$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: o0fTI4EWNb9MAtoYCg2poHovsiR6l85JgZyv3L9Rg58= Subject key identifier: BB:45:54:A7:55:2B:8A:E6:2D:DD:C5:41:62:C4:6E:2D:4E:6B:D2:A5 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 09104B8F4ED27AF20B256028DB5AAD116477BBBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01F3 Signing time: Sun 19 Oct 2025 04:12:08 +0000 Manifest this update: Sun 19 Oct 2025 04:07:08 +0000 Manifest next update: Wed 22 Oct 2025 14:06:08 +0000 Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: 4COSbjpV3df8Z9wJj4ukFF9l/EvaRGpD+DijDz/pNxA=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:10:4b:8f:4e:d2:7a:f2:0b:25:60:28:db:5a:ad:11:64:77:bb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Oct 19 04:07:08 2025 GMT Not After : Oct 22 14:06:08 2025 GMT Subject: CN=BB4554A7552B8AE62DDDC54162C46E2D4E6BD2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:eb:f9:57:f2:4d:2a:e0:58:f3:dc:9c:e2: d4:a9:4d:31:e5:5b:c3:16:60:3a:ab:d8:d4:0a:e7: b8:fc:53:f4:04:d4:62:a8:16:d6:a7:97:58:f5:c0: 05:d9:42:be:f5:97:48:5a:6a:7b:b9:16:73:e2:2c: bc:48:eb:13:45:73:31:13:fe:cf:c9:6d:07:06:04: e4:3b:6b:ee:c1:5b:3c:ee:3e:48:45:98:f0:25:78: f4:68:4c:a9:74:09:48:eb:e0:34:78:a6:4a:6a:7c: b6:6e:2c:70:03:30:e0:4d:e4:b5:3b:55:7e:39:6e: 47:85:7b:c4:fa:54:b0:b6:27:7d:bf:28:8a:2d:4e: e8:04:c6:65:15:14:dd:63:28:a8:06:16:98:25:ad: 49:99:62:7d:ed:21:b5:06:68:ce:f2:8b:44:21:94: b1:1c:1d:df:01:81:d4:13:ca:20:01:af:ad:c6:76: 9c:80:a0:ec:a3:98:fd:f2:20:28:06:7e:77:d8:aa: dc:b9:67:c2:d2:ef:fd:f9:3b:44:dc:36:9d:05:a6: 0e:36:98:ac:f3:1f:28:8e:94:3f:b6:1c:17:e1:34: e8:bc:84:53:8e:1d:cc:4f:3f:34:87:98:b3:e5:1f: 43:fb:d8:4a:d8:c1:5c:1c:b4:c5:17:e2:46:98:28: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:54:A7:55:2B:8A:E6:2D:DD:C5:41:62:C4:6E:2D:4E:6B:D2:A5 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:93:f4:4c:dd:6a:06:1c:de:7b:8c:00:65:2b:0d:11:b9:e3: 99:4a:f8:67:51:9d:1d:36:58:07:ac:e2:eb:9a:79:2d:e6:a3: 48:b1:7b:00:a5:7c:1a:72:36:2a:b8:af:32:9c:a5:53:f9:1f: 5f:a4:39:00:5b:16:75:c1:d4:a5:5b:a5:52:4b:5b:90:ef:f3: 4c:f5:d9:35:e4:91:82:f4:17:ea:6a:bf:6a:7c:05:45:c4:fd: 2d:af:b0:1a:a0:c4:15:d9:24:6c:67:b5:59:b3:e8:2d:5b:65: bf:ad:0c:cc:1e:42:3e:10:49:63:aa:68:9c:a0:2e:aa:27:aa: c6:56:b5:09:18:45:42:4f:86:10:ca:4e:17:09:ff:8e:97:02: 18:d4:e1:55:1c:5f:3a:da:05:bc:71:11:8c:40:e2:ab:77:fa: 85:cd:06:b6:9e:fd:15:e0:70:18:b2:0c:d4:da:3e:a2:b9:2b: 61:f3:46:1a:19:d2:2f:fe:d3:d5:ef:d4:a2:bc:10:36:08:d4: 06:19:68:ee:f6:4d:b6:d9:ee:9f:0f:7e:ca:1e:23:52:62:1b: f5:c5:29:20:67:86:59:5d:23:54:bb:c5:0f:f5:ee:1e:04:6e: d2:16:16:41:72:4f:5c:60:ff:17:e6:15:7f:7f:7f:e8:d8:f4: f8:3c:75:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRBLj07SevILJWAo21qtEWR3u7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTEwMTkwNDA3MDhaFw0yNTEwMjIxNDA2MDhaMDMxMTAvBgNV BAMTKEJCNDU1NEE3NTUyQjhBRTYyREREQzU0MTYyQzQ2RTJENEU2QkQyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZ+v5V/JNKuBY89yc4tSpTTHl W8MWYDqr2NQK57j8U/QE1GKoFtanl1j1wAXZQr71l0haanu5FnPiLLxI6xNFczET /s/JbQcGBOQ7a+7BWzzuPkhFmPAlePRoTKl0CUjr4DR4pkpqfLZuLHADMOBN5LU7 VX45bkeFe8T6VLC2J32/KIotTugExmUVFN1jKKgGFpglrUmZYn3tIbUGaM7yi0Qh lLEcHd8BgdQTyiABr63GdpyAoOyjmP3yICgGfnfYqty5Z8LS7/35O0TcNp0Fpg42 mKzzHyiOlD+2HBfhNOi8hFOOHcxPPzSHmLPlH0P72ErYwVwctMUX4kaYKJ35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu0VUp1UriuYt3cVBYsRuLU5r0qUwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2T9EzdagYc3nuMAGUrDRG545lK+GdRnR02 WAes4uuaeS3mo0ixewClfBpyNiq4rzKcpVP5H1+kOQBbFnXB1KVbpVJLW5Dv80z1 2TXkkYL0F+pqv2p8BUXE/S2vsBqgxBXZJGxntVmz6C1bZb+tDMweQj4QSWOqaJyg LqonqsZWtQkYRUJPhhDKThcJ/46XAhjU4VUcXzraBbxxEYxA4qt3+oXNBrae/RXg cBiyDNTaPqK5K2HzRhoZ0i/+09Xv1KK8EDYI1AYZaO72TbbZ7p8PfsoeI1JiG/XF KSBnhlldI1S7xQ/17h4EbtIWFkFyT1xg/xfmFX9/f+jY9Pg8daU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:50 2025 by rpki-client