$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: ADMEg2333bw4Ux/7Y84BsqqBXtIMqyLrx8AMCGnd+VM= Subject key identifier: EE:09:15:23:DD:AE:9E:13:5D:60:5F:C9:8F:E6:62:76:2C:95:00:A2 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 499FFFCDFCBDE1A3EDF2CB03CFEBC6407EBD8784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: 0106 Signing time: Sun 19 Oct 2025 14:00:45 +0000 Manifest this update: Sun 19 Oct 2025 13:55:45 +0000 Manifest next update: Wed 22 Oct 2025 17:54:45 +0000 Files and hashes: 1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) 2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: CV18Ndqi6nHMlUVkpPvIQctD9RgLrvIl9WflGdQJI1k=) 3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9f:ff:cd:fc:bd:e1:a3:ed:f2:cb:03:cf:eb:c6:40:7e:bd:87:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Oct 19 13:55:45 2025 GMT Not After : Oct 22 17:54:45 2025 GMT Subject: CN=EE091523DDAE9E135D605FC98FE662762C9500A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:7c:ba:5e:8a:92:86:21:b2:1e:66:f3:4c: da:a5:b4:ed:67:27:d0:13:5b:46:87:00:03:92:6e: 75:eb:14:38:17:b1:12:61:2f:ab:4c:75:39:6e:b0: b8:59:bd:96:99:94:0d:2d:04:f1:22:8d:92:1d:60: 65:c0:81:06:e6:a2:88:6f:f5:b7:e5:7b:46:7d:47: 8f:95:38:00:64:38:30:f9:5d:40:59:30:db:47:7d: f8:cb:b1:ea:9e:49:05:74:ea:b4:35:09:81:59:19: db:f5:26:d4:45:3e:de:03:d9:7a:0b:be:d9:09:4a: fa:84:27:a4:81:30:16:e8:f3:d5:ea:33:47:3a:df: 34:1e:9b:9f:56:c4:df:a9:8d:ae:ac:4b:ca:3e:4e: ac:a8:33:c1:24:ad:3c:59:c4:dd:cd:48:2b:93:9d: e0:96:5b:15:93:a7:aa:64:be:c6:2f:c7:07:f0:24: b6:52:75:c6:97:b7:25:fc:7b:00:d8:c9:9d:f9:d5: 51:a8:9e:aa:6d:86:47:f8:36:87:7d:fb:44:25:42: ad:c3:55:0d:56:1c:c2:55:40:b9:cf:2e:7b:c3:89: a8:4c:f4:19:5a:2d:f5:6a:54:e5:c2:2d:9e:df:9f: 75:ca:a5:81:e1:b1:24:7b:ce:76:80:26:82:b6:e7: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:15:23:DD:AE:9E:13:5D:60:5F:C9:8F:E6:62:76:2C:95:00:A2 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:55:e6:a0:6a:57:5e:30:75:e8:67:24:72:49:e1:f0:e8: 97:d1:b1:39:4c:6f:85:40:60:b2:62:3e:a6:a6:2a:a0:a7:f3: f5:a3:83:54:97:be:fa:dd:bc:b5:05:65:3e:15:58:7f:9d:99: 4c:1a:8a:61:2d:b6:89:0f:78:e5:7e:09:e2:06:c8:d7:f6:b6: c1:9e:e2:9c:c0:af:66:91:9f:d0:f9:57:07:97:97:4b:3a:04: a9:33:b8:c0:ae:71:c9:3b:03:b2:75:c8:01:4c:41:d9:95:ed: e0:8c:1e:2c:38:50:58:d8:d9:ba:5c:a5:ca:20:8e:c1:89:f4: 2b:af:ff:d8:52:5c:12:fe:58:12:84:7a:97:ec:e3:08:51:a9: c2:b9:d4:d6:d3:e9:9a:f4:0e:ac:af:59:a0:a1:44:9e:90:51: e1:e7:52:34:f5:60:c7:5a:5a:1b:c2:b1:0d:7b:9c:a5:c4:dc: 51:0c:fc:86:4b:20:87:45:19:09:72:e4:f2:78:e7:a0:2e:65: 45:40:c2:dd:b1:70:38:c0:c0:d6:8b:03:0a:e1:7d:d6:99:af: ee:62:a9:5b:0d:43:41:4f:51:60:e9:5b:9e:32:3f:f6:7b:35: cb:6c:a0:83:fb:42:51:46:a8:22:fa:65:dd:6b:ff:58:a7:66: 7c:90:63:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZ//zfy94aPt8ssDz+vGQH69h4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTEwMTkxMzU1NDVaFw0yNTEwMjIxNzU0NDVaMDMxMTAvBgNV BAMTKEVFMDkxNTIzRERBRTlFMTM1RDYwNUZDOThGRTY2Mjc2MkM5NTAwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUx3y6XoqShiGyHmbzTNqltO1n J9ATW0aHAAOSbnXrFDgXsRJhL6tMdTlusLhZvZaZlA0tBPEijZIdYGXAgQbmoohv 9bfle0Z9R4+VOABkODD5XUBZMNtHffjLseqeSQV06rQ1CYFZGdv1JtRFPt4D2XoL vtkJSvqEJ6SBMBbo89XqM0c63zQem59WxN+pja6sS8o+TqyoM8EkrTxZxN3NSCuT neCWWxWTp6pkvsYvxwfwJLZSdcaXtyX8ewDYyZ351VGonqpthkf4Nod9+0QlQq3D VQ1WHMJVQLnPLnvDiahM9BlaLfVqVOXCLZ7fn3XKpYHhsSR7znaAJoK25393AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7gkVI92unhNdYF/Jj+ZidiyVAKIwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYuVeagaldeMHXoZyRySeHw6JfRsTlMb4VA YLJiPqamKqCn8/Wjg1SXvvrdvLUFZT4VWH+dmUwaimEttokPeOV+CeIGyNf2tsGe 4pzAr2aRn9D5VweXl0s6BKkzuMCucck7A7J1yAFMQdmV7eCMHiw4UFjY2bpcpcog jsGJ9Cuv/9hSXBL+WBKEepfs4whRqcK51NbT6Zr0DqyvWaChRJ6QUeHnUjT1YMda WhvCsQ17nKXE3FEM/IZLIIdFGQly5PJ456AuZUVAwt2xcDjAwNaLAwrhfdaZr+5i qVsNQ0FPUWDpW54yP/Z7NctsoIP7QlFGqCL6Zd1r/1inZnyQY2A= -----END CERTIFICATE-----Generated at Mon Oct 20 21:57:33 2025 by rpki-client