$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft File: 781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json) Hash identifier: 4YJxEY40BckIS+iIssCOrXvt7rtx4cGFYY9cWkLwwuU= Subject key identifier: D1:CA:AE:E9:7A:4E:02:9C:08:EC:E7:F9:0C:25:37:FE:74:24:73:F5 Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 Certificate issuer: /CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Certificate serial: 0ED76A8CB571400809DD7F1EA10B33E82FC96817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft Manifest number: 01BC Signing time: Fri 07 Nov 2025 17:21:10 +0000 Manifest this update: Fri 07 Nov 2025 17:16:10 +0000 Manifest next update: Tue 11 Nov 2025 01:22:10 +0000 Files and hashes: 1: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=) 2: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=) 3: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: 1MkqwY244CkWr48uYoI2XqlzVsTlcK0Wj30K84o177k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 01:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d7:6a:8c:b5:71:40:08:09:dd:7f:1e:a1:0b:33:e8:2f:c9:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Validity Not Before: Nov 7 17:16:10 2025 GMT Not After : Nov 11 01:22:10 2025 GMT Subject: CN=D1CAAEE97A4E029C08ECE7F90C2537FE742473F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:a3:65:bf:29:7d:af:05:26:7f:db:8e:1b: 22:72:d2:34:69:73:51:69:d6:d5:9b:f0:8a:01:55: 5a:8a:88:fc:43:42:88:c8:aa:d9:24:ac:a1:85:f0: bc:04:75:3a:ba:7a:2d:47:9f:5b:55:8e:13:fc:4d: 88:1e:69:96:2c:9e:11:0a:a3:1c:e2:5f:05:c8:0e: 3c:52:22:b2:d9:20:d2:89:2f:14:e4:7c:1d:19:5e: a3:af:7d:89:dd:de:fd:05:14:2a:5b:da:9b:05:56: c1:21:26:da:10:18:2f:3e:25:7a:84:ee:7b:ab:3f: 82:80:df:1a:30:ee:46:7a:63:ea:be:90:72:92:fb: c3:a6:09:4c:fd:8b:2b:bd:16:99:64:b6:8e:1d:de: 8b:dc:bb:f4:50:11:09:48:20:88:64:31:8e:5a:fd: 55:8f:e8:09:ba:31:e3:b6:f8:bb:58:40:91:dd:1f: 2c:03:77:4b:5e:43:90:e5:ec:78:c4:26:c8:6b:d6: 1f:3a:64:06:8a:dd:6e:49:c3:57:f0:db:3d:93:dc: 2a:b2:f8:8b:36:f4:00:d0:be:cd:bb:d8:be:c4:5a: 16:f2:e4:f6:13:91:74:1f:79:52:58:91:18:64:ec: 65:e1:9a:65:c3:bb:5c:25:69:b9:f7:82:77:8a:eb: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CA:AE:E9:7A:4E:02:9C:08:EC:E7:F9:0C:25:37:FE:74:24:73:F5 X509v3 Authority Key Identifier: keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ce:8d:bc:3f:90:e1:9b:0b:d0:7c:f5:2e:d3:53:77:ad:dd: ea:55:81:1b:9b:5f:37:2e:5f:d4:7f:64:5c:b4:ec:05:33:39: ee:2a:83:ea:19:a7:3e:cf:62:f7:13:b6:19:a6:2e:10:6b:e3: 8f:39:10:42:c8:75:33:18:fb:5d:d2:3e:59:0d:cf:b6:d3:30: 7c:49:43:3c:8e:0a:f8:3f:8c:84:55:9c:2d:60:ad:83:a4:fe: eb:c8:85:05:45:c5:23:9b:af:e9:fd:dd:35:2b:25:c3:16:95: 2e:07:a9:e8:82:3d:67:be:d4:9a:a3:b8:c8:76:40:2c:37:4f: 54:55:ab:7a:87:c6:d4:e4:44:ed:a1:62:1f:43:3a:20:4b:a5: 3b:84:8e:b1:5a:ca:0f:e9:d3:65:55:15:99:67:fd:de:42:96: d3:0c:a0:39:87:25:c7:b8:ba:64:3c:c5:15:eb:01:0b:8c:b0: 4f:72:f4:00:59:b7:3b:31:29:35:5f:13:f5:3f:83:95:79:ec: 72:02:ac:55:37:69:69:2f:0d:58:33:81:6a:3d:cf:3a:43:cf: 01:97:da:b5:c7:3d:89:72:72:90:88:a0:34:3f:ae:0e:5f:da: c7:d1:52:fb:df:95:6c:30:47:94:45:15:e6:36:b8:11:9b:6d: 15:0f:5b:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtdqjLVxQAgJ3X8eoQsz6C/JaBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG Q0RGRDg5ODAeFw0yNTExMDcxNzE2MTBaFw0yNTExMTEwMTIyMTBaMDMxMTAvBgNV BAMTKEQxQ0FBRUU5N0E0RTAyOUMwOEVDRTdGOTBDMjUzN0ZFNzQyNDczRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvaNlvyl9rwUmf9uOGyJy0jRp c1Fp1tWb8IoBVVqKiPxDQojIqtkkrKGF8LwEdTq6ei1Hn1tVjhP8TYgeaZYsnhEK oxziXwXIDjxSIrLZINKJLxTkfB0ZXqOvfYnd3v0FFCpb2psFVsEhJtoQGC8+JXqE 7nurP4KA3xow7kZ6Y+q+kHKS+8OmCUz9iyu9Fplkto4d3ovcu/RQEQlIIIhkMY5a /VWP6Am6MeO2+LtYQJHdHywDd0teQ5Dl7HjEJshr1h86ZAaK3W5Jw1fw2z2T3Cqy +Is29ADQvs272L7EWhby5PYTkXQfeVJYkRhk7GXhmmXDu1wlabn3gneK64aJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cqu6XpOApwI7Of5DCU3/nQkc/UwHwYDVR0j BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG RDg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5 ODJGQ0RGRDg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzOjbw/kOGbC9B89S7TU3et3epVgRubXzcu X9R/ZFy07AUzOe4qg+oZpz7PYvcTthmmLhBr4485EELIdTMY+13SPlkNz7bTMHxJ QzyOCvg/jIRVnC1grYOk/uvIhQVFxSObr+n93TUrJcMWlS4HqeiCPWe+1JqjuMh2 QCw3T1RVq3qHxtTkRO2hYh9DOiBLpTuEjrFayg/p02VVFZln/d5CltMMoDmHJce4 umQ8xRXrAQuMsE9y9ABZtzsxKTVfE/U/g5V57HICrFU3aWkvDVgzgWo9zzpDzwGX 2rXHPYlycpCIoDQ/rg5f2sfRUvvflWwwR5RFFeY2uBGbbRUPW/Q= -----END CERTIFICATE-----Generated at Sat Nov 8 21:38:17 2025 by rpki-client