$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: tnAEkYALv0Zg51TxRnsPGcsToGwhnvC1gJ73gdYYlzA= Subject key identifier: 7E:93:E3:42:0D:65:71:CD:C5:FA:87:D5:44:2F:07:69:64:8D:23:2E Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 5720067B284C6D847BFC18D673531FDC61774E02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0497 Signing time: Tue 04 Nov 2025 17:00:47 +0000 Manifest this update: Tue 04 Nov 2025 16:55:47 +0000 Manifest next update: Fri 07 Nov 2025 20:52:47 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=) 2: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=) 3: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=) 4: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: cQtw/fqJYO3JMIRyHK2kRjKD8rm5beIvhzw2chFOMtA=) 5: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:20:06:7b:28:4c:6d:84:7b:fc:18:d6:73:53:1f:dc:61:77:4e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Nov 4 16:55:47 2025 GMT Not After : Nov 7 20:52:47 2025 GMT Subject: CN=7E93E3420D6571CDC5FA87D5442F0769648D232E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:4e:9d:6b:4f:8b:35:da:df:aa:6b:02:88: c5:93:40:80:e3:ff:47:db:25:0e:34:aa:dd:83:4a: 10:00:1c:61:66:6c:18:ee:a8:c1:01:69:8b:43:b4: ee:33:ab:d7:af:65:ba:7a:59:73:34:91:80:f5:2e: 1c:ff:40:66:a7:87:28:22:06:80:ed:07:53:0d:d8: f0:fc:02:67:f5:a1:72:e2:c6:77:04:87:69:b1:a9: c7:da:e8:14:af:31:fd:4d:bd:6c:2b:34:f8:9d:b8: ec:5b:2b:c5:c9:f5:09:e9:90:81:c7:19:bd:21:06: 7b:96:ca:5a:3c:90:11:13:d3:1f:a4:f9:0f:b4:31: b5:01:89:fe:1f:65:d3:cb:b9:97:07:8d:90:28:c2: 97:16:e0:f3:f8:82:ac:d3:bf:02:d0:0e:ff:d6:f6: dc:1c:57:38:ec:89:fe:d2:58:f7:e5:c5:9b:c8:cf: ff:c8:bb:b0:1a:c8:61:65:7e:cf:6d:08:5a:22:74: da:52:f4:bb:87:c5:71:ab:ef:ee:a7:e6:1f:28:dd: f2:00:ec:ff:d8:1f:32:69:27:d7:b5:58:71:1a:47: 3b:f2:5b:a6:4e:d1:10:80:20:9c:de:9a:2d:bc:85: ef:4f:3b:9d:52:11:63:b0:f7:22:75:4f:2c:cd:bf: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:E3:42:0D:65:71:CD:C5:FA:87:D5:44:2F:07:69:64:8D:23:2E X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e7:b1:ae:5b:84:3e:ad:e6:37:be:71:63:fb:0e:6b:08:00: dd:54:67:8b:b3:40:bc:2e:53:97:2a:0f:a4:72:3c:83:ad:8c: 81:6c:f9:34:f8:8d:88:3b:80:38:35:08:bd:49:bd:04:6c:e6: 62:56:af:03:e7:ed:14:c2:7f:95:62:87:9d:04:8c:3c:14:4c: 52:00:f5:47:3d:41:cd:9f:de:db:4b:88:7a:1a:99:bb:fc:f2: c6:7c:1b:5c:6b:51:3d:4b:fb:72:4a:ca:4b:34:12:67:fc:17: de:1f:5d:1c:49:08:3a:f7:08:55:b0:77:42:f4:48:2b:90:f8: 7b:c2:a8:fb:ab:08:26:1a:a3:80:8b:98:83:d0:8e:c0:d6:46: 07:71:ad:e0:18:d5:b3:dd:3d:7a:60:ab:f7:01:96:e8:b3:4b: fa:58:d3:47:be:be:88:67:d1:fc:0c:60:37:d1:2a:9a:17:47: 8d:3e:d6:ab:d3:31:f7:02:57:b0:e2:d1:48:b9:bd:84:8a:f7: 13:d4:91:3c:b4:01:bb:a6:33:ad:3f:9d:16:f9:bf:e7:b3:f6: 4e:6f:73:64:b7:21:0c:c7:36:6c:b2:2f:28:fe:a3:bd:fe:b1: dd:20:bd:a1:73:ce:b4:ea:38:09:14:91:4c:7a:7c:b0:cc:4e: 9b:09:09:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyAGeyhMbYR7/BjWc1Mf3GF3TgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTExMDQxNjU1NDdaFw0yNTExMDcyMDUyNDdaMDMxMTAvBgNV BAMTKDdFOTNFMzQyMEQ2NTcxQ0RDNUZBODdENTQ0MkYwNzY5NjQ4RDIzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzE6da0+LNdrfqmsCiMWTQIDj /0fbJQ40qt2DShAAHGFmbBjuqMEBaYtDtO4zq9evZbp6WXM0kYD1Lhz/QGanhygi BoDtB1MN2PD8Amf1oXLixncEh2mxqcfa6BSvMf1NvWwrNPiduOxbK8XJ9QnpkIHH Gb0hBnuWylo8kBET0x+k+Q+0MbUBif4fZdPLuZcHjZAowpcW4PP4gqzTvwLQDv/W 9twcVzjsif7SWPflxZvIz//Iu7AayGFlfs9tCFoidNpS9LuHxXGr7+6n5h8o3fIA 7P/YHzJpJ9e1WHEaRzvyW6ZO0RCAIJzemi28he9PO51SEWOw9yJ1TyzNvxpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpPjQg1lcc3F+ofVRC8HaWSNIy4wHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3nsa5bhD6t5je+cWP7DmsIAN1UZ4uzQLwu U5cqD6RyPIOtjIFs+TT4jYg7gDg1CL1JvQRs5mJWrwPn7RTCf5Vih50EjDwUTFIA 9Uc9Qc2f3ttLiHoambv88sZ8G1xrUT1L+3JKyks0Emf8F94fXRxJCDr3CFWwd0L0 SCuQ+HvCqPurCCYao4CLmIPQjsDWRgdxreAY1bPdPXpgq/cBluizS/pY00e+vohn 0fwMYDfRKpoXR40+1qvTMfcCV7Di0Ui5vYSK9xPUkTy0AbumM60/nRb5v+ez9k5v c2S3IQzHNmyyLyj+o73+sd0gvaFzzrTqOAkUkUx6fLDMTpsJCSA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:40 2025 by rpki-client