$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json) Hash identifier: GQLza/+bDjlYdr3zSBfNkzvUQSQWAfJCMjgSRP4pmjg= Subject key identifier: 22:FF:B9:BC:AF:DB:AC:6E:57:F5:AA:8F:1D:8A:ED:1C:40:A6:33:66 Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Certificate serial: 4FA7992796B8C96B96DEA523B81740F0B5F85237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft Manifest number: 04EE Signing time: Sat 18 Oct 2025 14:31:00 +0000 Manifest this update: Sat 18 Oct 2025 14:26:00 +0000 Manifest next update: Tue 21 Oct 2025 21:32:00 +0000 Files and hashes: 1: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: 56fdhuJ4P0IEwhaVG+jzgiNrH/9JZ6bmAqtpoYo+DWw=) 2: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=) 3: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=) 4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a7:99:27:96:b8:c9:6b:96:de:a5:23:b8:17:40:f0:b5:f8:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Validity Not Before: Oct 18 14:26:00 2025 GMT Not After : Oct 21 21:32:00 2025 GMT Subject: CN=22FFB9BCAFDBAC6E57F5AA8F1D8AED1C40A63366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:c7:95:87:25:12:b3:e2:32:a1:2b:d5:0b: 9c:c5:d4:df:14:5b:bb:ff:cd:09:97:ea:a8:09:b5: cf:f7:63:59:f0:36:6e:37:85:13:95:d1:e9:b3:3d: 92:43:7a:7f:b0:45:ba:a8:23:34:b3:b3:18:a7:9b: f5:e4:38:f1:66:e8:5a:ba:79:d5:f4:60:6d:cd:77: 1d:a7:bd:1f:d6:ab:7d:7a:e4:f7:39:55:e3:f6:39: d2:46:59:3b:0d:4f:3f:0d:99:a1:23:50:8a:c3:36: c6:22:d6:60:1f:d2:18:72:4a:81:1b:ae:11:8f:4f: e8:a8:e0:91:e2:13:b3:73:ea:9f:1f:6c:21:4e:69: bc:d5:b3:ca:cd:e6:dd:e7:e7:ca:68:a7:f5:0f:2e: 20:6f:5f:37:6b:ea:74:db:f8:53:78:32:f9:2b:27: d2:2f:5f:4e:40:51:49:23:37:8e:d9:af:e7:92:7a: 24:ff:9e:ec:9e:b1:71:f2:11:c2:b3:1d:73:8a:8a: 52:c9:6e:c3:56:4d:aa:59:8b:06:cd:8e:c8:64:3d: 8b:4c:21:86:b4:09:09:7d:29:f4:64:19:b1:37:eb: 33:02:52:bf:5d:f9:1a:11:e1:f0:a9:44:8e:8c:62: d4:24:30:59:0a:0c:90:cc:f3:38:1f:fd:3a:b2:84: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FF:B9:BC:AF:DB:AC:6E:57:F5:AA:8F:1D:8A:ED:1C:40:A6:33:66 X509v3 Authority Key Identifier: keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:c3:05:36:5a:4d:a3:a5:39:3b:7a:73:e4:e6:82:24:c0: 9d:0b:5a:4a:13:0d:18:e0:71:b3:74:70:6c:44:74:03:8f:d9: eb:f0:df:b1:84:23:70:2f:9b:08:6e:90:22:ca:ea:5c:f8:b8: 85:12:ae:ad:39:d5:e5:8f:5a:fb:b9:d3:1d:1e:14:47:94:d3: c8:1e:40:f8:9e:25:65:96:c7:b9:bf:03:a9:cd:8c:b2:ee:b0: 01:c5:15:fe:99:9f:a8:2d:43:11:da:ad:42:2b:a3:1f:79:f1: 15:15:ba:7c:ac:77:19:48:9d:e0:7f:8a:18:3e:8c:45:c2:71: b3:ae:f6:7b:87:c6:b2:57:06:b1:2d:0a:55:e7:c7:54:08:56: 5c:b1:61:73:0a:ff:3b:1f:72:57:7f:0f:34:5c:cf:b6:72:48: 6d:2b:88:95:8b:53:84:c1:2b:d8:03:16:57:97:9b:f0:7a:99: aa:45:10:2b:e7:26:a6:35:3a:3f:0d:33:38:9f:84:81:7d:d9: b6:93:38:78:29:0f:eb:1d:f5:56:78:45:c9:0e:ba:1a:78:aa: 75:71:3a:08:f2:a8:9b:ef:ba:22:35:fd:f3:ca:0a:73:6d:9d: b4:73:94:f9:4a:37:c0:0d:71:cc:4c:f2:e4:2f:c1:91:90:dc: ad:08:da:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6eZJ5a4yWuW3qUjuBdA8LX4UjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy OUZDMTNBOTAeFw0yNTEwMTgxNDI2MDBaFw0yNTEwMjEyMTMyMDBaMDMxMTAvBgNV BAMTKDIyRkZCOUJDQUZEQkFDNkU1N0Y1QUE4RjFEOEFFRDFDNDBBNjMzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimseVhyUSs+IyoSvVC5zF1N8U W7v/zQmX6qgJtc/3Y1nwNm43hROV0emzPZJDen+wRbqoIzSzsxinm/XkOPFm6Fq6 edX0YG3Ndx2nvR/Wq3165Pc5VeP2OdJGWTsNTz8NmaEjUIrDNsYi1mAf0hhySoEb rhGPT+io4JHiE7Nz6p8fbCFOabzVs8rN5t3n58pop/UPLiBvXzdr6nTb+FN4Mvkr J9IvX05AUUkjN47Zr+eSeiT/nuyesXHyEcKzHXOKilLJbsNWTapZiwbNjshkPYtM IYa0CQl9KfRkGbE36zMCUr9d+RoR4fCpRI6MYtQkMFkKDJDM8zgf/TqyhKjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIv+5vK/brG5X9aqPHYrtHECmM2YwHwYDVR0j BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHFwwU2Wk2jpTk7enPk5oIkwJ0LWkoTDRjg cbN0cGxEdAOP2evw37GEI3AvmwhukCLK6lz4uIUSrq051eWPWvu50x0eFEeU08ge QPieJWWWx7m/A6nNjLLusAHFFf6Zn6gtQxHarUIrox958RUVunysdxlIneB/ihg+ jEXCcbOu9nuHxrJXBrEtClXnx1QIVlyxYXMK/zsfcld/DzRcz7ZySG0riJWLU4TB K9gDFleXm/B6mapFECvnJqY1Oj8NMzifhIF92baTOHgpD+sd9VZ4RckOuhp4qnVx OgjyqJvvuiI1/fPKCnNtnbRzlPlKN8ANccxM8uQvwZGQ3K0I2gw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:31 2025 by rpki-client