$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: 4JNdUNR/ASPskgOAinBfnYMHJ5wbmaTcbusMSWADdJU= Subject key identifier: 2F:DE:03:C4:17:33:F7:E7:7F:5E:4E:B6:B6:A3:1F:AA:21:77:03:F5 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 02C701E646B91EFAC3A9C6DFCFC381D6A4010F3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0111 Signing time: Mon 20 Oct 2025 02:31:45 +0000 Manifest this update: Mon 20 Oct 2025 02:26:45 +0000 Manifest next update: Thu 23 Oct 2025 13:37:45 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: tr4tvasoiJLKnWpKFHcI43TacEjsikvZfVLjNB6sqsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c7:01:e6:46:b9:1e:fa:c3:a9:c6:df:cf:c3:81:d6:a4:01:0f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Oct 20 02:26:45 2025 GMT Not After : Oct 23 13:37:45 2025 GMT Subject: CN=2FDE03C41733F7E77F5E4EB6B6A31FAA217703F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:cf:a4:53:84:91:d4:40:20:c5:cd:11:03: 5a:bb:30:34:e8:bf:ea:5f:41:27:86:f7:6a:3e:b7: f8:47:c5:25:d6:7b:55:a6:82:39:b2:02:86:14:e2: 80:7c:c9:69:e2:cf:aa:8d:9c:17:9d:58:50:40:d0: f1:fe:b9:20:8c:0e:ed:03:9d:42:d0:6c:ed:2a:26: a7:a0:5c:c2:16:ca:04:e3:a3:0a:b0:4b:c0:f9:bb: fb:4c:8f:72:b8:5a:12:c9:c3:94:bf:df:e5:8a:28: 89:50:91:9f:cb:74:32:09:1a:cc:ff:2d:fc:b4:5b: dc:3d:1c:8d:f7:cb:e8:6a:4d:91:57:d1:f2:39:c4: 26:d4:16:21:f6:b4:58:c0:fe:20:34:eb:87:8e:a7: ae:0c:a6:6e:e9:cf:17:cf:d2:9a:9f:6f:59:88:8d: 75:09:b0:26:d3:86:99:71:19:16:75:ea:7f:f5:76: ac:ef:78:1a:80:e6:f0:ca:68:16:00:12:1b:9d:93: 89:85:f9:d9:d6:6e:7c:71:7b:82:99:3a:5a:9a:38: cc:a5:38:52:a5:51:ca:9a:53:54:f6:e6:cd:ce:63: 12:cf:1f:f1:d4:19:41:52:2f:7e:e5:ae:9f:40:1d: be:b2:67:67:a9:f7:ef:bd:5c:6b:75:08:a3:69:e5: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:03:C4:17:33:F7:E7:7F:5E:4E:B6:B6:A3:1F:AA:21:77:03:F5 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cc:5d:f9:10:65:0a:3a:ae:f5:57:dd:44:9c:ab:4f:54:75: df:cc:fc:fa:5d:ce:19:32:ea:f9:4e:a4:05:c5:f9:81:49:30: d3:42:c1:f3:dd:19:23:67:f1:b5:a2:12:70:47:53:f9:b7:fb: 83:ed:b0:52:55:9b:6a:fa:3d:81:6f:19:6e:78:7e:8a:4c:19: 32:58:fa:9e:69:48:f8:c3:0d:6d:04:6a:62:32:02:a6:31:39: 95:2f:af:23:33:61:f5:35:ce:6c:52:9f:35:34:6b:10:8f:d6: 7c:3d:d3:34:43:9e:9b:10:0f:ba:71:a0:bd:08:29:01:93:46: c3:c3:e6:32:36:f0:cc:09:53:77:37:15:b1:60:27:90:14:1e: 87:19:6e:d7:bb:3e:bd:c1:e3:dd:44:02:2e:2c:e5:c1:00:8c: 1d:45:b9:79:a2:0a:57:c0:f3:d2:7a:95:71:6d:77:6a:c9:8f: 13:ed:19:39:35:f3:f9:87:1d:72:df:b0:55:f4:b5:2c:e0:7d: 6d:4d:5e:a2:45:ca:2c:3e:cc:5e:96:a1:78:b6:f7:81:b5:8a: 46:6d:5c:b9:e1:b7:a2:46:23:cb:2a:4e:6f:9c:f2:df:bd:2c: 2f:65:bc:2e:7d:08:1f:0a:1b:79:27:95:4c:26:b1:a5:62:88: 6a:ab:ee:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAscB5ka5HvrDqcbfz8OB1qQBDzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEwMjAwMjI2NDVaFw0yNTEwMjMxMzM3NDVaMDMxMTAvBgNV BAMTKDJGREUwM0M0MTczM0Y3RTc3RjVFNEVCNkI2QTMxRkFBMjE3NzAzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcs+kU4SR1EAgxc0RA1q7MDTo v+pfQSeG92o+t/hHxSXWe1WmgjmyAoYU4oB8yWniz6qNnBedWFBA0PH+uSCMDu0D nULQbO0qJqegXMIWygTjowqwS8D5u/tMj3K4WhLJw5S/3+WKKIlQkZ/LdDIJGsz/ Lfy0W9w9HI33y+hqTZFX0fI5xCbUFiH2tFjA/iA064eOp64Mpm7pzxfP0pqfb1mI jXUJsCbThplxGRZ16n/1dqzveBqA5vDKaBYAEhudk4mF+dnWbnxxe4KZOlqaOMyl OFKlUcqaU1T25s3OYxLPH/HUGUFSL37lrp9AHb6yZ2ep9++9XGt1CKNp5c5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL94DxBcz9+d/Xk62tqMfqiF3A/UwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrMXfkQZQo6rvVX3UScq09Udd/M/Ppdzhky 6vlOpAXF+YFJMNNCwfPdGSNn8bWiEnBHU/m3+4PtsFJVm2r6PYFvGW54fopMGTJY +p5pSPjDDW0EamIyAqYxOZUvryMzYfU1zmxSnzU0axCP1nw90zRDnpsQD7pxoL0I KQGTRsPD5jI28MwJU3c3FbFgJ5AUHocZbte7Pr3B491EAi4s5cEAjB1FuXmiClfA 89J6lXFtd2rJjxPtGTk18/mHHXLfsFX0tSzgfW1NXqJFyiw+zF6WoXi294G1ikZt XLnht6JGI8sqTm+c8t+9LC9lvC59CB8KG3knlUwmsaViiGqr7l0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:03 2025 by rpki-client