$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: t6QsdkY5/cqhIUwdckQ795hVfCSGYyG+ku3SCyYl2rQ= Subject key identifier: DA:9C:39:83:ED:4D:7C:56:1F:6A:95:4D:2E:AE:8E:DD:9E:C5:06:83 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 7EE3BD538A08D73EA5B78BEEAB15D4C830490A76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02FA Signing time: Sat 01 Nov 2025 06:11:08 +0000 Manifest this update: Sat 01 Nov 2025 06:06:08 +0000 Manifest next update: Tue 04 Nov 2025 08:33:08 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: NfJ08FLnLpFqvCW3axgU4MXV6SINT/Xq+mVel4K+9eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 08:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e3:bd:53:8a:08:d7:3e:a5:b7:8b:ee:ab:15:d4:c8:30:49:0a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Nov 1 06:06:08 2025 GMT Not After : Nov 4 08:33:08 2025 GMT Subject: CN=DA9C3983ED4D7C561F6A954D2EAE8EDD9EC50683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:64:74:67:5f:3d:f6:28:0c:fd:65:b3:e0: f2:e2:49:1c:84:23:0d:f8:ec:0d:fa:fe:d4:70:4d: b5:68:a3:d3:f2:81:7a:d0:20:d3:64:4c:99:2a:4c: 72:5c:0e:ae:dc:46:d2:5d:0c:03:66:cd:6b:ff:62: a9:17:74:cc:16:4a:6b:53:e1:38:d5:62:16:62:12: e7:fc:ff:b0:94:f2:81:c9:cb:ac:94:3d:8d:4f:67: e9:68:5a:2f:e5:da:b9:cd:d5:09:cf:ce:62:86:38: 92:d6:30:27:aa:e8:d6:6f:4e:81:2c:1b:ff:4f:2c: 80:bc:e8:d4:35:f0:b2:58:0b:aa:bf:bc:62:87:24: 10:81:6b:28:ee:b6:7a:ac:38:c1:51:ec:57:de:18: 40:d4:ab:4e:d1:57:54:01:b2:bf:f0:86:ce:71:45: fa:74:31:e1:98:67:ad:99:d5:a1:e0:9e:60:ee:36: c3:02:d6:0c:62:66:06:a0:a1:7a:03:41:1a:ed:d0: 45:dc:13:5f:d2:71:f6:8a:b4:b0:a8:f4:32:95:a7: cb:53:fe:10:17:7a:df:26:87:09:aa:83:f9:e1:99: 58:f4:6e:29:ff:91:58:91:d8:1a:2d:37:3f:14:cd: 28:4b:4d:a1:01:f8:da:4a:6a:75:3f:87:03:1d:69: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:39:83:ED:4D:7C:56:1F:6A:95:4D:2E:AE:8E:DD:9E:C5:06:83 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6a:09:55:90:ea:5b:78:41:52:18:45:d7:0a:b1:47:2e:c7: 02:4e:64:7c:0c:17:aa:d8:d4:28:6e:6e:3b:2c:07:6e:0f:8a: ff:19:f4:5d:57:84:fb:38:16:17:bd:e3:20:f5:55:d7:77:eb: 11:fe:e9:47:03:0a:a1:04:0b:e3:d1:bc:5a:0b:06:3e:54:b2: 23:4d:4f:d6:1a:1d:78:8f:ac:dc:96:fa:e5:87:b3:98:f9:91: 58:7d:35:0a:bd:5d:c5:71:d5:a1:ce:a0:83:1f:15:ad:8f:c2: fa:57:42:02:57:a9:41:27:a0:b7:1d:3c:2c:e2:ba:89:59:13: 39:fe:d9:49:7a:80:c3:76:f8:61:bb:aa:60:25:8d:c0:8f:8c: b7:89:23:2a:bd:70:8a:d3:74:2c:b4:49:b3:97:c8:8b:71:86: 70:52:25:d4:1a:6d:56:bc:e6:0d:22:b5:65:8e:3a:a7:f2:ad: 0a:c2:ce:d5:6c:4e:69:48:97:17:17:b7:37:1f:5f:82:28:6d: 6a:19:09:53:3b:db:97:84:5c:8f:eb:d6:4a:4c:89:b7:1c:d3: 11:62:46:07:73:a8:b4:ef:52:8a:54:5c:6f:49:00:7d:5b:2a: e9:24:c1:69:17:95:90:ab:82:c6:99:da:da:0b:95:16:86:90: 79:67:00:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuO9U4oI1z6lt4vuqxXUyDBJCnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTExMDEwNjA2MDhaFw0yNTExMDQwODMzMDhaMDMxMTAvBgNV BAMTKERBOUMzOTgzRUQ0RDdDNTYxRjZBOTU0RDJFQUU4RUREOUVDNTA2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G2R0Z1899igM/WWz4PLiSRyE Iw347A36/tRwTbVoo9PygXrQINNkTJkqTHJcDq7cRtJdDANmzWv/YqkXdMwWSmtT 4TjVYhZiEuf8/7CU8oHJy6yUPY1PZ+loWi/l2rnN1QnPzmKGOJLWMCeq6NZvToEs G/9PLIC86NQ18LJYC6q/vGKHJBCBayjutnqsOMFR7FfeGEDUq07RV1QBsr/whs5x Rfp0MeGYZ62Z1aHgnmDuNsMC1gxiZgagoXoDQRrt0EXcE1/ScfaKtLCo9DKVp8tT /hAXet8mhwmqg/nhmVj0bin/kViR2BotNz8UzShLTaEB+NpKanU/hwMdads9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pw5g+1NfFYfapVNLq6O3Z7FBoMwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdqCVWQ6lt4QVIYRdcKsUcuxwJOZHwMF6rY 1ChubjssB24Piv8Z9F1XhPs4Fhe94yD1Vdd36xH+6UcDCqEEC+PRvFoLBj5UsiNN T9YaHXiPrNyW+uWHs5j5kVh9NQq9XcVx1aHOoIMfFa2PwvpXQgJXqUEnoLcdPCzi uolZEzn+2Ul6gMN2+GG7qmAljcCPjLeJIyq9cIrTdCy0SbOXyItxhnBSJdQabVa8 5g0itWWOOqfyrQrCztVsTmlIlxcXtzcfX4IobWoZCVM725eEXI/r1kpMibcc0xFi RgdzqLTvUopUXG9JAH1bKukkwWkXlZCrgsaZ2toLlRaGkHlnAIM= -----END CERTIFICATE-----Generated at Sun Nov 2 04:52:55 2025 by rpki-client