$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: pfciHp2PnzZTMc0iJLfISB2cfzuosrkTCKnX6FA6Z0E= Subject key identifier: 26:3B:34:3A:89:92:37:7D:9E:6D:B0:9D:BD:81:A8:4A:CD:73:C9:CB Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 08DB3A4D16297373915525F5A0A06C6AF769ECFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: F0 Signing time: Wed 05 Nov 2025 16:11:56 +0000 Manifest this update: Wed 05 Nov 2025 16:06:56 +0000 Manifest next update: Sat 08 Nov 2025 23:16:56 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: PCZkRkVprjVSpeuBx7Mz/f4IyZXFC7pe6evVEuorfg0=) 3: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:db:3a:4d:16:29:73:73:91:55:25:f5:a0:a0:6c:6a:f7:69:ec:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Nov 5 16:06:56 2025 GMT Not After : Nov 8 23:16:56 2025 GMT Subject: CN=263B343A8992377D9E6DB09DBD81A84ACD73C9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:c6:37:15:17:63:cc:31:f3:d7:45:2e:a8: 65:c5:8e:2b:a4:6e:1e:40:9c:c5:50:35:32:77:b0: d7:85:58:b8:2b:af:89:88:e0:ee:2e:33:d1:18:5f: 47:92:91:ed:6e:31:dc:c9:17:87:cb:7e:e5:0e:84: 13:f6:c7:2b:42:52:44:d9:3c:ab:19:74:17:ed:9d: 33:ef:9f:c9:e0:ee:be:83:eb:37:c1:6c:ec:96:3f: 1d:0f:82:ad:c3:30:03:51:2b:aa:ec:55:0a:99:fc: 32:f4:1f:b0:dd:97:a0:66:42:67:3d:6b:58:af:1e: af:77:85:b7:19:5d:c5:46:e8:53:b7:4a:34:eb:58: ef:8c:b7:fb:2a:44:73:40:25:66:1e:c0:be:de:fa: f8:c9:66:55:92:ba:2d:e3:a0:1a:f5:88:a4:32:b2: fe:a5:63:eb:10:66:44:36:c1:6b:69:59:14:98:1d: e4:3a:10:f8:65:1e:5b:be:a3:45:49:89:eb:6e:39: c8:1a:c8:87:b6:25:72:a4:97:bb:49:ff:d7:d4:e7: 01:db:80:cf:70:28:cc:79:8d:13:68:56:9c:c9:aa: 5d:38:16:63:81:5b:34:d4:82:eb:7a:d9:df:2f:8e: ea:2e:50:1e:50:35:46:73:01:60:35:c0:c3:6a:83: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3B:34:3A:89:92:37:7D:9E:6D:B0:9D:BD:81:A8:4A:CD:73:C9:CB X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ca:48:91:66:b8:92:86:e8:31:90:cc:ca:2d:28:53:7f:2f: f1:1a:b9:d8:19:03:72:9f:14:a8:2f:0d:80:ae:f8:1a:c0:1c: 24:8e:c2:8f:10:23:63:ff:bb:9b:66:81:37:14:8f:f6:f1:40: a6:33:df:99:a2:10:94:d5:da:98:bc:57:cc:20:07:dd:d1:a5: f7:f9:ef:92:76:08:c3:ee:0a:df:84:bc:bf:f3:f6:c6:fc:6f: 0f:9b:9f:e1:d9:82:5c:52:6b:ee:1c:d1:f7:24:14:e1:e0:0b: 1e:0c:ec:7b:95:c3:13:05:ce:ec:5b:23:be:b5:a2:4c:61:60: 99:27:ca:80:f9:1e:be:c0:c9:65:d9:71:c8:26:8b:35:3f:ca: 80:9c:11:32:7e:b6:3b:31:f2:a6:dc:82:7f:b1:7e:57:dc:f2: b5:11:67:67:37:e5:48:49:1c:90:a9:b5:f6:4a:00:44:36:a4: 01:0d:e5:07:d8:06:8b:5c:a2:0b:7c:98:44:31:b1:4d:af:da: bb:ac:a1:30:7d:27:3e:43:24:2a:19:cd:a1:38:c1:8b:42:f2: 81:da:df:55:bd:b5:a8:04:2f:60:28:d8:e3:33:8f:5c:ff:0c: 30:6e:fa:29:25:4f:8a:57:f9:57:15:34:05:ef:37:22:f5:94: b0:22:06:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNs6TRYpc3ORVSX1oKBsavdp7P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTExMDUxNjA2NTZaFw0yNTExMDgyMzE2NTZaMDMxMTAvBgNV BAMTKDI2M0IzNDNBODk5MjM3N0Q5RTZEQjA5REJEODFBODRBQ0Q3M0M5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNsY3FRdjzDHz10UuqGXFjiuk bh5AnMVQNTJ3sNeFWLgrr4mI4O4uM9EYX0eSke1uMdzJF4fLfuUOhBP2xytCUkTZ PKsZdBftnTPvn8ng7r6D6zfBbOyWPx0Pgq3DMANRK6rsVQqZ/DL0H7Ddl6BmQmc9 a1ivHq93hbcZXcVG6FO3SjTrWO+Mt/sqRHNAJWYewL7e+vjJZlWSui3joBr1iKQy sv6lY+sQZkQ2wWtpWRSYHeQ6EPhlHlu+o0VJietuOcgayIe2JXKkl7tJ/9fU5wHb gM9wKMx5jRNoVpzJql04FmOBWzTUgut62d8vjuouUB5QNUZzAWA1wMNqg4K/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjs0OomSN32ebbCdvYGoSs1zycswHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTKSJFmuJKG6DGQzMotKFN/L/EaudgZA3Kf FKgvDYCu+BrAHCSOwo8QI2P/u5tmgTcUj/bxQKYz35miEJTV2pi8V8wgB93Rpff5 75J2CMPuCt+EvL/z9sb8bw+bn+HZglxSa+4c0fckFOHgCx4M7HuVwxMFzuxbI761 okxhYJknyoD5Hr7AyWXZccgmizU/yoCcETJ+tjsx8qbcgn+xflfc8rURZ2c35UhJ HJCptfZKAEQ2pAEN5QfYBotcogt8mEQxsU2v2rusoTB9Jz5DJCoZzaE4wYtC8oHa 31W9tagEL2Ao2OMzj1z/DDBu+iklT4pX+VcVNAXvNyL1lLAiBkI= -----END CERTIFICATE-----Generated at Thu Nov 6 02:10:52 2025 by rpki-client