$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: GqtliMJZ9/pANELBYQqUpL2UJUGCDuLsgGiozzu0pn4= Subject key identifier: EA:8E:FE:EF:BD:EE:EF:F1:1A:0D:FB:24:49:05:7F:F4:D8:AC:3D:23 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 329AA36398453E14BF703A34E9263259AAA58121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 0280 Signing time: Sun 16 Nov 2025 03:10:48 +0000 Manifest this update: Sun 16 Nov 2025 03:05:48 +0000 Manifest next update: Wed 19 Nov 2025 04:01:48 +0000 Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: qD+QKAS3WKg7q1pynoqG/MH54AssyV27y4pTOkpg/Fw=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9a:a3:63:98:45:3e:14:bf:70:3a:34:e9:26:32:59:aa:a5:81:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Nov 16 03:05:48 2025 GMT Not After : Nov 19 04:01:48 2025 GMT Subject: CN=EA8EFEEFBDEEEFF11A0DFB2449057FF4D8AC3D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:39:2f:b7:7b:89:e2:e1:1b:2a:14:da:16: f1:6f:de:b7:6e:f5:9b:96:83:52:4a:38:79:54:eb: f5:5d:83:f8:1f:64:45:69:74:96:0a:5d:63:dc:5f: b0:c4:b0:9a:8a:c9:41:c6:0f:d2:00:7c:61:06:c0: 9b:75:43:73:09:d4:c5:a8:1c:8d:d0:1c:02:03:c1: c1:29:80:fe:d2:dc:ed:0a:4f:53:01:1d:ac:95:50: 8a:35:2d:c0:d6:f9:16:f3:34:92:67:06:86:eb:08: 4b:c8:d5:d4:bb:c1:36:ec:92:b2:a2:e2:34:54:6f: 2b:98:01:28:a5:50:3a:c5:d6:2a:3b:63:66:21:67: 92:03:3c:0f:89:a3:f6:c3:87:5e:a6:b7:1e:73:10: 7a:25:a5:a1:52:05:b5:8d:57:73:27:71:c1:e3:e9: 5b:07:67:59:53:2a:91:81:77:f9:05:1c:9e:4e:82: 08:b7:4f:e8:5d:ee:52:d5:d2:50:8c:e4:dd:79:fb: ed:13:04:b0:7e:a1:2e:2e:75:93:50:39:49:08:9a: 3d:dc:83:61:43:d6:99:68:2b:58:ba:b9:bf:75:96: f9:33:a8:2a:4f:bd:dc:97:ac:7a:77:16:1c:d2:1d: 66:66:75:16:c2:99:ad:6a:8a:ed:ea:6a:4f:73:c9: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8E:FE:EF:BD:EE:EF:F1:1A:0D:FB:24:49:05:7F:F4:D8:AC:3D:23 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c2:aa:27:d5:63:1f:60:8d:a0:46:f3:e7:79:2d:78:7e:13: 16:82:79:8c:99:32:52:b8:74:9c:d2:9d:d1:61:ba:6c:fe:e4: b9:68:73:33:38:2a:f9:bb:a0:3c:1d:15:49:4f:ce:f8:35:b4: 34:1b:05:11:fb:04:2f:89:3e:b4:69:9f:a9:44:9b:49:66:85: 8d:82:1c:af:e5:60:4e:6f:39:57:8b:d0:ac:5e:cc:c1:2b:6c: bf:20:22:c3:15:7d:f5:89:40:70:73:2f:1f:6f:05:02:64:90: fc:1f:b1:73:65:dd:1e:84:47:9f:ee:ee:2f:ae:34:29:24:46: d6:6b:c3:f4:ea:0b:28:6a:f3:9e:5d:b6:02:fa:7d:2e:bf:72: be:55:b2:96:56:0e:f5:33:37:7c:21:23:3b:18:f9:e5:53:1e: bb:13:5e:94:8e:cb:79:30:0b:7c:62:6f:13:d9:a7:bc:7d:97: 97:e9:13:3b:6e:1f:9c:04:9b:c9:b5:5d:34:e1:02:7d:24:08: 7f:8a:b9:c8:05:b0:86:a7:b4:4c:4e:e3:74:fe:25:42:40:f7: ac:6d:09:59:df:3c:b7:94:37:21:2a:73:66:2c:d7:cc:2f:4f: 9f:ea:27:64:7e:39:9a:54:f1:c8:6b:cc:0e:84:73:2c:22:df: b4:27:22:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpqjY5hFPhS/cDo06SYyWaqlgSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTExMTYwMzA1NDhaFw0yNTExMTkwNDAxNDhaMDMxMTAvBgNV BAMTKEVBOEVGRUVGQkRFRUVGRjExQTBERkIyNDQ5MDU3RkY0RDhBQzNEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdTkvt3uJ4uEbKhTaFvFv3rdu 9ZuWg1JKOHlU6/Vdg/gfZEVpdJYKXWPcX7DEsJqKyUHGD9IAfGEGwJt1Q3MJ1MWo HI3QHAIDwcEpgP7S3O0KT1MBHayVUIo1LcDW+RbzNJJnBobrCEvI1dS7wTbskrKi 4jRUbyuYASilUDrF1io7Y2YhZ5IDPA+Jo/bDh16mtx5zEHolpaFSBbWNV3MnccHj 6VsHZ1lTKpGBd/kFHJ5Oggi3T+hd7lLV0lCM5N15++0TBLB+oS4udZNQOUkImj3c g2FD1ploK1i6ub91lvkzqCpPvdyXrHp3FhzSHWZmdRbCma1qiu3qak9zyadRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6o7+773u7/EaDfskSQV/9NisPSMwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELCqifVYx9gjaBG8+d5LXh+ExaCeYyZMlK4 dJzSndFhumz+5LloczM4Kvm7oDwdFUlPzvg1tDQbBRH7BC+JPrRpn6lEm0lmhY2C HK/lYE5vOVeL0KxezMErbL8gIsMVffWJQHBzLx9vBQJkkPwfsXNl3R6ER5/u7i+u NCkkRtZrw/TqCyhq855dtgL6fS6/cr5VspZWDvUzN3whIzsY+eVTHrsTXpSOy3kw C3xibxPZp7x9l5fpEztuH5wEm8m1XTThAn0kCH+KucgFsIantExO43T+JUJA96xt CVnfPLeUNyEqc2Ys18wvT5/qJ2R+OZpU8chrzA6Ecywi37QnIsE= -----END CERTIFICATE-----Generated at Mon Nov 17 18:55:08 2025 by rpki-client