$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: tv3jSjDeI2jCaVwxOwmgBqDCw3RD1xaOOB5rW4Hy16o= Subject key identifier: CE:00:C1:35:77:9D:2C:C6:95:10:12:EF:8A:0D:7F:B1:85:32:B0:B1 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 02787831B3C23025A6377856EBFA021D814E5612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 025E Signing time: Mon 03 Nov 2025 11:11:54 +0000 Manifest this update: Mon 03 Nov 2025 11:06:54 +0000 Manifest next update: Thu 06 Nov 2025 19:19:54 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: od4zrihjVTen+r/mZPwflX8ZPxPeJcoLCgSr/KKKYUM=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:78:78:31:b3:c2:30:25:a6:37:78:56:eb:fa:02:1d:81:4e:56:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Nov 3 11:06:54 2025 GMT Not After : Nov 6 19:19:54 2025 GMT Subject: CN=CE00C135779D2CC6951012EF8A0D7FB18532B0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:27:37:4d:fb:d9:40:3f:75:98:d4:c8:c7: 59:89:32:a8:d0:a8:46:1d:8e:ac:60:db:4d:2c:00: 96:c4:dc:dd:bb:3f:31:07:c1:6a:e7:1a:49:12:57: e6:fe:84:bf:93:90:3a:25:e3:7b:d3:3b:a5:aa:37: 33:6e:83:6d:33:76:25:ca:ea:48:7b:ec:7a:0d:01: f5:1f:c1:78:d2:ec:c6:06:03:b7:ca:4d:d5:8a:a9: a2:10:85:1c:88:07:a7:fb:f0:44:6f:a0:9d:8e:e5: b3:20:fc:1c:c9:1c:51:59:3c:66:29:53:e5:15:25: 0c:df:df:7a:46:86:1e:21:d4:3f:fe:f3:d5:ea:97: 7e:24:de:7c:ee:ed:cc:59:4d:2a:50:bc:7e:e3:8e: df:ba:3d:90:fe:5a:da:1d:2a:55:5f:69:bd:5f:23: 80:29:00:20:25:43:bc:ee:ea:85:19:9d:01:d4:70: ad:12:be:e4:46:55:50:25:6a:86:13:9d:c0:48:1f: 4d:ed:5e:f9:db:a1:17:dc:4c:6e:81:d0:48:bc:b1: 12:5a:ba:1f:45:ca:8c:dd:d5:f1:9f:89:b8:db:9e: e7:8d:71:40:f1:06:36:7e:30:b9:ca:15:c7:9e:2c: 94:66:9a:a6:17:c5:c6:f1:9a:b7:d0:bc:bb:3b:71: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:00:C1:35:77:9D:2C:C6:95:10:12:EF:8A:0D:7F:B1:85:32:B0:B1 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:f1:4c:de:1f:88:48:1b:e9:ee:62:26:2a:26:c4:36:6b: e5:42:26:02:9a:c8:84:2b:11:35:67:4e:db:cf:28:aa:d9:b7: 7f:82:51:19:66:15:61:9c:90:d6:7b:ef:09:37:e2:07:10:80: a0:34:33:bc:81:0b:13:27:3a:c3:b4:8f:ef:49:df:07:35:ad: 23:aa:4b:cc:74:26:e7:fb:6d:63:05:2f:44:4f:e8:97:c0:ca: 11:fb:49:0a:d7:2a:5d:75:6c:b1:17:4e:02:b5:f8:3d:b2:21: dd:bf:65:11:ae:b8:f0:8d:91:45:7d:f5:03:9b:5d:d6:0a:92: 45:41:16:7e:47:bc:f0:e1:30:03:d4:7b:de:b8:99:17:5e:3e: 67:b7:78:e4:d4:63:ce:92:6a:07:57:fd:9a:f5:c2:78:43:a1: 0a:35:26:d9:81:b5:f1:ad:bd:70:d1:23:8a:34:f5:c6:54:96: 2f:21:b3:7d:46:89:6e:c8:f5:f5:77:c1:ec:b3:1a:c2:26:e7: b0:60:bd:48:1d:15:06:5f:0f:a3:d5:b7:87:d6:58:a8:c2:7b: 4e:4d:1d:ec:3c:5a:79:ff:10:b8:91:21:70:86:55:63:4a:65: cd:5f:64:a6:a2:e1:3c:be:c2:6d:00:e4:28:27:05:c1:5e:6e: 2f:72:da:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnh4MbPCMCWmN3hW6/oCHYFOVhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTExMDMxMTA2NTRaFw0yNTExMDYxOTE5NTRaMDMxMTAvBgNV BAMTKENFMDBDMTM1Nzc5RDJDQzY5NTEwMTJFRjhBMEQ3RkIxODUzMkIwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oyc3TfvZQD91mNTIx1mJMqjQ qEYdjqxg200sAJbE3N27PzEHwWrnGkkSV+b+hL+TkDol43vTO6WqNzNug20zdiXK 6kh77HoNAfUfwXjS7MYGA7fKTdWKqaIQhRyIB6f78ERvoJ2O5bMg/BzJHFFZPGYp U+UVJQzf33pGhh4h1D/+89Xql34k3nzu7cxZTSpQvH7jjt+6PZD+WtodKlVfab1f I4ApACAlQ7zu6oUZnQHUcK0SvuRGVVAlaoYTncBIH03tXvnboRfcTG6B0Ei8sRJa uh9Fyozd1fGfibjbnueNcUDxBjZ+MLnKFceeLJRmmqYXxcbxmrfQvLs7cXE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgDBNXedLMaVEBLvig1/sYUysLEwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlT8UzeH4hIG+nuYiYqJsQ2a+VCJgKayIQr ETVnTtvPKKrZt3+CURlmFWGckNZ77wk34gcQgKA0M7yBCxMnOsO0j+9J3wc1rSOq S8x0Juf7bWMFL0RP6JfAyhH7SQrXKl11bLEXTgK1+D2yId2/ZRGuuPCNkUV99QOb XdYKkkVBFn5HvPDhMAPUe964mRdePme3eOTUY86SagdX/Zr1wnhDoQo1JtmBtfGt vXDRI4o09cZUli8hs31GiW7I9fV3weyzGsIm57BgvUgdFQZfD6PVt4fWWKjCe05N Hew8Wnn/ELiRIXCGVWNKZc1fZKai4Ty+wm0A5CgnBcFebi9y2hs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:21:43 2025 by rpki-client