$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: fmzoCWbFckRFG/so9k0asG3mIb7+zgrNsL/mJOb6oQc= Subject key identifier: 9E:00:0C:77:5C:95:85:19:4D:07:79:96:CF:BB:81:94:85:5D:E2:52 Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 305840CCFC793FA0AD2298011164BA5973532559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 89 Signing time: Sun 02 Nov 2025 18:50:49 +0000 Manifest this update: Sun 02 Nov 2025 18:45:49 +0000 Manifest next update: Wed 05 Nov 2025 21:14:49 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: e1EZvqfLxTSs+Nd6+wP3phaOvp6dX/qWZugTdiSN5NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:58:40:cc:fc:79:3f:a0:ad:22:98:01:11:64:ba:59:73:53:25:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Nov 2 18:45:49 2025 GMT Not After : Nov 5 21:14:49 2025 GMT Subject: CN=9E000C775C9585194D077996CFBB8194855DE252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:6c:4c:27:80:a1:89:4b:93:67:09:b2:74: 56:c9:99:6d:a2:36:d9:be:a7:74:85:54:4c:d2:55: e2:c2:42:af:75:37:f0:06:21:bc:e3:05:bb:50:74: 80:4c:b3:ad:2e:fe:2a:a5:75:f4:72:c5:36:ec:a1: 9f:b2:d0:c8:4e:5e:ba:c6:29:b7:53:63:8a:6d:19: 7a:51:29:ed:26:13:62:c1:6e:c3:cf:36:21:2f:c5: 7d:54:66:32:17:4d:f4:9b:04:b1:53:85:ee:97:f2: db:30:0c:74:eb:89:99:00:2d:8c:12:1d:42:1d:55: 73:6b:6b:fb:46:a2:95:41:77:12:6a:47:ca:f1:5e: 7f:1a:26:27:ef:9c:a8:ab:97:57:0f:4e:b7:fa:27: d2:31:a2:5a:f2:b0:ab:4e:a6:7c:c9:43:1b:4f:17: d1:9c:6a:cc:96:a0:9e:96:ca:f7:8e:9c:f3:2a:73: 2b:be:f8:28:ef:6c:ca:48:75:fb:b0:35:8e:5b:ff: 31:be:26:6d:56:a2:12:45:2f:cd:aa:8d:8e:51:8f: 7f:10:62:58:22:f5:c3:6c:2a:4f:14:0f:e2:fa:42: 09:1b:40:46:c3:ae:aa:a0:94:a2:d9:24:14:5c:c5: af:ec:ff:44:30:3f:01:3a:0d:d2:d0:d0:c8:3d:45: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:00:0C:77:5C:95:85:19:4D:07:79:96:CF:BB:81:94:85:5D:E2:52 X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:69:35:c2:5c:bd:2f:ca:50:5e:96:88:6c:94:20:0a:78:2b: cf:e0:ba:08:93:ba:ef:5a:97:4b:26:cf:6d:4e:48:80:94:31: 0e:a1:06:aa:81:55:b0:ab:d5:ac:8e:9d:4c:fc:3e:44:84:de: 93:be:3d:bd:44:54:a1:49:d9:b9:45:fa:3c:b3:49:c5:e6:dc: fa:61:3a:cc:47:b6:f6:e4:2e:af:bb:9e:1b:fd:fc:0b:8f:31: 97:e6:27:ad:3b:24:7d:ed:cb:36:ca:6e:bf:b0:38:dc:46:82: 89:25:48:a3:8f:48:f0:6d:95:29:05:15:e0:ea:b5:7e:b4:ff: 07:42:83:e1:9c:d7:96:c4:b9:51:e7:7d:d5:42:84:e7:10:53: 67:47:21:c5:b8:95:3f:9c:d7:04:9c:23:70:ef:cd:c7:9e:fd: e4:2f:d0:11:43:df:1b:83:43:52:a9:75:b6:34:2c:fe:83:11: 75:12:3e:45:9e:f7:3f:99:f0:48:14:21:05:1d:c9:c0:af:07: b8:60:2f:35:58:92:54:74:79:a4:10:1d:99:57:9d:96:f2:c5: 15:6b:98:c0:0a:06:ff:dd:ac:1b:a7:f8:ca:2f:1d:cb:dd:ad: 9f:57:52:a3:ae:13:74:8c:f7:c7:39:ac:0a:f4:15:ad:42:96: a0:33:f5:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFhAzPx5P6CtIpgBEWS6WXNTJVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTExMDIxODQ1NDlaFw0yNTExMDUyMTE0NDlaMDMxMTAvBgNV BAMTKDlFMDAwQzc3NUM5NTg1MTk0RDA3Nzk5NkNGQkI4MTk0ODU1REUyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2j2xMJ4ChiUuTZwmydFbJmW2i Ntm+p3SFVEzSVeLCQq91N/AGIbzjBbtQdIBMs60u/iqldfRyxTbsoZ+y0MhOXrrG KbdTY4ptGXpRKe0mE2LBbsPPNiEvxX1UZjIXTfSbBLFThe6X8tswDHTriZkALYwS HUIdVXNra/tGopVBdxJqR8rxXn8aJifvnKirl1cPTrf6J9IxolrysKtOpnzJQxtP F9GcasyWoJ6WyveOnPMqcyu++CjvbMpIdfuwNY5b/zG+Jm1WohJFL82qjY5Rj38Q Ylgi9cNsKk8UD+L6QgkbQEbDrqqglKLZJBRcxa/s/0QwPwE6DdLQ0Mg9RZfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngAMd1yVhRlNB3mWz7uBlIVd4lIwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHppNcJcvS/KUF6WiGyUIAp4K8/gugiTuu9a l0smz21OSICUMQ6hBqqBVbCr1ayOnUz8PkSE3pO+Pb1EVKFJ2blF+jyzScXm3Pph OsxHtvbkLq+7nhv9/AuPMZfmJ607JH3tyzbKbr+wONxGgoklSKOPSPBtlSkFFeDq tX60/wdCg+Gc15bEuVHnfdVChOcQU2dHIcW4lT+c1wScI3Dvzcee/eQv0BFD3xuD Q1KpdbY0LP6DEXUSPkWe9z+Z8EgUIQUdycCvB7hgLzVYklR0eaQQHZlXnZbyxRVr mMAKBv/drBun+MovHcvdrZ9XUqOuE3SM98c5rAr0Fa1ClqAz9co= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:34 2025 by rpki-client