$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: 9dgY3RXTHv/3Y26DYPCjytRTUx4zQA/uxJwl/2i7vdo= Subject key identifier: F2:6A:3B:A9:77:4E:55:64:59:D1:FC:5D:DF:E1:A1:9C:19:D0:03:9D Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 3B3BEC08200B485A83FE2836905971C745F49D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03A9 Signing time: Sun 19 Oct 2025 19:41:44 +0000 Manifest this update: Sun 19 Oct 2025 19:36:44 +0000 Manifest next update: Thu 23 Oct 2025 03:40:44 +0000 Files and hashes: 1: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: op0IZlXDiTKl7ecSVX5B5GlRlgNgaZS/jK51WQNvJxA=) 3: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 4: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 5: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3b:ec:08:20:0b:48:5a:83:fe:28:36:90:59:71:c7:45:f4:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Oct 19 19:36:44 2025 GMT Not After : Oct 23 03:40:44 2025 GMT Subject: CN=F26A3BA9774E556459D1FC5DDFE1A19C19D0039D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:37:55:70:11:30:f3:50:6e:58:86:b1:8e:5a: c5:51:f8:f1:90:40:d4:1f:20:24:d8:66:ad:89:88: dd:d5:a9:cf:cf:26:ef:3f:2b:9f:b6:83:ea:fb:7b: 7c:79:71:52:59:0b:49:3c:6a:84:a6:9c:17:03:9c: be:75:c8:7c:08:be:54:cf:bc:8a:c7:0d:70:05:4e: e4:1d:05:27:fe:c3:5a:4a:fe:90:1d:a6:ef:2a:24: 1a:48:41:9c:6e:e7:d8:12:d9:63:2c:42:69:94:7e: 5a:48:bd:01:09:dd:f0:4a:12:36:85:ed:2e:26:83: e7:c8:26:70:b2:8f:f3:63:f2:4f:ad:d4:e3:88:ed: f1:5b:70:aa:3a:5e:8b:26:98:be:43:f6:61:ee:eb: a5:8b:8c:9e:0b:aa:21:35:d6:75:9c:2a:40:db:b5: f0:fa:b6:4e:05:ca:e9:e9:5c:35:b9:b8:a9:2b:c7: 5b:b6:1e:bd:32:4e:68:04:88:e7:b4:2f:70:c9:8a: 17:63:0e:37:8e:ec:de:d7:ae:ce:1d:f7:9a:1b:c1: cf:de:5e:74:4f:cf:65:a3:a2:e0:0c:95:39:b4:fe: 5a:50:cd:89:2e:cf:72:0e:db:85:1f:fe:d2:cb:ae: 3b:a3:62:a0:ca:ea:9d:40:71:d7:12:dd:3b:a2:25: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6A:3B:A9:77:4E:55:64:59:D1:FC:5D:DF:E1:A1:9C:19:D0:03:9D X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:60:36:bb:69:45:f5:58:47:71:fc:e5:0b:15:fd:72:f0:b4: 7d:2a:ca:e9:b3:a6:99:37:c1:d8:5a:07:bc:8e:6f:ab:f3:a2: ff:47:c9:79:3d:98:b8:89:6d:92:25:4b:40:e3:8a:ea:7c:31: b3:96:da:f7:48:a2:f7:eb:b8:bc:7f:78:dd:4d:69:73:6d:b2: 5a:3c:df:4e:ce:14:f3:15:47:04:73:5b:5e:5a:94:f0:6f:97: f4:5a:d6:f9:74:9a:18:94:c4:03:43:03:59:49:9b:e8:ae:37: 8b:b8:49:8a:4c:21:9c:72:f2:93:ee:85:83:d6:78:1f:39:77: 4c:99:21:13:74:56:e9:0f:6f:2d:81:e7:41:c7:7e:f8:89:76: fe:9d:f0:f4:5b:35:3a:22:b1:97:8d:ef:c3:bd:54:2e:cd:e2: 89:23:19:76:7f:60:ca:90:47:41:b8:b4:86:9c:43:e2:2c:dd: f0:e3:a9:eb:c7:af:ff:d0:41:2f:2e:db:c2:7e:b1:5c:be:1c: 1c:d4:ae:88:1a:7e:4e:27:27:bd:20:74:27:4b:ec:13:48:86: 05:f3:74:f0:1a:4c:ff:be:d0:37:21:e9:a6:2f:17:e6:43:33: e3:d5:5c:72:ee:cc:2d:31:cc:39:55:cc:de:8d:8a:db:d1:ad: 93:2a:4d:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzvsCCALSFqD/ig2kFlxx0X0nR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTEwMTkxOTM2NDRaFw0yNTEwMjMwMzQwNDRaMDMxMTAvBgNV BAMTKEYyNkEzQkE5Nzc0RTU1NjQ1OUQxRkM1RERGRTFBMTlDMTlEMDAzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvN1VwETDzUG5YhrGOWsVR+PGQ QNQfICTYZq2JiN3Vqc/PJu8/K5+2g+r7e3x5cVJZC0k8aoSmnBcDnL51yHwIvlTP vIrHDXAFTuQdBSf+w1pK/pAdpu8qJBpIQZxu59gS2WMsQmmUflpIvQEJ3fBKEjaF 7S4mg+fIJnCyj/Nj8k+t1OOI7fFbcKo6XosmmL5D9mHu66WLjJ4LqiE11nWcKkDb tfD6tk4FyunpXDW5uKkrx1u2Hr0yTmgEiOe0L3DJihdjDjeO7N7Xrs4d95obwc/e XnRPz2WjouAMlTm0/lpQzYkuz3IO24Uf/tLLrjujYqDK6p1AcdcS3TuiJdt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8mo7qXdOVWRZ0fxd3+GhnBnQA50wHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVgNrtpRfVYR3H85QsV/XLwtH0qyumzppk3 wdhaB7yOb6vzov9HyXk9mLiJbZIlS0Djiup8MbOW2vdIovfruLx/eN1NaXNtslo8 307OFPMVRwRzW15alPBvl/Ra1vl0mhiUxANDA1lJm+iuN4u4SYpMIZxy8pPuhYPW eB85d0yZIRN0VukPby2B50HHfviJdv6d8PRbNToisZeN78O9VC7N4okjGXZ/YMqQ R0G4tIacQ+Is3fDjqevHr//QQS8u28J+sVy+HBzUrogafk4nJ70gdCdL7BNIhgXz dPAaTP++0Dch6aYvF+ZDM+PVXHLuzC0xzDlVzN6NitvRrZMqTUE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:41 2025 by rpki-client