$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: KLFI0Pq2/fJ991X67eIWyctXBTj3WDVkVu+1dXqB5b4= Subject key identifier: A4:56:AD:DB:58:1A:14:9A:A1:66:BE:00:B3:49:BA:62:A0:5B:DD:50 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 1F38A0A24A7EDB8EB64744E77D83D5ED6075614D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0229 Signing time: Sat 18 Oct 2025 23:52:03 +0000 Manifest this update: Sat 18 Oct 2025 23:47:03 +0000 Manifest next update: Wed 22 Oct 2025 02:31:03 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: E7gjlnpUQ3lHCGe3MI9BW3tSIK7B80y6rHdKuUmOuFg=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:38:a0:a2:4a:7e:db:8e:b6:47:44:e7:7d:83:d5:ed:60:75:61:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Oct 18 23:47:03 2025 GMT Not After : Oct 22 02:31:03 2025 GMT Subject: CN=A456ADDB581A149AA166BE00B349BA62A05BDD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:07:1b:d8:2c:cc:49:c7:08:0c:3e:01:88: d5:5b:52:14:94:2a:ef:5d:09:2a:76:39:c0:d7:37: bf:df:41:f5:f3:34:1c:45:c9:20:1a:5d:cb:a4:6f: d5:59:e3:d1:c0:8d:45:d9:61:6b:1e:8a:ba:8d:fe: 3b:ca:f6:7c:05:83:26:5f:3d:f7:04:c8:e0:80:da: de:e6:23:79:55:55:3a:cc:9a:57:c2:49:57:c5:17: 6d:73:f6:72:51:b5:22:cf:28:84:dd:0e:91:3d:9f: a2:1b:56:da:d7:c9:ac:0f:53:f8:28:5f:c7:ad:2a: 9b:09:fe:3c:b4:c8:d2:1c:2a:78:e6:d5:8e:9d:02: 6d:e0:2f:5d:c7:96:09:66:a9:30:de:05:53:d5:2e: f8:84:2b:a5:2b:8a:a3:92:13:c0:ea:69:19:73:f5: 99:f7:4c:9d:dc:11:80:6f:c2:a6:16:54:c3:45:b9: d6:9f:83:8e:72:d5:4e:5d:79:b4:a3:ec:1c:1b:d0: a8:a7:e2:f5:bc:17:f8:06:0b:d4:06:01:59:1d:73: 79:9f:a1:e0:97:96:7c:c2:5f:dc:28:dc:6e:66:20: ca:be:70:64:90:23:de:fe:6d:1c:12:94:35:f0:0b: 2e:92:d1:cf:73:df:0e:a3:fa:fc:60:d0:58:17:48: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:AD:DB:58:1A:14:9A:A1:66:BE:00:B3:49:BA:62:A0:5B:DD:50 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:fc:fc:df:28:29:96:8d:e8:61:a3:1b:b0:b3:5a:e0:41: 0e:d3:40:a3:ba:6e:5c:4b:c5:06:8d:ad:25:eb:44:59:42:74: 02:19:57:a1:12:cd:86:35:d4:6c:dc:80:de:b4:cf:28:d8:2e: 56:e2:68:08:27:06:77:4d:0f:a5:f5:be:2c:14:29:3f:dc:4e: dc:81:c0:bb:ad:24:70:ce:37:a6:08:1d:ee:53:4d:bf:6f:7b: 24:4d:f8:79:1d:a1:25:a3:2e:47:34:36:0a:54:ad:cd:18:99: 64:60:91:00:65:f6:d4:69:64:eb:91:27:c4:94:c6:95:76:c9: c0:da:f4:b1:2e:fa:af:59:a8:26:58:60:75:de:10:f9:13:16: 2c:8a:77:22:b2:d3:04:51:a9:23:bf:2f:11:65:94:77:13:21: 46:1e:d1:4e:2b:ec:8a:b6:36:50:78:5d:69:73:20:a2:bd:12: 57:23:8e:93:eb:32:dd:d3:e5:aa:b3:3d:81:e9:08:9d:13:c9: e1:74:92:5f:39:82:57:07:72:2b:1a:52:6e:a5:d6:2c:a1:1b: a0:ab:15:57:14:fb:db:51:c5:f7:2d:3c:5f:7e:4c:43:26:30: db:48:f5:40:0a:90:34:a0:59:2b:ae:92:20:69:7f:4e:9a:7a: 91:52:47:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzigokp+2462R0TnfYPV7WB1YU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTEwMTgyMzQ3MDNaFw0yNTEwMjIwMjMxMDNaMDMxMTAvBgNV BAMTKEE0NTZBRERCNTgxQTE0OUFBMTY2QkUwMEIzNDlCQTYyQTA1QkRENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xgcb2CzMSccIDD4BiNVbUhSU Ku9dCSp2OcDXN7/fQfXzNBxFySAaXcukb9VZ49HAjUXZYWseirqN/jvK9nwFgyZf PfcEyOCA2t7mI3lVVTrMmlfCSVfFF21z9nJRtSLPKITdDpE9n6IbVtrXyawPU/go X8etKpsJ/jy0yNIcKnjm1Y6dAm3gL13HlglmqTDeBVPVLviEK6UriqOSE8DqaRlz 9Zn3TJ3cEYBvwqYWVMNFudafg45y1U5debSj7Bwb0Kin4vW8F/gGC9QGAVkdc3mf oeCXlnzCX9wo3G5mIMq+cGSQI97+bRwSlDXwCy6S0c9z3w6j+vxg0FgXSH53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFat21gaFJqhZr4As0m6YqBb3VAwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8n/PzfKCmWjehhoxuws1rgQQ7TQKO6blxL xQaNrSXrRFlCdAIZV6ESzYY11GzcgN60zyjYLlbiaAgnBndND6X1viwUKT/cTtyB wLutJHDON6YIHe5TTb9veyRN+HkdoSWjLkc0NgpUrc0YmWRgkQBl9tRpZOuRJ8SU xpV2ycDa9LEu+q9ZqCZYYHXeEPkTFiyKdyKy0wRRqSO/LxFllHcTIUYe0U4r7Iq2 NlB4XWlzIKK9ElcjjpPrMt3T5aqzPYHpCJ0TyeF0kl85glcHcisaUm6l1iyhG6Cr FVcU+9tRxfctPF9+TEMmMNtI9UAKkDSgWSuukiBpf06aepFSR/c= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:19 2025 by rpki-client