$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: Uf18OIaVyQZz+2v7QhfDOhOcmiCz2baiLlzhAvHQpQ4= Subject key identifier: 2B:77:16:38:2C:2B:47:F2:E4:A6:93:35:5C:5C:8A:0C:DF:86:99:7D Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 4BD11A45611409308861D5EA236EE11F091C7A78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 13:10:40 +0000 Manifest this update: Sun 19 Oct 2025 13:05:40 +0000 Manifest next update: Wed 22 Oct 2025 18:57:40 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: LH4vRLjg/rU2pQvkgnnuDBVDMexy6wiyYrKI0ylv3xI=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d1:1a:45:61:14:09:30:88:61:d5:ea:23:6e:e1:1f:09:1c:7a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Oct 19 13:05:40 2025 GMT Not After : Oct 22 18:57:40 2025 GMT Subject: CN=2B7716382C2B47F2E4A693355C5C8A0CDF86997D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:5f:a4:c3:01:cf:30:f7:32:0d:fe:2d:9d: 88:0f:58:0a:41:9d:4b:cc:fc:c5:d7:34:5e:95:0a: cc:f0:d5:2e:bc:a3:3a:12:d1:8e:56:b8:ac:35:4e: 3a:e4:bb:36:80:58:85:68:a8:36:71:65:35:01:79: 96:6b:34:a1:10:df:e9:c1:1f:88:ac:75:f5:4a:19: c1:2c:96:c9:e3:1b:44:d6:eb:55:c0:9b:fe:1f:9a: f5:b7:47:e4:d0:5e:e1:3e:10:88:98:df:5b:1b:c1: de:0d:81:32:71:02:77:8b:2a:cd:44:a0:2f:50:27: 2d:fc:3d:b0:0b:96:38:5a:99:5a:67:6c:46:7f:e8: 91:02:33:c2:f8:88:69:e2:fc:82:83:43:d2:b1:a6: 51:a5:74:3e:64:42:ff:70:43:56:dd:94:11:71:79: 35:1b:ca:d3:1f:64:59:0b:51:83:c6:c0:59:02:2c: 88:d5:fd:1e:4f:49:e1:e1:cf:a4:54:48:9e:31:08: 11:2e:7f:e6:75:6c:38:1a:21:49:32:91:9d:fb:22: 96:42:21:9a:f2:d8:ac:8c:e0:46:b2:f6:d0:79:ed: 74:af:72:2c:59:ae:c0:f8:ed:6a:f8:d3:34:96:33: e4:60:72:c2:a8:95:2e:cf:2d:e6:a2:87:0e:45:fe: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:16:38:2C:2B:47:F2:E4:A6:93:35:5C:5C:8A:0C:DF:86:99:7D X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:22:71:7e:a7:83:d1:fc:4a:92:60:0e:f5:7b:9c:f4:07: 27:51:af:d9:75:dd:e5:1f:64:6c:b0:d8:cb:fc:f5:1c:56:58: 1a:04:e4:65:55:39:e4:81:94:9a:af:ec:2d:9b:43:d3:c3:75: 04:6f:72:89:60:dc:cd:94:8f:a8:66:44:c4:33:98:e7:1d:0d: fa:43:05:b2:c7:82:e4:8e:51:a7:e0:14:07:e4:50:cc:63:b5: b5:47:7c:c8:f2:7a:2a:7b:77:ba:51:d0:57:14:db:bc:72:ed: e8:80:cb:75:33:1d:ea:f0:4f:f9:ca:21:f5:1b:2b:57:ed:d4: 53:48:b1:a4:f8:82:de:e6:d9:66:f5:ba:db:fe:67:7d:f6:59: 32:0f:62:5c:51:42:7f:c7:a6:9f:89:7d:66:35:42:5d:30:c6: 3e:34:5f:07:02:32:0e:4b:0b:32:a4:7a:27:6f:f6:a7:20:65: 86:e7:19:32:2b:83:e8:14:62:af:c3:a5:46:6d:ee:b5:82:4f: 9c:e8:65:14:d9:2a:56:8e:26:47:c4:6b:32:17:b4:69:0b:13: 85:c1:a0:62:d6:18:74:52:d3:24:21:8a:85:21:0e:bb:15:fe: 8d:cc:7e:1a:63:13:ff:ad:cd:05:4d:73:94:04:71:6c:14:61: d6:01:f7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9EaRWEUCTCIYdXqI27hHwkcengwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTEwMTkxMzA1NDBaFw0yNTEwMjIxODU3NDBaMDMxMTAvBgNV BAMTKDJCNzcxNjM4MkMyQjQ3RjJFNEE2OTMzNTVDNUM4QTBDREY4Njk5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrcF+kwwHPMPcyDf4tnYgPWApB nUvM/MXXNF6VCszw1S68ozoS0Y5WuKw1TjrkuzaAWIVoqDZxZTUBeZZrNKEQ3+nB H4isdfVKGcEslsnjG0TW61XAm/4fmvW3R+TQXuE+EIiY31sbwd4NgTJxAneLKs1E oC9QJy38PbALljhamVpnbEZ/6JECM8L4iGni/IKDQ9KxplGldD5kQv9wQ1bdlBFx eTUbytMfZFkLUYPGwFkCLIjV/R5PSeHhz6RUSJ4xCBEuf+Z1bDgaIUkykZ37IpZC IZry2KyM4Eay9tB57XSvcixZrsD47Wr40zSWM+RgcsKolS7PLeaihw5F/kcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3cWOCwrR/LkppM1XFyKDN+GmX0wHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpEInF+p4PR/EqSYA71e5z0BydRr9l13eUf ZGyw2Mv89RxWWBoE5GVVOeSBlJqv7C2bQ9PDdQRvcolg3M2Uj6hmRMQzmOcdDfpD BbLHguSOUafgFAfkUMxjtbVHfMjyeip7d7pR0FcU27xy7eiAy3UzHerwT/nKIfUb K1ft1FNIsaT4gt7m2Wb1utv+Z332WTIPYlxRQn/Hpp+JfWY1Ql0wxj40XwcCMg5L CzKkeidv9qcgZYbnGTIrg+gUYq/DpUZt7rWCT5zoZRTZKlaOJkfEazIXtGkLE4XB oGLWGHRS0yQhioUhDrsV/o3MfhpjE/+tzQVNc5QEcWwUYdYB92k= -----END CERTIFICATE-----Generated at Tue Oct 21 01:58:33 2025 by rpki-client