$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: 1H9BgXuQLLhpdVEgx80Gzu6PYoYhodsRRQYULBmZ914= Subject key identifier: D3:D3:BD:A4:64:B8:35:7A:62:3A:A9:C9:C4:1E:02:5D:F7:7E:D8:13 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 66168C7DA4A376299E28A6808434D893D734E2F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0228 Signing time: Sun 02 Nov 2025 19:00:39 +0000 Manifest this update: Sun 02 Nov 2025 18:55:39 +0000 Manifest next update: Thu 06 Nov 2025 06:07:39 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: 2BuRlHXd3abf8qjnTx7CnjESqljjX5BsI/9sjk3/cXQ=) 2: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 4: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:16:8c:7d:a4:a3:76:29:9e:28:a6:80:84:34:d8:93:d7:34:e2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Nov 2 18:55:39 2025 GMT Not After : Nov 6 06:07:39 2025 GMT Subject: CN=D3D3BDA464B8357A623AA9C9C41E025DF77ED813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:ac:c2:24:5d:2f:05:36:5a:6d:1a:0c:b4: 7c:76:2c:51:d9:dd:ad:9e:fb:ca:40:66:05:e6:0e: 6d:5e:db:ec:65:e9:66:30:86:29:10:70:57:06:e4: bd:2b:69:53:2b:b1:6e:62:c5:29:20:1b:db:f6:a9: a7:47:58:9e:41:cb:69:5a:28:4a:36:61:17:10:a0: af:cb:51:f4:69:4e:43:99:53:a1:d6:b0:17:0b:07: 08:e6:56:53:30:04:b0:36:02:39:ff:8f:77:e5:1f: d2:9d:fa:66:bd:71:e9:88:e8:2c:c0:7e:b7:c6:ca: 90:57:37:af:a1:df:e9:c8:b9:b6:6b:e6:29:32:c1: 71:a8:54:52:de:a8:eb:f5:7a:59:4e:ab:e3:60:f7: 86:46:5f:88:9a:7d:8e:28:b4:2e:07:28:d3:c3:cd: 54:a3:0b:33:9a:13:36:57:4f:2d:62:a2:54:7f:bf: 09:f4:88:21:fd:43:db:e3:d4:4b:b9:6c:4a:87:31: 8b:a7:97:56:e5:24:27:bd:db:10:ad:45:f9:8f:89: ef:00:67:22:9b:0e:2e:ea:9a:f6:08:46:50:a9:49: c9:93:de:b4:77:76:a1:0b:10:0f:d3:2d:37:81:1b: cf:45:21:50:ad:fe:d7:79:fa:45:be:df:88:fc:c0: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:BD:A4:64:B8:35:7A:62:3A:A9:C9:C4:1E:02:5D:F7:7E:D8:13 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:90:b0:d1:a3:3f:90:74:4d:b5:a7:57:cc:00:1a:0f:7b:b1: 66:33:af:7c:07:e7:de:cb:50:ab:08:0d:1d:76:22:20:29:32: b3:be:58:20:38:9e:56:f2:3d:b1:54:2a:37:96:1f:f0:d1:c7: d4:c2:50:f3:17:3a:9c:52:cf:a9:42:51:ce:28:b3:3f:61:cf: ef:ca:57:39:fd:34:a0:7a:66:14:84:ab:ee:fa:da:cd:b0:09: e8:9a:62:1e:15:4d:c9:e1:ad:21:26:8e:01:64:f4:0c:19:b0: 4d:f7:82:fc:9f:b1:2c:5c:03:1d:d9:28:08:db:14:87:d2:91: 59:9f:17:6e:cd:f6:43:0f:78:ab:ee:a3:7e:37:7f:ab:aa:b7: 02:54:77:36:e1:e4:14:ef:01:05:c3:5a:a6:1a:76:91:06:78: 4b:26:cb:e4:9d:94:a2:76:57:a6:21:25:b8:eb:b1:1a:7c:18: 57:25:a9:35:c5:c7:10:d7:e3:35:08:77:1a:73:b1:2c:7b:41: 47:59:ec:1b:f7:de:92:a8:c5:bb:89:f3:ef:46:e1:83:07:c9: f4:30:52:b0:dc:c3:4e:9d:2f:a4:f3:c2:99:f5:18:30:e2:a8: 7c:4e:7a:33:eb:1d:96:ce:42:c5:ae:b5:59:4b:6e:a0:4d:4c: 96:f0:58:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhaMfaSjdimeKKaAhDTYk9c04vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTExMDIxODU1MzlaFw0yNTExMDYwNjA3MzlaMDMxMTAvBgNV BAMTKEQzRDNCREE0NjRCODM1N0E2MjNBQTlDOUM0MUUwMjVERjc3RUQ4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcKzCJF0vBTZabRoMtHx2LFHZ 3a2e+8pAZgXmDm1e2+xl6WYwhikQcFcG5L0raVMrsW5ixSkgG9v2qadHWJ5By2la KEo2YRcQoK/LUfRpTkOZU6HWsBcLBwjmVlMwBLA2Ajn/j3flH9Kd+ma9cemI6CzA frfGypBXN6+h3+nIubZr5ikywXGoVFLeqOv1ellOq+Ng94ZGX4iafY4otC4HKNPD zVSjCzOaEzZXTy1iolR/vwn0iCH9Q9vj1Eu5bEqHMYunl1blJCe92xCtRfmPie8A ZyKbDi7qmvYIRlCpScmT3rR3dqELEA/TLTeBG89FIVCt/td5+kW+34j8wNf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09O9pGS4NXpiOqnJxB4CXfd+2BMwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaQsNGjP5B0TbWnV8wAGg97sWYzr3wH597L UKsIDR12IiApMrO+WCA4nlbyPbFUKjeWH/DRx9TCUPMXOpxSz6lCUc4osz9hz+/K Vzn9NKB6ZhSEq+762s2wCeiaYh4VTcnhrSEmjgFk9AwZsE33gvyfsSxcAx3ZKAjb FIfSkVmfF27N9kMPeKvuo343f6uqtwJUdzbh5BTvAQXDWqYadpEGeEsmy+SdlKJ2 V6YhJbjrsRp8GFclqTXFxxDX4zUIdxpzsSx7QUdZ7Bv33pKoxbuJ8+9G4YMHyfQw UrDcw06dL6Tzwpn1GDDiqHxOejPrHZbOQsWutVlLbqBNTJbwWEM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:26 2025 by rpki-client