$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: 1xIuae1U46Z8T5rktMZvbWB8kGz2k4WzfPj+qNk9LMA= Subject key identifier: 3D:65:5E:58:72:12:40:C0:4F:1A:D1:35:F5:D2:B5:22:10:5C:E6:0F Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 4B8121E1C436B69E0BC4200551072F02DD39C680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 038D Signing time: Sun 19 Oct 2025 13:41:31 +0000 Manifest this update: Sun 19 Oct 2025 13:36:31 +0000 Manifest next update: Wed 22 Oct 2025 17:40:31 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: onkK0tkJ7L8plwE2j688TjNkWRwac1nSq1yc8OsYWiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:81:21:e1:c4:36:b6:9e:0b:c4:20:05:51:07:2f:02:dd:39:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Oct 19 13:36:31 2025 GMT Not After : Oct 22 17:40:31 2025 GMT Subject: CN=3D655E58721240C04F1AD135F5D2B522105CE60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:51:01:02:27:d7:79:f7:8f:65:69:2f:f6: d1:b6:cc:7c:06:cc:20:a4:81:d8:81:07:69:85:08: ba:47:16:4c:72:a1:17:b6:9a:c7:68:16:df:58:8f: 02:46:2c:e1:14:89:4d:d2:6d:71:ac:aa:02:71:1c: 89:06:bf:c1:0f:c9:27:4d:bd:7e:f8:92:18:68:8f: d7:7c:05:b0:5e:a0:49:95:cf:41:4c:92:dc:c2:ac: 8e:54:15:f2:cd:85:a5:09:cb:1f:0b:66:dd:d0:e4: 0d:06:71:dc:d5:c3:b0:79:fa:42:a9:e9:4a:04:43: 48:b6:4e:77:be:ad:30:40:a1:cb:47:46:ab:a5:3a: b9:00:c6:83:c4:fd:76:14:3e:76:e0:77:d0:30:0d: 82:b5:3d:d4:b8:9e:d2:a1:e5:23:cc:4a:fa:52:f2: 2c:47:12:1c:3c:40:8b:1a:74:d0:43:73:cd:db:3d: 4a:13:3c:c9:7f:3b:17:cf:38:49:be:a3:57:64:3c: 08:91:c9:92:dd:5e:d9:06:3a:9a:13:f5:b5:09:d5: 4e:4e:7c:4a:0b:20:c4:b6:8d:35:7c:ea:4a:58:29: 31:74:ca:d2:8f:75:b6:e4:59:a4:52:bd:23:41:6e: 0e:93:b4:30:ec:36:0e:1b:f8:f4:4f:60:00:f1:5f: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:65:5E:58:72:12:40:C0:4F:1A:D1:35:F5:D2:B5:22:10:5C:E6:0F X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:84:ff:c8:e1:9e:d8:33:7d:e3:03:39:ac:73:0d:d0:7a: c9:3c:34:99:f0:e0:85:fa:47:f5:0c:52:1d:30:77:34:9e:1f: 97:f4:5d:f3:c6:96:23:15:3f:99:d7:0c:ce:52:bf:03:a9:34: 8c:73:7b:53:94:96:17:dd:9a:a8:c7:ca:6a:27:4a:81:33:82: ff:fa:69:ab:6f:67:13:30:16:f8:a4:31:02:0f:f2:50:0f:de: 70:d6:1b:1d:04:32:d5:40:9a:19:09:2c:92:f2:64:0c:33:b2: a8:3b:52:66:6e:55:b1:ed:99:8d:aa:68:c1:01:5b:1f:3b:54: 85:36:e5:3c:a3:54:ff:5c:04:6f:a1:7d:46:fb:10:b5:7f:c5: 79:b1:88:55:ef:07:28:2d:36:75:bc:42:09:bf:21:2b:ce:cb: f7:ad:c5:f7:32:1d:b0:ff:b8:c3:9b:57:ba:fd:cf:f5:62:e0: d7:c5:d3:c6:86:d9:3d:b5:93:b5:63:81:21:58:44:06:af:eb: 0f:4f:f0:10:79:c4:8e:01:23:c1:a5:2b:d2:8b:a6:3e:05:49: e4:c7:76:43:ca:ef:d2:fc:51:ce:18:49:29:d7:75:f6:cf:f5: a2:06:f6:6e:10:3a:08:53:cc:28:02:a9:c7:a7:ed:6c:2f:9b: 92:e7:32:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4Eh4cQ2tp4LxCAFUQcvAt05xoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTEwMTkxMzM2MzFaFw0yNTEwMjIxNzQwMzFaMDMxMTAvBgNV BAMTKDNENjU1RTU4NzIxMjQwQzA0RjFBRDEzNUY1RDJCNTIyMTA1Q0U2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgVEBAifXefePZWkv9tG2zHwG zCCkgdiBB2mFCLpHFkxyoRe2msdoFt9YjwJGLOEUiU3SbXGsqgJxHIkGv8EPySdN vX74khhoj9d8BbBeoEmVz0FMktzCrI5UFfLNhaUJyx8LZt3Q5A0GcdzVw7B5+kKp 6UoEQ0i2Tne+rTBAoctHRqulOrkAxoPE/XYUPnbgd9AwDYK1PdS4ntKh5SPMSvpS 8ixHEhw8QIsadNBDc83bPUoTPMl/OxfPOEm+o1dkPAiRyZLdXtkGOpoT9bUJ1U5O fEoLIMS2jTV86kpYKTF0ytKPdbbkWaRSvSNBbg6TtDDsNg4b+PRPYADxXz59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWVeWHISQMBPGtE19dK1IhBc5g8wHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATahP/I4Z7YM33jAzmscw3Qesk8NJnw4IX6 R/UMUh0wdzSeH5f0XfPGliMVP5nXDM5SvwOpNIxze1OUlhfdmqjHymonSoEzgv/6 aatvZxMwFvikMQIP8lAP3nDWGx0EMtVAmhkJLJLyZAwzsqg7UmZuVbHtmY2qaMEB Wx87VIU25TyjVP9cBG+hfUb7ELV/xXmxiFXvBygtNnW8Qgm/ISvOy/etxfcyHbD/ uMObV7r9z/Vi4NfF08aG2T21k7VjgSFYRAav6w9P8BB5xI4BI8GlK9KLpj4FSeTH dkPK79L8Uc4YSSnXdfbP9aIG9m4QOghTzCgCqcen7Wwvm5LnMug= -----END CERTIFICATE-----Generated at Mon Oct 20 18:54:06 2025 by rpki-client