$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: KH5SQWygY5vS/vUaaGVPHbStFClc8CIPEp4t/d6jeu4= Subject key identifier: 04:C6:AB:9E:C2:91:B6:4D:3E:58:EB:14:3E:4E:AC:DC:7E:64:F7:77 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 3ED3DC02D6EB0191051433CC69993F1A40F27B9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 0254 Signing time: Tue 04 Nov 2025 11:22:21 +0000 Manifest this update: Tue 04 Nov 2025 11:17:21 +0000 Manifest next update: Fri 07 Nov 2025 16:52:21 +0000 Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: CkMPGnD2G3Z4fWOB9rg1pZIYTK6x2d1yaZ8h5VHNsE8=) 2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d3:dc:02:d6:eb:01:91:05:14:33:cc:69:99:3f:1a:40:f2:7b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Nov 4 11:17:21 2025 GMT Not After : Nov 7 16:52:21 2025 GMT Subject: CN=04C6AB9EC291B64D3E58EB143E4EACDC7E64F777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:86:2b:8b:da:1c:3e:c7:0a:63:f7:53:56: 29:bf:94:9c:78:29:65:d9:64:8e:c1:87:da:b7:f1: fa:c6:1e:30:93:2a:0a:b0:cd:aa:70:1c:98:80:55: fd:d3:74:8e:b4:04:60:e6:51:73:dd:9b:df:59:42: df:21:5d:6b:7f:f0:24:92:1a:fb:da:e6:29:76:80: fb:49:1f:e2:9b:db:b8:ee:87:8c:ca:f5:6a:00:3b: c8:32:3e:4d:94:3f:f5:14:0f:60:ed:66:41:ab:75: f8:1a:af:30:45:fa:b8:ef:eb:02:45:88:6d:e0:99: 72:91:fe:5a:bf:db:a7:c9:40:28:6b:cc:b3:8d:4d: 13:46:cb:4d:bd:8b:0f:25:f0:5f:fd:02:6b:19:ff: 11:77:80:a3:f0:f0:d1:d9:0d:96:c8:9f:9b:23:3d: f1:1b:78:aa:37:00:3d:79:5a:de:40:d4:6e:75:eb: 75:d1:d6:da:e9:b0:3b:a3:8c:05:fc:00:db:68:0b: d0:6a:d4:47:35:3f:ee:82:ee:3a:25:37:8c:03:13: dd:05:2c:50:00:85:3a:a2:4e:39:d4:48:95:9d:5b: 0f:f5:72:3e:ba:4e:d7:48:30:80:0d:58:cb:8b:ee: f6:4b:bf:78:b5:0c:35:10:46:39:f6:ce:06:e2:3d: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C6:AB:9E:C2:91:B6:4D:3E:58:EB:14:3E:4E:AC:DC:7E:64:F7:77 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:43:40:76:39:d1:61:ad:66:f6:1b:18:3e:ac:20:52:20:a5: c1:07:6c:35:3e:46:8d:9b:05:44:38:5f:bf:ff:ba:d0:4f:18: 79:87:c6:6d:e1:fc:ed:96:45:fc:0d:5c:bb:90:3b:90:ed:55: 01:5c:d0:4e:ce:f6:13:09:65:50:ba:5f:57:19:29:e6:a1:d7: e0:6a:0e:3a:81:b3:6c:a2:3c:3e:10:70:9f:d4:54:e5:e9:99: fe:d3:77:1c:b6:24:b2:fe:ff:85:29:10:32:a5:70:a0:1d:c7: a2:2c:b6:f7:e0:8e:45:b5:96:8b:66:28:10:0e:c9:3e:c5:9f: b4:bd:22:12:87:05:81:89:a3:7b:9c:ff:98:85:8b:e5:fc:34: db:3d:ff:3d:ea:f1:f0:6b:f3:1f:64:15:88:04:78:a1:72:60: 7c:b3:0d:20:8e:a8:4f:e7:41:57:0b:ae:19:79:70:c7:e0:05: b2:bd:d7:e1:cf:6a:33:2b:4c:71:97:08:a0:a1:49:8c:26:5c: 1b:9f:35:15:84:64:60:70:b2:77:49:7a:e0:82:1f:60:73:60: 4b:63:6c:74:4a:19:0b:ff:a4:ff:83:46:7c:18:d3:83:12:f4: 19:33:00:26:7a:9d:52:98:12:39:ce:90:a6:21:58:5b:46:a3: 0c:da:fe:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtPcAtbrAZEFFDPMaZk/GkDye5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTExMDQxMTE3MjFaFw0yNTExMDcxNjUyMjFaMDMxMTAvBgNV BAMTKDA0QzZBQjlFQzI5MUI2NEQzRTU4RUIxNDNFNEVBQ0RDN0U2NEY3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavoYri9ocPscKY/dTVim/lJx4 KWXZZI7Bh9q38frGHjCTKgqwzapwHJiAVf3TdI60BGDmUXPdm99ZQt8hXWt/8CSS Gvva5il2gPtJH+Kb27juh4zK9WoAO8gyPk2UP/UUD2DtZkGrdfgarzBF+rjv6wJF iG3gmXKR/lq/26fJQChrzLONTRNGy029iw8l8F/9AmsZ/xF3gKPw8NHZDZbIn5sj PfEbeKo3AD15Wt5A1G5163XR1trpsDujjAX8ANtoC9Bq1Ec1P+6C7jolN4wDE90F LFAAhTqiTjnUSJWdWw/1cj66TtdIMIANWMuL7vZLv3i1DDUQRjn2zgbiPesvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMarnsKRtk0+WOsUPk6s3H5k93cwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRDQHY50WGtZvYbGD6sIFIgpcEHbDU+Ro2b BUQ4X7//utBPGHmHxm3h/O2WRfwNXLuQO5DtVQFc0E7O9hMJZVC6X1cZKeah1+Bq DjqBs2yiPD4QcJ/UVOXpmf7Tdxy2JLL+/4UpEDKlcKAdx6IstvfgjkW1lotmKBAO yT7Fn7S9IhKHBYGJo3uc/5iFi+X8NNs9/z3q8fBr8x9kFYgEeKFyYHyzDSCOqE/n QVcLrhl5cMfgBbK91+HPajMrTHGXCKChSYwmXBufNRWEZGBwsndJeuCCH2BzYEtj bHRKGQv/pP+DRnwY04MS9BkzACZ6nVKYEjnOkKYhWFtGowza/j0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:01 2025 by rpki-client