$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: zSInh6hYwQWUV2lPnk8RP8GjcvcW6SbjfJdsTFuZ/1c= Subject key identifier: 90:87:9E:4E:45:44:8F:0C:12:C9:23:82:D7:B8:1C:10:AA:40:21:3E Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 2EE534322C85A385E1842026B249A7531CB6B219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: E3 Signing time: Tue 04 Nov 2025 10:01:12 +0000 Manifest this update: Tue 04 Nov 2025 09:56:12 +0000 Manifest next update: Fri 07 Nov 2025 17:44:12 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: AFzb9yyhFs70shRoKThIC3kX2dWTgiRUn8SE2HCfZQ0=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e5:34:32:2c:85:a3:85:e1:84:20:26:b2:49:a7:53:1c:b6:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Nov 4 09:56:12 2025 GMT Not After : Nov 7 17:44:12 2025 GMT Subject: CN=90879E4E45448F0C12C92382D7B81C10AA40213E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:b8:f8:2f:ca:5e:c3:8c:8b:89:26:db:e1: fe:12:9a:6e:d4:2a:6d:69:9f:aa:52:67:db:69:5c: a5:13:90:8d:b0:67:d1:cb:d2:1a:37:cf:1b:90:13: e7:88:b5:c9:dc:89:f3:8d:33:0f:53:0a:1e:75:df: f1:01:9e:a2:56:c7:76:f8:e4:ef:91:7d:59:aa:16: 80:d4:b7:6f:7f:56:8b:6d:7f:39:d0:ae:a0:82:2a: 1c:97:42:6a:de:b0:35:79:5e:5c:0f:0a:a1:f6:56: 25:8b:b6:8f:b8:c0:40:0a:48:08:a8:c4:aa:5b:ca: 6e:53:9d:89:03:0c:74:27:70:d0:c8:7d:0a:a9:5f: d2:91:6f:a5:9d:a6:ac:51:3d:39:31:3e:72:07:34: cf:10:38:50:87:8c:68:f5:7b:c6:02:a2:f3:41:0e: d3:5c:25:ec:80:29:73:83:96:0d:89:46:fb:27:bd: 24:32:05:fe:e1:86:8a:b8:25:ba:0b:f6:59:d2:e5: 43:da:cb:1b:8b:1c:a0:7c:27:03:1c:80:cb:32:6d: c6:30:ff:86:a5:b0:bf:00:24:bf:17:cf:79:5e:47: 36:2c:3f:99:f9:cf:8c:ba:c4:d6:45:4a:79:52:4a: 8a:6c:d0:fa:22:8f:1b:d9:ae:ac:2b:01:a3:bf:44: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:9E:4E:45:44:8F:0C:12:C9:23:82:D7:B8:1C:10:AA:40:21:3E X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:92:70:88:c4:e7:23:1a:c1:47:3d:82:a6:47:57:af:ac:4c: b9:cb:88:ad:bb:a4:b9:f4:47:90:42:a9:35:a7:75:33:67:8a: 49:10:66:67:d2:c4:7d:8f:74:6c:2e:62:99:37:87:5c:d4:29: 07:77:ab:bf:1f:d1:ed:5c:46:ef:b3:f2:24:40:c6:56:14:e5: be:b2:17:46:be:18:e3:6e:61:ce:56:cd:4c:a2:61:1a:17:2e: 95:5d:b1:24:77:b3:ed:f8:3e:db:87:63:50:67:f1:23:e2:4f: 29:a1:7d:10:bc:02:de:c2:93:5e:b5:a8:54:ac:52:25:1a:ca: 22:31:33:17:d4:ba:25:fc:a6:54:e5:df:b9:ae:da:b7:b6:4a: f7:4e:49:86:82:3f:b7:99:30:af:6f:e2:ab:2a:40:46:4b:7f: de:f6:fd:90:68:6b:a9:57:6a:ae:4a:cc:89:f1:88:22:9f:48: 16:78:15:12:6b:1d:79:69:2b:74:f9:b8:42:bc:7f:8a:b4:fd: fb:0e:72:1e:c9:9d:f4:55:8d:db:d0:90:8f:82:17:31:9f:38: 92:66:f9:a9:03:f4:9c:bc:bb:ee:00:29:be:f1:eb:cb:42:ee: 0c:5c:3b:e3:86:b0:65:0a:bb:f2:27:bc:42:af:8a:b3:70:ee: a9:3f:38:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuU0MiyFo4XhhCAmskmnUxy2shkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTExMDQwOTU2MTJaFw0yNTExMDcxNzQ0MTJaMDMxMTAvBgNV BAMTKDkwODc5RTRFNDU0NDhGMEMxMkM5MjM4MkQ3QjgxQzEwQUE0MDIxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4rj4L8pew4yLiSbb4f4Smm7U Km1pn6pSZ9tpXKUTkI2wZ9HL0ho3zxuQE+eItcncifONMw9TCh513/EBnqJWx3b4 5O+RfVmqFoDUt29/VottfznQrqCCKhyXQmresDV5XlwPCqH2ViWLto+4wEAKSAio xKpbym5TnYkDDHQncNDIfQqpX9KRb6WdpqxRPTkxPnIHNM8QOFCHjGj1e8YCovNB DtNcJeyAKXODlg2JRvsnvSQyBf7hhoq4JboL9lnS5UPayxuLHKB8JwMcgMsybcYw /4alsL8AJL8Xz3leRzYsP5n5z4y6xNZFSnlSSops0PoijxvZrqwrAaO/RFvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIeeTkVEjwwSySOC17gcEKpAIT4wHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6ScIjE5yMawUc9gqZHV6+sTLnLiK27pLn0 R5BCqTWndTNnikkQZmfSxH2PdGwuYpk3h1zUKQd3q78f0e1cRu+z8iRAxlYU5b6y F0a+GONuYc5WzUyiYRoXLpVdsSR3s+34PtuHY1Bn8SPiTymhfRC8At7Ck161qFSs UiUayiIxMxfUuiX8plTl37mu2re2SvdOSYaCP7eZMK9v4qsqQEZLf972/ZBoa6lX aq5KzInxiCKfSBZ4FRJrHXlpK3T5uEK8f4q0/fsOch7JnfRVjdvQkI+CFzGfOJJm +akD9Jy8u+4AKb7x68tC7gxcO+OGsGUKu/InvEKvirNw7qk/ONQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:30 2025 by rpki-client