$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: 4yIVCnBXvLAHliRcF+xtQvIZlcOebw6zBRKpPpf+O1k= Subject key identifier: A2:CC:1E:13:64:33:4A:1E:6E:05:D0:4C:FF:CB:41:BD:47:73:09:C0 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 5B8D010CCB026B3FB420891E319F82A30B5834FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0406 Signing time: Mon 20 Oct 2025 04:41:57 +0000 Manifest this update: Mon 20 Oct 2025 04:36:57 +0000 Manifest next update: Thu 23 Oct 2025 06:18:57 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) 2: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: ywtrFeQInS1hwRLnjyhlq3ZbUAq8/YEpMHBQgVa7aqU=) 3: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) 4: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8d:01:0c:cb:02:6b:3f:b4:20:89:1e:31:9f:82:a3:0b:58:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Oct 20 04:36:57 2025 GMT Not After : Oct 23 06:18:57 2025 GMT Subject: CN=A2CC1E1364334A1E6E05D04CFFCB41BD477309C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:f9:88:ec:78:e2:be:c8:8b:6e:89:51:06: f3:0b:79:73:24:f7:be:39:e4:18:93:d3:bb:dc:2a: 84:33:a7:d7:58:5a:5c:4c:83:8d:63:03:9f:7e:fe: 4b:21:80:d0:e9:21:83:ae:75:ba:ea:b8:bb:78:0a: b2:85:13:96:cd:26:8b:5e:b2:a9:6b:c5:b5:1d:16: e2:96:bd:de:d0:db:f8:96:55:65:3e:2e:3b:f7:3d: 12:b6:99:68:66:a2:ad:14:27:c6:81:85:d4:89:86: 49:77:a3:c5:cf:b4:c4:bd:dc:d8:a5:fa:4c:c5:7f: 20:e1:e0:d2:48:59:c7:cf:42:e2:25:86:8e:f1:60: 50:ab:8e:88:b0:8a:ef:83:a5:68:2a:60:de:04:d9: 06:fb:05:07:91:4f:83:22:5c:9b:94:ae:57:5c:29: 22:23:a3:e3:bb:01:3f:db:b1:8b:99:b1:34:2e:19: 20:2d:89:ed:bc:d5:37:93:c9:fe:05:e9:0b:48:2b: 69:79:44:05:a8:6b:21:28:76:7c:9a:46:96:a5:d2: 19:af:d0:4c:5a:87:a8:06:57:cc:99:68:a9:6f:41: f2:72:a1:60:d7:86:dc:7f:0d:80:cf:8f:d5:1a:fe: 90:2d:2f:53:8f:2a:df:14:3b:03:3e:67:aa:32:87: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:1E:13:64:33:4A:1E:6E:05:D0:4C:FF:CB:41:BD:47:73:09:C0 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:54:3b:b1:89:f1:f9:d4:2e:c2:70:28:4e:c5:14:34:cc:95: 1a:4a:2f:de:d5:bf:ae:c0:c1:e5:90:4a:86:d8:18:6f:07:40: d2:52:d5:dc:6c:c7:c1:97:83:75:5a:c4:bb:0e:54:d5:48:a5: 66:ec:46:68:89:1a:ec:93:84:ea:71:a6:ab:7e:25:88:7d:f0: 4f:e1:1a:12:da:1f:30:46:44:ad:8d:39:6a:5e:7f:eb:bb:cb: 01:dd:17:3c:ed:2a:6a:49:e8:0f:47:be:47:66:ea:a2:23:7c: 56:e3:15:85:9e:cd:7c:8b:88:e9:84:be:f5:2b:d1:d9:aa:d3: 4a:51:0d:79:fe:3f:91:0a:f9:29:70:7c:9b:b9:c8:c8:8e:51: 3e:b8:e7:de:c1:dd:5a:7f:fa:b2:ac:ac:77:a0:d7:0a:0d:cb: 3f:2a:52:fd:d1:18:12:24:65:8b:88:84:82:a3:26:c3:32:2d: 0d:15:aa:e9:43:47:05:92:60:95:62:6a:a9:92:14:8c:c9:77: 27:05:be:b7:6f:a4:c5:39:2c:23:ff:7d:11:3b:c4:e3:36:58: 47:7f:bf:d5:cd:ca:f2:5d:94:51:f1:a8:86:89:c0:63:51:0e: 9c:89:bc:7d:f4:79:02:cb:7d:39:06:13:b6:48:49:78:76:8d: c9:09:55:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW40BDMsCaz+0IIkeMZ+CowtYNP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTEwMjAwNDM2NTdaFw0yNTEwMjMwNjE4NTdaMDMxMTAvBgNV BAMTKEEyQ0MxRTEzNjQzMzRBMUU2RTA1RDA0Q0ZGQ0I0MUJENDc3MzA5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUk/mI7HjivsiLbolRBvMLeXMk 97455BiT07vcKoQzp9dYWlxMg41jA59+/kshgNDpIYOudbrquLt4CrKFE5bNJote sqlrxbUdFuKWvd7Q2/iWVWU+Ljv3PRK2mWhmoq0UJ8aBhdSJhkl3o8XPtMS93Nil +kzFfyDh4NJIWcfPQuIlho7xYFCrjoiwiu+DpWgqYN4E2Qb7BQeRT4MiXJuUrldc KSIjo+O7AT/bsYuZsTQuGSAtie281TeTyf4F6QtIK2l5RAWoayEodnyaRpal0hmv 0Exah6gGV8yZaKlvQfJyoWDXhtx/DYDPj9Ua/pAtL1OPKt8UOwM+Z6oyhyndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosweE2QzSh5uBdBM/8tBvUdzCcAwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5UO7GJ8fnULsJwKE7FFDTMlRpKL97Vv67A weWQSobYGG8HQNJS1dxsx8GXg3VaxLsOVNVIpWbsRmiJGuyThOpxpqt+JYh98E/h GhLaHzBGRK2NOWpef+u7ywHdFzztKmpJ6A9Hvkdm6qIjfFbjFYWezXyLiOmEvvUr 0dmq00pRDXn+P5EK+SlwfJu5yMiOUT64597B3Vp/+rKsrHeg1woNyz8qUv3RGBIk ZYuIhIKjJsMyLQ0VqulDRwWSYJViaqmSFIzJdycFvrdvpMU5LCP/fRE7xOM2WEd/ v9XNyvJdlFHxqIaJwGNRDpyJvH30eQLLfTkGE7ZISXh2jckJVe0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:09 2025 by rpki-client