$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: ofnVYhjlDtRGyHNM0dZCZvJ/sHpNSGpRaSEbcVKuIdI= Subject key identifier: B7:BB:5E:DC:3E:DD:28:4D:03:7F:AB:C9:4C:8A:50:E6:2B:2F:A3:F2 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 518C33EBE651275CCABD48530EAF93FFDF3B0E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 04D8 Signing time: Sun 19 Oct 2025 12:41:54 +0000 Manifest this update: Sun 19 Oct 2025 12:36:54 +0000 Manifest next update: Wed 22 Oct 2025 19:54:54 +0000 Files and hashes: 1: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: R8ClapgqhDQNTR4qCAQXyIMgxXcQPiQFMr61XuCZIrk=) 2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8c:33:eb:e6:51:27:5c:ca:bd:48:53:0e:af:93:ff:df:3b:0e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Oct 19 12:36:54 2025 GMT Not After : Oct 22 19:54:54 2025 GMT Subject: CN=B7BB5EDC3EDD284D037FABC94C8A50E62B2FA3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:3c:69:1c:19:ef:16:45:8b:61:5a:d1:3f: 55:47:9d:bb:9b:cc:f2:ca:54:a0:a8:07:13:35:c6: 4c:09:8b:b4:74:7e:21:55:05:bb:99:8f:e2:7e:34: 08:89:e2:a4:5d:14:3b:06:a7:06:50:0f:98:a5:5d: 08:fb:4b:94:91:da:ad:11:08:9e:47:d0:f3:d5:78: d8:e9:4c:ca:36:b1:67:33:e8:c0:de:d3:33:d3:bd: 6d:3e:ae:8e:58:a5:88:33:a1:d1:dd:18:bf:c0:61: e4:01:b6:9e:76:ee:4f:18:c1:3d:52:b5:11:d6:e7: f1:3f:d5:94:a0:54:ce:03:92:4e:1f:22:81:63:83: a4:ea:30:49:60:81:78:f2:a4:58:ec:6e:11:3f:fa: 53:93:3a:b5:f2:86:e4:f6:2f:c6:fd:00:90:b7:a5: ca:58:8b:7f:7c:fd:f4:f6:a2:44:67:19:6c:97:26: a8:14:95:0c:e0:10:55:42:bc:4b:20:73:c3:80:f6: 45:96:e0:57:a6:59:e0:c7:e6:45:34:63:26:70:34: ce:5e:20:ef:82:84:3e:99:ab:86:79:45:d8:88:fd: 57:e9:34:89:2d:ba:ff:d2:07:7d:91:9a:d2:b8:d9: 40:30:92:11:68:09:24:91:5b:cd:b0:17:9b:4c:e3: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:5E:DC:3E:DD:28:4D:03:7F:AB:C9:4C:8A:50:E6:2B:2F:A3:F2 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:82:c1:14:c7:3e:f1:5d:3c:59:6d:88:f5:91:eb:ea:28:b7: ab:81:70:ca:31:02:25:88:9a:a0:f1:c2:3f:65:97:68:8d:c0: d9:ff:a5:7d:02:fa:db:78:c7:98:33:10:04:72:4a:90:c6:31: 18:e6:b3:62:95:c6:7e:d0:6e:ae:86:7d:34:0c:3c:95:a9:fc: d1:be:46:04:09:7d:fa:72:dc:d2:74:03:2e:37:ea:6d:c7:d9: db:60:00:45:91:f2:a3:aa:14:5a:60:cc:a2:c6:de:d9:73:ea: 04:4b:e5:af:79:56:ee:12:78:b1:24:7b:e0:f1:85:60:5f:15: 86:41:e3:29:91:15:73:6e:71:9c:70:af:43:4f:79:a3:2d:e6: e7:e2:eb:7f:fd:78:fe:55:f5:69:43:d0:bf:36:cc:cd:88:13: 0a:d3:33:75:01:3b:45:73:fd:03:e8:e0:82:d5:c6:24:e7:45: df:2a:ac:6a:32:58:5c:0c:a8:b1:1c:6d:3e:af:4c:f8:25:28: e1:5a:2c:9b:da:58:7d:e8:1a:d9:ee:a1:1b:80:2e:78:8a:d3: 36:04:77:2e:1e:21:cc:59:a1:96:f7:df:3c:d9:58:20:8f:14: 0b:b3:61:8b:62:09:4c:a7:4d:77:c1:e2:b4:69:89:a1:d2:8a: 25:e3:f6:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYwz6+ZRJ1zKvUhTDq+T/987DoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTEwMTkxMjM2NTRaFw0yNTEwMjIxOTU0NTRaMDMxMTAvBgNV BAMTKEI3QkI1RURDM0VERDI4NEQwMzdGQUJDOTRDOEE1MEU2MkIyRkEzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgjxpHBnvFkWLYVrRP1VHnbub zPLKVKCoBxM1xkwJi7R0fiFVBbuZj+J+NAiJ4qRdFDsGpwZQD5ilXQj7S5SR2q0R CJ5H0PPVeNjpTMo2sWcz6MDe0zPTvW0+ro5YpYgzodHdGL/AYeQBtp527k8YwT1S tRHW5/E/1ZSgVM4Dkk4fIoFjg6TqMElggXjypFjsbhE/+lOTOrXyhuT2L8b9AJC3 pcpYi398/fT2okRnGWyXJqgUlQzgEFVCvEsgc8OA9kWW4FemWeDH5kU0YyZwNM5e IO+ChD6Zq4Z5RdiI/VfpNIktuv/SB32RmtK42UAwkhFoCSSRW82wF5tM4yK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7te3D7dKE0Df6vJTIpQ5isvo/IwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKCwRTHPvFdPFltiPWR6+oot6uBcMoxAiWI mqDxwj9ll2iNwNn/pX0C+tt4x5gzEARySpDGMRjms2KVxn7Qbq6GfTQMPJWp/NG+ RgQJffpy3NJ0Ay436m3H2dtgAEWR8qOqFFpgzKLG3tlz6gRL5a95Vu4SeLEke+Dx hWBfFYZB4ymRFXNucZxwr0NPeaMt5ufi63/9eP5V9WlD0L82zM2IEwrTM3UBO0Vz /QPo4ILVxiTnRd8qrGoyWFwMqLEcbT6vTPglKOFaLJvaWH3oGtnuoRuALniK0zYE dy4eIcxZoZb33zzZWCCPFAuzYYtiCUynTXfB4rRpiaHSiiXj9mg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:24 2025 by rpki-client