$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: hMmDD3VSZZZ+irRfNO4/DwvfpRSnAjk4hJElNMZRgok= Subject key identifier: EE:65:9F:B8:85:E2:F1:D7:18:2F:5D:5C:9C:72:36:16:9F:47:F4:DF Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 508C2E114CF8DA17EB75EF2A44BB38DAFC26F425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: F7 Signing time: Mon 03 Nov 2025 14:22:10 +0000 Manifest this update: Mon 03 Nov 2025 14:17:10 +0000 Manifest next update: Fri 07 Nov 2025 00:43:10 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 3: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: HaiBjOVvFSwtVV21b5NT83e54+pAAcq8lQu87KaNI58=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8c:2e:11:4c:f8:da:17:eb:75:ef:2a:44:bb:38:da:fc:26:f4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Nov 3 14:17:10 2025 GMT Not After : Nov 7 00:43:10 2025 GMT Subject: CN=EE659FB885E2F1D7182F5D5C9C7236169F47F4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:40:7d:54:91:d3:33:77:52:90:19:53:ea: 77:27:09:bf:3e:15:42:92:20:80:a8:65:86:65:d9: c6:db:dc:c6:ea:76:00:2e:f1:63:9d:aa:2b:42:5e: 51:da:5d:9e:aa:7f:c4:0a:2e:f6:9e:12:cb:78:d1: 46:45:83:b0:bd:95:6f:56:de:a8:e3:04:dd:83:12: 9e:29:14:f0:4d:85:b8:6d:69:28:4c:56:4b:b8:9d: a4:45:4d:12:45:7c:3f:b4:e4:9c:89:cc:a6:1a:71: 27:fe:12:5c:ef:ae:ee:2d:fc:51:3a:98:3d:75:3b: b6:34:13:00:de:6f:c6:b1:ce:56:04:10:55:bd:f9: 42:76:d2:48:d9:0f:24:6e:90:97:35:a7:dc:32:01: 9c:9a:f2:6b:92:24:43:0e:bc:56:ba:61:08:b4:bb: b8:d5:aa:32:01:24:74:ba:40:15:2e:c5:64:3b:e8: 12:79:44:35:4e:71:54:da:f7:72:8c:bf:01:56:d9: ae:57:e6:c8:f9:95:1b:b5:11:65:62:5d:99:13:7d: 2c:a1:19:f6:1e:3b:76:51:1d:6e:8f:74:66:2b:f3: ee:6e:5f:d7:50:5d:77:b9:1f:97:6c:b0:32:f2:0e: f9:ae:8f:65:ef:7a:fe:c8:a8:1e:d0:af:92:7a:02: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:9F:B8:85:E2:F1:D7:18:2F:5D:5C:9C:72:36:16:9F:47:F4:DF X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f6:40:98:32:48:7f:63:56:97:d1:dc:06:36:91:1d:56:58: 7f:68:a1:bd:1e:aa:c8:e4:29:da:6c:3a:df:96:a5:09:e4:bc: 5d:2e:50:a7:ba:f7:18:4c:cf:9b:20:84:57:e4:42:0c:d3:54: 3a:e5:88:1b:be:ad:cf:89:01:5a:de:d6:c1:a9:96:dd:ee:3a: 20:1e:b9:e7:c4:90:6b:a3:5c:78:b1:3b:85:6d:a4:78:f1:50: 3b:57:1d:3f:27:b3:d4:51:dc:fa:9b:90:48:66:ae:44:f3:6e: d2:f5:03:fd:21:5e:da:14:d9:40:bd:a5:2f:cd:a2:27:27:51: b7:4f:1a:c4:e3:96:69:90:fc:17:a4:06:b7:03:79:c6:e5:a8: a5:0d:6d:36:64:a5:45:c2:ac:0b:0f:4c:0e:64:56:3e:5b:36: f5:19:71:a9:96:64:1a:78:79:f1:08:dd:82:92:5e:99:fc:83: 43:95:56:44:c6:73:ec:90:0a:20:f1:b9:99:15:fd:5b:0a:b4: 86:3f:50:a0:a4:66:4a:97:71:ce:4c:6e:b1:4b:25:77:4e:7e: 91:b7:11:af:62:fe:50:17:7f:8f:21:96:a6:80:d7:b3:c2:17: d9:3b:7c:b0:c4:25:64:65:8a:f8:3f:b3:a6:b8:66:c0:50:45: 4f:b7:8d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIwuEUz42hfrde8qRLs42vwm9CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTExMDMxNDE3MTBaFw0yNTExMDcwMDQzMTBaMDMxMTAvBgNV BAMTKEVFNjU5RkI4ODVFMkYxRDcxODJGNUQ1QzlDNzIzNjE2OUY0N0Y0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAH0B9VJHTM3dSkBlT6ncnCb8+ FUKSIICoZYZl2cbb3MbqdgAu8WOdqitCXlHaXZ6qf8QKLvaeEst40UZFg7C9lW9W 3qjjBN2DEp4pFPBNhbhtaShMVku4naRFTRJFfD+05JyJzKYacSf+Elzvru4t/FE6 mD11O7Y0EwDeb8axzlYEEFW9+UJ20kjZDyRukJc1p9wyAZya8muSJEMOvFa6YQi0 u7jVqjIBJHS6QBUuxWQ76BJ5RDVOcVTa93KMvwFW2a5X5sj5lRu1EWViXZkTfSyh GfYeO3ZRHW6PdGYr8+5uX9dQXXe5H5dssDLyDvmuj2Xvev7IqB7Qr5J6AgY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mWfuIXi8dcYL11cnHI2Fp9H9N8wHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK32QJgySH9jVpfR3AY2kR1WWH9oob0eqsjk KdpsOt+WpQnkvF0uUKe69xhMz5sghFfkQgzTVDrliBu+rc+JAVre1sGplt3uOiAe uefEkGujXHixO4VtpHjxUDtXHT8ns9RR3PqbkEhmrkTzbtL1A/0hXtoU2UC9pS/N oicnUbdPGsTjlmmQ/BekBrcDecblqKUNbTZkpUXCrAsPTA5kVj5bNvUZcamWZBp4 efEI3YKSXpn8g0OVVkTGc+yQCiDxuZkV/VsKtIY/UKCkZkqXcc5MbrFLJXdOfpG3 Ea9i/lAXf48hlqaA17PCF9k7fLDEJWRlivg/s6a4ZsBQRU+3jdM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:56 2025 by rpki-client