$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: BoFa69n6zox0oFGozKKF3uSex3wVB9p++yNJ/lH397Q= Subject key identifier: 08:78:06:C9:72:47:66:25:46:CF:AE:0C:F0:BB:25:72:47:17:1B:E4 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 579C81CDA05496C18DCF12636331FE151528E3BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 0206 Signing time: Sat 18 Oct 2025 20:01:22 +0000 Manifest this update: Sat 18 Oct 2025 19:56:22 +0000 Manifest next update: Wed 22 Oct 2025 04:36:22 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 2: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 3: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: SPRDMD/dVYSuec21+bqh5wuG8N5ESyTCihEO1snB62E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9c:81:cd:a0:54:96:c1:8d:cf:12:63:63:31:fe:15:15:28:e3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Oct 18 19:56:22 2025 GMT Not After : Oct 22 04:36:22 2025 GMT Subject: CN=087806C97247662546CFAE0CF0BB257247171BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4c:13:2e:c2:7a:3c:49:39:ff:38:a6:dd:3a: b3:c5:ed:d6:2f:16:51:0a:29:b0:ba:02:66:ab:4e: 0e:ce:a4:84:42:9e:42:4f:31:a4:83:43:8a:f7:82: 47:f1:2f:2d:6f:9f:5a:47:40:d0:36:83:e3:59:c2: 47:87:93:3d:cc:19:1f:11:0f:0b:60:23:f3:46:9d: ba:56:73:dd:82:15:e1:86:6a:d8:34:fc:17:41:c6: 8d:14:6d:e2:dc:81:c1:35:20:4f:f9:8f:05:b3:92: 71:ce:03:31:75:1c:d3:10:3f:41:af:ae:d1:3f:c8: 33:c7:c8:af:9f:b9:3f:e2:c8:1f:35:d7:e7:32:05: 93:bf:9b:d6:11:5e:3f:7b:e1:bf:bd:1e:7c:da:02: 61:26:17:8b:2e:9b:a5:3b:09:94:66:18:a9:75:f2: b1:4e:e4:b2:59:94:fb:fb:60:82:23:dd:2a:fc:55: 28:af:5d:78:11:ed:25:28:83:a2:ef:eb:7f:b5:3d: c0:1b:76:53:36:55:31:54:cb:2b:b7:0f:ba:4f:6f: 76:98:5c:bc:c4:66:6d:ea:f4:66:bc:21:98:64:6d: b8:3a:4a:f2:d5:6a:f5:4f:56:c2:f6:10:0d:13:31: 83:52:3f:94:d2:04:da:9f:c5:28:78:42:24:79:df: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:06:C9:72:47:66:25:46:CF:AE:0C:F0:BB:25:72:47:17:1B:E4 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b2:46:00:18:b9:09:f4:be:65:37:5b:8e:12:07:ff:af:d0: c5:b6:9a:db:9a:1b:7e:45:e9:1c:88:9b:14:d7:8a:f0:77:6f: a6:5d:00:e4:44:7c:67:82:71:8d:40:25:29:1d:62:0e:e1:d4: ae:8b:f6:cd:91:5f:0b:a4:2b:4d:49:1f:4f:d9:f7:70:44:a0: 29:56:81:17:16:de:2d:68:bb:d6:bb:a7:bf:19:2f:d9:db:30: f8:83:a5:df:ce:f5:b4:2e:71:4b:d2:ed:69:b4:a3:3d:77:e3: d4:bf:57:4a:ff:81:e3:18:f1:8e:dc:5f:2b:ed:5e:c2:ef:46: ae:f7:00:61:85:b4:3c:25:09:e3:6a:a8:9a:5f:87:b3:64:8f: d2:c7:25:5b:6d:32:ad:4c:e2:a7:5b:c2:1a:8d:ab:60:81:13: 7b:e8:9f:bc:51:a4:74:4d:97:da:40:fb:a0:56:61:56:b1:94: 8a:3b:cb:80:05:b1:59:ec:52:fc:6a:81:21:86:19:0f:45:84: 1c:4d:05:2a:2b:44:64:6a:10:57:40:82:0f:a5:6e:f1:3e:5d: dd:9c:6a:c1:1d:82:e2:af:d6:3f:bd:9a:1e:fc:91:b4:2d:be: 94:15:a3:dd:6d:34:2b:a3:4b:c1:1f:e1:bf:f5:e9:68:0b:60: 75:b4:bc:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5yBzaBUlsGNzxJjYzH+FRUo478wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTEwMTgxOTU2MjJaFw0yNTEwMjIwNDM2MjJaMDMxMTAvBgNV BAMTKDA4NzgwNkM5NzI0NzY2MjU0NkNGQUUwQ0YwQkIyNTcyNDcxNzFCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxTBMuwno8STn/OKbdOrPF7dYv FlEKKbC6AmarTg7OpIRCnkJPMaSDQ4r3gkfxLy1vn1pHQNA2g+NZwkeHkz3MGR8R DwtgI/NGnbpWc92CFeGGatg0/BdBxo0UbeLcgcE1IE/5jwWzknHOAzF1HNMQP0Gv rtE/yDPHyK+fuT/iyB811+cyBZO/m9YRXj974b+9HnzaAmEmF4sum6U7CZRmGKl1 8rFO5LJZlPv7YIIj3Sr8VSivXXgR7SUog6Lv63+1PcAbdlM2VTFUyyu3D7pPb3aY XLzEZm3q9Ga8IZhkbbg6SvLVavVPVsL2EA0TMYNSP5TSBNqfxSh4QiR539AvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHgGyXJHZiVGz64M8LslckcXG+QwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuyRgAYuQn0vmU3W44SB/+v0MW2mtuaG35F 6RyImxTXivB3b6ZdAOREfGeCcY1AJSkdYg7h1K6L9s2RXwukK01JH0/Z93BEoClW gRcW3i1ou9a7p78ZL9nbMPiDpd/O9bQucUvS7Wm0oz1349S/V0r/geMY8Y7cXyvt XsLvRq73AGGFtDwlCeNqqJpfh7Nkj9LHJVttMq1M4qdbwhqNq2CBE3von7xRpHRN l9pA+6BWYVaxlIo7y4AFsVnsUvxqgSGGGQ9FhBxNBSorRGRqEFdAgg+lbvE+Xd2c asEdguKv1j+9mh78kbQtvpQVo91tNCujS8Ef4b/16WgLYHW0vPU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:48 2025 by rpki-client