$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: q7gK2OQRMliLnBhPWwH6q7pN9TrUISxx9klbJZXf7Xk= Subject key identifier: B1:8D:BE:59:3B:F7:7E:BB:FB:14:90:EC:E9:5E:A7:48:05:A2:F8:20 Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 39CA9E5EED3FD0C10430833D0C37A4289462F052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 00:01:36 +0000 Manifest this update: Sun 02 Nov 2025 23:56:36 +0000 Manifest next update: Thu 06 Nov 2025 00:44:36 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: 78kUpadJG2qFEXmzo3b5rqDthELwFuJAa8RCiRmTC0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:9e:5e:ed:3f:d0:c1:04:30:83:3d:0c:37:a4:28:94:62:f0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Nov 2 23:56:36 2025 GMT Not After : Nov 6 00:44:36 2025 GMT Subject: CN=B18DBE593BF77EBBFB1490ECE95EA74805A2F820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:5c:8f:83:6d:0d:3f:64:d5:21:dd:73:20: 6c:2f:1d:5e:e6:bd:ae:68:00:58:5b:ef:f5:0d:28: b7:48:59:aa:e8:f8:04:a9:90:ab:ca:61:08:33:da: db:c9:e5:15:4c:f8:4f:02:ea:0a:8a:4a:bf:91:13: 86:22:a0:9f:9f:76:b4:f5:1b:28:ca:51:8d:20:cf: a0:0a:89:45:e6:c8:64:49:01:d0:cb:a5:9b:40:43: 7e:e8:9e:0b:27:fa:80:39:b7:6b:af:d2:69:2f:92: 33:1d:bd:15:b6:ff:2c:26:86:29:63:83:7b:4a:df: 98:36:79:3e:fb:84:7a:fc:82:0e:d5:fb:31:50:f2: db:cf:44:0c:9b:05:26:18:fb:79:98:69:2f:f8:cf: 54:c3:dc:f9:5e:16:c3:f2:b1:ae:47:61:db:6b:0e: 7e:a7:40:48:93:ce:79:08:44:84:90:cc:2a:44:19: 38:eb:b4:1f:3a:cd:76:69:8b:43:b1:9d:2b:f2:9a: 6c:18:ed:bf:f0:ce:30:68:97:ae:c4:f4:90:b4:98: 96:5e:15:36:9a:7c:61:d3:8f:fd:a7:0b:2a:3b:a3: a1:62:da:57:25:84:22:f4:fa:0e:76:14:a1:e6:7f: e8:de:c5:eb:db:49:84:42:9f:9b:a0:cb:db:a3:33: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8D:BE:59:3B:F7:7E:BB:FB:14:90:EC:E9:5E:A7:48:05:A2:F8:20 X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:0f:53:53:ce:0a:d9:96:a1:ca:ee:4b:61:d1:38:44:d3: f7:d2:16:56:a4:37:73:cf:82:56:9a:20:83:fd:d2:c9:91:19: da:a0:6a:a2:bf:fa:0b:0d:a4:e2:12:6e:d2:c2:ef:93:05:e1: a6:73:d8:be:31:8f:f7:1d:d2:31:14:30:26:f6:9c:ba:2e:4f: 8b:b4:be:79:cd:9a:fe:ff:6e:17:d1:ed:06:d5:b3:85:d0:f1: 5b:24:9c:79:2a:33:47:4c:d0:94:59:6a:15:94:9c:91:2a:46: 88:0e:a0:51:8c:c9:f7:bf:ae:c3:64:5a:31:a2:3a:23:18:2b: 50:dc:26:ef:54:24:23:47:ff:33:02:20:a2:d1:b7:4a:6f:ac: 6e:b6:9e:4a:b6:03:29:80:f5:2e:13:a7:42:e4:12:f7:a0:29: 4a:ea:cd:09:3e:e6:61:53:f2:47:d8:89:2a:dc:4d:87:d7:5e: 49:6a:5c:6f:47:6d:16:bc:d0:10:58:cf:0a:45:ab:49:13:1a: 75:6c:8a:43:dd:ad:5a:81:6f:99:2c:9a:92:a9:9b:4e:14:1d: ec:de:06:13:8e:2d:7c:44:f4:78:cb:c8:2a:a0:36:ab:c9:9f: 3b:40:36:ae:d3:d6:e6:a2:e6:eb:d8:0a:3b:f7:16:85:93:50: 31:fa:f8:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcqeXu0/0MEEMIM9DDekKJRi8FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNTExMDIyMzU2MzZaFw0yNTExMDYwMDQ0MzZaMDMxMTAvBgNV BAMTKEIxOERCRTU5M0JGNzdFQkJGQjE0OTBFQ0U5NUVBNzQ4MDVBMkY4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDED1yPg20NP2TVId1zIGwvHV7m va5oAFhb7/UNKLdIWaro+ASpkKvKYQgz2tvJ5RVM+E8C6gqKSr+RE4YioJ+fdrT1 GyjKUY0gz6AKiUXmyGRJAdDLpZtAQ37ongsn+oA5t2uv0mkvkjMdvRW2/ywmhilj g3tK35g2eT77hHr8gg7V+zFQ8tvPRAybBSYY+3mYaS/4z1TD3PleFsPysa5HYdtr Dn6nQEiTznkIRISQzCpEGTjrtB86zXZpi0OxnSvymmwY7b/wzjBol67E9JC0mJZe FTaafGHTj/2nCyo7o6Fi2lclhCL0+g52FKHmf+jexevbSYRCn5ugy9ujM/qpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsY2+WTv3frv7FJDs6V6nSAWi+CAwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoVD1NTzgrZlqHK7kth0ThE0/fSFlakN3PP glaaIIP90smRGdqgaqK/+gsNpOISbtLC75MF4aZz2L4xj/cd0jEUMCb2nLouT4u0 vnnNmv7/bhfR7QbVs4XQ8VsknHkqM0dM0JRZahWUnJEqRogOoFGMyfe/rsNkWjGi OiMYK1DcJu9UJCNH/zMCIKLRt0pvrG62nkq2AymA9S4Tp0LkEvegKUrqzQk+5mFT 8kfYiSrcTYfXXklqXG9HbRa80BBYzwpFq0kTGnVsikPdrVqBb5ksmpKpm04UHeze BhOOLXxE9HjLyCqgNqvJnztANq7T1uai5uvYCjv3FoWTUDH6+Eg= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:52 2025 by rpki-client