$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: x91Ntgq9fWM6MuFBSbIrimhMGXoqZ1xPTwTXT7gRseo= Subject key identifier: 00:56:1B:74:77:FD:C2:F2:47:64:B1:D7:6F:1C:D1:94:02:02:6F:E1 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 011DFED049F4CD6E88052E8688C88B689EB8A54F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: D4 Signing time: Tue 04 Nov 2025 04:12:10 +0000 Manifest this update: Tue 04 Nov 2025 04:07:10 +0000 Manifest next update: Fri 07 Nov 2025 07:45:10 +0000 Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) 2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 30arRRFb5FASB+u9IfpyYWb2oACUQHBGtt8IqcXKbLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1d:fe:d0:49:f4:cd:6e:88:05:2e:86:88:c8:8b:68:9e:b8:a5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Nov 4 04:07:10 2025 GMT Not After : Nov 7 07:45:10 2025 GMT Subject: CN=00561B7477FDC2F24764B1D76F1CD19402026FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:cc:23:1f:60:b1:8c:9f:34:a0:7f:39:e8: 04:26:39:d4:5c:22:9e:d0:d5:86:9b:06:0e:5c:2d: 2e:c4:9b:eb:f6:41:5b:b9:57:70:29:70:cf:be:4c: da:7d:fc:24:ae:7a:f7:27:94:87:ef:00:c2:60:20: 56:8b:f9:ac:bd:eb:c8:88:c9:0e:b4:2e:db:f3:53: 58:89:30:49:57:6d:8c:61:0e:e2:d6:7f:4e:c7:99: b8:e3:c5:ea:36:ac:c7:f4:5a:da:f4:d9:ce:95:f9: 43:05:1c:9f:f1:12:0a:5b:02:b4:31:d7:4d:11:a9: 67:fa:07:b4:c7:a2:f8:89:32:d4:c2:f9:c9:08:a2: 4d:f5:de:7d:a9:62:3c:78:1e:1e:1b:c2:11:6c:d0: b2:60:7f:fb:22:5d:5e:7a:8c:c0:ca:83:e9:30:7a: 80:19:a7:fb:2b:4b:74:ab:98:c3:f4:b8:56:2a:88: 81:11:b6:cd:fe:c8:f7:e8:1e:3e:31:b0:a6:84:30: 99:66:64:19:44:f9:15:b2:39:5c:66:7d:74:bd:ef: a9:68:71:e9:0c:06:57:f6:b7:f3:97:9f:ab:f4:84: ae:11:ed:94:ae:cb:c6:65:7a:0d:33:f0:cc:5e:d0: 24:0f:ce:e6:9d:f1:e2:eb:73:36:38:18:3b:07:6e: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:1B:74:77:FD:C2:F2:47:64:B1:D7:6F:1C:D1:94:02:02:6F:E1 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:81:29:21:e5:fe:df:a6:3d:5e:67:bc:aa:bb:d5:4f:68:ca: d7:82:98:95:23:af:51:83:be:7c:a7:27:4f:a2:e4:29:81:e6: a0:d5:01:f0:d9:8b:02:ca:d4:2d:47:02:9a:da:ca:10:2b:a9: 3f:7b:de:8f:67:67:4f:d2:ad:a5:d2:31:2a:ad:c2:bb:0d:df: a7:70:f0:f5:df:9b:45:88:c8:38:50:b4:ca:f2:d9:48:cd:a5: aa:02:4b:be:fa:73:f7:75:6d:65:56:e2:bd:cd:33:76:65:fc: 45:4b:d7:a4:ac:01:b7:bd:b0:be:b4:b6:77:ad:53:e2:7b:5f: 37:9e:89:5d:63:5f:3f:35:34:dc:01:30:11:de:7d:dc:4a:ef: cc:2f:03:36:a9:fb:2f:8d:71:bc:23:b9:11:69:63:8e:31:a1: ce:e9:41:ad:69:02:94:61:98:0c:00:13:d4:6d:3c:e2:3f:b4: 30:43:08:c7:a9:8b:4b:31:9b:df:5d:c4:11:16:4d:ca:cd:af: 12:48:61:05:d7:ad:e3:12:82:8d:e4:67:1f:1e:fa:f9:f6:2a: 10:1e:1f:9f:c4:fa:ad:ac:d0:5e:c9:2e:af:90:e5:85:bb:99: 63:3d:11:2a:e6:a5:48:7a:28:59:50:f6:28:fd:af:9c:e9:95: 70:6f:00:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAR3+0En0zW6IBS6GiMiLaJ64pU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTExMDQwNDA3MTBaFw0yNTExMDcwNzQ1MTBaMDMxMTAvBgNV BAMTKDAwNTYxQjc0NzdGREMyRjI0NzY0QjFENzZGMUNEMTk0MDIwMjZGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPswjH2CxjJ80oH856AQmOdRc Ip7Q1YabBg5cLS7Em+v2QVu5V3ApcM++TNp9/CSuevcnlIfvAMJgIFaL+ay968iI yQ60LtvzU1iJMElXbYxhDuLWf07Hmbjjxeo2rMf0Wtr02c6V+UMFHJ/xEgpbArQx 100RqWf6B7THoviJMtTC+ckIok313n2pYjx4Hh4bwhFs0LJgf/siXV56jMDKg+kw eoAZp/srS3SrmMP0uFYqiIERts3+yPfoHj4xsKaEMJlmZBlE+RWyOVxmfXS976lo cekMBlf2t/OXn6v0hK4R7ZSuy8Zleg0z8Mxe0CQPzuad8eLrczY4GDsHbuBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAFYbdHf9wvJHZLHXbxzRlAICb+EwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANeBKSHl/t+mPV5nvKq71U9oyteCmJUjr1GD vnynJ0+i5CmB5qDVAfDZiwLK1C1HAprayhArqT973o9nZ0/SraXSMSqtwrsN36dw 8PXfm0WIyDhQtMry2UjNpaoCS776c/d1bWVW4r3NM3Zl/EVL16SsAbe9sL60tnet U+J7XzeeiV1jXz81NNwBMBHefdxK78wvAzap+y+NcbwjuRFpY44xoc7pQa1pApRh mAwAE9RtPOI/tDBDCMepi0sxm99dxBEWTcrNrxJIYQXXreMSgo3kZx8e+vn2KhAe H5/E+q2s0F7JLq+Q5YW7mWM9ESrmpUh6KFlQ9ij9r5zplXBvAJI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:04 2025 by rpki-client