$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: qioVerFN21EV2QgkGKFiwDTsfaAVYjBBMDx2juQk9Ic= Subject key identifier: B7:66:EE:BD:00:EE:58:13:54:C0:35:A8:2B:B8:67:67:CF:31:7F:25 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 49C26A1640DF8223EB9E6DA4E9D6C1BF335BBD0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 021F Signing time: Mon 03 Nov 2025 03:22:01 +0000 Manifest this update: Mon 03 Nov 2025 03:17:01 +0000 Manifest next update: Thu 06 Nov 2025 05:22:01 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: M2Z9h0VRJldabPnHX2Ro5yBP+IDlxfNhbhAkr/Kgpg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:6a:16:40:df:82:23:eb:9e:6d:a4:e9:d6:c1:bf:33:5b:bd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Nov 3 03:17:01 2025 GMT Not After : Nov 6 05:22:01 2025 GMT Subject: CN=B766EEBD00EE581354C035A82BB86767CF317F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:d1:3c:b9:f8:d9:ff:1e:6f:8b:2c:a8:82: 0c:d2:88:44:7e:00:57:c0:47:25:1f:9b:f1:8c:26: 68:aa:f3:43:1c:a0:3a:0e:97:b1:10:08:ec:ef:97: 53:48:f5:94:5f:da:87:26:5f:8e:4d:2e:a7:ce:dd: 7a:b5:a0:4d:88:eb:06:8f:54:af:71:9f:a7:6b:e1: c7:cc:fb:9b:ea:71:f8:9e:3c:5f:dd:ae:02:fe:a9: be:fc:26:ca:50:01:53:0e:a9:d7:6e:d6:44:61:5f: ba:5c:12:90:82:1c:ee:b8:e4:91:27:ea:66:f8:d1: 25:3b:87:8f:87:a9:03:08:3d:f0:a7:77:f7:d9:03: 19:8b:b7:90:10:ac:f0:ed:35:f4:b0:3b:59:4f:5c: d8:70:fd:52:e2:b2:be:05:11:2e:a1:a6:4c:47:03: e4:34:f2:c0:82:c3:de:41:e6:af:71:e5:36:69:dc: 5f:4f:b4:b7:68:9d:32:de:3d:c8:8f:23:d3:93:76: c5:ef:99:1f:fa:76:11:4c:7e:8b:98:ea:10:0b:5b: b8:dc:25:da:d2:9a:e9:ac:e6:5a:c4:b0:a7:ef:67: b1:06:a7:41:7b:fe:3e:6a:5a:ce:7f:e6:3c:3d:17: a4:8d:0f:86:15:ac:36:c1:5f:e2:6f:42:96:bf:4f: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:EE:BD:00:EE:58:13:54:C0:35:A8:2B:B8:67:67:CF:31:7F:25 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ee:56:f7:e6:ce:54:6b:5c:2a:1c:4c:33:45:a9:46:16:ea: d2:61:e3:4f:45:64:1d:80:a2:9b:09:8b:38:3b:a8:54:68:ad: 0e:6c:73:8e:8f:fb:4e:9f:63:cc:ab:5c:08:d7:e7:d0:d9:6a: c7:8f:8b:f8:af:f9:31:00:ba:ab:1b:83:31:b6:55:5a:53:14: 5f:40:91:f2:18:ff:ba:8b:d8:25:30:90:74:7b:8b:41:12:ce: 35:36:63:3a:3d:e2:7b:4f:34:3e:a6:a6:9f:0f:8e:24:e9:18: d8:99:90:99:31:7b:24:d2:ea:0c:18:ed:43:9f:f2:bc:8a:d3: 59:19:92:5f:f3:22:be:5f:ea:e9:57:7d:ac:2a:d7:f1:53:62: db:d4:a2:1e:7c:15:73:d4:f1:a3:3f:24:27:95:a7:7a:93:b1: 49:17:38:27:25:30:d0:43:9e:20:ae:23:bc:67:a6:db:f7:84: 7c:79:9b:f1:e2:f4:0b:3c:b5:1f:94:09:ea:e7:5c:5b:fd:00: 43:84:98:f2:5e:3a:02:c3:90:56:e0:1a:07:59:46:fe:30:75: 02:4c:7b:50:7d:ae:7a:25:a7:8c:fd:c3:be:d6:53:b1:a4:df: d6:02:28:61:dc:9c:67:03:f2:8f:68:c9:53:1e:3a:e4:c1:71: 87:f8:e2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScJqFkDfgiPrnm2k6dbBvzNbvQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTExMDMwMzE3MDFaFw0yNTExMDYwNTIyMDFaMDMxMTAvBgNV BAMTKEI3NjZFRUJEMDBFRTU4MTM1NEMwMzVBODJCQjg2NzY3Q0YzMTdGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBtE8ufjZ/x5viyyoggzSiER+ AFfARyUfm/GMJmiq80McoDoOl7EQCOzvl1NI9ZRf2ocmX45NLqfO3Xq1oE2I6waP VK9xn6dr4cfM+5vqcfiePF/drgL+qb78JspQAVMOqddu1kRhX7pcEpCCHO645JEn 6mb40SU7h4+HqQMIPfCnd/fZAxmLt5AQrPDtNfSwO1lPXNhw/VLisr4FES6hpkxH A+Q08sCCw95B5q9x5TZp3F9PtLdonTLePciPI9OTdsXvmR/6dhFMfouY6hALW7jc JdrSmums5lrEsKfvZ7EGp0F7/j5qWs5/5jw9F6SND4YVrDbBX+JvQpa/TxE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2buvQDuWBNUwDWoK7hnZ88xfyUwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfuVvfmzlRrXCocTDNFqUYW6tJh409FZB2A opsJizg7qFRorQ5sc46P+06fY8yrXAjX59DZasePi/iv+TEAuqsbgzG2VVpTFF9A kfIY/7qL2CUwkHR7i0ESzjU2Yzo94ntPND6mpp8PjiTpGNiZkJkxeyTS6gwY7UOf 8ryK01kZkl/zIr5f6ulXfawq1/FTYtvUoh58FXPU8aM/JCeVp3qTsUkXOCclMNBD niCuI7xnptv3hHx5m/Hi9As8tR+UCernXFv9AEOEmPJeOgLDkFbgGgdZRv4wdQJM e1B9rnolp4z9w77WU7Gk39YCKGHcnGcD8o9oyVMeOuTBcYf44sw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:28 2025 by rpki-client