$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: Sy23JfYwEcxYiykTM1WVo0mNjFgPzZPgd713ZLsFuQg= Subject key identifier: 90:AD:2D:C0:17:7A:2A:A5:C8:35:DD:C5:5B:E4:09:0E:F8:AC:58:39 Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 1EE9671A8937084F96C67A0BC8C8FD64E686FDEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 0215 Signing time: Fri 24 Oct 2025 20:10:47 +0000 Manifest this update: Fri 24 Oct 2025 20:05:47 +0000 Manifest next update: Tue 28 Oct 2025 02:03:47 +0000 Files and hashes: 1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: ulapDingdLettNrT3JHy2ufzaDpBgJiFzYZnG9tw4cg=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e9:67:1a:89:37:08:4f:96:c6:7a:0b:c8:c8:fd:64:e6:86:fd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Oct 24 20:05:47 2025 GMT Not After : Oct 28 02:03:47 2025 GMT Subject: CN=90AD2DC0177A2AA5C835DDC55BE4090EF8AC5839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:6d:07:c1:62:4c:3c:07:4b:2d:e9:e0:72: 89:dd:2a:af:89:56:9b:f7:43:59:c7:fa:aa:d6:fb: fa:63:a1:3f:d3:d1:15:e4:ff:e8:26:b2:90:28:a3: bc:67:8c:ec:35:33:82:ce:54:dc:28:03:e2:9b:a9: b9:6a:0e:28:ff:38:92:25:96:76:51:75:f3:41:15: c0:a1:9e:f5:49:e8:41:5b:ea:b9:74:ae:0f:98:14: d3:0a:1e:bf:0c:8e:8d:9c:5e:4d:95:b2:23:50:b3: 5a:aa:65:30:14:fa:c0:ab:16:c4:09:60:bc:04:e1: 4f:56:08:5a:14:93:9f:fa:9e:16:94:85:06:b6:db: 52:60:3e:cf:93:3c:38:c1:c9:0d:f6:15:fd:97:9c: 3a:d8:84:63:2f:bb:de:69:03:bb:3d:2b:79:1c:42: 00:38:96:09:b9:ec:4d:54:fa:89:fd:5d:a0:06:43: 3f:dc:4a:77:28:2f:bd:d3:3e:26:a7:45:0d:91:65: b0:da:4c:2e:97:8b:80:27:03:44:87:3f:ed:3f:b5: 9c:6a:f4:06:c1:fc:97:97:e5:02:e9:ad:59:0e:17: 0d:58:53:e2:dc:65:4c:56:cd:01:ad:19:0b:10:e0: 36:67:98:41:ae:48:b9:a8:63:88:10:6f:e3:1a:9c: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:2D:C0:17:7A:2A:A5:C8:35:DD:C5:5B:E4:09:0E:F8:AC:58:39 X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:91:38:af:dc:6a:6a:53:45:ba:60:8b:87:e5:af:0e:85:45: 4d:c5:a9:55:6c:2b:80:0a:94:fa:3f:93:f9:3d:c7:72:c6:5d: 88:e8:40:c8:5e:a8:01:ec:4a:f7:64:f1:1e:ee:f5:15:86:26: e3:a2:7d:bb:88:de:9c:a6:07:b5:1c:3c:cd:16:5a:2a:96:91: c3:53:34:40:be:ee:b9:a2:65:6e:59:5b:60:a7:e9:c0:9d:2c: 83:d9:08:31:7e:f6:a1:3a:0b:56:f6:09:30:1b:77:16:8d:24: e3:e0:ea:5d:0b:05:61:04:a9:93:61:71:a2:d1:63:31:98:bc: 0d:48:4f:17:d3:33:2b:07:44:52:a6:e0:0f:9a:61:40:25:70: 03:cf:34:fd:bd:f7:65:62:de:d5:15:5d:d4:42:7c:86:d6:ce: 5b:ca:c5:b8:a9:a9:ab:42:73:39:e7:24:d1:7b:9c:5b:d5:17: de:7c:85:b6:2d:2b:ea:95:80:13:53:26:fc:1f:bc:13:d6:47: 0b:71:c7:cb:46:e6:66:d7:0c:37:5b:84:6b:9a:88:ed:e0:9c: 1f:1d:4b:78:0d:27:e1:63:79:47:6b:ee:69:e3:7b:2c:db:45: 1c:5d:ec:1a:2f:c6:57:d3:6f:7d:2f:b8:f7:4e:59:3e:ea:47: 6a:4b:c7:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHulnGok3CE+WxnoLyMj9ZOaG/ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTEwMjQyMDA1NDdaFw0yNTEwMjgwMjAzNDdaMDMxMTAvBgNV BAMTKDkwQUQyREMwMTc3QTJBQTVDODM1RERDNTVCRTQwOTBFRjhBQzU4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbW0HwWJMPAdLLengcondKq+J Vpv3Q1nH+qrW+/pjoT/T0RXk/+gmspAoo7xnjOw1M4LOVNwoA+KbqblqDij/OJIl lnZRdfNBFcChnvVJ6EFb6rl0rg+YFNMKHr8Mjo2cXk2VsiNQs1qqZTAU+sCrFsQJ YLwE4U9WCFoUk5/6nhaUhQa221JgPs+TPDjByQ32Ff2XnDrYhGMvu95pA7s9K3kc QgA4lgm57E1U+on9XaAGQz/cSncoL73TPianRQ2RZbDaTC6Xi4AnA0SHP+0/tZxq 9AbB/JeX5QLprVkOFw1YU+LcZUxWzQGtGQsQ4DZnmEGuSLmoY4gQb+ManJ/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkK0twBd6KqXINd3FW+QJDvisWDkwHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOROK/campTRbpgi4flrw6FRU3FqVVsK4AK lPo/k/k9x3LGXYjoQMheqAHsSvdk8R7u9RWGJuOifbuI3pymB7UcPM0WWiqWkcNT NEC+7rmiZW5ZW2Cn6cCdLIPZCDF+9qE6C1b2CTAbdxaNJOPg6l0LBWEEqZNhcaLR YzGYvA1ITxfTMysHRFKm4A+aYUAlcAPPNP2992Vi3tUVXdRCfIbWzlvKxbipqatC cznnJNF7nFvVF958hbYtK+qVgBNTJvwfvBPWRwtxx8tG5mbXDDdbhGuaiO3gnB8d S3gNJ+FjeUdr7mnjeyzbRRxd7BovxlfTb30vuPdOWT7qR2pLx5E= -----END CERTIFICATE-----Generated at Sat Oct 25 11:26:44 2025 by rpki-client