$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: XLr6L9c/WMFcvCtop0Fk6YXcfzIvWcECXapwrRxAwzQ= Subject key identifier: 86:82:C7:7C:06:5F:64:CD:E5:30:1E:86:DE:B6:1E:DF:94:99:44:54 Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 42663DD9AC8C51D68614D641CBB6BB05792BC738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01B3 Signing time: Mon 03 Nov 2025 18:42:23 +0000 Manifest this update: Mon 03 Nov 2025 18:37:23 +0000 Manifest next update: Thu 06 Nov 2025 23:05:23 +0000 Files and hashes: 1: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: oCYX+kuBAXgQevsaKyMYKU8QKQnM///J30mPjbeDios=) 2: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: ZhCBetiRM0oV1qkwFwKfVyjWnDYRVpaxO6Ref6QtN4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:66:3d:d9:ac:8c:51:d6:86:14:d6:41:cb:b6:bb:05:79:2b:c7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Nov 3 18:37:23 2025 GMT Not After : Nov 6 23:05:23 2025 GMT Subject: CN=8682C77C065F64CDE5301E86DEB61EDF94994454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:b9:5e:9c:d7:52:87:03:c0:3d:c5:5b:2d: 09:0b:68:1b:f9:a7:72:1d:a3:8a:a7:a2:11:1d:2d: 18:3f:61:6b:01:a7:b6:35:1e:2e:1d:91:e3:3f:e4: 0d:74:aa:70:ec:c8:8a:c2:44:91:b0:38:c0:34:28: a3:c8:9d:3e:1f:75:bd:15:7c:45:1d:46:ac:67:31: 44:75:65:26:e9:3d:c3:69:82:0c:a2:f4:c0:20:99: ab:2f:d1:16:f5:f0:b2:e7:50:20:5c:9e:5e:69:65: 93:89:90:9c:8a:7a:8b:2d:bd:8b:1a:e6:ff:34:15: 42:03:fa:9b:df:af:8a:df:7d:d9:f4:bc:90:ce:bb: a4:bc:1c:15:4c:77:9f:26:57:6a:57:8a:e9:89:95: 94:80:0c:a2:e1:e7:07:de:e2:bd:1d:2e:bd:19:df: f6:8b:3d:c1:eb:63:70:2c:f6:86:3c:df:7e:58:2a: f9:de:23:42:42:5b:bc:0c:da:55:ac:09:dc:cf:cd: b3:c8:29:5f:15:b6:f3:8e:45:ab:a6:3d:b9:68:43: 6a:78:8c:87:b0:91:06:a2:af:2c:b9:91:7d:18:2c: 25:87:42:bd:92:c5:aa:73:02:51:40:ae:a0:ab:bd: 2d:aa:eb:1c:f8:e5:67:b7:45:52:ff:fa:46:cd:78: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:82:C7:7C:06:5F:64:CD:E5:30:1E:86:DE:B6:1E:DF:94:99:44:54 X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:aa:b6:84:43:48:65:77:49:7a:27:1b:2b:31:1f:d0:64:f4: c5:19:42:65:43:92:e4:ea:75:65:be:65:d0:1a:97:dc:05:02: ac:19:a6:1f:fb:43:b9:97:d1:f7:ff:70:a4:e5:44:0f:4e:6c: 02:b0:0a:e9:10:71:52:4f:56:62:de:a4:a8:a9:a6:95:a4:21: f5:b4:79:73:d9:e2:79:4e:b5:2a:42:d5:76:82:67:4d:4f:f0: 43:c5:e5:11:9c:67:d8:a2:3d:67:e6:11:94:7e:ed:ec:a0:32: c8:41:e8:b5:d7:b7:c3:a3:9d:88:12:40:3a:b1:0a:40:d0:fc: b2:90:67:4b:bd:a6:4a:d2:08:d9:b0:6d:ac:c4:36:b2:58:e5: 8e:3c:39:e1:9b:c2:31:d6:c1:80:0d:8a:6f:7c:02:a9:6b:3d: 58:f9:6e:bd:3d:22:e7:7e:20:b9:22:cb:1f:49:c3:06:fa:4e: 04:c4:28:04:6c:31:8a:ee:9e:0d:0f:fa:26:60:0c:cd:f9:03: 8f:e0:05:1d:e4:2a:7d:d4:0e:45:91:11:34:2b:91:57:4c:aa: f1:8d:f8:17:6f:32:09:47:f0:5f:46:f5:8d:e3:9b:68:88:2f: b1:df:a9:18:6a:24:13:8f:4d:38:ad:1d:8e:76:6c:9f:f6:30: 84:da:9c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmY92ayMUdaGFNZBy7a7BXkrxzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTExMDMxODM3MjNaFw0yNTExMDYyMzA1MjNaMDMxMTAvBgNV BAMTKDg2ODJDNzdDMDY1RjY0Q0RFNTMwMUU4NkRFQjYxRURGOTQ5OTQ0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cLlenNdShwPAPcVbLQkLaBv5 p3Ido4qnohEdLRg/YWsBp7Y1Hi4dkeM/5A10qnDsyIrCRJGwOMA0KKPInT4fdb0V fEUdRqxnMUR1ZSbpPcNpggyi9MAgmasv0Rb18LLnUCBcnl5pZZOJkJyKeostvYsa 5v80FUID+pvfr4rffdn0vJDOu6S8HBVMd58mV2pXiumJlZSADKLh5wfe4r0dLr0Z 3/aLPcHrY3As9oY8335YKvneI0JCW7wM2lWsCdzPzbPIKV8VtvOORaumPbloQ2p4 jIewkQairyy5kX0YLCWHQr2SxapzAlFArqCrvS2q6xz45We3RVL/+kbNeC4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhoLHfAZfZM3lMB6G3rYe35SZRFQwHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKqtoRDSGV3SXonGysxH9Bk9MUZQmVDkuTq dWW+ZdAal9wFAqwZph/7Q7mX0ff/cKTlRA9ObAKwCukQcVJPVmLepKipppWkIfW0 eXPZ4nlOtSpC1XaCZ01P8EPF5RGcZ9iiPWfmEZR+7eygMshB6LXXt8OjnYgSQDqx CkDQ/LKQZ0u9pkrSCNmwbazENrJY5Y48OeGbwjHWwYANim98AqlrPVj5br09Iud+ ILkiyx9Jwwb6TgTEKARsMYrung0P+iZgDM35A4/gBR3kKn3UDkWRETQrkVdMqvGN +BdvMglH8F9G9Y3jm2iIL7HfqRhqJBOPTTitHY52bJ/2MITanPQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:32 2025 by rpki-client