$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: NbkcSHSRevuaQaYzcuBIOXe+L/K9KplcbmdFqxgIak4= Subject key identifier: CF:27:26:DD:DD:7A:21:97:09:41:2D:A9:25:39:D1:A5:EA:CA:3D:4B Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 0C983EACFF43CD1F3536DE74879000F28BAF238C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 020B Signing time: Mon 03 Nov 2025 10:41:56 +0000 Manifest this update: Mon 03 Nov 2025 10:36:56 +0000 Manifest next update: Thu 06 Nov 2025 14:10:56 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: vOm5IWpoQ/miOwPYjqj/eDGhp64NPs+jTucZEZ5gCgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:98:3e:ac:ff:43:cd:1f:35:36:de:74:87:90:00:f2:8b:af:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Nov 3 10:36:56 2025 GMT Not After : Nov 6 14:10:56 2025 GMT Subject: CN=CF2726DDDD7A219709412DA92539D1A5EACA3D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:ad:4f:d8:72:e5:c7:14:b5:bd:ba:cb:7d: 51:d1:ea:53:db:3f:c6:ac:8c:ef:f9:da:d6:57:d0: 08:e7:f3:85:1e:2c:ca:d5:b1:70:9b:8b:53:24:7b: e9:31:c7:01:8c:15:cb:a9:a3:f3:fd:4c:6f:aa:0e: ea:de:05:ed:76:9c:ae:fb:9f:b6:1b:a1:0e:6f:3c: b5:1d:d3:b7:70:5f:85:1d:32:11:68:9e:aa:a9:cb: 6e:5e:b0:b5:63:12:37:e2:0e:1b:0c:f7:f4:1c:b8: b3:51:15:a1:87:cf:b2:f1:cd:9a:e3:c4:6b:6c:de: 39:7d:3d:df:05:39:81:20:df:65:a7:5f:a8:10:a0: 12:e3:16:3a:80:bb:cf:34:e2:97:e9:84:09:2b:02: ba:7f:6d:45:59:b5:17:27:3f:ec:19:90:ad:93:24: be:cb:65:ab:98:49:11:ee:aa:08:a4:56:cd:a9:d2: ba:60:26:4d:77:ec:25:bf:78:0c:bb:13:02:b5:5a: a5:92:5c:3d:73:7a:99:55:bb:01:e2:55:80:6a:ba: 88:1d:c4:93:9a:af:35:f8:12:e2:fc:03:7f:71:05: 30:99:89:36:1d:80:62:75:de:f3:f3:af:35:21:4b: 2c:1c:81:49:db:57:3e:d9:98:4e:e3:35:a2:b0:b4: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:27:26:DD:DD:7A:21:97:09:41:2D:A9:25:39:D1:A5:EA:CA:3D:4B X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:72:a6:1e:e1:da:94:da:f1:fe:42:b4:f5:68:f5:51:54:b3: 97:c5:35:e6:ca:7e:7a:9f:53:86:f4:d1:75:34:51:45:d8:70: fa:87:f7:bd:bd:13:40:fb:81:96:26:91:d8:83:db:a1:a1:bc: df:ff:e2:30:3d:68:6c:4d:97:b7:e2:0f:35:3b:c9:79:57:e8: e3:b4:8e:6a:79:0d:5b:2a:28:dd:35:8b:7b:e9:98:f3:52:48: 56:19:bf:de:86:8a:cd:cc:95:31:67:0a:2a:9d:88:57:1c:3d: e9:21:a8:61:6f:f6:44:59:72:12:94:7f:5c:b6:b4:9c:c7:fe: 17:49:b6:d6:73:02:a0:2d:95:db:f1:5a:b1:b4:2d:e6:79:42: f3:f2:28:ac:08:4b:7e:79:3b:63:56:f0:e3:cc:ee:9c:4c:86: 0f:df:11:85:25:e5:78:58:d3:cc:42:49:8e:70:5d:b1:e7:b1: b2:6e:50:e8:5e:64:7e:fe:98:14:5d:c5:49:0a:4f:cf:60:b1: c9:e6:5d:b2:66:b6:0c:d2:5c:de:08:73:17:d8:10:c7:2f:5c: 1d:79:6a:23:b1:da:c6:8d:3b:b3:38:39:97:d3:56:63:22:5e: 5a:cf:3c:c4:4b:83:de:6a:ef:07:c9:36:31:10:db:7d:5b:0b: 80:b0:9c:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJg+rP9DzR81Nt50h5AA8ouvI4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTExMDMxMDM2NTZaFw0yNTExMDYxNDEwNTZaMDMxMTAvBgNV BAMTKENGMjcyNkREREQ3QTIxOTcwOTQxMkRBOTI1MzlEMUE1RUFDQTNENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTK1P2HLlxxS1vbrLfVHR6lPb P8asjO/52tZX0Ajn84UeLMrVsXCbi1Mke+kxxwGMFcupo/P9TG+qDureBe12nK77 n7YboQ5vPLUd07dwX4UdMhFonqqpy25esLVjEjfiDhsM9/QcuLNRFaGHz7LxzZrj xGts3jl9Pd8FOYEg32WnX6gQoBLjFjqAu8804pfphAkrArp/bUVZtRcnP+wZkK2T JL7LZauYSRHuqgikVs2p0rpgJk137CW/eAy7EwK1WqWSXD1zeplVuwHiVYBquogd xJOarzX4EuL8A39xBTCZiTYdgGJ13vPzrzUhSywcgUnbVz7ZmE7jNaKwtLUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzycm3d16IZcJQS2pJTnRperKPUswHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhyph7h2pTa8f5CtPVo9VFUs5fFNebKfnqf U4b00XU0UUXYcPqH9729E0D7gZYmkdiD26GhvN//4jA9aGxNl7fiDzU7yXlX6OO0 jmp5DVsqKN01i3vpmPNSSFYZv96Gis3MlTFnCiqdiFccPekhqGFv9kRZchKUf1y2 tJzH/hdJttZzAqAtldvxWrG0LeZ5QvPyKKwIS355O2NW8OPM7pxMhg/fEYUl5XhY 08xCSY5wXbHnsbJuUOheZH7+mBRdxUkKT89gscnmXbJmtgzSXN4IcxfYEMcvXB15 aiOx2saNO7M4OZfTVmMiXlrPPMRLg95q7wfJNjEQ231bC4CwnP4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:58 2025 by rpki-client