$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: xNCxT/PVxw6q8s/11EA9GpTb4Pvd2bASuwSxwqavipw= Subject key identifier: 8D:AB:00:1B:31:CB:C9:9C:9D:44:F4:6C:9C:A7:4A:EE:10:60:71:B8 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 0FE4894F20D47EE97EDF238B962BDC140E26CBA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: EA Signing time: Sun 19 Oct 2025 22:21:11 +0000 Manifest this update: Sun 19 Oct 2025 22:16:11 +0000 Manifest next update: Thu 23 Oct 2025 06:30:11 +0000 Files and hashes: 1: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 2: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 3: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: wUdZCJCrhGnqqF7Lp7QQZiwFtxdO7aMJpGgHXakjgtw=) 4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e4:89:4f:20:d4:7e:e9:7e:df:23:8b:96:2b:dc:14:0e:26:cb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Oct 19 22:16:11 2025 GMT Not After : Oct 23 06:30:11 2025 GMT Subject: CN=8DAB001B31CBC99C9D44F46C9CA74AEE106071B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:9c:ef:a1:20:69:d6:eb:d1:f3:a0:ec:df: 04:2c:70:12:53:4e:9c:f4:9e:ac:be:47:23:ef:f0: 2e:3e:67:22:93:d8:6e:69:2c:43:d3:b1:54:4c:dc: ed:61:be:f2:48:4e:78:a4:53:16:fa:2c:93:dd:c9: 8f:8b:53:6c:80:bb:b5:9d:05:e9:3a:4d:8b:43:e8: 3d:bb:54:f1:38:41:42:2d:87:08:ae:87:27:3b:1f: 71:35:02:de:f2:fc:17:08:18:a1:3c:52:61:b6:6c: ca:ab:0c:8a:d4:84:8c:0c:b8:06:c9:1e:a7:96:0d: e6:fe:9d:95:db:ce:7e:de:94:d4:96:88:74:f6:14: 62:91:cf:f5:c9:96:74:8d:a5:86:ff:e7:28:21:94: f9:f4:f5:5c:66:41:55:2a:c7:ef:a6:c1:9c:62:20: a8:5c:40:42:7c:af:9b:d6:e8:b0:23:39:52:d2:8d: 9b:41:ca:5d:66:7f:9f:5f:4f:88:27:df:c3:c2:f0: e6:50:08:ca:cb:30:84:a8:df:89:d8:90:1f:09:b8: 00:cb:95:11:54:a8:8a:ff:fd:01:22:20:68:34:8c: b2:aa:af:47:19:4e:89:90:be:07:12:e9:79:df:36: 28:e0:77:90:0a:0d:1a:91:00:e3:9e:20:42:2c:64: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:00:1B:31:CB:C9:9C:9D:44:F4:6C:9C:A7:4A:EE:10:60:71:B8 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fb:35:f2:63:72:66:8b:65:c1:5f:1e:c2:c7:e2:02:70:2d: e6:61:2c:ac:cc:de:d8:27:2f:09:d0:29:70:fd:34:fe:21:3f: fa:16:81:61:64:6c:2b:42:eb:6b:36:a4:35:fe:cc:3a:af:0a: 48:85:60:78:53:53:ba:16:d7:e0:0f:70:e2:d1:a0:e5:48:dd: 0c:44:97:7f:f6:0f:f5:2a:e8:04:ed:f9:e4:51:65:68:d4:17: a8:7a:b2:bd:07:ea:a0:70:f7:26:58:e0:9d:a4:b9:7b:14:6b: fb:d5:db:15:0d:55:34:3d:cd:e8:62:5e:84:22:e8:7b:f1:c1: 8e:34:00:e2:a3:2b:cd:84:f1:ef:d1:52:30:2c:3e:fa:b6:7d: 96:15:0c:6a:20:b4:b1:0d:bd:7a:83:36:18:91:ed:f9:94:cf: bb:5f:61:f5:97:c6:80:47:ae:f5:43:fa:77:51:6c:a3:a0:63: 7a:d6:34:e4:db:33:13:81:f2:10:56:94:ce:69:35:d4:8f:be: 50:2b:19:f6:8c:fa:cf:e6:85:69:1c:95:38:8e:79:15:67:b8: 24:d7:08:28:14:81:be:0d:d9:a0:f9:2c:0e:f6:94:55:03:14: ee:5a:8d:91:5a:21:25:7d:44:a3:21:b0:70:b6:e5:d4:bf:ab: 9c:e7:42:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+SJTyDUful+3yOLlivcFA4my6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTEwMTkyMjE2MTFaFw0yNTEwMjMwNjMwMTFaMDMxMTAvBgNV BAMTKDhEQUIwMDFCMzFDQkM5OUM5RDQ0RjQ2QzlDQTc0QUVFMTA2MDcxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4pzvoSBp1uvR86Ds3wQscBJT Tpz0nqy+RyPv8C4+ZyKT2G5pLEPTsVRM3O1hvvJITnikUxb6LJPdyY+LU2yAu7Wd Bek6TYtD6D27VPE4QUIthwiuhyc7H3E1At7y/BcIGKE8UmG2bMqrDIrUhIwMuAbJ HqeWDeb+nZXbzn7elNSWiHT2FGKRz/XJlnSNpYb/5yghlPn09VxmQVUqx++mwZxi IKhcQEJ8r5vW6LAjOVLSjZtByl1mf59fT4gn38PC8OZQCMrLMISo34nYkB8JuADL lRFUqIr//QEiIGg0jLKqr0cZTomQvgcS6XnfNijgd5AKDRqRAOOeIEIsZGqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjasAGzHLyZydRPRsnKdK7hBgcbgwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT7NfJjcmaLZcFfHsLH4gJwLeZhLKzM3tgn LwnQKXD9NP4hP/oWgWFkbCtC62s2pDX+zDqvCkiFYHhTU7oW1+APcOLRoOVI3QxE l3/2D/Uq6ATt+eRRZWjUF6h6sr0H6qBw9yZY4J2kuXsUa/vV2xUNVTQ9zehiXoQi 6HvxwY40AOKjK82E8e/RUjAsPvq2fZYVDGogtLENvXqDNhiR7fmUz7tfYfWXxoBH rvVD+ndRbKOgY3rWNOTbMxOB8hBWlM5pNdSPvlArGfaM+s/mhWkclTiOeRVnuCTX CCgUgb4N2aD5LA72lFUDFO5ajZFaISV9RKMhsHC25dS/q5znQtc= -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:05 2025 by rpki-client