$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: Q0KCbR6FQYfQfLwXMAO8BOQBIN91uZCkEL5O8/+GzMs= Subject key identifier: 33:AD:BC:82:4D:DA:11:30:61:F7:96:6A:FA:25:C7:09:C6:D1:B9:FC Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 01C6C5F68952A604C5600547696523C78DC955B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01B5 Signing time: Fri 07 Nov 2025 15:51:09 +0000 Manifest this update: Fri 07 Nov 2025 15:46:09 +0000 Manifest next update: Tue 11 Nov 2025 01:38:09 +0000 Files and hashes: 1: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: PIzeiW9lCDUu/objRtQUnMOZEdeMs2dEVt3eEH4SNHY=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 01:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c6:c5:f6:89:52:a6:04:c5:60:05:47:69:65:23:c7:8d:c9:55:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Nov 7 15:46:09 2025 GMT Not After : Nov 11 01:38:09 2025 GMT Subject: CN=33ADBC824DDA113061F7966AFA25C709C6D1B9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:5e:3c:9d:1d:80:8b:d7:9d:61:b8:ce:2a: 7a:38:79:17:14:64:87:44:69:46:e6:bd:b6:4e:ac: 57:cf:e9:25:5a:4c:0a:45:6c:81:46:7b:96:14:2f: 78:b1:bc:f2:c8:03:91:bc:09:37:33:9b:00:b9:05: f5:45:fb:b2:f2:cb:f8:6d:f8:3d:11:3d:0d:08:1f: de:34:2b:e4:e9:60:1c:67:17:77:b6:4c:5d:3d:b6: 14:a4:69:4a:65:7a:28:40:82:42:51:8b:12:8f:a8: 7f:52:4e:25:fe:16:fa:bf:ac:86:f3:a2:a8:c5:b4: 90:e9:3e:b8:5c:f5:71:d6:f5:c7:ed:69:3b:6a:50: b0:29:6c:3c:87:07:fb:b9:f2:3c:cb:30:67:80:42: 5b:76:30:9d:d8:d8:da:37:19:7c:a9:df:d0:f1:17: b1:36:56:99:bf:9c:61:53:76:bd:09:40:8a:11:68: d2:83:fa:b2:f6:56:d1:7a:9f:b7:d3:b4:5a:1d:fb: ab:0e:63:8c:8e:a1:80:b6:d6:13:aa:92:e6:37:c6: 5a:6a:42:2e:60:91:a1:d5:a3:d9:4e:87:72:5e:94: 47:d6:d2:e3:43:4c:11:f8:a1:85:c9:d6:63:df:93: b7:26:3a:32:95:5b:33:d9:19:8f:52:eb:81:4e:fe: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:BC:82:4D:DA:11:30:61:F7:96:6A:FA:25:C7:09:C6:D1:B9:FC X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:30:00:6e:de:65:fe:ee:27:0c:13:c1:b4:fe:9d:10:0a: 97:0f:96:9b:b0:13:eb:23:57:55:8c:cd:69:f0:7c:ef:bb:4e: ea:f2:52:31:14:55:86:91:b5:fd:cc:ce:3d:69:a5:76:56:71: ee:c7:44:66:73:e7:6a:6e:c2:11:73:2e:bf:4b:05:62:fb:73: 4d:19:12:32:92:da:da:e5:13:16:60:a5:ec:ca:7d:e7:dc:03: c9:73:8e:fd:62:33:0c:ae:4b:99:29:97:f2:65:a1:5d:66:3e: e9:a3:b9:51:55:90:05:88:1a:c6:fe:2f:2c:33:4d:c1:6b:32: ae:31:31:9e:8b:52:0d:8b:12:c7:6a:3b:d8:ab:16:40:72:cf: 30:99:29:63:e3:0c:26:b1:90:ee:5e:65:7a:5d:aa:c1:20:3d: 27:c1:e9:d2:9b:ca:5a:34:2c:70:d1:b8:74:1f:32:16:8e:06: 2c:c8:38:a9:4e:f5:83:8a:aa:bf:ab:92:7b:cf:0a:a1:65:f8: 28:af:ab:d5:b3:76:e3:0f:01:64:1a:ba:43:75:15:40:7c:fd: 41:63:1b:ea:84:1a:9b:b8:d6:0f:ec:4f:db:be:c1:13:bf:a7: a5:0e:69:35:fb:54:3a:5a:4a:03:d2:68:d6:2c:34:43:2a:9a: f9:ee:fa:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcbF9olSpgTFYAVHaWUjx43JVbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTExMDcxNTQ2MDlaFw0yNTExMTEwMTM4MDlaMDMxMTAvBgNV BAMTKDMzQURCQzgyNEREQTExMzA2MUY3OTY2QUZBMjVDNzA5QzZEMUI5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcV48nR2Ai9edYbjOKno4eRcU ZIdEaUbmvbZOrFfP6SVaTApFbIFGe5YUL3ixvPLIA5G8CTczmwC5BfVF+7Lyy/ht +D0RPQ0IH940K+TpYBxnF3e2TF09thSkaUpleihAgkJRixKPqH9STiX+Fvq/rIbz oqjFtJDpPrhc9XHW9cftaTtqULApbDyHB/u58jzLMGeAQlt2MJ3Y2No3GXyp39Dx F7E2Vpm/nGFTdr0JQIoRaNKD+rL2VtF6n7fTtFod+6sOY4yOoYC21hOqkuY3xlpq Qi5gkaHVo9lOh3JelEfW0uNDTBH4oYXJ1mPfk7cmOjKVWzPZGY9S64FO/irbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM628gk3aETBh95Zq+iXHCcbRufwwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcGMABu3mX+7icME8G0/p0QCpcPlpuwE+sj V1WMzWnwfO+7TuryUjEUVYaRtf3Mzj1ppXZWce7HRGZz52puwhFzLr9LBWL7c00Z EjKS2trlExZgpezKfefcA8lzjv1iMwyuS5kpl/JloV1mPumjuVFVkAWIGsb+Lywz TcFrMq4xMZ6LUg2LEsdqO9irFkByzzCZKWPjDCaxkO5eZXpdqsEgPSfB6dKbylo0 LHDRuHQfMhaOBizIOKlO9YOKqr+rknvPCqFl+Civq9WzduMPAWQaukN1FUB8/UFj G+qEGpu41g/sT9u+wRO/p6UOaTX7VDpaSgPSaNYsNEMqmvnu+uE= -----END CERTIFICATE-----Generated at Sat Nov 8 21:38:18 2025 by rpki-client