$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: Fio1WPuGq6lvJSsv+Ns9/rP5vUZKexFM5lDvxnGtfWc= Subject key identifier: 18:6B:D7:4C:7F:AF:B4:F9:03:26:C6:0E:E0:35:38:DF:E6:E2:E0:DC Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 7A1D53302CF18A6A01FF568A69C12BFB11A59BFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 0213 Signing time: Sat 18 Oct 2025 17:51:51 +0000 Manifest this update: Sat 18 Oct 2025 17:46:51 +0000 Manifest next update: Tue 21 Oct 2025 22:36:51 +0000 Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) 2: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: rTGq2mdWQ6ESkvAbSL2akZonHr5Uqt8mWMJfMuyVWNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1d:53:30:2c:f1:8a:6a:01:ff:56:8a:69:c1:2b:fb:11:a5:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Oct 18 17:46:51 2025 GMT Not After : Oct 21 22:36:51 2025 GMT Subject: CN=186BD74C7FAFB4F90326C60EE03538DFE6E2E0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:41:b1:70:de:c5:2c:16:f3:80:75:74:5e: 92:1a:43:17:a3:53:71:32:63:29:6c:74:8c:e5:68: bf:a5:2c:9c:a5:94:60:c4:6d:ec:dc:7a:19:39:d5: 8f:e4:ee:b5:c6:fc:d7:cf:d8:b2:55:2a:b7:3e:7c: 59:4d:50:47:11:63:a9:10:e6:f9:7e:71:c9:cb:36: e7:b3:1f:4c:95:fa:fa:cb:c8:d8:5c:38:cc:09:bd: 51:68:78:ce:fb:24:4b:d1:09:8b:2b:1d:56:c0:0f: 02:8b:64:78:15:17:5d:d0:ae:1b:bc:19:f4:12:7c: 5b:c0:0f:f5:0f:c5:31:64:b6:22:c3:05:95:8e:87: d1:c4:8a:5f:ba:e0:e3:bc:70:f3:1e:6b:47:e6:c2: 3a:e4:cd:25:79:35:04:dd:b5:ca:a6:21:72:48:57: cb:4b:d2:50:55:9a:b6:68:29:9b:97:5c:71:d9:03: 61:5f:7b:14:5a:77:e8:23:47:1b:6c:36:c0:72:4c: 16:00:47:ce:e6:83:a9:87:5e:cf:28:cf:f3:6b:35: 28:54:2d:ab:b9:a8:8e:a7:c7:49:41:28:eb:74:24: 8a:54:47:1a:41:1e:92:69:96:bf:80:c1:af:7a:49: 5f:b1:c8:54:42:f7:ef:56:0f:2e:15:df:e1:b9:0c: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6B:D7:4C:7F:AF:B4:F9:03:26:C6:0E:E0:35:38:DF:E6:E2:E0:DC X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e4:e0:97:13:20:4d:56:ec:13:48:69:27:a5:5e:f5:b0:2e: b9:15:34:54:8c:ea:b9:32:61:8f:7f:c4:6f:50:9e:5e:7d:cd: 5a:ae:c8:65:0d:b7:a2:25:25:4c:df:7b:36:94:d3:86:f1:df: 2d:fa:c1:75:d1:dc:bc:ba:87:a2:e3:4e:b2:cd:a6:14:09:48: 2e:57:05:ee:71:48:23:9e:d7:4a:8f:2d:75:fb:26:db:a4:ca: 41:8a:40:71:6c:b4:49:87:73:94:63:64:d2:ac:3b:c9:af:f3: 1f:ae:27:d1:e9:68:a5:6a:72:07:b0:7e:2e:59:cc:ec:36:a4: 13:23:6e:b0:2c:1e:9a:05:80:da:75:e4:25:5d:f1:4f:dd:dc: af:92:f8:df:60:b5:40:1a:c9:38:50:1a:04:18:c6:b4:08:84: d6:13:fb:66:a5:2c:1e:73:37:f4:ee:3e:9d:1c:fc:e1:4c:c5: a1:4c:35:a7:67:80:b4:c3:97:3f:4d:dd:67:ac:03:92:d5:00: bb:b4:a7:bb:5a:28:5d:9c:c1:cf:7a:b1:3f:16:56:ab:77:12: de:a8:5c:51:97:fd:f7:86:85:0c:99:68:5f:27:73:08:f5:bd: 51:e4:06:19:d3:a6:50:0e:d5:8a:5d:cf:89:52:6b:6c:d6:52: ad:a4:d1:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeh1TMCzximoB/1aKacEr+xGlm/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTEwMTgxNzQ2NTFaFw0yNTEwMjEyMjM2NTFaMDMxMTAvBgNV BAMTKDE4NkJENzRDN0ZBRkI0RjkwMzI2QzYwRUUwMzUzOERGRTZFMkUwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VkGxcN7FLBbzgHV0XpIaQxej U3EyYylsdIzlaL+lLJyllGDEbezcehk51Y/k7rXG/NfP2LJVKrc+fFlNUEcRY6kQ 5vl+ccnLNuezH0yV+vrLyNhcOMwJvVFoeM77JEvRCYsrHVbADwKLZHgVF13Qrhu8 GfQSfFvAD/UPxTFktiLDBZWOh9HEil+64OO8cPMea0fmwjrkzSV5NQTdtcqmIXJI V8tL0lBVmrZoKZuXXHHZA2FfexRad+gjRxtsNsByTBYAR87mg6mHXs8oz/NrNShU Lau5qI6nx0lBKOt0JIpURxpBHpJplr+Awa96SV+xyFRC9+9WDy4V3+G5DMbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGvXTH+vtPkDJsYO4DU43+bi4NwwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPk4JcTIE1W7BNIaSelXvWwLrkVNFSM6rky YY9/xG9Qnl59zVquyGUNt6IlJUzfezaU04bx3y36wXXR3Ly6h6LjTrLNphQJSC5X Be5xSCOe10qPLXX7JtukykGKQHFstEmHc5RjZNKsO8mv8x+uJ9HpaKVqcgewfi5Z zOw2pBMjbrAsHpoFgNp15CVd8U/d3K+S+N9gtUAayThQGgQYxrQIhNYT+2alLB5z N/TuPp0c/OFMxaFMNadngLTDlz9N3WesA5LVALu0p7taKF2cwc96sT8WVqt3Et6o XFGX/feGhQyZaF8ncwj1vVHkBhnTplAO1Ypdz4lSa2zWUq2k0Ro= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:39 2025 by rpki-client