$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: CO5ST+y7asCxddobtEfEYSVnkJWn5wQhn+n8xwPFDhw= Subject key identifier: C5:01:37:B5:23:BD:E4:5D:DD:BC:D0:AF:3C:26:0F:91:2A:A6:7A:89 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 0213C85E924A02B95C7F0E326B16323FFD1CD358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 022C Signing time: Sat 25 Oct 2025 21:52:02 +0000 Manifest this update: Sat 25 Oct 2025 21:47:02 +0000 Manifest next update: Wed 29 Oct 2025 06:06:02 +0000 Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: yQZhpujxDVZSuQxCAg0HomVv+SvFveMK94tXWYULXck=) 3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 06:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:13:c8:5e:92:4a:02:b9:5c:7f:0e:32:6b:16:32:3f:fd:1c:d3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Oct 25 21:47:02 2025 GMT Not After : Oct 29 06:06:02 2025 GMT Subject: CN=C50137B523BDE45DDDBCD0AF3C260F912AA67A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:65:68:cb:65:2e:6a:e0:b8:81:f7:62:5d: c9:fc:a3:a2:a4:86:18:b6:fe:ef:a2:6c:75:73:5e: a4:c5:bf:b1:ec:17:51:9e:4e:b2:ad:f7:0c:e5:4b: b0:2e:1d:8e:f1:e9:eb:b6:fd:5a:51:86:43:e7:78: 29:82:e4:e6:65:e2:73:f9:df:ae:3f:30:4d:48:09: 7c:09:54:1d:f0:66:03:f5:bf:83:2a:42:ef:58:c1: e2:93:85:e7:18:d1:c6:0a:a9:8d:4d:db:eb:42:82: 51:4b:39:de:e9:8c:48:e7:6a:28:20:13:85:b5:2b: cd:48:57:52:8b:a5:8b:10:85:04:7b:08:42:62:ca: 99:42:60:7f:77:75:4c:94:9a:33:a5:dc:78:97:24: 0f:87:8c:86:0f:9f:07:31:eb:b0:fe:1e:2d:50:d6: 6b:55:f0:4b:93:d2:cb:de:70:4b:67:68:c5:f4:00: e0:34:2c:81:a3:f9:d8:80:7f:48:69:37:c5:40:ba: 19:bd:13:b9:aa:01:b0:ba:e7:66:f9:8a:6f:1b:7c: af:04:35:16:fe:14:76:be:95:f3:0e:2a:e5:10:0a: 7d:ef:ec:e7:0b:bc:f8:c4:08:fc:01:68:dd:37:14: 6e:4b:85:59:eb:f4:fe:33:f0:ee:35:77:00:dc:04: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:37:B5:23:BD:E4:5D:DD:BC:D0:AF:3C:26:0F:91:2A:A6:7A:89 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:97:12:fa:20:21:a1:24:df:5d:f1:c8:9a:58:30:8a:25:0f: 35:30:d7:32:ba:21:5d:19:03:76:8d:c2:9d:6b:00:57:aa:2d: 0c:7c:b0:4b:11:8f:ef:8b:c2:cf:cc:3b:27:37:84:51:12:a3: 45:03:ad:42:73:16:f0:cd:46:93:f9:77:80:53:eb:87:15:c1: 11:ed:a6:71:45:f3:4f:47:67:b8:1b:41:62:1f:79:49:f0:ef: cd:84:46:79:7a:ed:39:71:34:23:d4:15:10:fe:bc:12:d7:39: 49:dd:0b:06:2b:29:cf:30:f3:91:86:c0:a2:17:27:36:9e:10: 58:ee:4b:d8:fb:0a:ce:a9:40:25:e1:d8:2a:bf:98:3e:12:e0: 13:72:09:c2:7b:3e:2d:09:02:71:ef:0c:f6:98:53:11:08:4e: 0d:d5:3c:09:8e:4d:22:78:4b:a8:2b:de:dd:2b:e7:05:7f:96: a5:6e:45:15:53:b4:d6:fd:4e:d1:ec:7a:67:75:c5:92:8a:64: 76:dd:0d:3e:e6:c3:2e:fd:fc:c4:8a:ee:45:17:58:25:d0:2a: f0:f1:d1:87:ff:d2:22:84:b7:20:d5:00:48:fe:d9:dc:4d:60: 05:bb:f9:a0:3d:3a:e4:00:ed:ab:23:25:46:e4:25:b7:92:86: 68:60:9e:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhPIXpJKArlcfw4yaxYyP/0c01gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTEwMjUyMTQ3MDJaFw0yNTEwMjkwNjA2MDJaMDMxMTAvBgNV BAMTKEM1MDEzN0I1MjNCREU0NUREREJDRDBBRjNDMjYwRjkxMkFBNjdBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHmVoy2UuauC4gfdiXcn8o6Kk hhi2/u+ibHVzXqTFv7HsF1GeTrKt9wzlS7AuHY7x6eu2/VpRhkPneCmC5OZl4nP5 364/ME1ICXwJVB3wZgP1v4MqQu9YweKThecY0cYKqY1N2+tCglFLOd7pjEjnaigg E4W1K81IV1KLpYsQhQR7CEJiyplCYH93dUyUmjOl3HiXJA+HjIYPnwcx67D+Hi1Q 1mtV8EuT0svecEtnaMX0AOA0LIGj+diAf0hpN8VAuhm9E7mqAbC652b5im8bfK8E NRb+FHa+lfMOKuUQCn3v7OcLvPjECPwBaN03FG5LhVnr9P4z8O41dwDcBGVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQE3tSO95F3dvNCvPCYPkSqmeokwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWXEvogIaEk313xyJpYMIolDzUw1zK6IV0Z A3aNwp1rAFeqLQx8sEsRj++Lws/MOyc3hFESo0UDrUJzFvDNRpP5d4BT64cVwRHt pnFF809HZ7gbQWIfeUnw782ERnl67TlxNCPUFRD+vBLXOUndCwYrKc8w85GGwKIX JzaeEFjuS9j7Cs6pQCXh2Cq/mD4S4BNyCcJ7Pi0JAnHvDPaYUxEITg3VPAmOTSJ4 S6gr3t0r5wV/lqVuRRVTtNb9TtHsemd1xZKKZHbdDT7mwy79/MSK7kUXWCXQKvDx 0Yf/0iKEtyDVAEj+2dxNYAW7+aA9OuQA7asjJUbkJbeShmhgnmw= -----END CERTIFICATE-----Generated at Mon Oct 27 23:17:43 2025 by rpki-client