$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: KiEI1xAqn8n2W+SVsH/4k11tw4NKjrunh+2ErTScAEY= Subject key identifier: AB:B9:06:8E:BC:96:3F:54:36:E5:D6:79:1E:61:F5:7A:23:1D:6D:2B Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 4D15B0F0B706F6B8F5E9E66FE2B53BA01215FDA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: E5 Signing time: Tue 04 Nov 2025 12:51:57 +0000 Manifest this update: Tue 04 Nov 2025 12:46:57 +0000 Manifest next update: Fri 07 Nov 2025 22:41:57 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: swWOhH2k97zmFrPl2UodGB14ioerlERovWhcAj4wpk0=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:15:b0:f0:b7:06:f6:b8:f5:e9:e6:6f:e2:b5:3b:a0:12:15:fd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Nov 4 12:46:57 2025 GMT Not After : Nov 7 22:41:57 2025 GMT Subject: CN=ABB9068EBC963F5436E5D6791E61F57A231D6D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:a0:c7:95:af:35:5f:c1:17:4d:c2:bb:e3: 24:8a:55:b0:b3:5d:25:34:dc:53:60:9c:f4:01:97: d9:6c:cd:84:e1:b5:24:7b:b6:d5:f9:1f:dc:9d:6a: ff:1a:cb:da:3b:68:8e:0d:64:b6:f9:ad:22:8c:5c: 38:65:f3:95:7e:07:0e:a3:ea:c7:1c:8d:7e:c0:81: 60:79:c2:f2:30:a6:a5:4f:c9:59:3a:ea:3f:b7:30: 46:57:41:94:bd:10:6d:1c:0d:ea:51:2d:0e:14:a2: 8c:48:66:f3:d8:3c:15:5e:0b:4b:5a:30:2c:76:48: 78:00:de:01:b7:1e:f5:a8:a3:24:ab:8d:7a:47:9d: 70:1f:60:00:59:ec:52:dd:03:d6:d7:d7:67:e1:9f: be:61:46:15:04:de:52:40:1b:5e:54:d9:01:83:0b: f4:bf:1e:f8:20:49:a7:23:f9:e5:1d:35:a2:05:97: 5e:a4:27:03:f9:16:96:ae:81:80:14:a6:5a:fa:61: d8:ca:f1:07:be:2a:fe:e9:35:d1:82:f3:e5:6d:43: 4b:b1:eb:f1:5d:dd:b7:31:4f:95:c8:e7:cb:78:27: ef:98:86:7b:6c:98:f0:18:00:3c:07:88:60:a5:68: 7a:b2:f4:41:14:14:d1:1a:a7:e6:9b:b2:19:ca:f3: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:06:8E:BC:96:3F:54:36:E5:D6:79:1E:61:F5:7A:23:1D:6D:2B X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:1b:6b:bf:3f:19:15:83:f1:57:12:2b:ba:0d:26:96:bb:71: 21:32:24:22:41:c4:d6:d8:85:1a:f8:66:7a:6e:d6:38:ce:4c: 26:70:a5:e4:42:3b:7d:18:05:86:62:4d:d7:53:e0:d2:37:d1: 22:19:c4:42:42:fb:a9:d5:89:93:d9:bb:67:9c:e9:c6:6d:48: bb:91:3e:ef:37:ba:e7:ca:00:7d:fd:f8:fd:af:91:b4:be:f4: 07:10:61:93:21:c1:f1:6c:5d:5c:eb:08:81:97:ff:68:22:db: 9a:a0:5d:96:cc:9d:f3:bf:54:21:aa:16:53:02:be:3a:ff:5c: 30:47:95:af:bd:43:83:c0:c2:c9:da:e4:f7:56:03:87:e2:7d: ee:46:67:31:e2:1a:84:db:be:19:83:97:1a:1a:4b:ef:49:1e: f8:22:8f:43:d4:2e:07:35:ba:ce:2f:e4:94:68:8d:d4:58:95: 67:3b:d1:8c:f3:11:3f:4e:3f:6a:d3:94:01:56:58:13:90:4d: 7c:16:2e:8a:b0:b6:8d:2b:7b:2f:9e:a6:62:89:36:01:dd:ae: c7:e7:a7:23:1a:0c:a9:49:aa:20:cc:ac:79:38:d3:c2:ab:2a: e7:b3:5c:ad:c1:6e:9d:df:2b:62:d0:45:16:5b:4a:74:2c:79: 3d:a4:11:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRWw8LcG9rj16eZv4rU7oBIV/aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTExMDQxMjQ2NTdaFw0yNTExMDcyMjQxNTdaMDMxMTAvBgNV BAMTKEFCQjkwNjhFQkM5NjNGNTQzNkU1RDY3OTFFNjFGNTdBMjMxRDZEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAaDHla81X8EXTcK74ySKVbCz XSU03FNgnPQBl9lszYThtSR7ttX5H9ydav8ay9o7aI4NZLb5rSKMXDhl85V+Bw6j 6sccjX7AgWB5wvIwpqVPyVk66j+3MEZXQZS9EG0cDepRLQ4UooxIZvPYPBVeC0ta MCx2SHgA3gG3HvWooySrjXpHnXAfYABZ7FLdA9bX12fhn75hRhUE3lJAG15U2QGD C/S/HvggSacj+eUdNaIFl16kJwP5FpaugYAUplr6YdjK8Qe+Kv7pNdGC8+VtQ0ux 6/Fd3bcxT5XI58t4J++YhntsmPAYADwHiGClaHqy9EEUFNEap+abshnK8+xTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7kGjryWP1Q25dZ5HmH1eiMdbSswHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUba78/GRWD8VcSK7oNJpa7cSEyJCJBxNbY hRr4Znpu1jjOTCZwpeRCO30YBYZiTddT4NI30SIZxEJC+6nViZPZu2ec6cZtSLuR Pu83uufKAH39+P2vkbS+9AcQYZMhwfFsXVzrCIGX/2gi25qgXZbMnfO/VCGqFlMC vjr/XDBHla+9Q4PAwsna5PdWA4fife5GZzHiGoTbvhmDlxoaS+9JHvgij0PULgc1 us4v5JRojdRYlWc70YzzET9OP2rTlAFWWBOQTXwWLoqwto0rey+epmKJNgHdrsfn pyMaDKlJqiDMrHk408KrKuezXK3Bbp3fK2LQRRZbSnQseT2kEdU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:43 2025 by rpki-client