$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: rAreJo2FoDW2u61+2d55983AxvRq6yqPedoPr1v6Plo= Subject key identifier: E8:BC:37:8E:BB:D3:32:C1:9A:2D:C9:14:D4:14:03:99:3C:8F:75:D0 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 12771E5637B82C9B3C3C71131C0DC3375C7A6610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 0226 Signing time: Sun 19 Oct 2025 02:11:06 +0000 Manifest this update: Sun 19 Oct 2025 02:06:06 +0000 Manifest next update: Wed 22 Oct 2025 12:47:06 +0000 Files and hashes: 1: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: 1zHrLRIfSwtUJqU7sjVm5z64QY+W/J1LRY/3K6sJ/IY=) 2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 4: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:77:1e:56:37:b8:2c:9b:3c:3c:71:13:1c:0d:c3:37:5c:7a:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Oct 19 02:06:06 2025 GMT Not After : Oct 22 12:47:06 2025 GMT Subject: CN=E8BC378EBBD332C19A2DC914D41403993C8F75D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:19:88:bd:85:e4:7e:96:b5:62:7f:64:ff: 5e:17:e5:de:c1:23:db:eb:e3:b4:a5:de:69:14:a7: 44:fc:e5:22:5d:9e:14:75:d2:7f:f4:b3:73:21:8d: 00:43:35:b7:29:47:f3:f1:0d:6b:4e:84:b9:ae:d0: ae:a5:09:93:fa:f1:b9:76:a7:d1:6f:74:5f:ac:7d: c3:11:b4:98:ca:22:b8:91:84:83:ad:0e:96:9f:5b: 04:b8:10:91:46:34:82:cf:93:bc:de:fa:ff:57:b9: 8d:8f:99:56:c5:8d:42:ff:4d:9b:c3:22:1d:d1:a4: 85:63:0d:58:74:da:9f:b3:a7:6b:10:37:20:b4:ee: d8:76:99:6c:a9:f4:97:ee:c2:f7:d1:e7:55:fb:16: 94:f1:62:0e:ec:bc:ba:16:1d:31:0a:9d:34:3f:aa: d2:37:9d:22:6c:a9:40:59:c0:a9:a0:18:ca:9a:b9: 7a:54:c8:b7:04:71:6c:98:75:2e:29:ed:b8:e8:3c: 98:47:18:6d:e8:a7:33:99:54:16:d2:e2:05:07:3f: 08:f3:ae:0f:4c:3a:19:b9:e2:13:49:cc:57:d6:a6: ae:b0:25:bc:c6:f2:3a:36:2a:c0:95:00:db:c6:c0: 9b:1c:6c:65:a6:d2:fb:8d:8b:65:db:d4:81:9b:dd: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:37:8E:BB:D3:32:C1:9A:2D:C9:14:D4:14:03:99:3C:8F:75:D0 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c0:65:de:26:42:37:cf:22:ba:15:87:a3:59:b8:ad:27:6d: 07:6f:1f:81:1a:9e:7e:7e:87:34:b0:e9:a9:73:b5:3f:c3:87: 9c:1e:3c:36:45:c7:10:2f:aa:b5:ca:6d:55:fc:46:eb:42:c2: 99:e8:77:0e:a1:35:da:a4:e7:8d:cd:a0:b1:67:a0:0c:6b:71: ed:18:a4:be:bd:86:5a:00:3a:ca:8d:b0:40:e5:c2:90:f3:2e: de:46:63:f0:ff:88:32:a7:47:1c:c3:3d:d6:f2:28:31:c8:72: 59:10:03:27:b9:37:40:42:a0:c4:9e:16:63:91:4e:4d:ba:47: c1:65:4e:b4:6a:7b:ad:b9:c9:36:13:05:a4:ac:2d:8f:da:fa: 72:cf:91:f9:e2:b5:eb:85:45:08:26:26:4e:32:cc:f8:78:35: 28:a8:1e:f1:54:1e:ed:93:36:fc:ec:04:20:b7:39:1b:3b:3d: 79:ba:d8:f5:e9:4d:2a:73:3b:c2:c1:4d:d7:82:8a:22:ef:e3: 4e:11:89:a1:71:3c:14:91:fa:9c:93:44:d5:a2:65:3f:34:78: c5:d1:6d:cf:90:01:d0:32:f5:e8:ed:01:6a:ef:b5:b4:03:1e: 3e:55:aa:95:0f:d8:f4:a7:9b:5b:3b:6d:15:90:08:de:83:9f: 12:7b:25:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnceVje4LJs8PHETHA3DN1x6ZhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTEwMTkwMjA2MDZaFw0yNTEwMjIxMjQ3MDZaMDMxMTAvBgNV BAMTKEU4QkMzNzhFQkJEMzMyQzE5QTJEQzkxNEQ0MTQwMzk5M0M4Rjc1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcRmIvYXkfpa1Yn9k/14X5d7B I9vr47Sl3mkUp0T85SJdnhR10n/0s3MhjQBDNbcpR/PxDWtOhLmu0K6lCZP68bl2 p9FvdF+sfcMRtJjKIriRhIOtDpafWwS4EJFGNILPk7ze+v9XuY2PmVbFjUL/TZvD Ih3RpIVjDVh02p+zp2sQNyC07th2mWyp9JfuwvfR51X7FpTxYg7svLoWHTEKnTQ/ qtI3nSJsqUBZwKmgGMqauXpUyLcEcWyYdS4p7bjoPJhHGG3opzOZVBbS4gUHPwjz rg9MOhm54hNJzFfWpq6wJbzG8jo2KsCVANvGwJscbGWm0vuNi2Xb1IGb3fw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Lw3jrvTMsGaLckU1BQDmTyPddAwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLAZd4mQjfPIroVh6NZuK0nbQdvH4Eann5+ hzSw6alztT/Dh5wePDZFxxAvqrXKbVX8RutCwpnodw6hNdqk543NoLFnoAxrce0Y pL69hloAOsqNsEDlwpDzLt5GY/D/iDKnRxzDPdbyKDHIclkQAye5N0BCoMSeFmOR Tk26R8FlTrRqe625yTYTBaSsLY/a+nLPkfniteuFRQgmJk4yzPh4NSioHvFUHu2T NvzsBCC3ORs7PXm62PXpTSpzO8LBTdeCiiLv404RiaFxPBSR+pyTRNWiZT80eMXR bc+QAdAy9ejtAWrvtbQDHj5VqpUP2PSnm1s7bRWQCN6DnxJ7JbM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:00 2025 by rpki-client