$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft (raw, json) Hash identifier: jfr6YH5GsVbgYuQw6C5oTfNw0mokK1Qd3OubLlCbD8I= Subject key identifier: 34:03:24:B1:EB:D9:DB:76:3B:68:15:9A:F1:51:33:1F:AC:FA:CE:56 Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD Certificate issuer: /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Certificate serial: 2B65693ABF1B5F9A1106E2B1E08A321F53FA8A95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft Manifest number: 01A2 Signing time: Sat 18 Oct 2025 11:40:01 +0000 Manifest this update: Sat 18 Oct 2025 11:35:01 +0000 Manifest next update: Tue 21 Oct 2025 14:28:01 +0000 Files and hashes: 1: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl (hash: a836c65mirsWp0ldpTVeJqGDGZFKTVzEZmq2nlJZDOU=) 2: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: rfgoK21VT80jcjTnSSTUWLHb0odprGUSbTG8ns7Fdx8=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: q4M2q2KFusV9WALClaWNLjI5YHGqNj7u0KWUCOIzdx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:65:69:3a:bf:1b:5f:9a:11:06:e2:b1:e0:8a:32:1f:53:fa:8a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Validity Not Before: Oct 18 11:35:01 2025 GMT Not After : Oct 21 14:28:01 2025 GMT Subject: CN=340324B1EBD9DB763B68159AF151331FACFACE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:c4:ac:29:78:5f:97:6f:c8:d0:3f:d2:72: 45:56:48:43:e6:76:de:c7:9f:25:2d:da:7a:70:43: 48:24:2a:09:53:70:3c:7b:d6:69:e0:72:e1:c5:6b: 6c:fa:07:6f:19:8d:ae:ce:7e:c0:c9:2a:74:f9:fc: 3f:db:4f:8e:0d:cc:54:0f:55:52:93:f3:8b:e6:01: b6:5c:dd:12:88:49:71:62:9a:c7:2a:01:98:dc:fc: 0d:75:ed:e9:2d:02:81:d7:eb:fe:22:01:95:3b:99: 95:ed:cc:f1:32:2e:80:4b:cb:88:f8:8c:70:fb:2b: a6:6a:60:b6:d4:12:09:99:79:b2:50:be:6e:65:5a: 43:20:bc:87:94:6c:e0:1f:a8:99:93:ce:f6:fb:e3: c9:4c:8e:ef:0b:38:0d:33:c2:38:a2:05:0f:13:aa: 12:16:78:b5:6a:19:2a:e7:46:72:1e:f5:7b:57:7f: 83:65:c0:e2:1b:34:89:b2:59:43:87:90:c3:1b:72: ea:53:01:6e:88:d5:92:6c:c6:4d:65:89:31:88:28: 59:29:e0:1f:06:11:78:30:80:78:92:ba:92:ca:ff: d3:15:16:bc:b6:d2:03:2c:68:a8:55:9e:c1:cf:16: 13:d6:10:44:24:ca:f2:44:d4:66:77:d2:1d:b0:48: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:03:24:B1:EB:D9:DB:76:3B:68:15:9A:F1:51:33:1F:AC:FA:CE:56 X509v3 Authority Key Identifier: keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:5a:0b:57:28:cc:b7:ce:4f:3c:e8:cb:88:ab:ed:d4:5e:36: de:32:45:c5:e9:f9:54:3d:85:17:27:5c:ac:53:9c:7e:d6:0d: 3a:4a:b0:8a:0f:a3:91:f2:4d:b4:3f:e8:7c:f2:d3:87:41:0f: 88:65:8a:7c:2e:4c:42:d2:76:b5:c4:74:32:14:f0:1a:08:d6: 24:ad:06:e7:aa:66:4e:d2:74:f9:bc:92:d9:1b:72:c9:d9:3d: 3e:fa:42:0f:03:5c:58:9d:64:a6:a1:02:b8:1b:17:76:95:f8: 8f:6e:58:41:63:cc:fa:47:6a:ba:1f:68:66:95:35:fc:a2:c5: c0:7b:2d:96:96:2f:47:13:6d:31:ef:87:5d:02:b1:eb:6e:a3: ef:14:3d:cc:7c:64:69:4e:37:aa:fe:c2:52:6e:85:79:d3:92: 34:46:97:63:12:5e:fc:b2:e0:2e:a2:a4:a3:94:39:a8:d7:8f: 58:a1:d9:28:fc:a5:a5:cf:77:da:04:66:31:05:bb:7c:88:f4: a8:3f:18:1f:af:32:ea:95:6f:aa:39:43:23:d8:6c:42:18:a8: 46:14:32:55:6d:26:8e:13:23:5b:7c:8f:b8:b3:b0:91:d3:04: 6b:22:82:6c:20:96:73:f1:bf:7d:e8:b8:ec:f5:cd:11:c2:3c: c6:c7:dd:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2VpOr8bX5oRBuKx4IoyH1P6ipUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJF OUJGMjZERDAeFw0yNTEwMTgxMTM1MDFaFw0yNTEwMjExNDI4MDFaMDMxMTAvBgNV BAMTKDM0MDMyNEIxRUJEOURCNzYzQjY4MTU5QUYxNTEzMzFGQUNGQUNFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWcSsKXhfl2/I0D/SckVWSEPm dt7HnyUt2npwQ0gkKglTcDx71mngcuHFa2z6B28Zja7OfsDJKnT5/D/bT44NzFQP VVKT84vmAbZc3RKISXFimscqAZjc/A117ektAoHX6/4iAZU7mZXtzPEyLoBLy4j4 jHD7K6ZqYLbUEgmZebJQvm5lWkMgvIeUbOAfqJmTzvb748lMju8LOA0zwjiiBQ8T qhIWeLVqGSrnRnIe9XtXf4NlwOIbNImyWUOHkMMbcupTAW6I1ZJsxk1liTGIKFkp 4B8GEXgwgHiSupLK/9MVFry20gMsaKhVnsHPFhPWEEQkyvJE1GZ30h2wSE19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAMksevZ23Y7aBWa8VEzH6z6zlYwHwYDVR0j BBgwFoAUF5KEor9gb2mm/zQM09ZGC+m/Jt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2UwZmFmMC03ODhkLTQ5NWItYWM5OC1mMzUxNjE5NWRiNjAvMC8xNzkyODRBMkJG NjA2RjY5QTZGRjM0MENEM0Q2NDYwQkU5QkYyNkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJFOUJG MjZERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2 MEJFOUJGMjZERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVaC1cozLfOTzzoy4ir7dReNt4yRcXp+VQ9 hRcnXKxTnH7WDTpKsIoPo5HyTbQ/6Hzy04dBD4hlinwuTELSdrXEdDIU8BoI1iSt BueqZk7SdPm8ktkbcsnZPT76Qg8DXFidZKahArgbF3aV+I9uWEFjzPpHarofaGaV NfyixcB7LZaWL0cTbTHvh10Csetuo+8UPcx8ZGlON6r+wlJuhXnTkjRGl2MSXvyy 4C6ipKOUOajXj1ih2Sj8paXPd9oEZjEFu3yI9Kg/GB+vMuqVb6o5QyPYbEIYqEYU MlVtJo4TI1t8j7izsJHTBGsigmwglnPxv33ouOz1zRHCPMbH3V0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:23 2025 by rpki-client