$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: WSVz8Km5A5D8wnMxRhHFT1LwafGKIrXDgIi5N/M6EBc= Subject key identifier: 6E:D1:8A:EB:59:F1:3F:D1:1E:71:26:21:0A:7F:F1:D6:2D:38:E9:21 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 29303D46A4C0743D416318B126FEA2F45BF70C0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 07:11:07 +0000 Manifest this update: Mon 20 Oct 2025 07:06:07 +0000 Manifest next update: Thu 23 Oct 2025 10:19:07 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: 8dlDlh6MurZ+VyZF5t7Vy0JyMel2MVUvFYx3GXDB9J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:30:3d:46:a4:c0:74:3d:41:63:18:b1:26:fe:a2:f4:5b:f7:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Oct 20 07:06:07 2025 GMT Not After : Oct 23 10:19:07 2025 GMT Subject: CN=6ED18AEB59F13FD11E7126210A7FF1D62D38E921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:76:a0:71:eb:72:7f:5b:fc:d9:ba:7a:fe: 09:0b:63:b1:c3:e6:3c:82:02:f2:d9:d0:3a:a6:7f: e0:32:f8:9d:4f:38:b1:01:a9:4d:57:8e:53:40:83: fa:ba:73:70:cf:b0:cc:92:48:61:dc:98:ca:4e:21: 38:e9:19:e7:20:cb:60:b0:54:b7:88:80:25:88:44: b6:b5:df:80:91:06:82:6c:75:10:78:79:3e:86:30: 33:64:72:61:88:2a:ff:11:f1:56:46:35:3e:e2:4e: a7:0d:cf:e0:f8:84:26:df:ca:81:7d:63:ce:d8:62: 80:35:62:68:a7:99:92:c4:3c:c8:ee:68:e7:ee:02: 18:a9:e3:4d:92:fc:59:cb:6d:ac:1c:c9:9e:34:b4: a2:2c:fb:9b:b9:44:34:42:ae:5e:7f:14:af:30:a3: 2f:3d:f1:51:2f:b8:f6:cf:69:75:a3:f4:9a:c5:3a: e0:40:2b:e1:b6:83:db:68:ac:b8:fc:f4:1d:f1:df: 4c:17:fd:6a:a7:4d:6c:b3:40:7f:f8:2a:c6:d2:7b: 7f:ac:f1:1e:ca:25:ba:9a:2b:26:04:7f:b3:9a:7e: 47:15:f6:ee:d0:9a:04:b9:bc:f0:38:2c:59:db:da: e6:ab:08:e4:eb:99:ff:61:bd:5f:f6:10:17:17:6c: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:8A:EB:59:F1:3F:D1:1E:71:26:21:0A:7F:F1:D6:2D:38:E9:21 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:66:80:bb:ea:ee:9f:e7:06:0c:b8:60:f3:5f:aa:8a:3f:58: 92:3f:4b:b8:02:f2:ef:6f:6c:0d:1e:33:e8:cc:cd:23:1c:d3: 8a:d1:b6:e3:42:1c:df:55:0b:89:06:88:0b:e6:ba:a2:b7:f5: aa:d6:80:16:50:f2:d0:61:d1:49:de:35:42:e3:6e:99:af:d0: 69:a1:4f:98:80:d3:58:3e:64:8e:f1:97:3b:bc:b5:8d:6c:f2: f2:a3:95:3e:4a:4a:17:5c:98:f6:5c:61:03:2b:c1:ae:b9:3b: 13:b6:78:1b:9f:0a:0e:2d:a0:08:b5:a8:38:ab:76:85:ba:90: 98:80:da:28:14:9f:b4:45:45:15:79:42:89:6e:21:15:88:c3: 74:3e:37:7e:38:29:20:7c:6b:d4:9c:e0:39:5d:22:f7:7d:a3: 6f:e5:42:37:e0:92:d3:ea:62:98:82:66:0b:7b:bf:51:53:42: 44:6b:e2:35:da:f4:b2:e8:60:30:83:2e:5a:9f:10:66:fc:ee: 0b:99:1f:99:e1:d5:93:52:59:29:fb:2a:ed:da:21:4e:80:88: 91:24:10:d0:4f:41:c2:d8:25:df:6e:1c:a6:e0:a4:84:77:0d: 3e:18:e4:0b:d6:33:a6:e9:1f:1c:e3:4c:e1:b9:b4:ec:c3:6e: f0:f6:6e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTA9RqTAdD1BYxixJv6i9Fv3DAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTEwMjAwNzA2MDdaFw0yNTEwMjMxMDE5MDdaMDMxMTAvBgNV BAMTKDZFRDE4QUVCNTlGMTNGRDExRTcxMjYyMTBBN0ZGMUQ2MkQzOEU5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU53agcetyf1v82bp6/gkLY7HD 5jyCAvLZ0Dqmf+Ay+J1POLEBqU1XjlNAg/q6c3DPsMySSGHcmMpOITjpGecgy2Cw VLeIgCWIRLa134CRBoJsdRB4eT6GMDNkcmGIKv8R8VZGNT7iTqcNz+D4hCbfyoF9 Y87YYoA1YminmZLEPMjuaOfuAhip402S/FnLbawcyZ40tKIs+5u5RDRCrl5/FK8w oy898VEvuPbPaXWj9JrFOuBAK+G2g9torLj89B3x30wX/WqnTWyzQH/4KsbSe3+s 8R7KJbqaKyYEf7OafkcV9u7QmgS5vPA4LFnb2uarCOTrmf9hvV/2EBcXbLSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtGK61nxP9EecSYhCn/x1i046SEwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRmgLvq7p/nBgy4YPNfqoo/WJI/S7gC8u9v bA0eM+jMzSMc04rRtuNCHN9VC4kGiAvmuqK39arWgBZQ8tBh0UneNULjbpmv0Gmh T5iA01g+ZI7xlzu8tY1s8vKjlT5KShdcmPZcYQMrwa65OxO2eBufCg4toAi1qDir doW6kJiA2igUn7RFRRV5QoluIRWIw3Q+N344KSB8a9Sc4DldIvd9o2/lQjfgktPq YpiCZgt7v1FTQkRr4jXa9LLoYDCDLlqfEGb87guZH5nh1ZNSWSn7Ku3aIU6AiJEk ENBPQcLYJd9uHKbgpIR3DT4Y5AvWM6bpHxzjTOG5tOzDbvD2biU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:55 2025 by rpki-client