$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: C1PkNzS3t/AA4xxyCW4Bn7+/cSxjl7nUBqf2UPCUSjo= Subject key identifier: 59:13:9E:B3:28:F2:DE:B4:E0:91:C2:A2:0E:20:58:F4:9D:8B:F7:E2 Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 5222485044BDFB263165E1EEB83CEF6AD4B8B86C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 0213 Signing time: Mon 20 Oct 2025 07:10:47 +0000 Manifest this update: Mon 20 Oct 2025 07:05:47 +0000 Manifest next update: Thu 23 Oct 2025 11:24:47 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) 2: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: pomvpzZPCglF2pWoseXHQZ4qoAAbJE15byS48Ce/ZFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:22:48:50:44:bd:fb:26:31:65:e1:ee:b8:3c:ef:6a:d4:b8:b8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Oct 20 07:05:47 2025 GMT Not After : Oct 23 11:24:47 2025 GMT Subject: CN=59139EB328F2DEB4E091C2A20E2058F49D8BF7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:44:14:46:e2:05:ae:16:d6:c2:d0:f2:b9: e3:c6:e8:4a:bd:df:b3:0d:35:dc:59:84:76:16:27: 33:88:5e:52:aa:fd:90:2b:14:b0:2f:58:45:38:ba: 7f:07:16:ce:c5:e9:56:76:9b:d3:c5:a9:27:aa:87: cb:9f:30:c5:20:1c:6c:f2:ef:a3:bb:e7:0d:9e:9b: a1:9c:f2:82:d4:09:99:79:9f:00:d9:84:96:9a:53: 22:8e:7d:80:a2:94:54:eb:d4:aa:b2:01:7b:b3:ff: d5:84:8b:d8:3d:1a:31:9c:03:0c:0c:d3:13:05:f2: 34:22:13:40:7d:dd:5a:bf:ec:fe:f7:5e:d1:41:46: f3:12:17:85:18:fd:68:9c:dd:83:42:4a:c2:25:38: 7b:bf:d5:24:f6:8c:89:1f:f9:33:24:d6:65:95:92: ed:d3:93:c2:d8:00:3a:47:89:ad:fd:41:55:ef:14: 8a:63:d4:57:f9:c0:97:3f:1a:be:f9:e5:fd:a0:96: bc:15:c7:24:37:6d:c2:0a:24:a4:a4:e0:a0:c9:aa: de:fe:a5:81:64:47:ec:66:41:60:43:26:60:38:ce: 09:f4:46:ab:45:36:bc:c0:e6:20:f1:2f:e8:41:63: a6:02:16:ad:84:70:4e:c3:3e:5a:4b:95:53:4e:78: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:9E:B3:28:F2:DE:B4:E0:91:C2:A2:0E:20:58:F4:9D:8B:F7:E2 X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:2d:38:74:6f:2f:ef:35:60:c9:ba:e1:2a:6e:fa:6f:d0:6d: 4e:9f:f2:3e:f8:eb:8b:82:cb:66:66:59:de:e2:2c:cc:08:47: a5:5b:a1:1a:df:ae:63:6a:a3:1e:b8:9b:a1:c7:20:da:bd:a4: aa:c8:28:91:c2:5d:4f:e8:84:19:ac:53:f7:3a:94:5f:95:da: d7:3c:84:e6:b7:f7:1c:4b:ed:d0:88:a8:44:6d:41:b8:93:29: 2a:1b:bf:84:97:5f:e9:64:60:ec:8a:94:db:ea:31:2f:93:91: 76:11:54:f3:7d:90:d8:8f:1f:b4:fd:c4:1b:5d:be:ac:4b:da: e4:c3:c6:6f:b0:a8:a8:47:d2:da:bd:35:7b:fa:89:cc:6c:b9: c9:85:26:3a:b4:31:5a:b9:0c:d9:b8:3d:d2:15:b1:89:f6:c3: f6:7a:24:ad:d9:d5:2e:f4:4a:a8:d4:9f:f2:ae:3e:ed:96:ce: 5f:ba:e0:2b:b5:9f:ed:a9:7b:b9:a1:31:8e:91:79:48:0c:2c: 66:2e:08:b0:ef:07:06:93:87:7b:bf:81:8d:84:a9:60:34:c3: d0:c9:f4:49:a1:47:8e:59:3f:e9:f7:b1:e2:b5:f8:14:7f:40: 29:c4:12:1d:e9:56:fe:1a:63:c8:bb:bc:31:33:c3:ed:27:6b: 3e:d6:05:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiJIUES9+yYxZeHuuDzvatS4uGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTEwMjAwNzA1NDdaFw0yNTEwMjMxMTI0NDdaMDMxMTAvBgNV BAMTKDU5MTM5RUIzMjhGMkRFQjRFMDkxQzJBMjBFMjA1OEY0OUQ4QkY3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wEQURuIFrhbWwtDyuePG6Eq9 37MNNdxZhHYWJzOIXlKq/ZArFLAvWEU4un8HFs7F6VZ2m9PFqSeqh8ufMMUgHGzy 76O75w2em6Gc8oLUCZl5nwDZhJaaUyKOfYCilFTr1KqyAXuz/9WEi9g9GjGcAwwM 0xMF8jQiE0B93Vq/7P73XtFBRvMSF4UY/Wic3YNCSsIlOHu/1ST2jIkf+TMk1mWV ku3Tk8LYADpHia39QVXvFIpj1Ff5wJc/Gr755f2glrwVxyQ3bcIKJKSk4KDJqt7+ pYFkR+xmQWBDJmA4zgn0RqtFNrzA5iDxL+hBY6YCFq2EcE7DPlpLlVNOeMzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWROesyjy3rTgkcKiDiBY9J2L9+IwHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANotOHRvL+81YMm64Spu+m/QbU6f8j7464uC y2ZmWd7iLMwIR6VboRrfrmNqox64m6HHINq9pKrIKJHCXU/ohBmsU/c6lF+V2tc8 hOa39xxL7dCIqERtQbiTKSobv4SXX+lkYOyKlNvqMS+TkXYRVPN9kNiPH7T9xBtd vqxL2uTDxm+wqKhH0tq9NXv6icxsucmFJjq0MVq5DNm4PdIVsYn2w/Z6JK3Z1S70 SqjUn/KuPu2Wzl+64Cu1n+2pe7mhMY6ReUgMLGYuCLDvBwaTh3u/gY2EqWA0w9DJ 9EmhR45ZP+n3seK1+BR/QCnEEh3pVv4aY8i7vDEzw+0naz7WBRE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:42 2025 by rpki-client