$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: ++ZLvq0V/2De17F+HXobbeCKuW1jMCvIgAagNcYEU0I= Subject key identifier: 3D:8B:4D:C7:3B:A1:8A:23:F4:47:CB:BE:50:87:BA:39:7D:8A:C5:B6 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 24AABFCB61002090224E07D732DBD58180846EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02E3 Signing time: Mon 03 Nov 2025 07:32:23 +0000 Manifest this update: Mon 03 Nov 2025 07:27:23 +0000 Manifest next update: Thu 06 Nov 2025 17:18:23 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=) 2: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: EfJhb8LxFHkc1duOpwqvshemVjwkr+tOonBBYEkfLTI=) 3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:aa:bf:cb:61:00:20:90:22:4e:07:d7:32:db:d5:81:80:84:6e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Nov 3 07:27:23 2025 GMT Not After : Nov 6 17:18:23 2025 GMT Subject: CN=3D8B4DC73BA18A23F447CBBE5087BA397D8AC5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:53:0c:68:2a:8c:a9:8a:35:bc:98:75:ca: 11:11:e9:20:32:81:42:0d:ad:cb:0e:c3:5d:9b:99: 16:39:70:78:3e:f0:97:ae:92:0e:d3:22:fc:15:bc: a1:b9:60:b8:7e:30:0b:a3:d0:25:30:96:2a:55:43: 01:b6:52:f0:34:fc:8e:df:4c:4d:ed:c8:68:bc:57: 6e:b5:38:2a:98:2b:77:5f:8d:0a:9a:d1:8f:fc:95: 36:63:c6:7d:77:54:16:f3:69:ca:68:f4:43:3e:58: 82:36:d1:ad:0b:cb:80:22:ab:0e:a2:bd:97:00:b4: aa:07:39:15:eb:fa:a7:0f:68:b0:f3:0e:a9:3c:11: 9f:65:33:0c:b0:43:fb:8d:01:5c:f2:01:1d:cb:11: 6e:78:56:ad:2c:89:13:24:78:a3:0b:39:f3:3c:6b: 28:3f:4e:e3:e4:32:91:e8:39:10:80:27:5a:52:e1: 20:0e:8b:3c:49:c1:82:74:b3:e7:c1:d9:d8:98:29: d1:54:89:c9:48:63:33:db:e5:e6:df:81:c7:4d:28: 8b:d3:c1:b2:7c:1e:69:dc:fe:6f:e6:30:88:18:5f: 3e:93:6d:e7:8f:dc:bd:aa:79:4f:52:2b:1c:bf:b7: ea:ae:95:92:35:f5:b2:76:3d:1b:c5:09:9d:0e:6d: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:4D:C7:3B:A1:8A:23:F4:47:CB:BE:50:87:BA:39:7D:8A:C5:B6 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:bd:1b:aa:f5:9e:56:95:38:32:da:20:38:8b:e3:14:8e: dc:f3:64:ab:a0:1f:34:bb:ba:58:51:59:88:73:6b:ee:e8:41: 0b:7e:a1:f1:d6:21:2d:b7:69:db:db:71:7b:11:7e:c0:2a:b0: 13:6d:b7:2d:4d:b0:3a:3b:29:28:60:d5:39:b4:fe:8e:48:40: ec:4a:c5:77:a8:42:ab:36:64:eb:8f:d1:f2:c5:ca:ee:0f:a8: d6:bc:63:b6:b4:1c:21:f6:01:71:49:05:fe:d7:b6:dc:0e:e4: ea:e3:80:88:70:28:7c:93:85:ed:8e:13:5d:0e:28:d4:e3:6d: 71:ac:c9:71:c9:cd:da:66:a5:60:49:3b:c9:2b:7c:66:ca:aa: c4:99:03:2c:8e:ed:5b:a9:86:23:d0:24:f4:d7:71:4b:25:23: c3:c2:94:ea:a0:82:d9:6c:bf:88:c9:a8:a1:6f:1f:dd:95:91: d1:0a:8f:fd:5b:c0:6c:14:a8:eb:2a:12:fa:f6:ad:6e:08:33: 53:83:69:9f:62:3b:8f:dd:27:46:b8:87:5a:21:1a:af:85:17: 99:a6:cc:25:5b:c3:c4:82:d5:ad:55:a3:b2:79:ec:f9:dd:c1: 43:93:9a:f2:ba:2e:56:51:77:13:b9:b7:2e:c2:ea:59:a7:1a: 6a:3a:ea:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKq/y2EAIJAiTgfXMtvVgYCEbrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTExMDMwNzI3MjNaFw0yNTExMDYxNzE4MjNaMDMxMTAvBgNV BAMTKDNEOEI0REM3M0JBMThBMjNGNDQ3Q0JCRTUwODdCQTM5N0Q4QUM1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28VMMaCqMqYo1vJh1yhER6SAy gUINrcsOw12bmRY5cHg+8Jeukg7TIvwVvKG5YLh+MAuj0CUwlipVQwG2UvA0/I7f TE3tyGi8V261OCqYK3dfjQqa0Y/8lTZjxn13VBbzacpo9EM+WII20a0Ly4Aiqw6i vZcAtKoHORXr+qcPaLDzDqk8EZ9lMwywQ/uNAVzyAR3LEW54Vq0siRMkeKMLOfM8 ayg/TuPkMpHoORCAJ1pS4SAOizxJwYJ0s+fB2diYKdFUiclIYzPb5ebfgcdNKIvT wbJ8Hmnc/m/mMIgYXz6TbeeP3L2qeU9SKxy/t+qulZI19bJ2PRvFCZ0ObePfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYtNxzuhiiP0R8u+UIe6OX2KxbYwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMIvRuq9Z5WlTgy2iA4i+MUjtzzZKugHzS7 ulhRWYhza+7oQQt+ofHWIS23advbcXsRfsAqsBNtty1NsDo7KShg1Tm0/o5IQOxK xXeoQqs2ZOuP0fLFyu4PqNa8Y7a0HCH2AXFJBf7XttwO5OrjgIhwKHyThe2OE10O KNTjbXGsyXHJzdpmpWBJO8krfGbKqsSZAyyO7VuphiPQJPTXcUslI8PClOqggtls v4jJqKFvH92VkdEKj/1bwGwUqOsqEvr2rW4IM1ODaZ9iO4/dJ0a4h1ohGq+FF5mm zCVbw8SC1a1Vo7J57PndwUOTmvK6LlZRdxO5ty7C6lmnGmo66sU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:06 2025 by rpki-client