$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: evJqZi+wjfESPRYWbrJXdwrjUmkkA7eZTjZ/QdpHlDI= Subject key identifier: 78:FF:C2:B5:EC:BF:09:34:3A:3F:CD:8F:FE:3B:26:28:B8:04:C5:C6 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 77770CD7D2960C158D69811CD3FB93C93C0F6CBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0251 Signing time: Mon 20 Oct 2025 05:11:43 +0000 Manifest this update: Mon 20 Oct 2025 05:06:43 +0000 Manifest next update: Thu 23 Oct 2025 14:08:43 +0000 Files and hashes: 1: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: 47mz0hCzxMPOBHSmXotc4Cn0GBT5UZP6fGMJahtuqz4=) 2: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 3: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 4: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 5: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:77:0c:d7:d2:96:0c:15:8d:69:81:1c:d3:fb:93:c9:3c:0f:6c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Oct 20 05:06:43 2025 GMT Not After : Oct 23 14:08:43 2025 GMT Subject: CN=78FFC2B5ECBF09343A3FCD8FFE3B2628B804C5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:05:a1:4a:2b:0d:30:a5:9b:76:d9:89:60: 45:60:5b:bb:8a:c3:f0:41:5c:a0:8f:be:18:35:21: 01:2d:77:f9:9a:53:d3:8f:ed:df:39:06:c8:ab:30: 0b:41:82:69:02:12:65:3b:42:fb:e0:bf:29:f4:7e: fa:f0:02:5d:77:85:5f:b8:3b:4b:2f:98:06:e3:85: 42:70:93:f4:65:6b:96:21:e2:6d:c1:f9:fd:63:7b: 97:ca:e2:6b:a4:ef:7c:2c:69:9e:64:08:97:b4:0a: 7d:2f:29:e1:2e:09:7b:54:d1:b7:a8:9c:2b:92:7b: 1d:5e:d5:82:d7:49:8f:bc:1a:0a:ec:27:bd:76:93: 8a:5d:21:37:82:1b:d9:1f:5c:69:5c:ee:0b:f1:a8: 3f:97:a2:92:54:67:ca:a4:43:4d:1c:98:9f:92:e4: b2:af:1f:5a:e7:d8:91:6f:a4:77:65:9c:e7:6f:da: 1c:b3:aa:a6:2e:51:3e:a6:89:12:f9:71:d6:bb:44: ce:ba:d9:39:7b:a1:00:29:dc:50:04:72:c4:57:07: 88:75:50:38:c4:08:a6:f6:0b:08:b4:3b:f1:0c:e3: c1:bd:c4:b6:9b:16:36:10:48:a1:80:60:66:68:9d: fc:06:29:a7:8a:04:e1:ea:95:18:51:8e:ed:85:0c: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:C2:B5:EC:BF:09:34:3A:3F:CD:8F:FE:3B:26:28:B8:04:C5:C6 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:61:76:c6:97:ce:73:f5:b8:71:6a:e0:39:65:b7:61:d4:35: b5:78:f8:2a:29:d2:1c:9c:fc:57:83:fa:3a:38:62:4b:cb:8e: 83:45:93:66:b6:7e:d2:ae:38:1c:5d:67:d4:2a:b0:9a:eb:c6: f3:87:84:f0:66:04:a5:18:1f:fa:58:d2:97:c9:54:cb:00:ab: d1:2b:38:e8:21:bc:d1:85:64:2f:4c:95:ca:86:90:4a:a6:e5: ae:51:c4:7f:b9:46:7e:66:34:12:43:7c:5c:0d:af:79:75:3b: 72:3d:c9:75:b2:09:71:69:3c:fa:56:ea:e1:92:72:8f:f0:a6: d7:a6:d3:c7:b2:ce:5c:db:0c:44:7a:6d:90:42:a4:18:7a:60: 15:d0:2b:ca:e4:dd:87:39:18:00:a3:19:c7:24:eb:38:94:72: 33:90:44:2d:f7:c7:91:d9:fe:de:bc:23:5f:9f:23:8f:d1:69: 10:ba:d5:72:a7:81:ed:bb:21:77:76:16:34:68:2c:b5:00:fa: ba:7d:92:3e:9c:9f:44:e7:60:1f:a1:4c:b0:c8:e0:9b:d8:ab: 16:d1:f8:30:f8:04:b9:a5:6b:46:cd:89:41:db:66:98:41:04: 0e:42:ba:46:23:8f:9d:05:a7:f4:7f:27:54:27:c8:13:e2:d8: 38:00:2d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3cM19KWDBWNaYEc0/uTyTwPbLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTEwMjAwNTA2NDNaFw0yNTEwMjMxNDA4NDNaMDMxMTAvBgNV BAMTKDc4RkZDMkI1RUNCRjA5MzQzQTNGQ0Q4RkZFM0IyNjI4QjgwNEM1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtQWhSisNMKWbdtmJYEVgW7uK w/BBXKCPvhg1IQEtd/maU9OP7d85BsirMAtBgmkCEmU7Qvvgvyn0fvrwAl13hV+4 O0svmAbjhUJwk/Rla5Yh4m3B+f1je5fK4muk73wsaZ5kCJe0Cn0vKeEuCXtU0beo nCuSex1e1YLXSY+8GgrsJ712k4pdITeCG9kfXGlc7gvxqD+XopJUZ8qkQ00cmJ+S 5LKvH1rn2JFvpHdlnOdv2hyzqqYuUT6miRL5cda7RM662Tl7oQAp3FAEcsRXB4h1 UDjECKb2Cwi0O/EM48G9xLabFjYQSKGAYGZonfwGKaeKBOHqlRhRju2FDA4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeP/Ctey/CTQ6P82P/jsmKLgExcYwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJhdsaXznP1uHFq4Dllt2HUNbV4+Cop0hyc /FeD+jo4YkvLjoNFk2a2ftKuOBxdZ9QqsJrrxvOHhPBmBKUYH/pY0pfJVMsAq9Er OOghvNGFZC9MlcqGkEqm5a5RxH+5Rn5mNBJDfFwNr3l1O3I9yXWyCXFpPPpW6uGS co/wptem08eyzlzbDER6bZBCpBh6YBXQK8rk3Yc5GACjGcck6ziUcjOQRC33x5HZ /t68I1+fI4/RaRC61XKnge27IXd2FjRoLLUA+rp9kj6cn0TnYB+hTLDI4JvYqxbR +DD4BLmla0bNiUHbZphBBA5CukYjj50Fp/R/J1QnyBPi2DgALXA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:36 2025 by rpki-client