$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: vhEILWsHTgqfVYxvzRXsYkPak9gvfR/7Q7WgB5mJi58= Subject key identifier: B2:D8:24:31:45:48:B0:21:FD:07:7B:35:ED:26:E8:61:80:99:71:BC Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 2079C5CB0D1D8B8D41C9D87CB8562DBFEEC514B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 0186 Signing time: Mon 03 Nov 2025 07:11:11 +0000 Manifest this update: Mon 03 Nov 2025 07:06:11 +0000 Manifest next update: Thu 06 Nov 2025 17:56:11 +0000 Files and hashes: 1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) 3: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: 2m8pJhY1F2fSPZgLpHgeAsNC11Bgp7PfAGLaMg6/dYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:79:c5:cb:0d:1d:8b:8d:41:c9:d8:7c:b8:56:2d:bf:ee:c5:14:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Nov 3 07:06:11 2025 GMT Not After : Nov 6 17:56:11 2025 GMT Subject: CN=B2D824314548B021FD077B35ED26E861809971BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:7c:61:0c:53:5f:63:d4:d2:26:5a:52:6b: 14:78:8f:b6:9a:43:e9:61:f0:e8:56:ab:b2:4e:fa: 00:9c:f5:77:2c:12:f3:48:75:06:cc:79:5b:2b:1a: 96:9b:5f:1b:25:e3:51:3d:aa:f8:18:67:44:a0:64: 9d:c5:66:4d:a8:7c:32:a2:62:01:88:eb:49:00:94: 7c:6a:6f:e5:c2:11:02:07:60:19:f3:2e:99:24:1d: 8c:37:92:a7:86:98:5f:31:65:94:cc:f3:ad:77:b5: 3e:9d:48:b9:8a:70:48:77:b8:49:79:ee:b8:36:d2: e5:46:e0:ca:52:5c:39:bf:19:42:c2:47:b6:86:32: 40:21:bc:c3:33:20:16:61:f6:95:85:70:2d:1a:a7: 99:c1:49:a5:24:bb:82:6a:88:d1:09:e1:32:93:c2: fa:84:44:52:51:d6:5d:36:88:7e:53:d9:58:b9:cb: 50:dd:0a:59:40:07:0d:56:17:e1:f6:70:a0:99:e1: f3:23:77:b6:5a:70:e6:3d:11:cc:27:6e:94:c0:17: f3:f2:b2:55:ea:a4:7e:5b:b7:14:08:5a:00:6b:89: 62:a5:b6:6b:4a:f3:79:e7:e5:11:d6:32:b3:01:d1: 5e:39:12:30:23:5d:e7:32:be:ef:79:01:a7:ac:46: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:24:31:45:48:B0:21:FD:07:7B:35:ED:26:E8:61:80:99:71:BC X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:53:38:9a:6c:8f:e6:e1:fc:8b:f7:05:bf:9e:cf:0a:06:36: 4e:00:b5:55:44:53:d7:76:b0:cb:6c:91:16:46:b0:47:1e:e1: 7f:ce:db:10:8b:be:06:a1:24:e4:38:27:be:a1:c2:92:32:09: 50:ed:33:dd:99:fd:c6:d9:0e:73:b6:3d:a9:ed:7b:c8:22:7a: 39:26:59:06:73:16:01:ea:83:fb:0e:f9:69:54:e0:0e:01:c4: df:c1:bb:a2:23:2c:33:85:84:ae:8c:ec:8b:61:d2:a3:ee:a3: 85:fd:ee:4c:72:27:e7:a2:f7:fa:39:23:3f:59:1a:14:86:7f: de:b2:a1:50:d3:da:07:43:90:5f:16:ca:69:3f:38:e5:74:e2: 9c:d1:cd:ff:6b:f3:5f:d8:87:19:b2:05:09:54:f6:f2:97:ef: 35:87:6f:f8:54:02:5a:3f:bd:3f:86:db:e0:4a:4d:56:3b:81: 62:eb:4c:76:d5:8d:ae:7e:46:e3:cb:db:04:4a:34:36:c6:f7: 51:b7:1e:28:b0:d6:ae:5e:9c:98:86:2a:61:a2:79:32:63:73: a6:0f:b8:a8:c7:53:bb:8f:2b:25:f2:37:41:74:28:aa:1e:58: 36:4d:87:2a:51:40:01:a7:01:23:2f:ea:90:4e:3d:1b:48:30: 56:d9:5c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHnFyw0di41Bydh8uFYtv+7FFLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTExMDMwNzA2MTFaFw0yNTExMDYxNzU2MTFaMDMxMTAvBgNV BAMTKEIyRDgyNDMxNDU0OEIwMjFGRDA3N0IzNUVEMjZFODYxODA5OTcxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvnxhDFNfY9TSJlpSaxR4j7aa Q+lh8OhWq7JO+gCc9XcsEvNIdQbMeVsrGpabXxsl41E9qvgYZ0SgZJ3FZk2ofDKi YgGI60kAlHxqb+XCEQIHYBnzLpkkHYw3kqeGmF8xZZTM8613tT6dSLmKcEh3uEl5 7rg20uVG4MpSXDm/GULCR7aGMkAhvMMzIBZh9pWFcC0ap5nBSaUku4JqiNEJ4TKT wvqERFJR1l02iH5T2Vi5y1DdCllABw1WF+H2cKCZ4fMjd7ZacOY9EcwnbpTAF/Py slXqpH5btxQIWgBriWKltmtK83nn5RHWMrMB0V45EjAjXecyvu95AaesRibzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstgkMUVIsCH9B3s17SboYYCZcbwwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpTOJpsj+bh/Iv3Bb+ezwoGNk4AtVVEU9d2 sMtskRZGsEce4X/O2xCLvgahJOQ4J76hwpIyCVDtM92Z/cbZDnO2Pante8giejkm WQZzFgHqg/sO+WlU4A4BxN/Bu6IjLDOFhK6M7Ith0qPuo4X97kxyJ+ei9/o5Iz9Z GhSGf96yoVDT2gdDkF8Wymk/OOV04pzRzf9r81/YhxmyBQlU9vKX7zWHb/hUAlo/ vT+G2+BKTVY7gWLrTHbVja5+RuPL2wRKNDbG91G3Hiiw1q5enJiGKmGieTJjc6YP uKjHU7uPKyXyN0F0KKoeWDZNhypRQAGnASMv6pBOPRtIMFbZXDQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:25:56 2025 by rpki-client