$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: YSQTkODjI6+6noOsb2a0V3lht3KFbYRwM4JXCM//66c= Subject key identifier: A0:C8:78:5C:F4:C3:C3:56:C1:4F:46:C5:60:82:AB:10:E5:96:25:08 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 1B82268A0786D8C6C51F020BC0D00C46041DE7C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03AC Signing time: Sun 26 Oct 2025 13:31:41 +0000 Manifest this update: Sun 26 Oct 2025 13:26:41 +0000 Manifest next update: Wed 29 Oct 2025 15:11:41 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: hgTY1ZSA8UyIMN4iNWELKA8uWO9URLsf2npUd5h7oII=) 2: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 4: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 5: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:82:26:8a:07:86:d8:c6:c5:1f:02:0b:c0:d0:0c:46:04:1d:e7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Oct 26 13:26:41 2025 GMT Not After : Oct 29 15:11:41 2025 GMT Subject: CN=A0C8785CF4C3C356C14F46C56082AB10E5962508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:79:16:93:d0:70:37:bf:4a:65:de:da:1e: 8f:e0:5b:38:29:1e:0a:60:8c:dc:f0:50:52:d0:8f: 2b:b9:05:37:4e:51:e8:25:e5:13:af:b8:a3:2d:b9: c7:c2:72:11:38:31:8f:fe:bb:30:56:4d:74:01:f9: 80:24:d9:f1:85:a2:0f:b2:ff:40:3b:c1:bc:a6:45: da:c1:d5:ef:f2:db:7c:75:91:a5:10:f7:9c:0f:d3: 11:5c:7d:1d:d2:c8:10:5f:ad:c0:6b:5f:10:cd:87: 7d:3b:3f:99:8f:42:aa:7b:18:80:d1:2c:80:f3:92: 39:df:62:6e:22:73:57:2d:0a:4b:3b:2c:b2:32:c9: 6b:10:66:b5:66:80:75:c6:e4:23:f3:ad:23:60:8a: 25:df:fd:95:43:9e:4d:34:3d:22:ec:73:1f:ac:90: b5:68:99:fd:54:e9:b2:bb:04:9f:e5:4d:84:27:cd: 65:1d:16:85:b2:97:e8:ff:9e:3e:1a:07:ea:05:75: 68:99:28:68:11:0e:9f:a8:a2:8b:f5:60:4c:b0:ae: fc:b8:8e:e6:78:4c:ad:36:c0:bd:d1:ea:e1:cd:d9: 8e:d2:e0:1f:d9:9d:aa:83:4e:90:62:03:6d:43:7e: cc:e3:85:26:3a:e2:e2:8b:ea:8e:89:e6:b0:58:09: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C8:78:5C:F4:C3:C3:56:C1:4F:46:C5:60:82:AB:10:E5:96:25:08 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:81:ec:93:bb:c1:c9:63:34:14:a8:68:02:5c:df:e6:c1:34: 76:87:de:05:9d:eb:13:a9:eb:79:0b:ec:e1:15:5a:b5:72:ad: 26:a1:f3:9c:bc:2c:0d:27:b3:82:5a:58:0a:5f:7b:d2:f1:97: f8:79:89:31:d2:39:47:d8:fe:fa:bf:33:f6:41:06:86:47:2b: 8f:aa:9b:c7:ac:f5:e7:d9:6f:09:7d:26:e2:12:72:95:c2:fe: 93:85:54:f3:62:1e:ba:46:4f:f2:8e:b3:bc:2a:51:91:21:e4: 0d:24:cb:4c:b9:64:ca:bf:72:79:50:b8:91:6a:aa:2f:22:32: 52:5a:08:a5:dc:5f:4c:ad:73:1c:51:0a:0a:1d:83:0f:4b:56: 19:9b:f0:f3:c7:a5:fd:e0:59:31:46:29:31:0f:84:57:39:26: 92:c1:f7:b1:69:75:6f:77:66:e5:23:6c:43:fb:dd:e3:ab:81: 89:dd:3a:8d:40:cf:f3:eb:c5:ac:ed:d1:0c:36:77:38:3b:2f: 25:6f:07:21:38:47:dd:93:6c:ec:59:55:e1:ba:dd:a9:6b:31: 95:24:ac:44:93:5e:53:a9:96:f7:b5:60:21:b7:1f:8c:01:73: 20:b8:fd:4d:c2:18:e1:80:38:9b:eb:99:a2:ae:b1:3e:54:62: 29:45:64:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4ImigeG2MbFHwILwNAMRgQd58cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTEwMjYxMzI2NDFaFw0yNTEwMjkxNTExNDFaMDMxMTAvBgNV BAMTKEEwQzg3ODVDRjRDM0MzNTZDMTRGNDZDNTYwODJBQjEwRTU5NjI1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmXkWk9BwN79KZd7aHo/gWzgp HgpgjNzwUFLQjyu5BTdOUegl5ROvuKMtucfCchE4MY/+uzBWTXQB+YAk2fGFog+y /0A7wbymRdrB1e/y23x1kaUQ95wP0xFcfR3SyBBfrcBrXxDNh307P5mPQqp7GIDR LIDzkjnfYm4ic1ctCks7LLIyyWsQZrVmgHXG5CPzrSNgiiXf/ZVDnk00PSLscx+s kLVomf1U6bK7BJ/lTYQnzWUdFoWyl+j/nj4aB+oFdWiZKGgRDp+ooov1YEywrvy4 juZ4TK02wL3R6uHN2Y7S4B/ZnaqDTpBiA21DfszjhSY64uKL6o6J5rBYCZj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMh4XPTDw1bBT0bFYIKrEOWWJQgwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOB7JO7wcljNBSoaAJc3+bBNHaH3gWd6xOp 63kL7OEVWrVyrSah85y8LA0ns4JaWApfe9Lxl/h5iTHSOUfY/vq/M/ZBBoZHK4+q m8es9efZbwl9JuIScpXC/pOFVPNiHrpGT/KOs7wqUZEh5A0ky0y5ZMq/cnlQuJFq qi8iMlJaCKXcX0ytcxxRCgodgw9LVhmb8PPHpf3gWTFGKTEPhFc5JpLB97FpdW93 ZuUjbEP73eOrgYndOo1Az/Prxazt0Qw2dzg7LyVvByE4R92TbOxZVeG63alrMZUk rESTXlOplve1YCG3H4wBcyC4/U3CGOGAOJvrmaKusT5UYilFZIs= -----END CERTIFICATE-----Generated at Mon Oct 27 13:04:32 2025 by rpki-client