$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: 9OB9pbcbvKCy0K+O1wJglBSC7bzrKSAMLngdxxcyPrY= Subject key identifier: 65:33:21:2E:C5:22:7C:45:84:21:1F:9E:0D:6F:76:20:28:92:72:2E Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 7EBC98184D38F94B9C6A1C61A020A113A88A5A46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 0181 Signing time: Mon 03 Nov 2025 09:22:23 +0000 Manifest this update: Mon 03 Nov 2025 09:17:23 +0000 Manifest next update: Thu 06 Nov 2025 21:13:23 +0000 Files and hashes: 1: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: RaUGn/vKtg9CeUibKH2gXnycVkJUXu9XgDzC4htQVwQ=) 2: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bc:98:18:4d:38:f9:4b:9c:6a:1c:61:a0:20:a1:13:a8:8a:5a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Nov 3 09:17:23 2025 GMT Not After : Nov 6 21:13:23 2025 GMT Subject: CN=6533212EC5227C4584211F9E0D6F76202892722E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:20:8a:1a:a5:63:8d:82:1d:b4:86:41:b9: e8:d2:81:fa:0a:f7:a8:d9:72:19:ec:50:9d:1e:a4: c0:53:70:3a:aa:52:95:cb:59:cb:ef:59:c5:ac:c9: f1:8f:50:1d:11:43:e1:ff:19:ef:57:9b:00:88:ee: b3:c4:cd:a6:f8:70:6a:b6:83:3b:c6:ae:76:3b:b1: 0d:67:45:cd:04:3c:59:a2:12:15:25:22:f5:37:68: f5:f4:f4:6f:80:95:03:f5:33:c9:bc:35:17:50:7c: b2:cb:a7:89:36:05:ff:5c:d4:f6:6c:b4:03:be:5b: 78:04:e5:fb:c2:b8:b2:ec:ab:2c:ca:e1:e4:9b:d0: e1:98:03:b1:21:11:e3:db:c1:cd:30:bc:71:98:e1: 66:c1:ab:d7:c5:16:22:db:81:d9:3b:2b:23:0d:6a: 43:2b:7b:a6:fe:f6:05:54:2b:6c:ad:d3:7d:12:6a: d5:23:50:ce:b2:af:b4:9d:be:bb:70:c3:6e:8a:75: a2:90:a5:e1:32:85:99:ba:ab:c4:22:a7:4e:87:b5: 82:9b:1a:c2:cf:b8:66:cd:52:50:a0:f7:f1:0d:f1: 7c:4f:60:a7:1a:4e:c1:90:fa:5e:2e:b4:d4:b2:bf: 9d:7d:b2:02:75:0c:cd:5b:9e:89:77:e4:8c:b2:b3: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:21:2E:C5:22:7C:45:84:21:1F:9E:0D:6F:76:20:28:92:72:2E X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:24:a5:48:56:91:2f:67:82:4d:af:6b:b2:68:3b:5d:6c:89: 91:59:8f:f0:47:c1:fd:2b:ee:4d:35:52:07:8d:61:5d:72:e3: 5a:0f:7e:1c:14:a6:7f:6e:b6:e1:45:46:c6:87:be:d2:ea:e5: dd:60:02:9c:19:dc:49:9b:a5:ee:2e:57:b5:b4:6d:02:af:80: da:f7:f4:2d:7a:14:b0:57:1a:37:41:bc:9f:d7:b0:51:55:39: 11:d3:6f:4e:49:5e:be:f6:d0:a9:83:fc:19:2a:46:9f:71:2e: 55:c0:ae:46:2a:ac:a0:b0:b3:e1:5e:04:2c:85:f1:19:a8:66: e8:3f:5b:44:d2:0a:b2:1a:8d:f9:0e:0c:7c:56:97:ff:d4:38: 18:51:b0:a8:38:f1:52:a4:96:c4:89:88:a4:2e:77:d2:75:56: 11:04:ef:a6:49:c3:f1:06:45:a8:92:fb:f0:33:e8:bb:9d:d3: e8:b3:d2:44:30:bd:e1:83:fc:f4:63:fc:1e:ca:b8:e4:67:55: de:dd:d5:06:c3:f3:29:7d:68:e7:4e:ff:7d:39:d3:e9:6c:47: 32:fb:aa:a1:eb:9d:3b:c2:53:fc:eb:0e:04:75:29:4f:2a:2f: b6:c0:bd:79:33:95:80:81:ae:7f:ab:71:b3:3f:46:b4:b8:aa: 96:2e:06:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfryYGE04+UucahxhoCChE6iKWkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTExMDMwOTE3MjNaFw0yNTExMDYyMTEzMjNaMDMxMTAvBgNV BAMTKDY1MzMyMTJFQzUyMjdDNDU4NDIxMUY5RTBENkY3NjIwMjg5MjcyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cSCKGqVjjYIdtIZBuejSgfoK 96jZchnsUJ0epMBTcDqqUpXLWcvvWcWsyfGPUB0RQ+H/Ge9XmwCI7rPEzab4cGq2 gzvGrnY7sQ1nRc0EPFmiEhUlIvU3aPX09G+AlQP1M8m8NRdQfLLLp4k2Bf9c1PZs tAO+W3gE5fvCuLLsqyzK4eSb0OGYA7EhEePbwc0wvHGY4WbBq9fFFiLbgdk7KyMN akMre6b+9gVUK2yt030SatUjUM6yr7Sdvrtww26KdaKQpeEyhZm6q8Qip06HtYKb GsLPuGbNUlCg9/EN8XxPYKcaTsGQ+l4utNSyv519sgJ1DM1bnol35Iyys5iJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZTMhLsUifEWEIR+eDW92ICiSci4wHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0kpUhWkS9ngk2va7JoO11siZFZj/BHwf0r 7k01UgeNYV1y41oPfhwUpn9utuFFRsaHvtLq5d1gApwZ3Embpe4uV7W0bQKvgNr3 9C16FLBXGjdBvJ/XsFFVORHTb05JXr720KmD/BkqRp9xLlXArkYqrKCws+FeBCyF 8RmoZug/W0TSCrIajfkODHxWl//UOBhRsKg48VKklsSJiKQud9J1VhEE76ZJw/EG RaiS+/Az6Lud0+iz0kQwveGD/PRj/B7KuORnVd7d1QbD8yl9aOdO/3050+lsRzL7 qqHrnTvCU/zrDgR1KU8qL7bAvXkzlYCBrn+rcbM/RrS4qpYuBr4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:11 2025 by rpki-client