$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: NZ8qJSgE2S9b5MqFmzRHPf0sSc2IQsAEmG1qqxCtqGA= Subject key identifier: 64:B8:12:0D:E7:53:09:E2:C5:35:23:7D:7B:C0:86:7B:15:85:9C:01 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 03417A88E1F132B84B4765E0ACD5C605BAEB7588 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0388 Signing time: Tue 04 Nov 2025 15:11:42 +0000 Manifest this update: Tue 04 Nov 2025 15:06:42 +0000 Manifest next update: Fri 07 Nov 2025 23:47:42 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: hLJrXRYR+NtxSMmDtmfnFLNeL2VRxUGhjC4fXG3E0vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:41:7a:88:e1:f1:32:b8:4b:47:65:e0:ac:d5:c6:05:ba:eb:75:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Nov 4 15:06:42 2025 GMT Not After : Nov 7 23:47:42 2025 GMT Subject: CN=64B8120DE75309E2C535237D7BC0867B15859C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:15:f9:2e:5e:b7:b2:a5:62:c1:98:18:d7: e9:da:e3:79:c7:67:6f:a0:b8:e9:09:eb:67:b0:77: 4c:d2:75:98:dd:26:89:de:38:31:2f:dc:81:1c:3d: 08:95:9d:6d:78:1f:ea:bc:ca:c4:9b:1c:50:cf:b7: 2a:6f:28:5c:df:2e:d1:33:88:3f:2f:16:63:c6:ac: f9:9b:62:51:65:6f:8f:df:83:11:90:b4:30:00:78: 15:4e:94:96:08:32:26:6e:1a:24:c2:c2:c5:7e:ed: 8e:c1:05:34:c0:3f:87:df:8a:ea:a8:c3:6e:63:c1: 7e:24:6e:b3:75:c6:09:15:70:ec:06:a4:44:68:95: 52:59:3a:c3:20:e9:9a:5a:5c:a7:96:0d:3d:b8:27: 70:c6:32:f6:11:de:db:a1:12:cd:84:bc:0d:09:a6: a1:9e:42:c2:2f:5d:e0:58:0e:52:b0:09:dd:75:5b: a4:e2:48:e8:b8:ff:4f:5e:83:88:89:18:d9:1b:b5: c2:34:df:97:c4:da:72:2f:30:ce:ba:25:43:a2:47: ad:29:4e:81:e6:7d:08:2b:3f:1f:05:a6:b0:f4:2d: cc:11:77:02:44:54:ba:6b:69:a9:56:82:4a:51:a2: 05:f2:4d:d5:04:bf:74:b8:1c:fb:13:fe:97:da:a6: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:12:0D:E7:53:09:E2:C5:35:23:7D:7B:C0:86:7B:15:85:9C:01 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:e7:10:ba:23:fe:29:8e:bb:5a:02:eb:41:74:a2:cc:d2: 1f:b4:82:f0:53:51:c3:11:30:80:39:5d:8e:a0:61:39:21:69: 87:b5:fa:76:7f:c9:57:c4:70:3d:70:7d:4c:e1:58:73:7c:67: 26:7e:a8:ba:ee:79:c4:be:d0:ff:4e:f1:a3:69:f5:ba:be:75: 24:52:76:5d:0f:00:77:25:16:36:90:50:91:41:95:05:78:de: 2a:cb:93:73:87:a6:e7:97:3a:df:0e:fd:b2:b3:65:cf:40:a9: 8a:1b:d9:4c:30:5c:04:30:e5:e2:c6:6b:7f:e9:6a:e6:48:ac: ae:a1:b9:bc:1c:8b:94:b8:ce:65:65:66:fa:93:22:e5:27:df: ca:7e:82:27:7b:4a:63:02:c4:0d:ed:d8:37:16:92:01:4e:fd: 42:3d:d1:ef:b0:0b:32:a6:a2:07:93:18:55:ce:ac:9e:3c:b4: dc:09:15:b5:89:bd:c5:66:63:c7:50:bf:fb:6c:29:45:ca:97: 27:4f:90:04:16:36:64:8b:ae:77:ea:96:03:9b:6e:cd:d8:16: 40:66:66:2b:96:ed:d1:08:27:a7:bd:18:e6:4e:a1:93:ff:03: fe:7e:5f:ea:ba:d0:4b:61:2f:03:e2:d9:ea:df:13:3e:5b:2e: b8:d8:54:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0F6iOHxMrhLR2XgrNXGBbrrdYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTExMDQxNTA2NDJaFw0yNTExMDcyMzQ3NDJaMDMxMTAvBgNV BAMTKDY0QjgxMjBERTc1MzA5RTJDNTM1MjM3RDdCQzA4NjdCMTU4NTlDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiRX5Ll63sqViwZgY1+na43nH Z2+guOkJ62ewd0zSdZjdJoneODEv3IEcPQiVnW14H+q8ysSbHFDPtypvKFzfLtEz iD8vFmPGrPmbYlFlb4/fgxGQtDAAeBVOlJYIMiZuGiTCwsV+7Y7BBTTAP4ffiuqo w25jwX4kbrN1xgkVcOwGpERolVJZOsMg6ZpaXKeWDT24J3DGMvYR3tuhEs2EvA0J pqGeQsIvXeBYDlKwCd11W6TiSOi4/09eg4iJGNkbtcI035fE2nIvMM66JUOiR60p ToHmfQgrPx8FprD0LcwRdwJEVLpraalWgkpRogXyTdUEv3S4HPsT/pfapjMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLgSDedTCeLFNSN9e8CGexWFnAEwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKD5xC6I/4pjrtaAutBdKLM0h+0gvBTUcMR MIA5XY6gYTkhaYe1+nZ/yVfEcD1wfUzhWHN8ZyZ+qLruecS+0P9O8aNp9bq+dSRS dl0PAHclFjaQUJFBlQV43irLk3OHpueXOt8O/bKzZc9AqYob2UwwXAQw5eLGa3/p auZIrK6hubwci5S4zmVlZvqTIuUn38p+gid7SmMCxA3t2DcWkgFO/UI90e+wCzKm ogeTGFXOrJ48tNwJFbWJvcVmY8dQv/tsKUXKlydPkAQWNmSLrnfqlgObbs3YFkBm ZiuW7dEIJ6e9GOZOoZP/A/5+X+q60EthLwPi2erfEz5bLrjYVDU= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:26 2025 by rpki-client