$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: wRBxENgz+Tzts9It4wQUnEot7Bu5F0ZpDa2xOJPHNn4= Subject key identifier: 02:5B:74:F5:FC:E9:EA:08:41:27:3B:04:7C:2F:63:81:5E:16:5C:27 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 39185D6814B35E53163652C5A29D4EBF7113269F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 90 Signing time: Wed 22 Oct 2025 20:11:54 +0000 Manifest this update: Wed 22 Oct 2025 20:06:54 +0000 Manifest next update: Sat 25 Oct 2025 22:52:54 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: CkLxmUAJeL9Ba+x+5/oHX+KSaSFUqH57/jxdLBosLJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:18:5d:68:14:b3:5e:53:16:36:52:c5:a2:9d:4e:bf:71:13:26:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Oct 22 20:06:54 2025 GMT Not After : Oct 25 22:52:54 2025 GMT Subject: CN=025B74F5FCE9EA0841273B047C2F63815E165C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:22:90:75:c4:3a:6f:48:3d:80:70:cc:3a: 8b:2f:51:3d:b5:1c:98:72:52:a8:8d:8d:df:33:43: 29:e6:21:de:7b:07:0c:dc:a3:b5:68:12:c6:c3:47: 05:fd:22:12:64:af:95:db:bd:a5:a8:39:df:85:56: 5c:ad:85:25:ea:60:1f:ec:dc:ac:1e:be:8a:7c:d9: e8:53:2b:51:31:26:5c:8b:50:85:7a:d6:61:f4:2f: 44:74:c5:6c:2b:fd:44:0f:9b:61:5e:77:b8:f1:e4: c8:77:f3:14:75:98:d3:e0:88:2e:53:e9:e4:ca:fc: 62:17:55:fd:2f:c0:c7:97:b8:f8:52:bb:52:2b:f6: 69:b6:81:be:df:00:df:c8:d8:8f:3c:ee:ad:c1:9b: d0:ec:07:e4:9f:f7:fe:9e:ec:1e:7f:c6:24:a2:a7: fc:ce:6d:e4:30:ec:c9:21:d6:65:6a:da:5e:58:93: ed:1a:5e:1c:0f:b6:a2:e6:08:14:e2:35:01:68:ef: b4:35:95:27:a4:98:e7:4d:f0:e1:27:0f:c9:9f:04: 8e:f2:ce:5f:53:bb:00:9a:fa:e7:8b:dc:2f:74:c3: d9:6a:f3:d0:d9:70:d3:1d:6d:11:d2:b3:9f:5b:e1: 49:65:f6:b8:11:c9:86:80:3a:08:03:39:f1:6f:5e: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:74:F5:FC:E9:EA:08:41:27:3B:04:7C:2F:63:81:5E:16:5C:27 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:97:ef:89:78:b3:66:3f:ca:02:ec:e2:6d:96:10:2c:c9:d5: 56:ee:e4:27:dc:32:b8:3b:6d:99:c0:b2:a0:a2:df:98:00:10: 82:84:91:5d:d2:c4:79:e7:00:b5:ba:92:9a:90:28:10:56:0e: 2e:c4:13:21:b4:1b:8f:18:58:39:7e:76:f4:b8:a6:0a:7c:cc: 81:6d:87:49:9c:02:95:39:fd:78:2a:c7:18:45:ad:4f:bd:fd: 22:a9:52:98:c7:37:d7:7d:c4:e6:1c:e2:1b:98:ff:a5:dd:0a: ea:3c:80:49:e4:5a:fc:60:1e:60:5b:74:50:0a:13:dc:3a:1a: 06:c4:23:7e:9d:2a:2e:d6:4d:6a:59:6d:db:cd:6a:06:f3:8d: a9:a3:c9:e2:7d:c3:72:ff:74:b6:a7:37:44:af:06:2e:8a:ea: 14:25:1d:a4:ad:1a:7e:c1:5d:3a:39:bc:af:08:0f:20:86:dc: c8:93:e7:df:3e:54:3d:9a:f7:e7:45:33:3d:91:53:66:8e:d4: 63:4c:75:6f:54:ef:45:dd:cf:5b:48:2f:d2:22:0b:1a:a3:fb: a3:0b:be:d7:8f:6d:6f:bc:3b:7d:0a:1a:a4:d0:4c:e8:2e:e6: c7:d6:6d:eb:a6:e3:11:90:26:10:dd:91:a7:b4:5c:ed:85:5a: f5:9c:f4:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORhdaBSzXlMWNlLFop1Ov3ETJp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTEwMjIyMDA2NTRaFw0yNTEwMjUyMjUyNTRaMDMxMTAvBgNV BAMTKDAyNUI3NEY1RkNFOUVBMDg0MTI3M0IwNDdDMkY2MzgxNUUxNjVDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsSKQdcQ6b0g9gHDMOosvUT21 HJhyUqiNjd8zQynmId57Bwzco7VoEsbDRwX9IhJkr5XbvaWoOd+FVlythSXqYB/s 3Kwevop82ehTK1ExJlyLUIV61mH0L0R0xWwr/UQPm2Fed7jx5Mh38xR1mNPgiC5T 6eTK/GIXVf0vwMeXuPhSu1Ir9mm2gb7fAN/I2I887q3Bm9DsB+Sf9/6e7B5/xiSi p/zObeQw7Mkh1mVq2l5Yk+0aXhwPtqLmCBTiNQFo77Q1lSekmOdN8OEnD8mfBI7y zl9TuwCa+ueL3C90w9lq89DZcNMdbRHSs59b4Ull9rgRyYaAOggDOfFvXoMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlt09fzp6ghBJzsEfC9jgV4WXCcwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmX74l4s2Y/ygLs4m2WECzJ1Vbu5CfcMrg7 bZnAsqCi35gAEIKEkV3SxHnnALW6kpqQKBBWDi7EEyG0G48YWDl+dvS4pgp8zIFt h0mcApU5/XgqxxhFrU+9/SKpUpjHN9d9xOYc4huY/6XdCuo8gEnkWvxgHmBbdFAK E9w6GgbEI36dKi7WTWpZbdvNagbzjamjyeJ9w3L/dLanN0SvBi6K6hQlHaStGn7B XTo5vK8IDyCG3MiT598+VD2a9+dFMz2RU2aO1GNMdW9U70Xdz1tIL9IiCxqj+6ML vtePbW+8O30KGqTQTOgu5sfWbeum4xGQJhDdkae0XO2FWvWc9Io= -----END CERTIFICATE-----Generated at Thu Oct 23 19:57:23 2025 by rpki-client