$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: 9HzYaNizZvViXPRGeqy6DBu9D0981CKpOZVa3RjK3Iw= Subject key identifier: 26:EA:CF:EC:D0:8A:14:C9:00:A6:4D:4F:A6:50:EC:E7:90:4E:11:2F Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 4E6EC6B93EB895D3D04FD884A80C824F010DCA8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 020B Signing time: Thu 30 Oct 2025 12:21:17 +0000 Manifest this update: Thu 30 Oct 2025 12:16:17 +0000 Manifest next update: Sun 02 Nov 2025 23:44:17 +0000 Files and hashes: 1: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 2: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 3: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: RqbVW3QgQNc+apH9YZJtE4tu7azoJEfSmUMyCrVfq0Q=) 4: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6e:c6:b9:3e:b8:95:d3:d0:4f:d8:84:a8:0c:82:4f:01:0d:ca:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Oct 30 12:16:17 2025 GMT Not After : Nov 2 23:44:17 2025 GMT Subject: CN=26EACFECD08A14C900A64D4FA650ECE7904E112F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:99:39:c9:95:d6:27:94:26:c6:64:c8:43: 1f:e6:c4:46:7e:23:5c:b2:ab:e5:bf:59:9b:bb:d4: f0:23:3f:89:18:96:8f:d6:99:94:a4:9d:18:1e:d6: 7c:ac:ae:8c:ea:ed:fe:00:d8:19:06:00:36:15:08: 40:fd:e6:b4:7e:67:99:6e:61:cb:ac:9b:02:a5:f9: 6e:8a:f3:ed:f1:28:6a:34:1c:dd:cc:40:45:63:76: b0:81:a9:15:14:ac:8b:24:50:00:86:60:8e:cb:68: 44:52:21:0d:5e:c9:02:1c:11:cb:b0:0b:7d:db:58: 21:ae:bd:c4:a2:8b:39:ae:4f:5f:15:cf:d6:7f:e5: d1:6d:c7:bc:9f:53:bc:16:68:4e:bf:5d:ec:b8:fe: 31:ac:88:4b:5e:74:7f:98:3d:36:2c:86:5c:92:ec: 0e:43:3d:ba:a4:11:be:fa:ec:7a:f1:84:e3:c8:85: 21:ba:ca:e5:3e:66:89:aa:c8:94:c8:5a:1e:7b:71: f9:4b:61:7e:b2:24:dc:dd:41:10:db:08:2d:30:9f: f8:3e:7b:ec:2f:9f:e5:d1:d0:67:0e:bb:09:f5:10: cf:94:01:9b:23:b1:b3:9a:54:73:78:7b:4a:dc:1a: f0:97:7f:b2:1f:e5:ab:d1:d0:6f:15:0e:9d:4f:65: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:CF:EC:D0:8A:14:C9:00:A6:4D:4F:A6:50:EC:E7:90:4E:11:2F X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d8:3a:01:57:a5:1e:a7:9e:62:df:35:91:51:41:4c:ca:92: e8:6c:62:d0:12:d1:33:5e:5b:70:62:ce:e4:fd:07:40:74:3a: 75:d6:34:c4:70:f5:da:b2:02:d2:9e:7d:ba:11:91:64:75:65: 17:13:c0:7f:d3:5c:26:85:1d:c2:4b:7b:02:a6:c3:e0:74:47: 50:03:70:fb:8d:11:ac:97:ba:5c:01:be:bf:20:f2:bb:be:dc: 66:38:06:08:4f:b5:a5:e0:d2:c8:90:ea:21:63:be:cb:bc:d3: 39:f3:8b:50:a5:22:31:e8:7a:ae:5e:b9:9b:28:94:5e:f6:1a: 20:d0:44:3a:84:56:52:c5:c2:5a:22:a2:c2:87:cf:b2:b2:2e: e2:c9:29:c3:30:e9:ba:89:e8:75:a2:a0:26:03:f2:37:6f:af: 2f:03:d2:75:b6:1e:89:58:7a:8d:c3:8c:0e:ed:fe:aa:b7:3c: d2:79:c0:78:66:ed:f4:27:f9:92:bd:07:64:fa:3d:fb:d5:d0: f0:90:6e:54:bf:3c:40:ab:2a:a4:da:b0:70:76:e6:2d:a1:81: 9e:86:a4:8f:a8:0d:c9:5e:2e:0a:5a:90:f3:54:1b:a2:64:5e: d2:c3:12:6f:0c:c0:28:fe:70:00:46:ff:27:43:45:d7:ab:5a: 1e:f9:4a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTm7GuT64ldPQT9iEqAyCTwENyoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTEwMzAxMjE2MTdaFw0yNTExMDIyMzQ0MTdaMDMxMTAvBgNV BAMTKDI2RUFDRkVDRDA4QTE0QzkwMEE2NEQ0RkE2NTBFQ0U3OTA0RTExMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNZk5yZXWJ5QmxmTIQx/mxEZ+ I1yyq+W/WZu71PAjP4kYlo/WmZSknRge1nysrozq7f4A2BkGADYVCED95rR+Z5lu YcusmwKl+W6K8+3xKGo0HN3MQEVjdrCBqRUUrIskUACGYI7LaERSIQ1eyQIcEcuw C33bWCGuvcSiizmuT18Vz9Z/5dFtx7yfU7wWaE6/Xey4/jGsiEtedH+YPTYshlyS 7A5DPbqkEb767HrxhOPIhSG6yuU+ZomqyJTIWh57cflLYX6yJNzdQRDbCC0wn/g+ e+wvn+XR0GcOuwn1EM+UAZsjsbOaVHN4e0rcGvCXf7If5avR0G8VDp1PZZ8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJurP7NCKFMkApk1PplDs55BOES8wHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXYOgFXpR6nnmLfNZFRQUzKkuhsYtAS0TNe W3BizuT9B0B0OnXWNMRw9dqyAtKefboRkWR1ZRcTwH/TXCaFHcJLewKmw+B0R1AD cPuNEayXulwBvr8g8ru+3GY4BghPtaXg0siQ6iFjvsu80znzi1ClIjHoeq5euZso lF72GiDQRDqEVlLFwloiosKHz7KyLuLJKcMw6bqJ6HWioCYD8jdvry8D0nW2HolY eo3DjA7t/qq3PNJ5wHhm7fQn+ZK9B2T6PfvV0PCQblS/PECrKqTasHB25i2hgZ6G pI+oDcleLgpakPNUG6JkXtLDEm8MwCj+cABG/ydDRderWh75Sqs= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:03 2025 by rpki-client