$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: Y0rlJuqs3ngtYtcHJSvVDYlyl1U0gScFu0d1UPQikWY= Subject key identifier: B9:55:6F:65:D3:E2:45:58:3D:D9:C3:65:A7:D5:C2:AD:75:E4:18:A7 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 01E85BCD15921FAB55FD6389C9E9286CA5C883F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0324 Signing time: Sun 19 Oct 2025 10:42:01 +0000 Manifest this update: Sun 19 Oct 2025 10:37:01 +0000 Manifest next update: Wed 22 Oct 2025 16:24:01 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: 3QnV5s+RQNXVIsVqY1RzPo0K40jltQyGbcrBCRU47r0=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e8:5b:cd:15:92:1f:ab:55:fd:63:89:c9:e9:28:6c:a5:c8:83:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Oct 19 10:37:01 2025 GMT Not After : Oct 22 16:24:01 2025 GMT Subject: CN=B9556F65D3E245583DD9C365A7D5C2AD75E418A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:de:5d:47:6d:82:7b:d2:9b:ef:d1:91:25: 84:2b:60:31:9e:b2:a6:d1:77:d7:e5:46:6f:19:0d: bc:f2:d5:af:24:a1:7c:37:65:99:39:68:4b:d4:f5: 00:0b:00:be:5c:8d:8f:78:8d:9c:ef:2b:36:c9:83: f8:80:b5:a3:6d:0d:b7:c2:e8:3d:10:2a:a7:44:a9: 2e:e7:1f:05:25:0f:c3:00:05:4d:91:02:fb:a7:5c: ab:ef:9a:9f:f3:ba:95:34:8f:ed:f2:f3:27:3e:41: 73:1d:da:b1:b9:51:98:d7:1c:0c:3a:c0:f8:b1:56: 13:f8:c8:3d:ab:c4:e7:15:83:1a:73:29:e5:f4:ee: 7e:ba:74:65:96:6c:a3:e9:76:48:28:d8:ab:dd:17: 70:bd:61:77:fa:48:a8:1e:5d:69:d3:5e:e1:ff:82: e6:8a:a1:b1:38:3c:6a:07:29:5b:6d:49:f7:98:80: e5:7c:bf:40:ad:03:39:cd:81:36:ed:b0:66:87:ba: c1:38:ff:e2:da:cc:0b:e3:04:7f:4c:e5:df:b8:c7: ab:3d:d5:99:4f:4c:c9:99:9d:d8:49:ad:b8:72:99: c2:c0:a4:b1:58:a7:f6:1f:1a:88:bd:64:5a:b2:0f: 56:8e:a1:dd:51:de:87:ce:20:1b:52:7b:f1:b3:a8: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:6F:65:D3:E2:45:58:3D:D9:C3:65:A7:D5:C2:AD:75:E4:18:A7 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:26:b7:8e:02:66:39:51:0e:ce:6d:d3:90:d1:e2:29:fa: eb:3e:12:d4:c5:c6:9e:05:36:7f:71:fc:f1:87:dc:83:10:98: be:b9:ff:aa:5d:12:a6:d1:57:26:d8:2d:14:2b:8f:9f:ff:d2: 3b:75:18:12:0e:b5:7d:07:43:2b:e0:72:05:3c:38:29:f3:2c: 71:a2:09:6f:c2:8e:93:87:10:94:a9:20:07:ed:e3:e1:5b:69: 11:c0:6b:82:c6:e0:0c:43:2b:21:03:f7:4e:bf:9a:a8:a7:e3: 8a:81:74:f0:21:0f:52:2a:e1:cc:3f:be:28:df:aa:48:30:79: 75:e8:7a:a4:6d:f0:9a:16:75:d1:f7:b5:a2:92:43:60:06:a6: f0:3c:13:56:c5:79:cf:50:c4:fb:59:f1:a1:6c:8b:28:c1:3b: e2:ad:ba:bf:cc:5b:6a:5e:7f:8d:80:5a:2a:17:17:51:85:2c: 61:0f:f5:ef:61:d4:1e:78:2e:3d:a2:f0:ae:cf:39:a3:0c:67: a4:6a:9a:86:15:3b:59:05:49:a2:d4:0d:c7:a6:b3:5f:89:99: 4a:94:ba:88:7b:b9:a0:8a:10:43:6f:70:2c:41:a0:c4:af:52: 20:0e:c9:33:e8:b6:01:b6:d1:94:10:91:ca:3b:e9:14:a3:8f: c3:75:6a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAehbzRWSH6tV/WOJyekobKXIg/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTEwMTkxMDM3MDFaFw0yNTEwMjIxNjI0MDFaMDMxMTAvBgNV BAMTKEI5NTU2RjY1RDNFMjQ1NTgzREQ5QzM2NUE3RDVDMkFENzVFNDE4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBd5dR22Ce9Kb79GRJYQrYDGe sqbRd9flRm8ZDbzy1a8koXw3ZZk5aEvU9QALAL5cjY94jZzvKzbJg/iAtaNtDbfC 6D0QKqdEqS7nHwUlD8MABU2RAvunXKvvmp/zupU0j+3y8yc+QXMd2rG5UZjXHAw6 wPixVhP4yD2rxOcVgxpzKeX07n66dGWWbKPpdkgo2KvdF3C9YXf6SKgeXWnTXuH/ guaKobE4PGoHKVttSfeYgOV8v0CtAznNgTbtsGaHusE4/+LazAvjBH9M5d+4x6s9 1ZlPTMmZndhJrbhymcLApLFYp/YfGoi9ZFqyD1aOod1R3ofOIBtSe/GzqMcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVVvZdPiRVg92cNlp9XCrXXkGKcwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0/JreOAmY5UQ7ObdOQ0eIp+us+EtTFxp4F Nn9x/PGH3IMQmL65/6pdEqbRVybYLRQrj5//0jt1GBIOtX0HQyvgcgU8OCnzLHGi CW/CjpOHEJSpIAft4+FbaRHAa4LG4AxDKyED906/mqin44qBdPAhD1Iq4cw/vijf qkgweXXoeqRt8JoWddH3taKSQ2AGpvA8E1bFec9QxPtZ8aFsiyjBO+Ktur/MW2pe f42AWioXF1GFLGEP9e9h1B54Lj2i8K7POaMMZ6RqmoYVO1kFSaLUDcems1+JmUqU uoh7uaCKEENvcCxBoMSvUiAOyTPotgG20ZQQkco76RSjj8N1aho= -----END CERTIFICATE-----Generated at Sun Oct 19 15:43:41 2025 by rpki-client