$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: tBulo1CI4v9C8GjlXW1l1QLpq4b7Le6bYTpW+R49/ro= Subject key identifier: 58:52:F8:AC:3F:30:36:0C:DC:C3:0E:A6:B1:88:FD:A3:13:11:A1:4D Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 4BE63F562D63BE3D111CFB642C3A7A644C5C8BFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0232 Signing time: Sun 19 Oct 2025 16:32:06 +0000 Manifest this update: Sun 19 Oct 2025 16:27:06 +0000 Manifest next update: Thu 23 Oct 2025 04:18:06 +0000 Files and hashes: 1: 3130332e3138342e31342e302f32332d3234203d3e20313439373135.roa (hash: er7VxHw3cverVEgEo/3oWbnc8s1aWy89KU07LwZCwdQ=) 2: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: vbUq4c+HB4WIUom8oXc8cpL9JtNkvBXrs6gBxveq5KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e6:3f:56:2d:63:be:3d:11:1c:fb:64:2c:3a:7a:64:4c:5c:8b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Oct 19 16:27:06 2025 GMT Not After : Oct 23 04:18:06 2025 GMT Subject: CN=5852F8AC3F30360CDCC30EA6B188FDA31311A14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:37:51:97:43:97:99:06:a2:a3:70:04:7d: 0b:99:b4:73:e2:c9:42:d7:99:cd:aa:c0:9c:3a:fe: 8f:8d:52:b6:79:f7:67:d2:5d:ba:35:55:87:90:08: 2c:9b:7c:b1:ac:b3:31:08:ab:1a:a4:78:ea:a8:d0: 69:b5:05:f3:c7:dd:c5:89:0e:a6:29:d0:43:32:99: 81:bb:fc:af:de:91:6f:b1:88:c4:f1:7e:40:d2:4d: f3:7f:6f:ba:27:b4:49:46:d0:e3:b5:5c:3a:00:61: 4c:fe:2e:1a:2e:c0:31:3d:42:52:11:3f:af:0c:7d: 86:37:51:e7:9f:92:a0:b7:42:f5:f3:04:e7:8d:da: 5c:94:80:b5:21:1a:89:49:5c:9c:04:31:9b:f1:b7: 52:70:a6:a5:54:76:10:e5:5b:27:09:af:a6:7c:b6: 7c:f7:76:62:f2:17:74:6b:ab:67:a1:6f:2c:a2:b2: f1:34:ab:82:4d:b8:d1:ce:76:62:a2:41:89:1f:75: b5:51:e7:6b:8a:70:ca:f5:21:1a:9a:d8:7f:ff:a3: 10:6e:df:0b:6e:31:55:fe:0e:ae:f3:44:49:d0:c8: 1f:30:dd:dc:41:57:be:df:11:19:8c:e4:a6:d4:1c: 5e:06:34:4b:42:32:3e:0c:3d:63:04:b3:79:8e:4d: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:F8:AC:3F:30:36:0C:DC:C3:0E:A6:B1:88:FD:A3:13:11:A1:4D X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0c:86:cc:21:8a:3f:6a:e3:52:fa:12:db:73:e8:49:f9:87: bc:d7:61:c1:e2:3d:16:d0:25:bd:49:70:2a:d3:67:db:19:4c: a7:9c:38:56:42:18:41:f5:ce:88:0f:3c:2c:55:ed:60:c8:bb: 91:ab:41:ef:87:f2:9c:64:6d:24:8c:41:61:ca:b6:23:49:16: 72:85:17:d4:83:f8:69:88:c3:68:1d:3c:7c:dd:37:b6:1b:4d: c7:66:37:82:20:61:7b:ea:9b:76:45:7f:f3:ef:9f:1c:98:84: de:ed:fe:97:f1:50:e1:7b:15:0d:a4:7b:f0:64:d7:3e:54:67: 3f:17:d6:21:66:30:9b:7f:e0:4e:60:8d:82:50:dc:39:d6:24: b6:30:f0:aa:88:15:20:dc:68:a4:3d:01:51:c1:fa:a5:3d:9b: f4:96:7f:b3:f5:82:9f:44:b1:1c:9f:58:5b:f2:be:47:f1:8f: 6d:ac:c9:fe:1f:6d:bf:e1:eb:77:80:ca:b0:30:6e:41:82:24: 5b:8c:16:61:6d:d5:23:87:fd:55:37:58:7e:90:c2:33:f7:03: 83:0a:99:20:d4:d4:88:0a:28:bf:77:28:1a:73:a2:a7:7d:d0: f3:75:ad:50:2f:4b:a5:89:a5:58:c7:74:38:66:a2:7e:7e:1d: 64:7f:84:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+Y/Vi1jvj0RHPtkLDp6ZExci/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTEwMTkxNjI3MDZaFw0yNTEwMjMwNDE4MDZaMDMxMTAvBgNV BAMTKDU4NTJGOEFDM0YzMDM2MENEQ0MzMEVBNkIxODhGREEzMTMxMUExNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwzdRl0OXmQaio3AEfQuZtHPi yULXmc2qwJw6/o+NUrZ592fSXbo1VYeQCCybfLGsszEIqxqkeOqo0Gm1BfPH3cWJ DqYp0EMymYG7/K/ekW+xiMTxfkDSTfN/b7ontElG0OO1XDoAYUz+LhouwDE9QlIR P68MfYY3UeefkqC3QvXzBOeN2lyUgLUhGolJXJwEMZvxt1JwpqVUdhDlWycJr6Z8 tnz3dmLyF3Rrq2ehbyyisvE0q4JNuNHOdmKiQYkfdbVR52uKcMr1IRqa2H//oxBu 3wtuMVX+Dq7zREnQyB8w3dxBV77fERmM5KbUHF4GNEtCMj4MPWMEs3mOTeqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFL4rD8wNgzcww6msYj9oxMRoU0wHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYMhswhij9q41L6Ettz6En5h7zXYcHiPRbQ Jb1JcCrTZ9sZTKecOFZCGEH1zogPPCxV7WDIu5GrQe+H8pxkbSSMQWHKtiNJFnKF F9SD+GmIw2gdPHzdN7YbTcdmN4IgYXvqm3ZFf/PvnxyYhN7t/pfxUOF7FQ2ke/Bk 1z5UZz8X1iFmMJt/4E5gjYJQ3DnWJLYw8KqIFSDcaKQ9AVHB+qU9m/SWf7P1gp9E sRyfWFvyvkfxj22syf4fbb/h63eAyrAwbkGCJFuMFmFt1SOH/VU3WH6QwjP3A4MK mSDU1IgKKL93KBpzoqd90PN1rVAvS6WJpVjHdDhmon5+HWR/hJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:33 2025 by rpki-client