$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: fKMGAFx/RwiTxDs79Uk15RTjdJFPC8vC3DALJ4Ocx0E= Subject key identifier: F3:9D:02:93:75:FC:F6:8C:9D:69:B6:E0:9B:C9:BE:A0:AE:35:5E:5D Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 604EA16AFBD554E9DCC9056022B6AE1B8EEF66D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01DF Signing time: Sun 02 Nov 2025 11:11:31 +0000 Manifest this update: Sun 02 Nov 2025 11:06:31 +0000 Manifest next update: Wed 05 Nov 2025 21:44:31 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: 0/2zs8eGHZ9wURp8LZLG5o7Pn4OauWjB1SXy5AxvKRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4e:a1:6a:fb:d5:54:e9:dc:c9:05:60:22:b6:ae:1b:8e:ef:66:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Nov 2 11:06:31 2025 GMT Not After : Nov 5 21:44:31 2025 GMT Subject: CN=F39D029375FCF68C9D69B6E09BC9BEA0AE355E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:ef:be:65:bc:4b:a8:23:cb:a5:26:73:97: 9d:e9:c4:ba:97:be:6c:34:1c:6b:c9:cc:03:fc:46: 6a:dd:6e:5d:0c:be:c2:11:25:9f:ec:be:37:b8:b8: 0a:31:64:9c:9f:d3:57:f6:97:1f:47:62:b5:9e:a9: e4:da:00:43:cb:e3:af:25:82:d7:98:f0:d1:ca:71: 51:c6:72:39:26:f4:eb:25:f6:aa:7d:7d:52:6e:4d: 4f:04:4f:ac:2c:af:7a:6f:5d:57:62:31:73:62:62: 0f:7a:98:ef:4a:88:aa:b9:a0:76:72:57:9a:c0:8d: a2:96:9e:d2:35:08:8b:0e:bb:9a:a0:fe:13:cf:df: 17:c2:cf:37:67:21:c0:67:8a:e2:c9:b0:ad:f8:61: 36:a4:ec:7e:4f:a8:b9:be:51:2a:84:6a:87:b0:46: 5c:36:95:f7:69:3b:fe:c6:4e:b1:e3:f0:bd:96:49: 7d:a6:ac:34:cc:21:2f:54:4f:14:25:93:5e:20:5a: ef:98:12:b3:c7:2a:37:2a:79:24:e9:5e:ab:6a:01: 06:ed:84:28:bc:f7:e7:7c:d6:e7:90:f8:d6:9f:c8: 21:22:d8:fd:be:d9:9a:a1:4c:13:77:57:5d:5c:d3: 40:fa:c4:b0:75:ac:4c:67:58:f2:ac:6c:08:4d:4a: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:02:93:75:FC:F6:8C:9D:69:B6:E0:9B:C9:BE:A0:AE:35:5E:5D X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:7b:07:5b:b5:79:5e:16:2f:d8:09:12:63:78:c0:3f:98:9e: 36:13:e9:3f:10:14:c7:80:80:e8:ce:0f:ca:23:75:73:58:18: 32:f4:28:2a:5f:7b:e8:67:45:56:c9:ff:56:98:72:76:23:04: 83:36:3a:fa:d4:35:87:a9:1b:d9:71:99:0f:f6:a5:8c:02:2a: 1b:01:b8:dc:09:65:e9:de:15:82:a4:16:ba:8c:58:b3:81:d1: a4:b7:e0:a3:79:00:aa:81:2b:ba:65:7c:41:87:e9:f8:95:5a: b6:e7:4b:0a:a2:5d:86:2c:19:d9:aa:04:7f:87:5e:34:77:45: 63:2e:dc:05:18:8e:c6:a4:62:9b:87:af:3a:ab:ed:44:cb:9b: f0:3f:83:0d:3a:d2:15:68:94:b3:d5:93:b0:d4:7f:3a:c8:f3: d5:42:4e:15:26:e5:22:36:82:c9:e2:00:ba:75:fa:51:15:c8: 66:ec:9d:22:e5:8c:5e:02:72:81:d9:8c:90:36:09:79:58:22: ed:5a:5a:2e:99:6a:a1:d5:4a:48:a6:e8:6b:32:c8:0a:cd:19: 05:4d:2f:00:a0:73:52:1d:a6:c7:18:57:d2:49:b6:00:17:32: 86:bb:82:95:93:20:e7:ce:f1:60:26:b7:34:8a:5a:36:24:20: 42:ad:f8:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE6havvVVOncyQVgIrauG47vZtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTExMDIxMTA2MzFaFw0yNTExMDUyMTQ0MzFaMDMxMTAvBgNV BAMTKEYzOUQwMjkzNzVGQ0Y2OEM5RDY5QjZFMDlCQzlCRUEwQUUzNTVFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhe++ZbxLqCPLpSZzl53pxLqX vmw0HGvJzAP8Rmrdbl0MvsIRJZ/svje4uAoxZJyf01f2lx9HYrWeqeTaAEPL468l gteY8NHKcVHGcjkm9Osl9qp9fVJuTU8ET6wsr3pvXVdiMXNiYg96mO9KiKq5oHZy V5rAjaKWntI1CIsOu5qg/hPP3xfCzzdnIcBniuLJsK34YTak7H5PqLm+USqEaoew Rlw2lfdpO/7GTrHj8L2WSX2mrDTMIS9UTxQlk14gWu+YErPHKjcqeSTpXqtqAQbt hCi89+d81ueQ+NafyCEi2P2+2ZqhTBN3V11c00D6xLB1rExnWPKsbAhNSr41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU850Ck3X89oydabbgm8m+oK41Xl0wHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOR7B1u1eV4WL9gJEmN4wD+YnjYT6T8QFMeA gOjOD8ojdXNYGDL0KCpfe+hnRVbJ/1aYcnYjBIM2OvrUNYepG9lxmQ/2pYwCKhsB uNwJZeneFYKkFrqMWLOB0aS34KN5AKqBK7plfEGH6fiVWrbnSwqiXYYsGdmqBH+H XjR3RWMu3AUYjsakYpuHrzqr7UTLm/A/gw060hVolLPVk7DUfzrI89VCThUm5SI2 gsniALp1+lEVyGbsnSLljF4CcoHZjJA2CXlYIu1aWi6ZaqHVSkim6GsyyArNGQVN LwCgc1IdpscYV9JJtgAXMoa7gpWTIOfO8WAmtzSKWjYkIEKt+IQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:24 2025 by rpki-client