$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: WLapYeODIVxMZtZ29D4PF76nEGYpcnv1uoRWK3kDAbA= Subject key identifier: 2D:1A:ED:88:72:7E:1B:4E:23:B5:57:9E:CB:E7:E1:36:5E:51:06:15 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 75C4AA029439B55382BE033764081CE9DFA7C77A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 0516 Signing time: Sun 26 Oct 2025 18:41:21 +0000 Manifest this update: Sun 26 Oct 2025 18:36:21 +0000 Manifest next update: Thu 30 Oct 2025 05:53:21 +0000 Files and hashes: 1: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=) 2: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=) 3: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=) 4: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=) 5: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=) 6: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: dh32eT4VvtArBzicV8EG0eIUVJHpAtGVbbhyHdtH6Hk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c4:aa:02:94:39:b5:53:82:be:03:37:64:08:1c:e9:df:a7:c7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Oct 26 18:36:21 2025 GMT Not After : Oct 30 05:53:21 2025 GMT Subject: CN=2D1AED88727E1B4E23B5579ECBE7E1365E510615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:a4:15:ba:21:7f:67:d2:a8:05:8c:f7:d4: 65:62:0b:32:79:3d:62:8a:79:a6:4f:3a:71:c7:29: 49:d0:16:76:55:46:06:25:25:31:ab:30:4a:6e:c2: c3:79:40:3f:00:72:78:17:4f:88:b6:55:5e:ef:c0: f1:b0:cb:07:82:08:19:b8:37:06:f3:9a:d4:76:d6: 36:19:a2:4a:4c:23:5a:50:ea:21:0b:fc:0a:5f:f5: 99:49:82:71:29:4f:d1:84:33:9d:21:f1:4c:66:ee: c0:f9:fd:40:88:22:de:c6:d6:ed:60:53:31:53:b1: d1:73:cd:14:6a:dc:c4:8e:28:d0:64:26:10:39:53: 49:44:40:44:01:ea:d0:38:34:a4:f0:f6:2c:3c:dc: 6c:8f:ef:f2:cc:3b:0e:25:1e:c7:57:7d:ce:bd:c4: 77:3c:41:e3:ea:25:93:d7:ba:b6:2e:65:a1:0b:41: 02:de:df:d4:22:c5:1b:ec:99:50:84:77:5a:2f:17: 1a:8e:6c:5e:96:7b:d6:d5:9a:ae:c7:2f:09:33:05: e6:65:6f:9a:60:d8:04:98:94:21:47:8f:74:ff:9a: dd:80:48:ee:18:96:1f:89:51:40:85:38:be:db:a1: 10:cf:08:ac:0b:47:f6:96:4a:05:bd:37:27:f8:a6: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:ED:88:72:7E:1B:4E:23:B5:57:9E:CB:E7:E1:36:5E:51:06:15 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f5:e8:d8:3d:00:b0:3d:68:3f:12:6b:6c:40:46:83:9a:a4: 3b:56:2e:37:72:63:bf:37:05:7e:60:9b:65:21:4c:3a:e1:3d: f1:82:59:0a:15:ff:0a:50:c3:89:a1:4d:f9:8c:5d:d4:2f:31: 46:a6:7d:da:8a:55:71:b2:b6:58:7f:60:89:3a:97:f7:8d:f5: d2:39:7f:66:af:8e:35:2e:28:75:6d:aa:95:33:6b:35:28:00: d2:49:48:99:9d:f1:65:cb:02:c9:8f:65:03:83:9a:ca:50:d5: ce:74:f4:0e:62:49:84:55:a3:fd:26:b3:68:1c:cd:0d:22:ec: 42:09:6e:75:f3:0b:31:d0:f7:ed:8e:17:a3:30:2e:42:54:82: 60:e6:70:c0:3e:9c:9a:59:cf:7c:43:0b:e7:6f:b7:5e:04:eb: c8:6a:47:97:d1:20:d0:9f:de:78:99:d9:a7:b3:a5:43:a2:e7: 9b:e2:ed:08:7c:b5:11:f2:1f:fd:ed:1d:b7:eb:9d:64:ef:d6: ba:8c:6b:9c:a5:43:e2:e0:31:dc:54:70:7c:1c:53:36:c6:0b: 35:ff:df:8f:34:e0:d5:8c:5d:36:bf:53:ce:ad:e7:36:0c:72: 4f:e5:61:10:63:25:fb:a0:45:45:18:d8:82:67:fd:be:3c:26: 68:d2:65:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcSqApQ5tVOCvgM3ZAgc6d+nx3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTEwMjYxODM2MjFaFw0yNTEwMzAwNTUzMjFaMDMxMTAvBgNV BAMTKDJEMUFFRDg4NzI3RTFCNEUyM0I1NTc5RUNCRTdFMTM2NUU1MTA2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/aQVuiF/Z9KoBYz31GViCzJ5 PWKKeaZPOnHHKUnQFnZVRgYlJTGrMEpuwsN5QD8AcngXT4i2VV7vwPGwyweCCBm4 NwbzmtR21jYZokpMI1pQ6iEL/Apf9ZlJgnEpT9GEM50h8Uxm7sD5/UCIIt7G1u1g UzFTsdFzzRRq3MSOKNBkJhA5U0lEQEQB6tA4NKTw9iw83GyP7/LMOw4lHsdXfc69 xHc8QePqJZPXurYuZaELQQLe39QixRvsmVCEd1ovFxqObF6We9bVmq7HLwkzBeZl b5pg2ASYlCFHj3T/mt2ASO4Ylh+JUUCFOL7boRDPCKwLR/aWSgW9Nyf4phOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRrtiHJ+G04jtVeey+fhNl5RBhUwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz16Ng9ALA9aD8Sa2xARoOapDtWLjdyY783 BX5gm2UhTDrhPfGCWQoV/wpQw4mhTfmMXdQvMUamfdqKVXGytlh/YIk6l/eN9dI5 f2avjjUuKHVtqpUzazUoANJJSJmd8WXLAsmPZQODmspQ1c509A5iSYRVo/0ms2gc zQ0i7EIJbnXzCzHQ9+2OF6MwLkJUgmDmcMA+nJpZz3xDC+dvt14E68hqR5fRINCf 3niZ2aezpUOi55vi7Qh8tRHyH/3tHbfrnWTv1rqMa5ylQ+LgMdxUcHwcUzbGCzX/ 34804NWMXTa/U86t5zYMck/lYRBjJfugRUUY2IJn/b48JmjSZak= -----END CERTIFICATE-----Generated at Tue Oct 28 10:34:08 2025 by rpki-client