$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: uTnrM4wAA9ycCQOWZIlQvxTu6ebfsYzyq9jp7y8K8ws= Subject key identifier: 5B:74:65:28:21:4A:E1:55:27:BC:B8:4B:B2:93:3C:62:32:C2:8C:1E Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 55DFB3E08A39C7878B0586A31E13B958FA63B517 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 0515 Signing time: Mon 20 Oct 2025 06:01:29 +0000 Manifest this update: Mon 20 Oct 2025 05:56:29 +0000 Manifest next update: Thu 23 Oct 2025 08:57:29 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: 7CqgVBsROtdI2Xl2XOR8R92B49qjwNv1KAjBO8cg5GM=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:df:b3:e0:8a:39:c7:87:8b:05:86:a3:1e:13:b9:58:fa:63:b5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Oct 20 05:56:29 2025 GMT Not After : Oct 23 08:57:29 2025 GMT Subject: CN=5B746528214AE15527BCB84BB2933C6232C28C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:74:5f:f8:16:73:6e:11:f9:cd:85:7b:f1: a4:13:95:62:30:53:bb:ba:5d:a3:a2:c5:7d:62:ee: 9e:46:7b:ed:a2:dd:a0:05:b2:5a:92:b7:06:e6:92: 8a:cb:c4:e6:a9:5a:92:70:c8:81:a2:33:ae:47:d6: 51:6b:12:a6:c0:ab:a9:90:5f:23:f4:3e:ca:87:f5: ac:43:14:b5:14:1e:19:c0:7d:75:2b:e8:16:bb:91: d9:ca:3d:72:37:7e:f4:07:fe:d4:72:29:99:ce:0f: 40:f4:3a:e6:0e:e8:b8:1f:9f:72:a8:14:78:e9:50: 37:01:40:59:74:a0:60:99:82:08:df:ad:06:76:10: 40:4e:b4:61:90:4d:76:48:c1:bc:a2:c0:13:51:1d: 5b:9e:bd:2e:20:19:56:8d:67:a2:49:a1:de:89:03: 41:3e:74:53:1b:ad:b5:47:09:e0:0f:36:38:03:c1: e8:45:d0:e5:34:11:de:a8:f8:1b:68:68:14:14:a1: 89:b3:90:46:1f:ee:92:32:86:83:d1:5a:52:c3:76: 02:6b:a5:d6:59:8c:3f:02:7c:d7:b6:02:30:67:87: 8c:ed:2e:b0:45:d5:45:c6:c2:17:4a:2d:bc:1a:31: 0e:90:c3:c2:3d:05:fb:1a:20:25:ea:a4:82:5b:96: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:74:65:28:21:4A:E1:55:27:BC:B8:4B:B2:93:3C:62:32:C2:8C:1E X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f4:ef:b1:6e:91:c6:bb:a8:6f:13:bc:f6:f5:5d:b3:cf:5f: 54:fb:58:2a:d0:c8:ae:d2:8d:a6:3a:26:0c:04:1b:99:47:93: 77:1c:35:7f:d4:2d:24:2e:3a:c2:ed:c4:29:85:17:af:61:da: 30:d4:1a:c6:c5:77:8f:5f:39:2b:25:3d:ac:58:cb:18:5c:aa: dd:0b:80:b6:08:17:4c:26:01:13:b9:d8:9f:ce:88:d7:59:4f: 5b:45:78:a7:e4:5c:bb:03:87:38:d4:6e:47:ff:5f:c9:e6:0a: 74:2f:5d:c2:50:4f:a4:b4:89:a8:a8:eb:80:b9:4e:4d:37:44: bb:0f:12:36:20:bd:47:ce:9a:ec:c0:f1:be:4b:98:b4:9b:3f: ee:02:2d:bf:fd:9c:09:5e:25:5c:38:90:7e:08:1e:dc:6c:a4: f0:45:d2:c6:db:e1:80:d5:bb:ca:32:2d:66:cc:44:e9:12:42: e3:24:61:87:4b:14:4e:c4:8b:00:12:73:e3:a5:2f:ce:ab:ba: f7:d0:5c:3c:32:3b:3e:6d:ae:53:34:89:0d:7f:9a:9f:85:b7: 8d:74:17:c4:c9:4c:8c:7e:f2:3a:68:bc:f3:0d:d3:16:be:4d: 88:db:6f:f6:7d:11:21:c7:4f:1c:65:26:51:fa:84:74:d5:dc: c4:cc:ca:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVd+z4Io5x4eLBYajHhO5WPpjtRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTEwMjAwNTU2MjlaFw0yNTEwMjMwODU3MjlaMDMxMTAvBgNV BAMTKDVCNzQ2NTI4MjE0QUUxNTUyN0JDQjg0QkIyOTMzQzYyMzJDMjhDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfHRf+BZzbhH5zYV78aQTlWIw U7u6XaOixX1i7p5Ge+2i3aAFslqStwbmkorLxOapWpJwyIGiM65H1lFrEqbAq6mQ XyP0PsqH9axDFLUUHhnAfXUr6Ba7kdnKPXI3fvQH/tRyKZnOD0D0OuYO6Lgfn3Ko FHjpUDcBQFl0oGCZggjfrQZ2EEBOtGGQTXZIwbyiwBNRHVuevS4gGVaNZ6JJod6J A0E+dFMbrbVHCeAPNjgDwehF0OU0Ed6o+BtoaBQUoYmzkEYf7pIyhoPRWlLDdgJr pdZZjD8CfNe2AjBnh4ztLrBF1UXGwhdKLbwaMQ6Qw8I9BfsaICXqpIJblko1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3RlKCFK4VUnvLhLspM8YjLCjB4wHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn077Fukca7qG8TvPb1XbPPX1T7WCrQyK7S jaY6JgwEG5lHk3ccNX/ULSQuOsLtxCmFF69h2jDUGsbFd49fOSslPaxYyxhcqt0L gLYIF0wmARO52J/OiNdZT1tFeKfkXLsDhzjUbkf/X8nmCnQvXcJQT6S0iaio64C5 Tk03RLsPEjYgvUfOmuzA8b5LmLSbP+4CLb/9nAleJVw4kH4IHtxspPBF0sbb4YDV u8oyLWbMROkSQuMkYYdLFE7EiwASc+OlL86ruvfQXDwyOz5trlM0iQ1/mp+Ft410 F8TJTIx+8jpovPMN0xa+TYjbb/Z9ESHHTxxlJlH6hHTV3MTMygU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:14 2025 by rpki-client