$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: Dq5awjAI4/zyGJ2xePHZOqBq34c4XIE6k2em/2g0ID4= Subject key identifier: 86:9D:ED:5A:91:86:A1:64:56:EF:47:0D:5D:D2:39:32:D7:5E:6D:70 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 4FAC0C83C1F1C14950FC5CCD0675A1CC3F318AD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0231 Signing time: Sat 15 Nov 2025 16:20:50 +0000 Manifest this update: Sat 15 Nov 2025 16:15:50 +0000 Manifest next update: Tue 18 Nov 2025 16:21:50 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: +C4wQawGR/oU/mHApRpPzL2CsLyidC06N66/Wl8Shng=) 3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 4: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 5: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 16:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ac:0c:83:c1:f1:c1:49:50:fc:5c:cd:06:75:a1:cc:3f:31:8a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Nov 15 16:15:50 2025 GMT Not After : Nov 18 16:21:50 2025 GMT Subject: CN=869DED5A9186A16456EF470D5DD23932D75E6D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:6d:a5:c5:5d:9e:2e:e2:62:29:da:ba:fe: a2:31:2c:48:3f:27:9b:f4:4b:29:9e:45:31:03:be: 63:c5:f1:2f:5b:30:4a:08:de:10:38:5b:8b:c6:7a: 60:c2:68:83:1e:5c:e3:60:b3:01:37:d2:1a:79:92: 35:a0:ec:12:8b:16:f0:84:c1:1f:a0:6c:84:58:e1: 89:98:47:71:ea:fb:5c:a9:18:b9:e2:f1:f2:f3:75: 7d:d8:35:f9:70:32:da:56:fb:b7:8f:5d:ac:9b:c6: 95:12:1a:5b:98:06:3d:51:fc:c6:5f:ea:83:48:aa: 85:cb:5a:cb:67:7c:72:28:82:35:9c:11:48:4c:7e: fe:39:68:2b:15:49:2b:96:e3:4f:86:73:d7:74:8b: 7e:96:a2:46:d1:7c:34:39:12:e9:dd:19:55:e3:dc: 08:a4:b9:f1:91:da:13:e5:48:e5:91:37:e6:d7:8e: 2c:d2:75:66:32:d8:2c:c2:1f:18:8a:f4:58:ce:55: ba:e8:0c:30:c9:f3:43:99:d3:7f:83:fe:c0:f6:c4: f4:5a:69:7b:6e:5b:27:fa:b9:4b:34:94:cb:60:25: d3:f8:e9:25:57:d3:5d:5b:24:8b:c0:70:3b:ef:55: c6:9b:2d:5c:94:86:50:a3:ae:75:df:31:db:97:46: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9D:ED:5A:91:86:A1:64:56:EF:47:0D:5D:D2:39:32:D7:5E:6D:70 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a6:ed:59:17:6f:ce:16:33:f3:f3:b7:02:e4:7a:4a:63:7b: af:ac:c7:5c:87:e3:37:9c:e2:67:ca:13:6a:c3:76:da:33:74: a1:a0:c6:d6:70:00:26:d4:d2:37:76:54:1d:22:a2:ed:d4:36: dc:a9:52:35:ae:3e:39:39:10:39:e6:8a:1f:a8:91:1e:bd:20: dd:50:55:8b:75:9b:60:92:62:65:b2:1b:f9:db:bd:92:5d:26: ab:ec:19:6c:8d:65:c3:bd:8e:a1:d5:84:4f:d3:7d:f0:d7:b4: 53:74:43:d3:2f:5e:a2:22:c4:aa:81:c0:e0:f8:59:4e:10:fd: 9e:e0:b3:9f:a7:13:82:94:7a:21:56:48:b3:d8:7b:a7:71:cf: 9e:5b:59:3b:24:08:48:0f:e8:0a:6d:94:50:e1:f6:81:2d:47: 9f:73:84:84:8a:ef:dd:b4:c4:e1:01:60:46:b0:28:a3:5c:50: e6:49:f8:da:5d:25:6b:1e:eb:06:79:bc:2e:04:0b:60:5a:3f: c6:43:5d:59:9c:7f:9e:d5:ae:61:9b:e4:b7:20:1b:3a:c2:71: 53:b7:95:bc:f1:c4:a2:2c:67:df:39:b6:2b:d6:35:89:bf:d0: 87:9f:07:56:71:3b:16:8a:a8:b0:95:4c:49:31:c4:5a:1c:54: ae:a7:18:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6wMg8HxwUlQ/FzNBnWhzD8xitUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTExMTUxNjE1NTBaFw0yNTExMTgxNjIxNTBaMDMxMTAvBgNV BAMTKDg2OURFRDVBOTE4NkExNjQ1NkVGNDcwRDVERDIzOTMyRDc1RTZENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpG2lxV2eLuJiKdq6/qIxLEg/ J5v0SymeRTEDvmPF8S9bMEoI3hA4W4vGemDCaIMeXONgswE30hp5kjWg7BKLFvCE wR+gbIRY4YmYR3Hq+1ypGLni8fLzdX3YNflwMtpW+7ePXaybxpUSGluYBj1R/MZf 6oNIqoXLWstnfHIogjWcEUhMfv45aCsVSSuW40+Gc9d0i36WokbRfDQ5EundGVXj 3AikufGR2hPlSOWRN+bXjizSdWYy2CzCHxiK9FjOVbroDDDJ80OZ03+D/sD2xPRa aXtuWyf6uUs0lMtgJdP46SVX011bJIvAcDvvVcabLVyUhlCjrnXfMduXRovrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhp3tWpGGoWRW70cNXdI5MtdebXAwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqm7VkXb84WM/PztwLkekpje6+sx1yH4zec 4mfKE2rDdtozdKGgxtZwACbU0jd2VB0iou3UNtypUjWuPjk5EDnmih+okR69IN1Q VYt1m2CSYmWyG/nbvZJdJqvsGWyNZcO9jqHVhE/TffDXtFN0Q9MvXqIixKqBwOD4 WU4Q/Z7gs5+nE4KUeiFWSLPYe6dxz55bWTskCEgP6AptlFDh9oEtR59zhISK7920 xOEBYEawKKNcUOZJ+NpdJWse6wZ5vC4EC2BaP8ZDXVmcf57VrmGb5LcgGzrCcVO3 lbzxxKIsZ985tivWNYm/0IefB1ZxOxaKqLCVTEkxxFocVK6nGE8= -----END CERTIFICATE-----Generated at Mon Nov 17 12:08:20 2025 by rpki-client