$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: jZcoDT2QKN9Qr/C3uQmncuvYe1bZ+JqILiHIogYFVNE= Subject key identifier: 66:2E:6A:6D:7E:57:60:92:9F:9A:C4:31:7E:8A:E8:53:B4:E2:C7:EC Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 705A7F2A5AA92FC12F424023B4B52FE57B7BEE73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 0190 Signing time: Mon 03 Nov 2025 14:00:45 +0000 Manifest this update: Mon 03 Nov 2025 13:55:45 +0000 Manifest next update: Fri 07 Nov 2025 00:29:45 +0000 Files and hashes: 1: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: d4JzQSD4cnB66nnhIIzNmUbht1ZROJOdPlcEXv8J7e8=) 2: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5a:7f:2a:5a:a9:2f:c1:2f:42:40:23:b4:b5:2f:e5:7b:7b:ee:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Nov 3 13:55:45 2025 GMT Not After : Nov 7 00:29:45 2025 GMT Subject: CN=662E6A6D7E5760929F9AC4317E8AE853B4E2C7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:ee:31:87:2c:04:2d:37:51:71:3f:34:91: 9e:a4:37:4c:98:5a:86:7c:ce:ed:66:3c:c2:d3:3e: 38:eb:92:d8:1d:c5:f0:9a:34:34:0f:7f:8b:a2:7c: 7e:67:a9:4c:59:4d:32:08:aa:2a:39:06:40:35:f1: 3a:d0:ba:1a:28:7f:52:a9:2f:cb:f7:ad:49:32:cc: c9:d8:40:72:b6:cb:2c:eb:03:4d:31:33:d0:96:f5: 29:4f:16:56:52:e7:b6:66:99:55:4c:a4:90:31:24: 56:e1:60:bd:8b:cf:ae:3e:b8:ba:c5:82:b5:ff:91: f3:3b:4d:b8:9e:8e:8c:47:81:27:a5:82:36:2c:bc: 08:66:bb:7a:88:7a:e2:b2:f0:ca:e7:34:2a:37:71: 67:07:11:d7:c8:ef:8d:0f:ac:28:c0:c8:28:15:78: 7b:83:c3:78:78:e4:14:a7:60:07:72:6f:ef:96:e0: 73:cd:09:96:42:92:47:4e:5f:0c:38:45:7b:ef:96: 62:89:18:af:e2:0b:c4:f5:52:41:f2:ad:17:54:b2: a9:be:4d:e7:23:97:90:c2:0a:ff:6b:a8:e5:ed:ed: 42:a2:9f:e3:84:84:3c:b8:ca:6d:61:64:47:6b:7d: 02:36:59:18:84:df:54:b4:f7:86:9a:f5:d8:b7:e2: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:6A:6D:7E:57:60:92:9F:9A:C4:31:7E:8A:E8:53:B4:E2:C7:EC X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:eb:74:0e:77:58:d3:cf:18:33:9e:f2:d2:c7:6d:b6:fa: a5:2d:02:57:09:6b:c8:0c:69:fb:08:b8:8c:f6:26:13:40:23: 8d:ba:bd:4e:e4:40:ba:16:d9:11:4f:88:cf:73:fd:1e:c5:5c: b5:30:65:d1:e4:60:18:ff:0e:8d:25:a6:b5:28:1f:f5:02:fb: 29:8e:20:21:ce:00:ff:80:ee:b1:4e:81:c8:60:1b:fe:28:2b: 46:bc:74:8e:e3:ee:1e:bc:78:9e:0c:8c:28:2b:31:1d:52:4b: 53:7d:5a:63:ec:cb:47:af:75:79:ea:53:7f:d3:a3:22:d6:74: 70:64:8f:a1:8b:73:e1:ed:5b:71:89:0c:f4:5c:bd:f3:b1:56: 02:6f:d4:41:aa:3f:e9:29:40:b1:b9:c5:2a:37:7d:d2:44:8c: a7:31:58:d5:9f:9f:35:14:e7:f2:b0:0d:22:f2:55:1b:00:c7: 7a:67:36:22:26:cc:74:ad:d5:35:b2:0e:7f:3d:2c:64:64:88: 94:ee:8b:ab:26:ad:5b:39:18:7f:e5:d2:40:c9:49:37:71:1a: 17:6b:db:59:f0:60:ab:6a:86:29:2c:f5:a2:02:19:4a:7d:b5: 02:2c:a3:66:ed:10:38:a2:54:c4:d5:96:14:19:11:de:96:54: 3a:6c:d3:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFp/KlqpL8EvQkAjtLUv5Xt77nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTExMDMxMzU1NDVaFw0yNTExMDcwMDI5NDVaMDMxMTAvBgNV BAMTKDY2MkU2QTZEN0U1NzYwOTI5RjlBQzQzMTdFOEFFODUzQjRFMkM3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTU+4xhywELTdRcT80kZ6kN0yY WoZ8zu1mPMLTPjjrktgdxfCaNDQPf4uifH5nqUxZTTIIqio5BkA18TrQuhoof1Kp L8v3rUkyzMnYQHK2yyzrA00xM9CW9SlPFlZS57ZmmVVMpJAxJFbhYL2Lz64+uLrF grX/kfM7TbiejoxHgSelgjYsvAhmu3qIeuKy8MrnNCo3cWcHEdfI740PrCjAyCgV eHuDw3h45BSnYAdyb++W4HPNCZZCkkdOXww4RXvvlmKJGK/iC8T1UkHyrRdUsqm+ Tecjl5DCCv9rqOXt7UKin+OEhDy4ym1hZEdrfQI2WRiE31S094aa9di34mKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZi5qbX5XYJKfmsQxforoU7Tix+wwHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtt63QOd1jTzxgznvLSx222+qUtAlcJa8gM afsIuIz2JhNAI426vU7kQLoW2RFPiM9z/R7FXLUwZdHkYBj/Do0lprUoH/UC+ymO ICHOAP+A7rFOgchgG/4oK0a8dI7j7h68eJ4MjCgrMR1SS1N9WmPsy0evdXnqU3/T oyLWdHBkj6GLc+HtW3GJDPRcvfOxVgJv1EGqP+kpQLG5xSo3fdJEjKcxWNWfnzUU 5/KwDSLyVRsAx3pnNiImzHSt1TWyDn89LGRkiJTui6smrVs5GH/l0kDJSTdxGhdr 21nwYKtqhiks9aICGUp9tQIso2btEDiiVMTVlhQZEd6WVDps08o= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:14 2025 by rpki-client