$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: pccdsgkROgQBVuM/kSA7/U1vlABh/odlLimz8r8GSYw= Subject key identifier: 96:B2:D9:FA:58:CC:58:10:69:25:98:5E:24:64:67:B1:84:94:31:A2 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 6BB5F126333B39C0CFACDF30250485A334F7FAE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 0514 Signing time: Sat 18 Oct 2025 12:51:13 +0000 Manifest this update: Sat 18 Oct 2025 12:46:13 +0000 Manifest next update: Tue 21 Oct 2025 21:52:13 +0000 Files and hashes: 1: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 2: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: rtfODW9z86C+AtZNzQUYTfZB3ARxB9+vKbW1kc3TxbQ=) 3: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 4: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 5: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 6: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b5:f1:26:33:3b:39:c0:cf:ac:df:30:25:04:85:a3:34:f7:fa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Oct 18 12:46:13 2025 GMT Not After : Oct 21 21:52:13 2025 GMT Subject: CN=96B2D9FA58CC58106925985E246467B1849431A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:0e:0e:12:77:f1:fb:77:ce:27:88:aa:7c: d9:8d:82:5d:4e:3e:c8:08:12:6e:75:e1:ad:4b:d2: 79:4e:90:28:1f:af:85:66:48:ed:fa:20:6a:b2:ca: 5a:85:3b:f8:6b:82:71:a8:2a:df:0e:6e:86:3d:9a: 50:da:23:1d:fb:bd:e1:2b:c3:9d:3c:ea:4b:1b:b3: aa:28:74:68:65:ce:0d:2a:9c:ec:ff:6a:4f:9d:65: e6:50:f1:6f:57:7f:df:6f:87:06:51:82:a0:19:4e: 44:a0:12:25:f4:6a:84:5f:7c:aa:98:8a:d4:e8:c1: 86:6f:d1:78:20:f2:9a:50:f5:1c:3a:1f:a7:4e:cf: 1c:1f:0e:39:76:2f:37:39:20:ec:a6:ec:ab:3d:67: 10:94:07:e5:ba:5c:d1:14:8d:cd:ae:cb:a4:7f:48: 9d:ff:82:94:9e:d2:7a:57:a2:c6:da:a1:30:b6:7a: a9:67:d9:f8:e7:bc:f5:0c:ae:6a:58:ca:76:68:09: 9f:56:aa:ad:06:ac:9f:4b:5a:e5:94:63:92:9b:03: ce:e8:3a:7c:14:f6:80:20:95:0c:df:cf:06:e1:cc: 36:f0:1c:45:b2:29:d7:a6:eb:df:99:96:65:c6:79: 33:f1:c1:6d:de:69:62:af:29:dd:16:84:47:0f:b6: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:D9:FA:58:CC:58:10:69:25:98:5E:24:64:67:B1:84:94:31:A2 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:d4:29:59:a0:e9:38:c2:48:d9:bc:a1:01:68:ff:ac:b5: 5a:a1:e5:c0:e1:27:b2:fe:79:36:a5:a4:5c:a9:86:e7:9c:d9: bd:5b:b5:62:70:e3:17:91:58:ab:1f:9a:2d:44:3b:f9:ae:6e: 7c:87:d1:97:da:42:87:fb:7a:90:6c:56:13:58:a9:b5:e9:49: 2c:88:bc:8d:0d:a6:3b:29:b1:f1:7b:8d:10:13:e5:c1:df:67: f6:82:3c:4a:98:f7:18:79:c6:55:25:51:20:15:2e:ba:b3:29: 2f:9a:4d:3a:0d:7c:dc:b2:ad:ad:76:d8:bd:35:c6:5b:0e:c2: f9:af:82:96:c4:48:0d:3a:16:e7:c9:07:2e:ba:07:10:3f:72: b6:c6:44:b0:ff:87:3f:a5:11:0f:dc:83:cb:95:26:64:2e:30: 96:e9:64:aa:46:fa:5d:8e:02:98:64:bd:43:29:16:b3:74:86: e4:13:8d:5f:35:0c:49:97:4d:3c:46:18:92:7a:e2:36:bc:26: fc:a7:fd:07:a4:a4:b1:3a:ca:32:a3:6f:ce:39:25:07:1f:d4: d9:fa:5e:4e:0c:47:18:19:68:a3:b3:fe:87:e1:bd:0d:f5:e7: ca:5b:fe:17:08:69:9c:23:7c:22:c5:db:02:72:4d:2a:cd:ae: 4d:08:4c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7XxJjM7OcDPrN8wJQSFozT3+uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTEwMTgxMjQ2MTNaFw0yNTEwMjEyMTUyMTNaMDMxMTAvBgNV BAMTKDk2QjJEOUZBNThDQzU4MTA2OTI1OTg1RTI0NjQ2N0IxODQ5NDMxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+g4OEnfx+3fOJ4iqfNmNgl1O PsgIEm514a1L0nlOkCgfr4VmSO36IGqyylqFO/hrgnGoKt8OboY9mlDaIx37veEr w5086ksbs6oodGhlzg0qnOz/ak+dZeZQ8W9Xf99vhwZRgqAZTkSgEiX0aoRffKqY itTowYZv0Xgg8ppQ9Rw6H6dOzxwfDjl2Lzc5IOym7Ks9ZxCUB+W6XNEUjc2uy6R/ SJ3/gpSe0npXosbaoTC2eqln2fjnvPUMrmpYynZoCZ9Wqq0GrJ9LWuWUY5KbA87o OnwU9oAglQzfzwbhzDbwHEWyKdem69+ZlmXGeTPxwW3eaWKvKd0WhEcPtjGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrLZ+ljMWBBpJZheJGRnsYSUMaIwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3h1ClZoOk4wkjZvKEBaP+stVqh5cDhJ7L+ eTalpFyphuec2b1btWJw4xeRWKsfmi1EO/mubnyH0ZfaQof7epBsVhNYqbXpSSyI vI0NpjspsfF7jRAT5cHfZ/aCPEqY9xh5xlUlUSAVLrqzKS+aTToNfNyyra122L01 xlsOwvmvgpbESA06FufJBy66BxA/crbGRLD/hz+lEQ/cg8uVJmQuMJbpZKpG+l2O AphkvUMpFrN0huQTjV81DEmXTTxGGJJ64ja8Jvyn/QekpLE6yjKjb845JQcf1Nn6 Xk4MRxgZaKOz/ofhvQ3158pb/hcIaZwjfCLF2wJyTSrNrk0ITKQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:32 2025 by rpki-client