$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: rWsCNL0xYJkIrAq+Q3mkMc5Ls+xtGe1iYT615YNfxTI= Subject key identifier: 5A:B6:DD:DB:D4:03:2F:C2:76:15:D9:11:76:61:80:6A:A0:FD:77:46 Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 14E60AF7C4C6C0B821D9E508E270A6C9E31574BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 01CC Signing time: Sun 19 Oct 2025 08:52:12 +0000 Manifest this update: Sun 19 Oct 2025 08:47:12 +0000 Manifest next update: Wed 22 Oct 2025 20:04:12 +0000 Files and hashes: 1: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) 2: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: 13ihcmjltfUt3f98pHLPzgcSV5agURot4vKs2alHOrQ=) 3: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 4: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: MPl5ELQ+jnWnL8LJsxoYECXhQIy/2gQtSqxW1SRND58=) 5: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 6: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8=) 7: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) 8: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: Jn9654uE1MAkhxHMr7LmE5+YeOZ6sz4Pa6nAFO5Kq+Q=) 9: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e6:0a:f7:c4:c6:c0:b8:21:d9:e5:08:e2:70:a6:c9:e3:15:74:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Oct 19 08:47:12 2025 GMT Not After : Oct 22 20:04:12 2025 GMT Subject: CN=5AB6DDDBD4032FC27615D9117661806AA0FD7746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:94:07:1c:f1:16:27:c7:71:84:4e:fc:7a: 5d:dd:0f:6e:c9:35:44:40:bc:e1:fe:34:ae:b9:a7: 47:e7:77:3b:7f:2c:72:25:c9:49:32:4c:3f:b7:fe: 65:08:5a:7d:56:c2:a6:5d:2c:30:a8:d4:55:1e:ce: f9:18:18:65:bd:43:bd:fa:94:49:41:c1:5a:d8:52: 64:bc:06:c9:49:df:a4:c5:8d:dc:3f:1e:59:9c:a4: 25:aa:f3:06:0b:7f:48:37:10:4b:f3:e1:30:db:5d: fb:42:66:81:24:8b:bf:50:b0:ea:70:7e:dc:ba:d1: cb:44:8f:43:39:b1:84:73:2f:0f:d4:e3:f8:e7:8c: 82:a4:16:29:a1:a6:ca:32:ab:9c:3b:77:8b:72:00: c7:1d:4b:ec:9f:9b:38:62:bb:9c:7d:9f:7b:04:e4: 20:9d:68:ff:89:f3:80:ef:cf:86:1e:08:83:4b:29: f7:90:87:ab:d9:2e:4e:2c:0b:df:56:25:07:59:12: 14:64:99:09:50:59:95:e9:5a:77:d5:67:4f:0b:f7: a3:c3:c9:db:0b:51:64:8a:cf:04:6d:b2:56:e6:b3: f5:a1:27:78:0c:0d:d0:98:27:56:e6:01:02:3e:c4: ed:b4:d1:6e:db:0b:3d:58:f0:45:ba:f3:19:41:2b: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B6:DD:DB:D4:03:2F:C2:76:15:D9:11:76:61:80:6A:A0:FD:77:46 X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:29:89:77:9a:43:0b:cb:ce:bd:3b:9a:8c:f4:c4:8a:9b:0f: 3d:70:43:e7:12:aa:a2:3d:de:f6:80:d3:f7:61:88:ee:07:28: a2:48:c9:49:ef:d6:9c:0f:4e:32:79:34:a6:71:68:c6:65:2d: b4:43:f5:04:46:71:90:1c:ed:e4:53:47:b7:b1:de:46:a8:c0: e1:e1:64:41:07:2b:e0:93:57:cd:0c:02:a7:91:6b:d4:9c:93: 3b:6b:5c:2b:86:89:91:d0:7b:98:1f:fe:ec:d6:f7:ca:19:e5: cd:14:91:a0:fc:a3:bd:da:a6:9f:e7:e9:12:83:ab:ad:d0:42: 0d:3f:2b:ab:37:77:60:0b:a6:f9:63:a1:2c:aa:00:ec:2a:e3: 78:a1:ea:38:8c:e6:66:5a:c9:25:83:ce:b6:16:2d:08:a6:6f: f8:73:cb:6d:21:42:c7:26:f0:db:06:a0:93:76:21:a3:59:a6: 44:90:6d:91:e1:5b:0d:f9:d2:ab:b4:ad:2d:71:bd:bf:41:26: d0:5a:d5:05:8d:86:e9:41:b1:44:5d:14:16:c1:e3:81:8a:17: 97:47:58:5a:84:03:94:e0:0e:44:f3:94:00:c2:de:d6:29:c2: d5:8e:f2:c2:0e:cb:ce:d1:95:4f:18:61:a6:ee:8d:81:e1:eb: e8:e0:fc:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOYK98TGwLgh2eUI4nCmyeMVdL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTEwMTkwODQ3MTJaFw0yNTEwMjIyMDA0MTJaMDMxMTAvBgNV BAMTKDVBQjZERERCRDQwMzJGQzI3NjE1RDkxMTc2NjE4MDZBQTBGRDc3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25JQHHPEWJ8dxhE78el3dD27J NURAvOH+NK65p0fndzt/LHIlyUkyTD+3/mUIWn1WwqZdLDCo1FUezvkYGGW9Q736 lElBwVrYUmS8BslJ36TFjdw/HlmcpCWq8wYLf0g3EEvz4TDbXftCZoEki79QsOpw fty60ctEj0M5sYRzLw/U4/jnjIKkFimhpsoyq5w7d4tyAMcdS+yfmzhiu5x9n3sE 5CCdaP+J84Dvz4YeCINLKfeQh6vZLk4sC99WJQdZEhRkmQlQWZXpWnfVZ08L96PD ydsLUWSKzwRtslbms/WhJ3gMDdCYJ1bmAQI+xO200W7bCz1Y8EW68xlBKzAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrbd29QDL8J2FdkRdmGAaqD9d0YwHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcpiXeaQwvLzr07moz0xIqbDz1wQ+cSqqI9 3vaA0/dhiO4HKKJIyUnv1pwPTjJ5NKZxaMZlLbRD9QRGcZAc7eRTR7ex3kaowOHh ZEEHK+CTV80MAqeRa9SckztrXCuGiZHQe5gf/uzW98oZ5c0UkaD8o73app/n6RKD q63QQg0/K6s3d2ALpvljoSyqAOwq43ih6jiM5mZaySWDzrYWLQimb/hzy20hQscm 8NsGoJN2IaNZpkSQbZHhWw350qu0rS1xvb9BJtBa1QWNhulBsURdFBbB44GKF5dH WFqEA5TgDkTzlADC3tYpwtWO8sIOy87RlU8YYabujYHh6+jg/MU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:58 2025 by rpki-client