$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: QQbfKHsbHhdnP3TIEAkrq8qHeachD+LHpxfB8uztsq0= Subject key identifier: 28:AE:78:DD:85:15:0C:C7:4C:07:AD:6A:D6:4B:97:E0:1C:91:60:0F Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 03066A7396A33A2BE1794FBA50EE1D8A4CE491D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 0196 Signing time: Mon 20 Oct 2025 06:00:58 +0000 Manifest this update: Mon 20 Oct 2025 05:55:58 +0000 Manifest next update: Thu 23 Oct 2025 13:26:58 +0000 Files and hashes: 1: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 2: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: BKcDIc8Cxn5FvNe1rwrPgLjgrs/qAXNKP+VnsuqqnCk=) 3: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 5: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:06:6a:73:96:a3:3a:2b:e1:79:4f:ba:50:ee:1d:8a:4c:e4:91:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Oct 20 05:55:58 2025 GMT Not After : Oct 23 13:26:58 2025 GMT Subject: CN=28AE78DD85150CC74C07AD6AD64B97E01C91600F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:06:7f:5c:13:78:37:e8:c3:d8:42:08:2b: 81:e3:2b:1b:20:dd:ea:30:53:ed:87:93:dd:15:92: 9a:73:c6:f5:32:9a:b0:76:00:c9:c6:4f:0e:d1:29: b8:cc:b7:76:1a:0c:8f:91:a1:ce:b5:80:e8:93:a1: 66:99:6e:28:03:a0:08:3d:c1:1d:8c:11:93:e6:87: d2:28:de:44:b1:77:7c:f8:a7:2b:35:7d:71:0e:d6: a3:7a:01:a0:af:3c:ff:91:bd:0a:62:24:b8:cd:ab: 1e:f6:7f:c7:a7:c9:1a:ac:73:e6:7f:82:ca:b9:1c: 77:0e:1f:80:56:73:c4:4f:3b:83:06:20:03:fb:73: 02:a5:6e:d5:d5:8b:52:0b:bd:0c:4a:98:14:4e:8d: c9:e6:72:c4:c9:ca:bb:14:2f:c0:e3:ee:b1:5b:22: ee:55:b7:9d:c6:09:4d:81:58:e0:f4:3e:71:57:09: db:f7:a5:ec:41:3c:2a:d4:76:fe:b4:18:ab:24:e1: a9:4a:11:f1:5f:38:4e:61:4c:02:ed:6d:84:a9:10: 2a:01:19:ad:ee:57:e1:67:c0:44:b8:83:39:e1:c2: 74:b5:99:8b:6f:a6:7e:da:90:2d:0a:1a:50:85:88: 33:c3:a3:94:32:f6:8a:c8:16:11:d7:42:50:fe:bb: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AE:78:DD:85:15:0C:C7:4C:07:AD:6A:D6:4B:97:E0:1C:91:60:0F X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:ab:55:80:5f:76:33:5f:0f:21:3d:a8:87:74:26:be:36: 17:ad:a6:e1:02:08:6c:ef:92:be:73:e1:30:74:76:7c:b5:37: 4b:2a:95:d4:cd:ac:47:e9:63:b1:75:35:47:9d:17:da:33:ff: ac:1e:65:3b:33:2d:88:52:83:02:19:46:9f:34:57:52:f8:39: 79:e7:1c:31:58:69:f1:11:1f:ef:8f:8a:80:90:fb:b8:41:7d: 83:4e:22:2c:ba:a6:be:96:51:59:70:31:7e:28:63:28:a6:f3: 37:b6:ae:ff:01:37:72:7c:0f:04:c2:4b:9e:b4:44:7c:bd:8f: 08:dd:28:95:af:b8:21:66:16:a9:41:cb:d4:af:81:f1:7c:16: 5a:e6:8d:be:2a:84:e6:53:21:fe:57:dc:af:91:06:9e:2d:c7: fd:4e:7a:31:9b:70:11:b6:6b:f0:ad:73:0d:ff:39:3e:19:ec: 52:87:7f:06:e4:b6:dc:91:b7:18:d2:93:67:67:2f:f0:96:e1: 62:df:6d:57:bb:b9:b6:b8:f7:44:e2:bd:4e:be:3f:e8:8d:c0: 3d:b1:c1:a3:75:d2:ff:0d:6d:32:69:cd:c7:b2:6b:77:7d:24: ec:85:5d:3b:8b:48:30:a0:c8:7e:f3:6e:4f:32:32:e5:73:7a: dd:76:a1:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwZqc5ajOivheU+6UO4dikzkkdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTEwMjAwNTU1NThaFw0yNTEwMjMxMzI2NThaMDMxMTAvBgNV BAMTKDI4QUU3OEREODUxNTBDQzc0QzA3QUQ2QUQ2NEI5N0UwMUM5MTYwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mwZ/XBN4N+jD2EIIK4HjKxsg 3eowU+2Hk90VkppzxvUymrB2AMnGTw7RKbjMt3YaDI+Roc61gOiToWaZbigDoAg9 wR2MEZPmh9Io3kSxd3z4pys1fXEO1qN6AaCvPP+RvQpiJLjNqx72f8enyRqsc+Z/ gsq5HHcOH4BWc8RPO4MGIAP7cwKlbtXVi1ILvQxKmBROjcnmcsTJyrsUL8Dj7rFb Iu5Vt53GCU2BWOD0PnFXCdv3pexBPCrUdv60GKsk4alKEfFfOE5hTALtbYSpECoB Ga3uV+FnwES4gznhwnS1mYtvpn7akC0KGlCFiDPDo5Qy9orIFhHXQlD+u+N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKK543YUVDMdMB61q1kuX4ByRYA8wHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMLq1WAX3YzXw8hPaiHdCa+NhetpuECCGzv kr5z4TB0dny1N0sqldTNrEfpY7F1NUedF9oz/6weZTszLYhSgwIZRp80V1L4OXnn HDFYafERH++PioCQ+7hBfYNOIiy6pr6WUVlwMX4oYyim8ze2rv8BN3J8DwTCS560 RHy9jwjdKJWvuCFmFqlBy9SvgfF8Flrmjb4qhOZTIf5X3K+RBp4tx/1OejGbcBG2 a/Ctcw3/OT4Z7FKHfwbkttyRtxjSk2dnL/CW4WLfbVe7uba490TivU6+P+iNwD2x waN10v8NbTJpzceya3d9JOyFXTuLSDCgyH7zbk8yMuVzet12oU4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:33 2025 by rpki-client