$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: j/t1bQMQNpNUturzuaxPB0JhhaoMuXuTMzNi1hkFuAc= Subject key identifier: 78:5E:A2:0B:19:6F:67:10:8D:3E:EC:4D:10:3B:B5:4D:A5:A3:7C:B7 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 096E614F9530A5483955CBFEF8B7A445C6667A4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 0114 Signing time: Tue 04 Nov 2025 23:31:00 +0000 Manifest this update: Tue 04 Nov 2025 23:26:00 +0000 Manifest next update: Sat 08 Nov 2025 07:49:00 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: N6ghisyjGaLnlK0au1yM0dZRtmz86MGR/e1eYNLsdZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6e:61:4f:95:30:a5:48:39:55:cb:fe:f8:b7:a4:45:c6:66:7a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Nov 4 23:26:00 2025 GMT Not After : Nov 8 07:49:00 2025 GMT Subject: CN=785EA20B196F67108D3EEC4D103BB54DA5A37CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:02:c1:e3:74:fa:84:9a:2c:77:76:3b:57: 91:c8:ad:b8:61:73:a6:7a:ca:54:9f:21:c0:92:c0: 92:84:e7:95:0d:38:c2:17:cd:2d:03:71:e0:bf:60: 0f:ce:6d:f9:44:38:40:d8:37:70:78:63:6c:e5:d0: c9:c7:11:9d:1c:6d:1d:f2:8f:28:7c:dc:d1:12:b1: b7:13:33:df:a8:ae:90:55:54:40:6e:98:05:4e:0e: f6:d7:8e:ad:b5:fd:4f:9d:8e:cc:99:26:a3:76:8f: 45:79:55:9b:9f:27:03:08:cb:7e:57:22:58:b0:a6: 61:25:f3:dc:59:ec:64:14:65:88:ed:ea:f6:24:d2: af:e6:43:90:56:0b:53:59:89:b2:7a:0d:40:20:78: b4:bd:61:ef:b1:cb:cb:71:b7:78:84:e2:23:af:2b: 86:93:b1:2e:3c:47:b9:c9:3b:b2:82:a0:d0:fc:6f: a9:ee:bd:d3:a8:29:30:56:10:1e:5c:7e:cf:79:a8: 1a:f6:89:59:4d:93:f0:ec:33:d8:e9:e6:d4:e4:16: dd:78:9b:53:66:a4:c7:e7:ff:fc:fe:2b:09:e2:a2: ca:85:d3:0b:88:74:3a:25:bb:58:aa:71:01:e7:14: 73:77:a9:23:25:18:c4:e9:19:64:d4:28:32:a2:a9: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:A2:0B:19:6F:67:10:8D:3E:EC:4D:10:3B:B5:4D:A5:A3:7C:B7 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:93:a1:aa:da:82:a6:75:bd:9b:03:23:95:3f:ab:cb:7b:21: e6:98:d9:da:33:06:f7:59:57:ce:95:f0:2f:43:b1:73:0b:83: 04:10:36:d4:eb:80:94:df:e3:c9:ef:ec:92:97:72:a0:7e:9c: c2:13:24:6a:30:37:c5:2e:41:95:57:5f:75:1a:9b:0e:fc:b3: 22:09:26:60:2e:1d:dc:21:7c:93:03:55:53:68:de:7a:5b:44: bc:44:c2:64:22:18:99:44:e7:e6:2e:5f:90:41:e2:02:76:b7: f7:ab:20:4b:80:0a:49:3b:48:54:56:01:2e:91:12:cf:3e:b2: cb:98:57:19:8f:5b:a0:45:ac:47:52:7e:ee:ff:76:03:4a:1a: 99:8a:ca:ec:1c:3b:38:8a:44:07:75:b0:52:69:71:b9:99:d3: 57:c5:93:d6:68:a8:7d:3f:4d:02:f6:f2:7e:b2:18:2f:93:64: 3f:dc:5b:ba:a8:15:b9:1f:af:2b:e1:60:60:59:0a:b0:f5:0a: a0:92:e5:0f:0d:e6:c1:c5:2b:0d:3b:7a:cb:d6:ac:c8:19:13: d9:d8:97:36:3b:95:42:ed:83:43:a9:1e:bf:2b:7e:3d:3a:c8: db:60:48:43:01:1a:b3:5a:71:da:b0:5c:24:29:7c:ff:88:9f: 16:59:9a:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCW5hT5UwpUg5Vcv++LekRcZmekwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTExMDQyMzI2MDBaFw0yNTExMDgwNzQ5MDBaMDMxMTAvBgNV BAMTKDc4NUVBMjBCMTk2RjY3MTA4RDNFRUM0RDEwM0JCNTREQTVBMzdDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEALB43T6hJosd3Y7V5HIrbhh c6Z6ylSfIcCSwJKE55UNOMIXzS0DceC/YA/ObflEOEDYN3B4Y2zl0MnHEZ0cbR3y jyh83NESsbcTM9+orpBVVEBumAVODvbXjq21/U+djsyZJqN2j0V5VZufJwMIy35X IliwpmEl89xZ7GQUZYjt6vYk0q/mQ5BWC1NZibJ6DUAgeLS9Ye+xy8txt3iE4iOv K4aTsS48R7nJO7KCoND8b6nuvdOoKTBWEB5cfs95qBr2iVlNk/DsM9jp5tTkFt14 m1NmpMfn//z+KwniosqF0wuIdDolu1iqcQHnFHN3qSMlGMTpGWTUKDKiqR8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF6iCxlvZxCNPuxNEDu1TaWjfLcwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+ToaragqZ1vZsDI5U/q8t7IeaY2dozBvdZ V86V8C9DsXMLgwQQNtTrgJTf48nv7JKXcqB+nMITJGowN8UuQZVXX3Uamw78syIJ JmAuHdwhfJMDVVNo3npbRLxEwmQiGJlE5+YuX5BB4gJ2t/erIEuACkk7SFRWAS6R Es8+ssuYVxmPW6BFrEdSfu7/dgNKGpmKyuwcOziKRAd1sFJpcbmZ01fFk9ZoqH0/ TQL28n6yGC+TZD/cW7qoFbkfryvhYGBZCrD1CqCS5Q8N5sHFKw07esvWrMgZE9nY lzY7lULtg0OpHr8rfj06yNtgSEMBGrNacdqwXCQpfP+InxZZmu0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:32 2025 by rpki-client