$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: LYdEzPV/NFSnIk8U47l16MtBRN/LZwURa8CUaGJpStY= Subject key identifier: 42:6F:51:23:6B:57:54:5A:3A:0D:BE:C7:4E:41:62:E1:EE:C8:CE:BD Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 6B6BA2750EE767A1952AB7062F0A1AB393C2AAF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 0478 Signing time: Sun 19 Oct 2025 07:52:13 +0000 Manifest this update: Sun 19 Oct 2025 07:47:13 +0000 Manifest next update: Wed 22 Oct 2025 19:29:13 +0000 Files and hashes: 1: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: 6LuQCm5G0Isr8a876EosaedK8DO6Su0/AzBgWFtnDB4=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: x0J0SWYdQITQpgISzoI/wH0SDCf243P4/o0ZHJotSPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6b:a2:75:0e:e7:67:a1:95:2a:b7:06:2f:0a:1a:b3:93:c2:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Oct 19 07:47:13 2025 GMT Not After : Oct 22 19:29:13 2025 GMT Subject: CN=426F51236B57545A3A0DBEC74E4162E1EEC8CEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:25:89:e2:30:d0:80:33:f8:fa:0a:29:04:96: bb:0e:20:c1:1d:34:2c:4a:e0:89:59:1c:21:67:fd: bf:68:84:09:07:9f:7a:8d:2b:0c:2d:1a:e7:b8:7b: a4:e1:eb:17:dc:ec:76:aa:e4:3f:3f:81:59:d3:6b: ac:2c:2c:c7:6a:03:d6:1e:5f:6c:20:26:65:28:3e: 3f:c1:45:07:98:82:1c:49:2b:1b:c5:19:e7:18:dd: c7:82:5e:8e:0e:f2:89:b3:73:39:f4:61:40:5f:4e: 3b:33:2c:d7:ba:fd:61:33:74:1c:82:5a:6e:3d:14: 48:3e:27:b2:01:a7:55:f6:4e:fd:b7:4c:49:19:3e: 9f:73:0f:3e:d8:2e:e3:ce:ff:23:96:a7:50:8a:91: 7c:40:4b:7e:e1:e8:a4:89:16:51:b9:89:f0:b7:53: db:14:01:48:b0:76:bb:13:9e:5d:f0:cf:74:1b:b9: 0f:2c:5b:e2:2e:79:df:7f:c6:68:cf:2c:3f:81:fc: 1f:2a:19:8a:39:9b:f7:e7:85:74:89:89:bc:9e:b1: 52:dc:ad:6d:7c:63:0b:dc:f9:0d:bb:73:f8:c9:0b: 72:9a:3f:ea:b0:89:7a:f4:75:03:8e:da:fc:7d:f9: 67:a9:d5:e2:d7:e5:19:d7:c8:64:97:d4:49:de:f6: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:51:23:6B:57:54:5A:3A:0D:BE:C7:4E:41:62:E1:EE:C8:CE:BD X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:1f:d9:64:90:3c:a5:c9:74:4f:dc:e1:49:84:2d:c8:fc: 13:59:2d:d0:08:3b:1e:b1:ec:8b:0c:36:2e:42:5d:9f:fc:bd: af:ba:62:eb:13:c4:c2:ab:85:81:6d:c2:ac:28:d9:4d:59:fa: e4:76:d9:c7:b8:80:17:f3:df:07:67:f7:62:64:0a:84:d6:f9: e7:c7:2b:90:7f:3e:c1:14:d6:6a:e2:ee:9e:d6:8f:bc:d7:0b: b0:f6:ac:75:76:ff:4c:e8:21:b6:6c:ea:7a:51:66:a1:4c:69: 9d:82:d6:c6:6c:9f:b7:73:f2:32:a7:bd:cf:10:7e:1f:88:c3: 85:01:09:d0:13:1f:e4:db:94:13:7f:6d:d0:9e:e4:45:9a:fa: 9b:e4:d3:95:1c:d0:e2:27:3d:fb:e8:cb:35:32:88:9c:9e:5d: e9:4b:0c:65:53:a8:d9:01:9c:b7:3e:16:4a:68:ec:1d:fa:e6: 4d:f1:08:a3:76:e0:42:07:bd:11:8f:da:b4:7e:5a:31:70:74: 00:ee:3d:0c:92:b4:e6:b9:33:2f:21:ad:5b:ca:1e:f4:e7:60: 93:f1:bf:3c:04:5d:01:dc:57:0f:92:89:e1:15:d7:02:ef:57: c7:46:7c:b0:c9:e0:eb:1e:d4:ae:c3:71:3f:d0:b5:e2:e4:2f: 9a:04:88:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2uidQ7nZ6GVKrcGLwoas5PCqvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTEwMTkwNzQ3MTNaFw0yNTEwMjIxOTI5MTNaMDMxMTAvBgNV BAMTKDQyNkY1MTIzNkI1NzU0NUEzQTBEQkVDNzRFNDE2MkUxRUVDOENFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxJYniMNCAM/j6CikElrsOIMEd NCxK4IlZHCFn/b9ohAkHn3qNKwwtGue4e6Th6xfc7Haq5D8/gVnTa6wsLMdqA9Ye X2wgJmUoPj/BRQeYghxJKxvFGecY3ceCXo4O8omzczn0YUBfTjszLNe6/WEzdByC Wm49FEg+J7IBp1X2Tv23TEkZPp9zDz7YLuPO/yOWp1CKkXxAS37h6KSJFlG5ifC3 U9sUAUiwdrsTnl3wz3QbuQ8sW+Iued9/xmjPLD+B/B8qGYo5m/fnhXSJibyesVLc rW18Ywvc+Q27c/jJC3KaP+qwiXr0dQOO2vx9+Wep1eLX5RnXyGSX1Ene9ikhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQm9RI2tXVFo6Db7HTkFi4e7Izr0wHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4VH9lkkDylyXRP3OFJhC3I/BNZLdAIOx6x 7IsMNi5CXZ/8va+6YusTxMKrhYFtwqwo2U1Z+uR22ce4gBfz3wdn92JkCoTW+efH K5B/PsEU1mri7p7Wj7zXC7D2rHV2/0zoIbZs6npRZqFMaZ2C1sZsn7dz8jKnvc8Q fh+Iw4UBCdATH+TblBN/bdCe5EWa+pvk05Uc0OInPfvoyzUyiJyeXelLDGVTqNkB nLc+Fkpo7B365k3xCKN24EIHvRGP2rR+WjFwdADuPQyStOa5My8hrVvKHvTnYJPx vzwEXQHcVw+SieEV1wLvV8dGfLDJ4Ose1K7DcT/QteLkL5oEiGM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:47:00 2025 by rpki-client