$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: xORYzRLjfsRmqz7fGXGPf26OLbdrTzwPgJGMfxOvt4Q= Subject key identifier: F6:4C:79:CC:0E:F0:22:B9:89:81:7D:06:73:6F:AA:30:BB:6B:E2:79 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 53BA0806B0D34835001E5E0C3ABFC1BF65723CB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01AD Signing time: Mon 20 Oct 2025 06:01:09 +0000 Manifest this update: Mon 20 Oct 2025 05:56:09 +0000 Manifest next update: Thu 23 Oct 2025 13:51:09 +0000 Files and hashes: 1: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: 2iq0+HR7E8qokUOxA9mBq3Nh7CqfdNa7wnbJ0QUKn4M=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) 3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ba:08:06:b0:d3:48:35:00:1e:5e:0c:3a:bf:c1:bf:65:72:3c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Oct 20 05:56:09 2025 GMT Not After : Oct 23 13:51:09 2025 GMT Subject: CN=F64C79CC0EF022B989817D06736FAA30BB6BE279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fb:c5:4e:26:67:ca:17:1f:f4:05:c4:39:49: 88:8e:5e:93:7d:c1:3f:23:35:04:b9:6b:f4:32:fb: 28:8b:99:a1:9e:84:65:28:76:ff:01:1f:b2:ad:a0: 80:70:93:f9:54:51:e7:97:a5:6e:e7:15:80:e8:11: eb:95:b4:f0:29:6c:a3:c1:21:72:fc:79:2b:c3:ba: f3:7c:18:1c:23:24:fe:81:74:56:22:57:11:e1:11: e0:b1:ce:38:9b:38:b4:89:39:4a:74:af:5c:6f:39: 6c:e9:58:62:2a:f9:73:ac:9d:88:75:2e:6b:49:f7: ed:25:96:21:a4:fb:9e:d6:64:5a:14:e6:b0:6c:a6: 00:2c:bf:a0:91:33:62:b5:05:a5:6d:e7:64:a3:09: d1:ca:ac:70:40:68:bd:b3:21:da:40:15:01:3a:9a: 84:fd:65:da:f4:6d:5b:2a:e6:ce:58:31:b1:3b:09: f1:05:22:c7:27:67:87:83:1f:1d:6a:ed:aa:05:7c: 2a:43:0b:2f:a3:61:00:2f:63:0a:55:09:ff:19:4c: f1:b6:19:fd:5e:62:cc:d8:52:a5:03:88:ab:df:3b: 99:c3:a7:d4:f2:69:44:a4:4f:e1:fb:c9:cd:e2:48: 5b:ae:06:7e:6d:f5:f4:14:0f:d2:e6:28:81:e7:8b: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:79:CC:0E:F0:22:B9:89:81:7D:06:73:6F:AA:30:BB:6B:E2:79 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:64:8c:9a:bc:e0:42:0c:a0:b1:88:83:53:3c:51:62:0a:48: 57:f8:90:fc:02:24:6c:55:c6:e7:3c:24:9c:e5:00:89:cb:f0: 19:85:e5:86:0d:5b:06:03:ca:db:d7:11:de:f4:69:c1:32:18: a6:fe:08:c0:1c:1c:93:aa:88:7d:cc:54:69:93:62:87:55:20: 73:15:6b:92:27:95:3e:b4:44:f4:54:53:94:8b:ff:f5:80:d5: c2:e3:62:66:43:01:f9:9d:6c:a4:a0:2e:51:f6:fd:f0:1c:2c: f7:8e:1b:c6:68:09:1c:bd:0a:3f:f1:b1:a1:bf:a3:ba:83:fd: e4:5e:f9:f3:d1:b5:89:c8:60:af:50:af:2e:be:17:72:0d:de: c5:d6:9d:64:c6:80:ed:3b:3f:95:77:8b:d9:4f:a0:e1:11:89: 40:d7:9e:bc:ee:35:3e:d4:b7:20:6e:fe:18:48:60:64:09:75: 86:af:94:59:65:c6:22:46:57:99:b1:9d:22:ec:b3:2d:67:21: ab:12:c9:e2:ed:f6:ff:a6:5c:8c:21:2f:8c:88:91:02:4b:52: a8:ce:cb:7e:ae:42:cd:7b:0e:e3:2a:c4:ae:aa:fb:68:d1:f5: 02:e9:3d:79:56:aa:3b:2c:47:62:8f:b8:e5:39:07:14:7f:31: 95:49:1a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7oIBrDTSDUAHl4MOr/Bv2VyPLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTEwMjAwNTU2MDlaFw0yNTEwMjMxMzUxMDlaMDMxMTAvBgNV BAMTKEY2NEM3OUNDMEVGMDIyQjk4OTgxN0QwNjczNkZBQTMwQkI2QkUyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+8VOJmfKFx/0BcQ5SYiOXpN9 wT8jNQS5a/Qy+yiLmaGehGUodv8BH7KtoIBwk/lUUeeXpW7nFYDoEeuVtPApbKPB IXL8eSvDuvN8GBwjJP6BdFYiVxHhEeCxzjibOLSJOUp0r1xvOWzpWGIq+XOsnYh1 LmtJ9+0lliGk+57WZFoU5rBspgAsv6CRM2K1BaVt52SjCdHKrHBAaL2zIdpAFQE6 moT9Zdr0bVsq5s5YMbE7CfEFIscnZ4eDHx1q7aoFfCpDCy+jYQAvYwpVCf8ZTPG2 Gf1eYszYUqUDiKvfO5nDp9TyaUSkT+H7yc3iSFuuBn5t9fQUD9LmKIHni/iBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9kx5zA7wIrmJgX0Gc2+qMLtr4nkwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1kjJq84EIMoLGIg1M8UWIKSFf4kPwCJGxV xuc8JJzlAInL8BmF5YYNWwYDytvXEd70acEyGKb+CMAcHJOqiH3MVGmTYodVIHMV a5InlT60RPRUU5SL//WA1cLjYmZDAfmdbKSgLlH2/fAcLPeOG8ZoCRy9Cj/xsaG/ o7qD/eRe+fPRtYnIYK9Qry6+F3IN3sXWnWTGgO07P5V3i9lPoOERiUDXnrzuNT7U tyBu/hhIYGQJdYavlFllxiJGV5mxnSLssy1nIasSyeLt9v+mXIwhL4yIkQJLUqjO y36uQs17DuMqxK6q+2jR9QLpPXlWqjssR2KPuOU5BxR/MZVJGmE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:24 2025 by rpki-client