$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: KHLE3Mr1S491SkTKvsKcC1+y19jV7IPRwaM5lT/3kBQ= Subject key identifier: 25:44:EB:49:4B:55:E2:F1:20:D9:A4:46:34:87:75:3F:D1:05:ED:BC Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 78B14ADCA949A6363624AF086B26ADA5EE04A246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 0397 Signing time: Sun 19 Oct 2025 20:22:18 +0000 Manifest this update: Sun 19 Oct 2025 20:17:18 +0000 Manifest next update: Thu 23 Oct 2025 01:41:18 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: ZH9Y7RSz2nzhp5Jstv8QjchofwmMsEQEImvunjTB9es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b1:4a:dc:a9:49:a6:36:36:24:af:08:6b:26:ad:a5:ee:04:a2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Oct 19 20:17:18 2025 GMT Not After : Oct 23 01:41:18 2025 GMT Subject: CN=2544EB494B55E2F120D9A4463487753FD105EDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:5c:aa:89:18:d0:da:46:fc:14:0e:0a:57: 08:84:5b:d4:3a:88:bc:11:b5:e3:bb:8b:85:64:20: 36:04:9b:af:24:88:fe:fc:53:de:79:61:70:60:08: bb:75:10:a7:be:fa:58:a8:a7:11:3c:4c:5f:0e:db: b1:4b:0b:50:43:ed:5d:b0:88:63:4e:c9:99:38:8d: b3:bd:06:3f:65:c9:e5:4a:84:11:d7:d7:5a:fe:df: 2c:7e:3f:11:71:88:cb:b5:5b:38:bd:93:6f:47:ba: 97:a2:56:fd:ef:d3:7a:5e:0c:95:ef:12:79:14:3d: ee:a8:62:ee:66:11:f0:c1:8a:bd:c3:66:8a:0f:3c: 8a:86:30:e8:b9:3b:e1:b8:e9:08:d7:fa:4f:f7:4a: 28:33:b1:c4:7e:d9:cd:4a:17:b5:1d:1e:5a:48:80: 0b:7a:42:d9:ae:39:e8:3c:57:94:ac:eb:5e:fd:fd: c0:c8:fc:50:a5:72:2a:63:51:79:8e:26:46:03:02: e8:84:0b:47:fc:12:99:6e:a4:9b:58:ff:d3:5c:1b: 1a:aa:0d:25:bb:5e:55:26:45:56:a6:c0:a0:86:80: f7:f7:73:77:e7:24:98:03:97:8a:93:aa:dd:ef:99: 96:0d:a7:f2:4b:24:ef:3a:6a:85:0c:f2:aa:84:6f: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:EB:49:4B:55:E2:F1:20:D9:A4:46:34:87:75:3F:D1:05:ED:BC X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:50:3d:89:b0:29:f3:33:8c:3a:d4:2f:a6:ff:d5:54:ba:cb: c6:64:67:93:80:56:27:16:81:26:06:b2:65:bc:a7:84:44:63: 74:60:5b:4c:d8:64:e9:3d:88:e1:d5:1b:88:fc:17:5a:29:c7: da:e8:81:8e:da:ff:be:ad:d8:80:2d:19:d6:dd:17:bc:82:16: 2b:ed:7a:36:43:98:d7:c8:69:0f:9f:99:26:b6:87:89:73:69: 4b:ba:4c:47:bf:50:16:9e:68:5c:8e:7c:6f:83:80:a1:0d:c7: 0b:23:88:a1:74:a6:5b:d5:f4:94:81:54:a2:3b:44:e0:d9:00: be:75:d5:6d:9c:85:9a:e4:0e:16:fc:01:51:fb:a9:11:25:1c: 73:d7:82:3e:20:25:6b:77:03:fc:12:43:f4:e7:b7:ff:02:a4: 84:fe:b0:1e:f0:a7:e4:21:4e:33:2e:23:f9:89:32:b9:8d:df: e0:a9:86:c6:33:dd:b6:da:06:19:1c:d1:a3:73:b9:39:ef:c0: 5e:ff:48:a2:1a:cd:52:39:2f:73:30:c1:7a:7b:31:fe:22:60: ae:60:a5:26:cc:4f:ae:48:df:47:34:3d:88:bd:e0:0e:21:99: 1e:6f:76:d4:93:4c:3c:e1:b1:8e:fa:eb:b0:26:c5:cf:ea:f4: 16:4e:72:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLFK3KlJpjY2JK8Iayatpe4EokYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTEwMTkyMDE3MThaFw0yNTEwMjMwMTQxMThaMDMxMTAvBgNV BAMTKDI1NDRFQjQ5NEI1NUUyRjEyMEQ5QTQ0NjM0ODc3NTNGRDEwNUVEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17FyqiRjQ2kb8FA4KVwiEW9Q6 iLwRteO7i4VkIDYEm68kiP78U955YXBgCLt1EKe++liopxE8TF8O27FLC1BD7V2w iGNOyZk4jbO9Bj9lyeVKhBHX11r+3yx+PxFxiMu1Wzi9k29HupeiVv3v03peDJXv EnkUPe6oYu5mEfDBir3DZooPPIqGMOi5O+G46QjX+k/3SigzscR+2c1KF7UdHlpI gAt6QtmuOeg8V5Ss6179/cDI/FClcipjUXmOJkYDAuiEC0f8EplupJtY/9NcGxqq DSW7XlUmRVamwKCGgPf3c3fnJJgDl4qTqt3vmZYNp/JLJO86aoUM8qqEbyx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJUTrSUtV4vEg2aRGNId1P9EF7bwwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlQPYmwKfMzjDrUL6b/1VS6y8ZkZ5OAVicW gSYGsmW8p4REY3RgW0zYZOk9iOHVG4j8F1opx9rogY7a/76t2IAtGdbdF7yCFivt ejZDmNfIaQ+fmSa2h4lzaUu6TEe/UBaeaFyOfG+DgKENxwsjiKF0plvV9JSBVKI7 RODZAL511W2chZrkDhb8AVH7qRElHHPXgj4gJWt3A/wSQ/Tnt/8CpIT+sB7wp+Qh TjMuI/mJMrmN3+CphsYz3bbaBhkc0aNzuTnvwF7/SKIazVI5L3MwwXp7Mf4iYK5g pSbMT65I30c0PYi94A4hmR5vdtSTTDzhsY7667Amxc/q9BZOcrU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:48 2025 by rpki-client