$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: WxmoC+aL3aIEcAgs8WmQHy6OxcjjiBSny+c1xIHjIZI= Subject key identifier: 34:CC:4D:B7:8D:DC:FF:F0:17:55:DE:F2:53:7F:B3:D6:E6:11:77:6B Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 67BDCBF4CE831A558ADDEB94BC77CDBC5813BD73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0186 Signing time: Sun 19 Oct 2025 10:41:18 +0000 Manifest this update: Sun 19 Oct 2025 10:36:18 +0000 Manifest next update: Wed 22 Oct 2025 18:31:18 +0000 Files and hashes: 1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=) 3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: WbRZ/a0YSdw8h9zWwkdsNm8SRhl4c2mOGUxonb2ODcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bd:cb:f4:ce:83:1a:55:8a:dd:eb:94:bc:77:cd:bc:58:13:bd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Oct 19 10:36:18 2025 GMT Not After : Oct 22 18:31:18 2025 GMT Subject: CN=34CC4DB78DDCFFF01755DEF2537FB3D6E611776B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:a3:ee:26:05:68:ce:61:db:10:f9:fc:44: d8:1e:62:8b:09:06:cd:38:fd:1b:61:73:b6:b2:f1: 77:e5:75:7e:1e:46:c0:0c:da:bd:bd:e0:76:b4:4d: 5a:89:ec:63:be:2c:3c:32:9e:16:ab:eb:36:92:1d: 73:14:29:b8:1c:66:d8:50:af:c5:ae:55:59:5a:d7: f9:8c:18:c7:b1:e5:73:97:90:88:ab:fa:21:de:8b: 32:02:40:93:30:73:b3:2e:3b:54:44:81:09:86:de: 2c:da:b6:c9:75:bd:06:7d:2c:f8:87:65:d3:e2:65: 3a:e0:8d:4c:02:a2:b4:50:48:3c:67:c8:8e:18:4e: 5a:98:32:7a:a4:2a:1c:f7:bb:93:98:17:17:a4:c1: 8f:6b:68:66:86:f5:a2:10:f3:06:82:46:73:4f:c1: 53:9a:35:f1:67:32:1a:2c:cf:6a:a8:a1:a1:11:a3: da:34:46:9c:11:3a:0d:4e:b1:bd:dc:9b:7d:74:3d: 02:63:16:ad:6b:07:8f:40:c1:1f:eb:95:45:24:5c: d9:5e:ac:8f:cf:1a:3a:ef:95:08:e3:02:77:5b:95: 9e:b4:c1:bf:fe:23:68:a4:28:28:e1:d5:cf:38:af: f8:f2:19:67:19:10:8f:62:89:5b:03:85:1f:31:db: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:4D:B7:8D:DC:FF:F0:17:55:DE:F2:53:7F:B3:D6:E6:11:77:6B X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:62:76:28:94:ce:f8:0d:af:61:27:1b:0a:46:00:fe:ce:5c: 5d:b8:1c:71:c4:1e:9f:23:41:a7:2a:0f:15:e2:a7:27:c9:e1: 2e:a1:6b:a8:27:29:b7:86:f8:53:0e:ba:72:b9:b6:be:2b:7c: 27:86:bc:fe:96:97:5b:c1:c1:6b:f5:92:dd:69:5f:de:15:a1: 2a:e0:88:e3:5f:74:1a:74:a3:5e:59:a0:8d:d9:49:87:d4:6a: 3e:8b:8c:87:73:a8:ef:4a:0e:ff:e7:24:bb:3f:a8:b8:64:98: bc:66:e6:25:31:14:e2:19:8a:4f:fc:c0:53:75:0c:12:df:13: 65:38:1e:02:64:2c:d3:b2:40:30:cc:46:1a:6e:40:56:8b:2a: 20:6d:a3:a3:a6:f5:be:e5:fd:5e:66:19:05:49:7c:56:8e:20: bf:fe:12:7d:83:39:6e:11:ff:d4:18:0a:a3:1e:62:2c:01:28: 37:6f:e4:aa:37:2f:69:55:d8:7e:62:65:41:40:fa:c6:16:66: f4:dd:9a:1e:e2:51:f2:df:1b:b2:82:a4:5a:14:b5:0b:77:e4: 55:5b:14:34:08:fb:2a:ac:67:2f:49:17:90:fd:a3:b8:8c:4c: 6c:ae:87:c1:fd:11:9b:56:da:42:5d:31:97:76:4d:ae:df:19: cb:f9:9c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ73L9M6DGlWK3euUvHfNvFgTvXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTEwMTkxMDM2MThaFw0yNTEwMjIxODMxMThaMDMxMTAvBgNV BAMTKDM0Q0M0REI3OEREQ0ZGRjAxNzU1REVGMjUzN0ZCM0Q2RTYxMTc3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuXKPuJgVozmHbEPn8RNgeYosJ Bs04/Rthc7ay8XfldX4eRsAM2r294Ha0TVqJ7GO+LDwynhar6zaSHXMUKbgcZthQ r8WuVVla1/mMGMex5XOXkIir+iHeizICQJMwc7MuO1REgQmG3izatsl1vQZ9LPiH ZdPiZTrgjUwCorRQSDxnyI4YTlqYMnqkKhz3u5OYFxekwY9raGaG9aIQ8waCRnNP wVOaNfFnMhosz2qooaERo9o0RpwROg1Osb3cm310PQJjFq1rB49AwR/rlUUkXNle rI/PGjrvlQjjAndblZ60wb/+I2ikKCjh1c84r/jyGWcZEI9iiVsDhR8x24X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNMxNt43c//AXVd7yU3+z1uYRd2swHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtidiiUzvgNr2EnGwpGAP7OXF24HHHEHp8j QacqDxXipyfJ4S6ha6gnKbeG+FMOunK5tr4rfCeGvP6Wl1vBwWv1kt1pX94VoSrg iONfdBp0o15ZoI3ZSYfUaj6LjIdzqO9KDv/nJLs/qLhkmLxm5iUxFOIZik/8wFN1 DBLfE2U4HgJkLNOyQDDMRhpuQFaLKiBto6Om9b7l/V5mGQVJfFaOIL/+En2DOW4R /9QYCqMeYiwBKDdv5Ko3L2lV2H5iZUFA+sYWZvTdmh7iUfLfG7KCpFoUtQt35FVb FDQI+yqsZy9JF5D9o7iMTGyuh8H9EZtW2kJdMZd2Ta7fGcv5nGM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:14 2025 by rpki-client