$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: zDBh4iuVowXc2VekK7Y55ctuLlx2RDyv1LgdvYomD3I= Subject key identifier: EA:9D:5C:9E:2A:8E:6F:17:8A:A2:5B:B5:5C:BE:F2:D2:C4:8E:B2:56 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 74F55CA2A830008FE6F9A008C439FE3784AC29A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0261 Signing time: Tue 04 Nov 2025 01:50:40 +0000 Manifest this update: Tue 04 Nov 2025 01:45:40 +0000 Manifest next update: Fri 07 Nov 2025 02:49:40 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) 3: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: IJ1+Z1H9XSmib16DQU/frpnKKkz4r4B1JLwZKjqCKfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f5:5c:a2:a8:30:00:8f:e6:f9:a0:08:c4:39:fe:37:84:ac:29:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Nov 4 01:45:40 2025 GMT Not After : Nov 7 02:49:40 2025 GMT Subject: CN=EA9D5C9E2A8E6F178AA25BB55CBEF2D2C48EB256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:1a:d8:8d:1a:05:c4:08:5c:83:14:6f:66: 95:c3:d0:d0:1b:37:58:dd:60:5f:63:a7:f5:9f:b1: 44:ec:49:9f:dc:97:5b:a6:f6:7b:82:ed:1a:58:65: c7:c5:88:27:bf:65:76:66:8b:fa:a9:9e:cf:7c:f7: c2:9d:e7:e8:18:67:d8:40:b8:96:d8:ab:a8:f8:88: d8:da:65:dd:79:4b:e3:fa:5c:92:a8:00:9f:c9:6c: 02:08:98:26:6e:11:8b:2a:f4:59:85:5e:41:84:98: cc:5c:48:ae:ec:90:cb:6a:b5:fc:44:18:2c:9d:f4: 23:87:79:f1:c6:61:6a:e3:12:b2:54:bb:35:98:00: 75:b9:c7:ee:27:d7:f4:fb:9b:39:80:f4:bb:02:c9: 37:79:d4:3e:c6:b0:3a:7d:ca:18:e6:d4:97:f6:b6: ff:90:e3:82:f5:c8:f8:63:8b:7f:4a:d2:7c:2d:d3: 42:86:87:51:9f:c1:fe:c0:db:a3:a2:84:4f:4f:d5: 8b:cb:08:50:ae:fe:cd:c7:a1:dd:8a:d7:59:ce:eb: f4:57:f9:e9:ff:ed:92:66:42:59:91:ce:0a:13:78: c8:31:38:d3:42:ea:dd:08:36:88:3e:21:af:00:e4: 64:8d:46:5a:71:3d:73:6b:39:d8:f3:d6:ac:81:70: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:5C:9E:2A:8E:6F:17:8A:A2:5B:B5:5C:BE:F2:D2:C4:8E:B2:56 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:af:d8:2b:46:38:b7:55:73:c2:a9:43:94:fb:75:20:39:7a: 82:d1:9a:1c:87:66:76:a7:3e:ed:32:6c:15:ed:38:89:5a:4c: f5:2d:7f:58:b8:2d:94:a2:ba:9d:2d:e1:84:86:02:ad:95:78: 78:cd:0c:f7:26:82:5b:77:3e:3d:4e:90:8e:e5:46:29:3b:82: 4f:a5:5b:e5:ae:2b:03:62:c6:71:d4:1d:ee:78:aa:29:e2:0b: 24:b3:19:ba:70:ff:cf:81:89:27:90:c7:54:26:23:aa:ef:c9: 91:b3:e8:fe:40:e1:b6:2e:28:07:26:cd:42:55:75:d2:b6:86: cd:ee:ae:8f:db:31:75:fe:3d:16:b8:8f:db:cf:30:13:ca:aa: 00:9b:bd:10:d7:6f:ec:90:63:0a:c0:48:1e:71:89:10:ac:12: db:a2:e0:ee:87:47:82:93:7a:bd:b4:0a:fa:c6:03:48:09:5a: b8:10:7a:b0:f9:8a:49:c6:9d:71:a3:7e:4a:d3:77:27:c3:cc: d8:47:d6:9c:bd:8e:6e:32:57:a8:12:3f:db:bf:0a:92:7b:28: 45:19:54:dd:6c:b4:da:4c:20:e0:99:f1:9e:ce:fc:1c:6e:df: 74:c3:77:8f:12:2c:2b:4d:b5:b0:ce:bd:69:d5:a6:6c:4c:90: 08:5b:18:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPVcoqgwAI/m+aAIxDn+N4SsKaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTExMDQwMTQ1NDBaFw0yNTExMDcwMjQ5NDBaMDMxMTAvBgNV BAMTKEVBOUQ1QzlFMkE4RTZGMTc4QUEyNUJCNTVDQkVGMkQyQzQ4RUIyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KBrYjRoFxAhcgxRvZpXD0NAb N1jdYF9jp/WfsUTsSZ/cl1um9nuC7RpYZcfFiCe/ZXZmi/qpns9898Kd5+gYZ9hA uJbYq6j4iNjaZd15S+P6XJKoAJ/JbAIImCZuEYsq9FmFXkGEmMxcSK7skMtqtfxE GCyd9COHefHGYWrjErJUuzWYAHW5x+4n1/T7mzmA9LsCyTd51D7GsDp9yhjm1Jf2 tv+Q44L1yPhji39K0nwt00KGh1Gfwf7A26OihE9P1YvLCFCu/s3Hod2K11nO6/RX +en/7ZJmQlmRzgoTeMgxONNC6t0INog+Ia8A5GSNRlpxPXNrOdjz1qyBcNOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6p1cniqObxeKolu1XL7y0sSOslYwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGv2CtGOLdVc8KpQ5T7dSA5eoLRmhyHZnan Pu0ybBXtOIlaTPUtf1i4LZSiup0t4YSGAq2VeHjNDPcmglt3Pj1OkI7lRik7gk+l W+WuKwNixnHUHe54qiniCySzGbpw/8+BiSeQx1QmI6rvyZGz6P5A4bYuKAcmzUJV ddK2hs3uro/bMXX+PRa4j9vPMBPKqgCbvRDXb+yQYwrASB5xiRCsEtui4O6HR4KT er20CvrGA0gJWrgQerD5iknGnXGjfkrTdyfDzNhH1py9jm4yV6gSP9u/CpJ7KEUZ VN1stNpMIOCZ8Z7O/Bxu33TDd48SLCtNtbDOvWnVpmxMkAhbGEU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:55 2025 by rpki-client