$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: kidL8dwY7FD9BfgfSb6gKLd0Od+W8sQi00QNJnu7q3Q= Subject key identifier: 5C:30:01:8C:7B:42:BD:72:62:B6:22:9D:60:33:EA:27:BC:10:26:ED Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 64A286391ADF243CD4CBFD8EE870AC9CAA8923FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 021D Signing time: Mon 20 Oct 2025 04:00:47 +0000 Manifest this update: Mon 20 Oct 2025 03:55:47 +0000 Manifest next update: Thu 23 Oct 2025 08:29:47 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: IfDv6ejLJ1ZvwQoQtIlQz8j/O3vDdqzSeGHUsWYk3+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a2:86:39:1a:df:24:3c:d4:cb:fd:8e:e8:70:ac:9c:aa:89:23:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Oct 20 03:55:47 2025 GMT Not After : Oct 23 08:29:47 2025 GMT Subject: CN=5C30018C7B42BD7262B6229D6033EA27BC1026ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:95:89:3d:c6:bd:77:3f:62:38:c0:48:9d: 00:6b:48:e1:4b:48:7c:07:b7:b0:08:69:ed:3f:2b: 67:11:2d:41:db:3a:32:76:97:12:60:3f:95:af:6d: c2:a9:2d:0e:39:a9:f3:bc:d1:c1:38:77:ba:b1:2f: 3c:c1:ca:11:5b:fc:dc:8c:fc:18:8c:2f:d9:67:46: 86:fa:5b:8d:b4:42:21:40:f8:6e:f0:ce:0b:9f:7c: 2c:05:82:49:14:40:c6:3a:9f:ba:80:f8:65:86:46: a0:cd:32:90:e5:be:e0:67:84:5a:b1:13:0b:13:4c: 9b:17:70:1b:57:dd:1a:0e:a8:2d:42:b3:21:67:da: 9e:65:7f:86:7d:5f:86:86:37:6d:b0:03:ca:3e:3a: 52:2a:f9:ed:37:5d:15:d8:61:76:3b:92:e6:5f:db: f6:59:83:d9:f5:e1:93:96:61:79:5e:84:7a:73:cb: ae:37:4a:91:cc:20:fc:13:d7:4f:0b:5f:c2:4d:3a: 64:9a:a8:f8:95:97:c2:ae:39:de:11:b9:5d:b2:cd: 3f:6c:e6:46:11:2d:9f:43:4a:9d:0a:cd:ec:0a:d5: 86:3a:06:db:b4:c0:99:ec:02:f2:03:fa:ba:07:be: 37:79:1a:c5:81:5a:c2:a9:29:f4:06:4e:9e:93:5f: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:30:01:8C:7B:42:BD:72:62:B6:22:9D:60:33:EA:27:BC:10:26:ED X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d6:38:90:42:d5:d8:3c:95:a9:67:ce:a4:ce:3a:20:da:7a: fd:1f:5b:d9:a0:70:5e:7a:31:ba:3c:f4:bc:23:3e:8d:79:e4: ca:b3:18:24:48:a4:41:b9:3b:dc:31:4c:21:7f:71:d0:ec:33: ef:89:5e:df:44:99:30:8c:c7:de:43:ed:1d:99:17:5d:d3:18: 4f:b3:4e:fd:2a:30:cb:07:14:de:97:b8:b2:f1:85:dc:f8:1b: 3a:5b:a1:a0:14:8a:b1:39:ce:be:14:a8:c4:d1:58:fb:5a:01: a1:03:6d:af:97:83:8d:09:37:a2:e6:cf:7e:ad:66:e7:e5:50: 5f:a1:16:6c:10:95:ed:20:fb:77:93:46:24:16:c9:89:c8:bc: c7:8a:9d:a9:24:3b:d5:75:63:13:df:6a:d1:09:e8:9e:4b:ea: 22:17:e0:43:28:02:44:e9:40:cf:c9:c9:07:4b:9c:92:8d:0c: b2:10:24:03:b4:5a:89:b4:20:ed:ae:e3:ad:2e:c1:a6:5e:b0: 5b:2f:6a:b0:cc:cd:05:0d:15:b3:43:a1:b8:e5:81:48:32:b8: 2f:db:e8:11:df:3c:cf:82:22:e8:72:11:91:2f:e3:b7:e2:92: e3:32:bd:4f:99:82:51:4a:85:c2:c2:ca:bb:05:99:c5:a5:2e: 61:df:18:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKKGORrfJDzUy/2O6HCsnKqJI/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTEwMjAwMzU1NDdaFw0yNTEwMjMwODI5NDdaMDMxMTAvBgNV BAMTKDVDMzAwMThDN0I0MkJENzI2MkI2MjI5RDYwMzNFQTI3QkMxMDI2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYN5WJPca9dz9iOMBInQBrSOFL SHwHt7AIae0/K2cRLUHbOjJ2lxJgP5WvbcKpLQ45qfO80cE4d7qxLzzByhFb/NyM /BiML9lnRob6W420QiFA+G7wzguffCwFgkkUQMY6n7qA+GWGRqDNMpDlvuBnhFqx EwsTTJsXcBtX3RoOqC1CsyFn2p5lf4Z9X4aGN22wA8o+OlIq+e03XRXYYXY7kuZf 2/ZZg9n14ZOWYXlehHpzy643SpHMIPwT108LX8JNOmSaqPiVl8KuOd4RuV2yzT9s 5kYRLZ9DSp0KzewK1YY6Btu0wJnsAvID+roHvjd5GsWBWsKpKfQGTp6TX383AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDABjHtCvXJitiKdYDPqJ7wQJu0wHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPWOJBC1dg8lalnzqTOOiDaev0fW9mgcF56 Mbo89LwjPo155MqzGCRIpEG5O9wxTCF/cdDsM++JXt9EmTCMx95D7R2ZF13TGE+z Tv0qMMsHFN6XuLLxhdz4GzpboaAUirE5zr4UqMTRWPtaAaEDba+Xg40JN6Lmz36t ZuflUF+hFmwQle0g+3eTRiQWyYnIvMeKnakkO9V1YxPfatEJ6J5L6iIX4EMoAkTp QM/JyQdLnJKNDLIQJAO0Wom0IO2u460uwaZesFsvarDMzQUNFbNDobjlgUgyuC/b 6BHfPM+CIuhyEZEv47fikuMyvU+ZglFKhcLCyrsFmcWlLmHfGHo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:55:14 2025 by rpki-client