$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: K9DNBRKEywMtsfUHG0/EbNSsQyZdWSrzmDuuoZG2YZY= Subject key identifier: AC:39:1C:7D:FD:13:83:FA:29:DE:C9:C4:61:2A:AA:6B:E6:32:43:11 Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 4D4411417C514044D1CE769F89B841C57CAED1B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 01D0 Signing time: Sun 19 Oct 2025 03:01:28 +0000 Manifest this update: Sun 19 Oct 2025 02:56:28 +0000 Manifest next update: Wed 22 Oct 2025 08:23:28 +0000 Files and hashes: 1: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: wXTznUQArBkuy9DW6FChuphpm7A6SXPjvzN1WzF38y4=) 2: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: 7seecVyr+hJH52aWzrL8VxcC7SWWtlwNpmbEXUtpgSs=) 3: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: WbgcAemfUr/WaWV4NJzSBFx+o8EoJ/udbhhfWwBxR6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:44:11:41:7c:51:40:44:d1:ce:76:9f:89:b8:41:c5:7c:ae:d1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Oct 19 02:56:28 2025 GMT Not After : Oct 22 08:23:28 2025 GMT Subject: CN=AC391C7DFD1383FA29DEC9C4612AAA6BE6324311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:20:53:d5:25:9f:88:22:09:a2:33:d3:8c: d2:b8:25:81:b5:0e:44:61:84:88:4d:7f:75:49:76: d5:86:e3:7a:59:bb:29:30:21:f7:a1:16:6b:23:65: a7:47:b2:6f:85:fa:af:c5:7e:d7:d6:65:a4:c4:18: 58:61:5c:39:82:5c:11:39:9f:90:4d:0b:ef:35:b3: 62:3c:f0:a4:78:c2:da:e6:a9:8e:0d:3e:9f:43:e2: 79:c7:1a:2d:02:68:04:4c:5e:86:43:a3:48:60:e2: b3:ee:c1:07:a5:9d:fa:6b:b4:6a:55:43:8a:12:58: aa:99:bf:7c:6c:1f:79:4e:08:2b:a2:7f:13:c4:67: cf:16:86:70:28:7e:63:fa:92:1d:b4:65:9c:8c:e2: cd:17:c2:4f:b5:97:7a:07:2b:1e:6f:10:fd:cf:b3: 88:a4:ba:3d:31:d0:83:7c:b5:8d:3c:68:4f:af:f5: ab:72:af:56:f7:76:08:9d:3c:80:db:f2:48:87:ea: d7:ba:4a:7f:5c:1c:4a:45:a3:55:0a:bf:8e:e8:19: 9a:b6:18:04:fe:67:7d:d8:55:74:53:06:10:f1:13: ec:89:1d:1f:18:03:42:11:71:57:5a:4f:24:f1:7b: cb:ca:27:43:ba:2c:83:f8:2a:3a:6f:1f:fb:0d:56: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:39:1C:7D:FD:13:83:FA:29:DE:C9:C4:61:2A:AA:6B:E6:32:43:11 X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:78:8f:c4:93:2b:41:b3:68:9a:5d:d9:a1:da:ac:05:70:32: fb:90:24:5e:e7:23:10:ae:bc:85:38:8b:38:d9:90:fd:c5:12: 08:be:0b:86:80:1c:49:b4:75:fa:37:15:00:c0:9a:43:c5:17: ee:79:ba:4c:52:ad:db:48:a8:52:54:1e:ef:46:2d:2e:f4:e7: 3a:dc:3f:d4:33:fa:55:5d:cc:31:11:4c:a4:b2:85:02:e4:33: af:7b:ba:23:dc:75:71:39:48:22:27:c3:48:ca:88:04:5b:d3: f5:02:5c:4d:42:a0:fa:45:54:b3:c2:b2:bd:27:a9:21:72:b4: 8b:66:ca:22:8c:52:c0:f1:63:ff:31:70:d6:31:5e:c4:8d:5f: 6f:43:99:82:a5:4c:4d:10:1e:b0:18:48:7e:bf:05:b5:4b:9d: eb:a1:af:53:9c:0b:db:ad:aa:34:71:5e:da:cc:1e:61:9e:13: 77:8c:f0:60:1c:00:21:48:46:fa:2d:ad:44:d8:9f:f0:f1:ca: 71:d2:80:4c:bd:24:5f:af:e8:f2:8a:b5:e7:29:5a:91:31:96: 46:b1:a8:f7:b5:85:33:63:c3:af:d5:a9:98:d5:b9:2a:06:6c: ae:85:e4:5a:b4:de:83:30:f8:9a:e4:6e:dd:16:e5:5e:be:98: 2d:a4:31:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUQRQXxRQETRznafibhBxXyu0bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTEwMTkwMjU2MjhaFw0yNTEwMjIwODIzMjhaMDMxMTAvBgNV BAMTKEFDMzkxQzdERkQxMzgzRkEyOURFQzlDNDYxMkFBQTZCRTYzMjQzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclCBT1SWfiCIJojPTjNK4JYG1 DkRhhIhNf3VJdtWG43pZuykwIfehFmsjZadHsm+F+q/FftfWZaTEGFhhXDmCXBE5 n5BNC+81s2I88KR4wtrmqY4NPp9D4nnHGi0CaARMXoZDo0hg4rPuwQelnfprtGpV Q4oSWKqZv3xsH3lOCCuifxPEZ88WhnAofmP6kh20ZZyM4s0Xwk+1l3oHKx5vEP3P s4ikuj0x0IN8tY08aE+v9atyr1b3dgidPIDb8kiH6te6Sn9cHEpFo1UKv47oGZq2 GAT+Z33YVXRTBhDxE+yJHR8YA0IRcVdaTyTxe8vKJ0O6LIP4KjpvH/sNVp3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDkcff0Tg/op3snEYSqqa+YyQxEwHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF4j8STK0GzaJpd2aHarAVwMvuQJF7nIxCu vIU4izjZkP3FEgi+C4aAHEm0dfo3FQDAmkPFF+55ukxSrdtIqFJUHu9GLS705zrc P9Qz+lVdzDERTKSyhQLkM697uiPcdXE5SCInw0jKiARb0/UCXE1CoPpFVLPCsr0n qSFytItmyiKMUsDxY/8xcNYxXsSNX29DmYKlTE0QHrAYSH6/BbVLneuhr1OcC9ut qjRxXtrMHmGeE3eM8GAcACFIRvotrUTYn/DxynHSgEy9JF+v6PKKtecpWpExlkax qPe1hTNjw6/VqZjVuSoGbK6F5Fq03oMw+Jrkbt0W5V6+mC2kMVY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:17 2025 by rpki-client