$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: 1MS8Kie+HBM+76ectB9pb+u+IuOH5lJE6yMJ33FjzVQ= Subject key identifier: 66:97:78:12:77:F7:07:E2:27:06:91:78:DE:AD:0F:B9:31:D6:CB:C4 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 0A0A8D027FC474D9B6A261F3AA1907750D0641ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0184 Signing time: Sun 26 Oct 2025 18:32:09 +0000 Manifest this update: Sun 26 Oct 2025 18:27:09 +0000 Manifest next update: Wed 29 Oct 2025 19:27:09 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: Yal4J7mGk7cZUdgWS9D2YACFR4aJChYQcUSabKGvBGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 19:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0a:8d:02:7f:c4:74:d9:b6:a2:61:f3:aa:19:07:75:0d:06:41:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Oct 26 18:27:09 2025 GMT Not After : Oct 29 19:27:09 2025 GMT Subject: CN=6697781277F707E227069178DEAD0FB931D6CBC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:70:fd:d3:4f:60:26:69:6a:1f:1c:05:42: da:2c:20:b1:22:be:18:d9:d2:86:18:8f:c7:f3:8a: a9:ac:48:b5:dd:1e:b6:b3:0f:e2:5d:1d:f4:5a:55: a4:ed:60:1d:f0:ee:b2:ac:48:75:df:b4:a1:a2:19: 73:a0:88:5c:ca:a1:6b:29:5f:4d:0e:8f:8c:ba:99: 54:ae:10:55:a0:d8:65:99:6a:92:93:da:34:d9:61: 83:2b:7d:19:d7:2e:dd:52:e2:b9:73:e5:e8:47:bf: 49:49:b8:34:c1:96:96:bf:8e:34:93:7b:a9:8d:92: d1:38:fb:3c:0d:b3:14:29:5d:32:56:aa:4b:b1:cf: 57:83:62:8b:81:b7:af:21:12:46:f9:06:d6:b1:f8: 31:3b:b8:ca:ab:8d:42:00:cc:37:2e:d3:a8:4e:54: a0:68:28:0d:14:9c:79:43:11:d7:82:ef:81:b3:1a: ac:db:48:07:3d:da:d4:65:24:b8:d1:89:30:6a:44: aa:42:f0:4c:72:f8:a3:b9:ca:3a:f1:97:d0:d9:85: b4:c5:4b:a6:8b:22:b2:2c:22:8b:28:c4:f7:7a:42: 4e:b1:e9:bb:73:8d:5e:02:d1:74:5d:64:66:5f:33: 34:53:9b:f0:7b:00:44:5e:48:ef:72:6f:1f:b0:a3: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:78:12:77:F7:07:E2:27:06:91:78:DE:AD:0F:B9:31:D6:CB:C4 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:85:d4:55:42:cf:3b:a7:ef:ff:48:84:d6:48:3f:a6:bf:bc: b6:fd:3e:42:d4:0e:88:82:51:b3:25:b2:18:ab:f7:0b:eb:b0: 35:02:a0:c3:d3:34:6e:69:49:42:2e:b3:eb:7a:d8:37:84:6b: 4c:c4:df:b0:fb:5b:71:03:f0:8c:86:37:ef:4a:70:32:e4:a5: cd:a2:84:29:1f:01:7e:00:55:86:60:a7:10:fd:4b:28:bd:cd: 8c:9c:ab:a9:7b:a4:ad:b7:39:b9:e8:d0:c8:32:d4:92:12:ca: 00:8a:cd:55:cb:7b:10:da:ed:3d:08:e5:c5:19:ad:00:bf:12: f1:7e:39:19:10:41:f2:83:7a:9e:8d:7f:73:87:a9:c9:b5:a2: 09:25:5a:9c:17:2b:26:ad:9b:bb:74:fb:bf:73:34:67:eb:5d: 72:ab:fc:c1:17:f7:4b:a4:12:65:d4:0a:d0:32:02:e6:cf:94: 2b:50:29:10:c0:f5:da:94:e9:d6:08:07:85:f7:34:92:e4:ef: 1e:2d:f7:e8:c8:5c:77:53:38:2d:a0:25:43:15:f2:4c:6f:eb: 89:04:bb:3e:db:e9:c7:d5:1f:80:f1:0a:43:ce:94:60:76:d6: cb:00:03:90:c0:cd:3a:ce:9a:88:93:c7:ec:43:c3:27:f0:22: b1:cd:8e:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgqNAn/EdNm2omHzqhkHdQ0GQe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTEwMjYxODI3MDlaFw0yNTEwMjkxOTI3MDlaMDMxMTAvBgNV BAMTKDY2OTc3ODEyNzdGNzA3RTIyNzA2OTE3OERFQUQwRkI5MzFENkNCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujHD9009gJmlqHxwFQtosILEi vhjZ0oYYj8fziqmsSLXdHrazD+JdHfRaVaTtYB3w7rKsSHXftKGiGXOgiFzKoWsp X00Oj4y6mVSuEFWg2GWZapKT2jTZYYMrfRnXLt1S4rlz5ehHv0lJuDTBlpa/jjST e6mNktE4+zwNsxQpXTJWqkuxz1eDYouBt68hEkb5Btax+DE7uMqrjUIAzDcu06hO VKBoKA0UnHlDEdeC74GzGqzbSAc92tRlJLjRiTBqRKpC8Exy+KO5yjrxl9DZhbTF S6aLIrIsIosoxPd6Qk6x6btzjV4C0XRdZGZfMzRTm/B7AEReSO9ybx+wo74vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpd4Enf3B+InBpF43q0PuTHWy8QwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGF1FVCzzun7/9IhNZIP6a/vLb9PkLUDoiC UbMlshir9wvrsDUCoMPTNG5pSUIus+t62DeEa0zE37D7W3ED8IyGN+9KcDLkpc2i hCkfAX4AVYZgpxD9Syi9zYycq6l7pK23Obno0Mgy1JISygCKzVXLexDa7T0I5cUZ rQC/EvF+ORkQQfKDep6Nf3OHqcm1ogklWpwXKyatm7t0+79zNGfrXXKr/MEX90uk EmXUCtAyAubPlCtQKRDA9dqU6dYIB4X3NJLk7x4t9+jIXHdTOC2gJUMV8kxv64kE uz7b6cfVH4DxCkPOlGB21ssAA5DAzTrOmoiTx+xDwyfwIrHNjqI= -----END CERTIFICATE-----Generated at Tue Oct 28 13:47:19 2025 by rpki-client