$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: dJfTmiDQ6ZufV1+oSumT09bE+bbp2baux/7aGYQ69BY= Subject key identifier: 53:E0:D2:D7:83:0D:E9:42:F1:A7:1F:8D:03:03:FB:91:A3:4A:10:43 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: CE771726E47D04CEB4878679B9BF3B8A94E840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0206 Signing time: Wed 05 Nov 2025 08:30:37 +0000 Manifest this update: Wed 05 Nov 2025 08:25:37 +0000 Manifest next update: Sat 08 Nov 2025 15:38:37 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: LwQT21TQP7oRwp8Y/UAjOad0HGXqoZWUeLTxnn7ox3I=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 4: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 5: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 15:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ce:77:17:26:e4:7d:04:ce:b4:87:86:79:b9:bf:3b:8a:94:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Nov 5 08:25:37 2025 GMT Not After : Nov 8 15:38:37 2025 GMT Subject: CN=53E0D2D7830DE942F1A71F8D0303FB91A34A1043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:12:2c:b5:68:f8:8f:5e:4b:84:56:ff:85:b4: d0:3f:d8:47:7e:9b:55:ce:a1:72:df:3d:b9:80:bd: ce:26:a9:a2:1b:1d:c6:ed:22:ff:ce:f6:36:46:75: e3:40:e3:1e:54:18:c8:ca:fb:83:c8:2a:9f:2d:ac: 2f:32:ac:fe:6b:c1:10:76:b3:aa:33:09:3c:bc:7e: 5d:8a:f3:51:8c:ee:a6:f6:b1:f7:40:2f:50:81:5e: 86:84:b6:be:2d:96:a0:d2:24:66:f8:a6:f8:c1:c3: 84:b9:5c:cb:eb:89:79:37:ec:3f:a2:83:88:8e:66: 77:1b:34:72:cd:1f:64:48:3b:c0:c7:bd:46:8b:2d: c5:5d:e9:17:dd:f5:6a:1d:1a:c4:0a:3e:10:f7:81: 46:a4:96:1f:2c:87:43:8a:ff:aa:71:a1:11:22:25: 8c:db:cd:18:11:66:42:07:87:32:47:6e:e6:83:7c: 39:eb:35:2d:d3:45:9a:0e:d4:7a:df:de:ae:0c:ab: 98:58:38:49:28:9d:0d:8c:fc:26:cf:86:88:6f:81: 17:a4:41:e2:be:47:5e:92:26:8a:aa:bd:37:31:a8: f5:79:0e:85:ee:1b:5e:cf:84:85:df:47:53:1d:24: a5:21:f3:f6:53:98:36:3f:4f:dc:94:0c:75:eb:dd: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:D2:D7:83:0D:E9:42:F1:A7:1F:8D:03:03:FB:91:A3:4A:10:43 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f1:2c:52:70:80:7b:ed:97:46:53:55:38:92:af:a8:2e:26: 24:6f:eb:bc:42:64:b6:f1:c7:50:f4:7b:b3:3b:ef:49:84:84: 2a:33:39:2e:96:f6:64:d5:60:40:20:90:12:ae:27:cb:8e:7f: cf:f6:5c:50:98:65:6b:f0:94:b7:f9:ed:eb:47:84:91:f4:75: 58:fb:c4:a5:8b:03:ab:2a:20:5c:c6:fc:4a:94:dd:6d:d1:9a: 3c:00:91:c5:65:bd:e5:1b:f9:cb:30:de:bd:c1:b8:c6:af:60: 42:b8:22:16:b9:6e:16:61:96:6e:6d:21:f3:9d:2e:8e:78:8e: a3:55:cd:b4:ff:5b:b4:9e:96:60:de:04:49:70:f3:8b:0a:a6: 50:a6:ff:a7:00:91:5c:84:6e:2a:48:d2:c0:fd:c4:06:86:eb: 4a:63:22:73:1f:40:23:f1:35:b0:b6:3b:7a:fd:51:c6:e5:49: 19:99:ec:b4:d0:08:d5:10:2b:cf:2c:89:e4:5f:33:24:d3:2c: 0d:0b:75:ba:02:84:31:19:9d:6a:1c:7f:74:f6:34:17:8d:ee: 59:2d:08:f3:d6:ea:ce:27:f1:b7:f8:fb:0c:f6:a2:43:6d:b7: 55:ae:11:a1:6b:0e:8a:f1:53:9b:35:c1:d8:8e:46:bb:1b:b4: ce:bc:74:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAM53FybkfQTOtIeGebm/O4qU6EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTExMDUwODI1MzdaFw0yNTExMDgxNTM4MzdaMDMxMTAvBgNV BAMTKDUzRTBEMkQ3ODMwREU5NDJGMUE3MUY4RDAzMDNGQjkxQTM0QTEwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtEiy1aPiPXkuEVv+FtNA/2Ed+ m1XOoXLfPbmAvc4mqaIbHcbtIv/O9jZGdeNA4x5UGMjK+4PIKp8trC8yrP5rwRB2 s6ozCTy8fl2K81GM7qb2sfdAL1CBXoaEtr4tlqDSJGb4pvjBw4S5XMvriXk37D+i g4iOZncbNHLNH2RIO8DHvUaLLcVd6Rfd9WodGsQKPhD3gUaklh8sh0OK/6pxoREi JYzbzRgRZkIHhzJHbuaDfDnrNS3TRZoO1Hrf3q4Mq5hYOEkonQ2M/CbPhohvgRek QeK+R16SJoqqvTcxqPV5DoXuG17PhIXfR1MdJKUh8/ZTmDY/T9yUDHXr3RFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+DS14MN6ULxpx+NAwP7kaNKEEMwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjxLFJwgHvtl0ZTVTiSr6guJiRv67xCZLbx x1D0e7M770mEhCozOS6W9mTVYEAgkBKuJ8uOf8/2XFCYZWvwlLf57etHhJH0dVj7 xKWLA6sqIFzG/EqU3W3RmjwAkcVlveUb+csw3r3BuMavYEK4Iha5bhZhlm5tIfOd Lo54jqNVzbT/W7SelmDeBElw84sKplCm/6cAkVyEbipI0sD9xAaG60pjInMfQCPx NbC2O3r9UcblSRmZ7LTQCNUQK88sieRfMyTTLA0LdboChDEZnWocf3T2NBeN7lkt CPPW6s4n8bf4+wz2okNtt1WuEaFrDorxU5s1wdiORrsbtM68dOE= -----END CERTIFICATE-----Generated at Fri Nov 7 00:28:40 2025 by rpki-client