$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: 9m+zDKyD/GDWNDEin9gd+s3eJuhQmvJRKQB9zbIPHF8= Subject key identifier: E0:3E:28:B0:3F:E1:AF:78:08:A6:65:4B:96:06:4A:54:54:09:E8:56 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 5453D2F7368AAB5F6DBE61B10C558016705A07FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 01E1 Signing time: Sat 18 Oct 2025 08:31:09 +0000 Manifest this update: Sat 18 Oct 2025 08:26:09 +0000 Manifest next update: Tue 21 Oct 2025 18:57:09 +0000 Files and hashes: 1: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=) 2: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=) 3: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=) 4: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=) 5: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=) 6: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=) 7: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: LscoRvhH3kOymm45eiEeQgVKC7eOq0nQDjI6dcBlrPQ=) 8: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=) 9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:53:d2:f7:36:8a:ab:5f:6d:be:61:b1:0c:55:80:16:70:5a:07:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Oct 18 08:26:09 2025 GMT Not After : Oct 21 18:57:09 2025 GMT Subject: CN=E03E28B03FE1AF7808A6654B96064A545409E856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:64:9e:11:07:9d:2d:f2:c0:c6:ac:9b:07: fa:ca:e5:88:b4:a9:a4:50:09:b5:dd:10:bc:18:3f: fb:f4:e1:50:1e:a0:a2:ee:a1:a2:49:30:18:49:ba: 46:8c:3e:f2:f0:37:92:83:d2:81:c3:12:cd:eb:f9: a7:af:be:d9:a9:17:97:12:4f:e1:09:c9:b9:db:00: 0f:78:38:b4:d5:11:3a:68:77:4a:72:87:fb:19:2f: 46:bd:14:80:46:cd:4a:4e:14:9c:63:db:af:9b:e8: 59:ff:ee:ef:2b:28:83:89:c3:a2:2b:2d:a9:df:29: c8:08:2e:f3:ee:89:b6:51:f1:86:f7:a0:36:19:e2: 00:33:f1:cd:cb:21:d1:8c:1f:ff:2a:2c:52:60:9d: 14:b6:94:a0:88:1e:a3:d3:5f:3c:9d:98:cc:6d:47: 0d:1d:5b:15:f2:24:06:5f:fe:6e:c3:b4:1b:bc:53: 7c:d5:dd:f6:9b:eb:9d:e4:44:ba:55:af:f4:a5:10: f6:3e:d9:d3:93:b5:39:40:d8:01:ba:41:c4:8d:94: 6a:44:a0:b0:e2:cb:e1:f4:71:f6:09:be:90:c9:73: a4:6c:fa:5b:0d:d4:8d:b7:fa:ff:3a:a9:fd:b3:db: 6e:df:63:d9:5c:29:e3:0e:5f:78:68:2d:4c:21:10: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3E:28:B0:3F:E1:AF:78:08:A6:65:4B:96:06:4A:54:54:09:E8:56 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ff:7b:b3:6d:10:4f:bb:ce:58:08:a9:87:c2:b4:7b:e3:29: d9:7e:0c:d3:d0:3b:54:36:84:62:91:c7:9e:1c:29:6f:57:40: 04:e1:49:67:09:cb:00:a1:97:3e:47:4a:85:5f:ff:42:2f:18: 47:fa:18:6b:0c:b2:8f:3f:1e:c0:ed:8c:f8:95:a8:8f:fe:65: 41:87:c0:33:4f:8d:4f:56:f6:5a:71:24:4e:84:33:00:3f:f3: e0:18:c6:21:ca:bd:57:f5:3a:7a:6a:f2:17:40:6d:d0:02:28: 5f:b7:87:28:83:7d:c9:24:ae:66:ea:03:b0:3f:cb:12:12:c1: 4e:a0:92:ea:62:6d:90:1d:2f:7a:ad:c4:97:c4:e8:f8:7b:4e: 4f:24:b3:7c:8e:75:86:26:f2:64:6a:e1:20:a9:c9:cc:e5:b9: 53:2c:76:aa:ed:c4:e3:e5:48:32:e3:49:18:fa:13:88:3d:40: 26:8a:43:07:a9:a9:2f:89:1d:67:69:8f:42:dd:80:5c:dd:13: a8:bf:8d:7d:e1:8f:44:fe:d5:30:19:2c:59:f3:0a:85:55:e7: c4:6f:0b:26:ea:98:e7:43:55:4d:d7:a4:c4:8c:e1:54:fe:8c: 96:0e:60:30:d4:42:e5:e6:fd:a7:45:e2:bd:40:f1:fb:b2:d9: 63:96:92:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFPS9zaKq19tvmGxDFWAFnBaB/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNTEwMTgwODI2MDlaFw0yNTEwMjExODU3MDlaMDMxMTAvBgNV BAMTKEUwM0UyOEIwM0ZFMUFGNzgwOEE2NjU0Qjk2MDY0QTU0NTQwOUU4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOmSeEQedLfLAxqybB/rK5Yi0 qaRQCbXdELwYP/v04VAeoKLuoaJJMBhJukaMPvLwN5KD0oHDEs3r+aevvtmpF5cS T+EJybnbAA94OLTVETpod0pyh/sZL0a9FIBGzUpOFJxj26+b6Fn/7u8rKIOJw6Ir LanfKcgILvPuibZR8Yb3oDYZ4gAz8c3LIdGMH/8qLFJgnRS2lKCIHqPTXzydmMxt Rw0dWxXyJAZf/m7DtBu8U3zV3fab653kRLpVr/SlEPY+2dOTtTlA2AG6QcSNlGpE oLDiy+H0cfYJvpDJc6Rs+lsN1I23+v86qf2z227fY9lcKeMOX3hoLUwhEKmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4D4osD/hr3gIpmVLlgZKVFQJ6FYwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3/e7NtEE+7zlgIqYfCtHvjKdl+DNPQO1Q2 hGKRx54cKW9XQAThSWcJywChlz5HSoVf/0IvGEf6GGsMso8/HsDtjPiVqI/+ZUGH wDNPjU9W9lpxJE6EMwA/8+AYxiHKvVf1Onpq8hdAbdACKF+3hyiDfckkrmbqA7A/ yxISwU6gkupibZAdL3qtxJfE6Ph7Tk8ks3yOdYYm8mRq4SCpyczluVMsdqrtxOPl SDLjSRj6E4g9QCaKQwepqS+JHWdpj0LdgFzdE6i/jX3hj0T+1TAZLFnzCoVV58Rv CybqmOdDVU3XpMSM4VT+jJYOYDDUQuXm/adF4r1A8fuy2WOWktk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:19 2025 by rpki-client