$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: WfqbR6jSW4d+WgRuA2Lr5le8tW9An4B1zM1GYwOsmiQ= Subject key identifier: 59:D9:ED:53:15:FE:D7:47:5F:87:85:D0:F4:ED:96:6B:BB:59:F0:C9 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 176730614C8FC24323FF3150644649A30D74A415 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0201 Signing time: Sat 25 Oct 2025 00:40:37 +0000 Manifest this update: Sat 25 Oct 2025 00:35:37 +0000 Manifest next update: Tue 28 Oct 2025 05:18:37 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 2: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 3: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: Vpexkkmv9mroMpS1VMquQRDAabJRAB71jMjJuAuWXP8=) 4: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 05:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:67:30:61:4c:8f:c2:43:23:ff:31:50:64:46:49:a3:0d:74:a4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Oct 25 00:35:37 2025 GMT Not After : Oct 28 05:18:37 2025 GMT Subject: CN=59D9ED5315FED7475F8785D0F4ED966BBB59F0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:f5:28:0c:63:3a:e0:27:49:74:9f:10:69: f4:03:a6:4a:fa:8e:0d:61:0e:d3:20:0a:6a:cd:07: 9f:49:9e:68:12:f5:1e:78:a9:85:23:90:a1:a6:c8: c3:31:78:4a:76:68:e4:18:a4:22:a1:c0:78:eb:bf: f3:5d:c7:ca:05:37:d9:88:5a:ca:08:f2:1b:65:95: 34:b0:73:8d:04:18:2b:93:af:5b:44:29:26:59:c6: 40:a9:0d:c0:79:7c:81:02:32:b0:13:6a:02:3c:d1: bd:5f:2e:46:2f:92:d3:54:e0:07:c2:66:0e:13:68: e5:8b:6b:90:07:3c:47:59:a5:ae:57:82:7b:50:e0: e1:80:75:49:4b:c8:a7:23:17:5d:8e:37:d2:46:42: 7d:db:22:f4:70:10:dd:3e:5f:ac:0d:1c:21:bb:0f: 1a:35:92:a6:78:03:f9:04:c4:f7:c1:48:96:bb:16: 64:d3:01:1e:56:f0:10:9c:a8:07:59:6b:60:9a:0c: 55:56:2d:88:35:25:b8:5c:6d:cf:10:6a:bc:f7:45: 9a:9e:54:6c:93:1a:3f:fd:85:4b:bc:6a:18:29:66: a1:3a:d6:a8:2e:1d:17:e8:28:df:76:de:5c:db:bb: 75:94:22:05:d6:1f:7e:21:4a:b2:ea:c3:7b:b8:21: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D9:ED:53:15:FE:D7:47:5F:87:85:D0:F4:ED:96:6B:BB:59:F0:C9 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:17:8a:23:72:cb:6c:d4:fd:a7:86:18:e1:bf:75:35:71:37: a3:46:8d:b3:36:90:3a:3b:5b:d8:63:ec:79:9d:08:cf:82:dd: d7:de:98:fb:45:d3:5b:45:5c:1a:1d:30:3a:c7:d8:ea:04:1b: 70:4f:e2:7e:ce:71:83:a8:bb:ed:76:a2:b7:32:85:ab:5e:8c: 25:9e:2d:9c:22:db:f5:1d:3b:00:f5:50:57:7c:c9:47:c8:6a: b8:e9:3e:a9:08:0f:1e:bf:01:01:9f:a9:d4:f8:be:7c:7b:eb: 7b:aa:7e:10:65:2b:a4:4f:55:fb:49:aa:f9:c0:e8:00:6c:f8: 87:18:34:c2:13:50:6b:60:b6:b2:b6:a2:2c:55:02:46:b1:b9: 94:c7:88:40:17:12:97:36:e4:60:e5:7f:af:1c:0f:73:e0:70: 49:85:e7:e6:80:dc:e9:18:7d:40:2d:28:10:d0:1a:56:10:69: 63:51:9b:cb:cd:33:10:e7:8b:a4:9e:b3:57:5c:bd:92:7e:51: ef:3c:64:e3:e1:11:54:49:48:53:9f:11:09:58:ed:69:41:e1: 51:19:fa:84:a8:01:ec:fd:e4:f3:44:7e:f4:0a:39:3c:c5:77: e2:a5:e9:a1:b3:be:f7:db:7b:87:84:ff:21:1a:f5:43:1f:2a: 19:f9:c1:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2cwYUyPwkMj/zFQZEZJow10pBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTEwMjUwMDM1MzdaFw0yNTEwMjgwNTE4MzdaMDMxMTAvBgNV BAMTKDU5RDlFRDUzMTVGRUQ3NDc1Rjg3ODVEMEY0RUQ5NjZCQkI1OUYwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzYfUoDGM64CdJdJ8QafQDpkr6 jg1hDtMgCmrNB59JnmgS9R54qYUjkKGmyMMxeEp2aOQYpCKhwHjrv/Ndx8oFN9mI WsoI8htllTSwc40EGCuTr1tEKSZZxkCpDcB5fIECMrATagI80b1fLkYvktNU4AfC Zg4TaOWLa5AHPEdZpa5XgntQ4OGAdUlLyKcjF12ON9JGQn3bIvRwEN0+X6wNHCG7 Dxo1kqZ4A/kExPfBSJa7FmTTAR5W8BCcqAdZa2CaDFVWLYg1Jbhcbc8Qarz3RZqe VGyTGj/9hUu8ahgpZqE61qguHRfoKN923lzbu3WUIgXWH34hSrLqw3u4IaRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWdntUxX+10dfh4XQ9O2Wa7tZ8MkwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkXiiNyy2zU/aeGGOG/dTVxN6NGjbM2kDo7 W9hj7HmdCM+C3dfemPtF01tFXBodMDrH2OoEG3BP4n7OcYOou+12orcyhatejCWe LZwi2/UdOwD1UFd8yUfIarjpPqkIDx6/AQGfqdT4vnx763uqfhBlK6RPVftJqvnA 6ABs+IcYNMITUGtgtrK2oixVAkaxuZTHiEAXEpc25GDlf68cD3PgcEmF5+aA3OkY fUAtKBDQGlYQaWNRm8vNMxDni6Ses1dcvZJ+Ue88ZOPhEVRJSFOfEQlY7WlB4VEZ +oSoAez95PNEfvQKOTzFd+Kl6aGzvvfbe4eE/yEa9UMfKhn5wXY= -----END CERTIFICATE-----Generated at Sun Oct 26 22:53:57 2025 by rpki-client