:15:d4:f9:73:72:4b:e4:a3:cf:23:e1:49:07: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:06:63:6A:4F:AB:33:22:D2:ED:4A:B7:55:8C:94:96:FA:DD:F0:F2 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:69:9a:a6:0f:57:41:26:39:71:27:18:df:f1:4a:37:da:37: 63:ba:b4:94:aa:d7:ed:3c:18:42:7a:66:fe:2a:79:64:fd:2d: 85:95:a3:c9:44:7d:00:99:bb:d3:bd:59:9b:ba:ff:40:46:71: 91:2c:9c:56:d7:38:59:3b:d7:e7:08:34:94:85:a7:8d:db:5e: 0e:db:c8:3d:39:42:41:fe:30:c1:38:3e:29:ac:ba:10:e6:6c: 4a:a4:99:10:83:2e:18:80:04:2e:7c:1b:e1:1e:5f:a8:cf:c3: fb:6d:cd:5a:17:0b:70:ea:4f:2b:3e:c1:4c:41:8f:ac:41:5d: 7f:bf:4f:b1:d4:25:1c:f9:87:d8:2d:b5:1a:73:e5:dd:95:8b: da:aa:a7:17:0f:c5:1d:da:bf:7e:90:c7:3d:4b:29:f3:42:2c: 6c:92:35:d3:71:b1:67:31:ff:f8:6c:79:a8:09:78:ed:3e:07: 82:fa:79:9e:c3:55:d3:3d:7e:6b:72:62:85:f7:b9:0a:27:1e: 0a:02:d3:e1:90:03:ab:1c:0b:1a:7b:a2:70:70:15:96:02:d0: ba:2f:40:3d:b8:9a:e9:8b:20:fd:67:3b:2c:1f:1f:83:09:8f: 06:a9:4f:f1:00:94:d6:c4:c5:00:87:63:42:3a:36:88:f4:28: d6:75:d0:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVRLbf2fiqSbz4qseVEnkXK16MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTEwMjAxMzQ3MTRaFw0yNTEwMjMxNTUxMTRaMDMxMTAvBgNV BAMTKDYwMDY2MzZBNEZBQjMzMjJEMkVENEFCNzU1OEM5NDk2RkFEREYwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkIcj6D3FIOVw+Bd4ambHS5gx xrlNjEkeADnDnzMZkI+FCa4S/jUVpgKO7DmNDh8PyprQm0zKNI6oVj3RneW1R68H a25+p6etJ6GT7wEC/lYR5nTb52MhsBWDI2JR+rjeDHeifnrP19a9Ds5S7cl0hGiF MbF+lkDuQwPCJS4zNrNuk/HtBF3Na99pQNjvh6eMPwZ751mEoSGoTJY3LHy+fBs4 Kc6KY1pBhCatlyiCCRJETA4JJsiCQrAVl8ulyu1yqY3D1Eivze3PtR/KAHr5CXeA rZEg2gKAqgS3PmkilPEfemXsK3CRfxH7hdaxlA6QFdT5c3JL5KPPI+FJB3oPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAZjak+rMyLS7Uq3VYyUlvrd8PIwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJpmqYPV0EmOXEnGN/xSjfaN2O6tJSq1+08 GEJ6Zv4qeWT9LYWVo8lEfQCZu9O9WZu6/0BGcZEsnFbXOFk71+cINJSFp43bXg7b yD05QkH+MME4PimsuhDmbEqkmRCDLhiABC58G+EeX6jPw/ttzVoXC3DqTys+wUxB j6xBXX+/T7HUJRz5h9gttRpz5d2Vi9qqpxcPxR3av36Qxz1LKfNCLGySNdNxsWcx //hseagJeO0+B4L6eZ7DVdM9fmtyYoX3uQonHgoC0+GQA6scCxp7onBwFZYC0Lov QD24mumLIP1nOywfH4MJjwapT/EAlNbExQCHY0I6Noj0KNZ10F4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:17 2025 by rpki-client