$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: +pLd+dMLSBrFrTAcvKL+iV4abZx1wjIneFQVzf4g488= Subject key identifier: 25:19:B1:62:6A:AA:6C:89:29:18:C8:8E:FB:6B:5C:12:E4:7B:54:E2 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 3C408891E25FC070AA45A330C9CAC93A19E2B693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 024A Signing time: Tue 04 Nov 2025 17:21:59 +0000 Manifest this update: Tue 04 Nov 2025 17:16:59 +0000 Manifest next update: Sat 08 Nov 2025 04:43:59 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: WpksZGgG+NvEEhPExnh4Abwv2+U3+usmynOUD3EnjtQ=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:40:88:91:e2:5f:c0:70:aa:45:a3:30:c9:ca:c9:3a:19:e2:b6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Nov 4 17:16:59 2025 GMT Not After : Nov 8 04:43:59 2025 GMT Subject: CN=2519B1626AAA6C892918C88EFB6B5C12E47B54E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:9e:4a:e6:2b:ba:ee:d3:40:76:18:8b:5f: ba:5c:5d:2c:9f:5e:37:86:9d:a8:05:7f:ab:3c:80: b2:db:f7:26:4b:64:b6:61:0b:9c:aa:57:0d:53:cb: 52:52:bd:ae:54:3f:4d:f8:8f:77:a4:da:de:23:7a: 0f:4e:51:98:90:61:a8:7f:73:ce:c6:18:50:74:a4: bc:1b:63:5a:af:23:27:e6:6f:6f:00:84:af:71:ab: d7:9e:a2:21:69:9c:51:7b:f1:ba:ab:99:2e:4b:d8: 9c:91:9c:71:2f:a3:88:3b:e1:32:32:b0:a8:83:e9: 6d:43:64:f9:b0:89:2c:07:4f:73:2e:3c:7a:66:6d: c1:04:3a:81:e3:ea:8f:ce:ef:26:3c:6f:3d:5c:f2: 77:0e:75:c9:06:6b:65:c7:31:e1:ee:19:ee:b6:3e: 74:49:80:97:22:77:96:24:0b:e2:c5:73:ae:26:08: ff:12:51:01:41:4f:70:1e:13:7a:da:5f:d1:47:43: 5b:dc:16:fb:50:fc:c7:c5:e3:0c:3f:99:1a:15:bc: ab:fa:da:68:75:8f:15:54:89:ef:5a:7e:11:3f:9f: 3e:07:0b:6f:58:c1:46:fd:28:72:f9:3a:6b:aa:06: 9e:e5:60:90:63:93:70:dd:24:26:fa:1f:e8:0a:01: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:B1:62:6A:AA:6C:89:29:18:C8:8E:FB:6B:5C:12:E4:7B:54:E2 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:dd:d7:dc:fa:65:8f:0a:7c:77:76:1a:70:c3:fa:cd:91: 04:0a:a9:3d:0b:b4:54:10:a5:1a:ca:a3:78:42:d2:ee:b7:11: 2e:5b:fd:bc:57:37:cb:1f:da:8e:55:38:91:c1:45:ec:73:e0: 50:08:bd:cd:12:dc:96:12:f3:d9:73:10:50:4e:4a:06:56:58: e7:c9:8d:4e:46:f5:59:e6:1f:88:84:fd:f9:20:11:02:3c:a3: a7:fc:31:e3:b8:df:7f:25:bd:86:a8:5d:11:2d:55:cf:08:61: f4:0a:ce:7c:c2:61:5a:35:88:90:35:39:13:d6:08:d7:a2:bc: 6d:6d:e4:52:89:04:45:05:2c:91:ce:6a:df:53:7d:bd:40:38: 74:2a:f2:6e:78:81:32:ad:d2:68:b3:57:91:9b:13:1e:d9:e2: 83:a1:37:6b:82:73:d5:9b:86:d7:87:88:ec:d5:04:ec:d1:ab: d6:07:9e:c6:72:3a:3f:42:6a:a8:31:8c:bf:fe:f1:79:b6:fc: 16:cf:b0:bc:e8:af:20:c3:a7:92:ac:6b:10:88:c4:70:75:f2: f6:a9:53:cb:ec:20:31:c9:5c:27:5c:1b:87:b1:17:92:bb:78: b1:5b:3c:0c:5c:ef:8d:a4:6e:25:49:5b:dc:b8:a4:07:63:3d: 7b:a8:4e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPECIkeJfwHCqRaMwycrJOhnitpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTExMDQxNzE2NTlaFw0yNTExMDgwNDQzNTlaMDMxMTAvBgNV BAMTKDI1MTlCMTYyNkFBQTZDODkyOTE4Qzg4RUZCNkI1QzEyRTQ3QjU0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0p5K5iu67tNAdhiLX7pcXSyf XjeGnagFf6s8gLLb9yZLZLZhC5yqVw1Ty1JSva5UP034j3ek2t4jeg9OUZiQYah/ c87GGFB0pLwbY1qvIyfmb28AhK9xq9eeoiFpnFF78bqrmS5L2JyRnHEvo4g74TIy sKiD6W1DZPmwiSwHT3MuPHpmbcEEOoHj6o/O7yY8bz1c8ncOdckGa2XHMeHuGe62 PnRJgJcid5YkC+LFc64mCP8SUQFBT3AeE3raX9FHQ1vcFvtQ/MfF4ww/mRoVvKv6 2mh1jxVUie9afhE/nz4HC29YwUb9KHL5OmuqBp7lYJBjk3DdJCb6H+gKAb2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJRmxYmqqbIkpGMiO+2tcEuR7VOIwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7u3dfc+mWPCnx3dhpww/rNkQQKqT0LtFQQ pRrKo3hC0u63ES5b/bxXN8sf2o5VOJHBRexz4FAIvc0S3JYS89lzEFBOSgZWWOfJ jU5G9VnmH4iE/fkgEQI8o6f8MeO4338lvYaoXREtVc8IYfQKznzCYVo1iJA1ORPW CNeivG1t5FKJBEUFLJHOat9Tfb1AOHQq8m54gTKt0mizV5GbEx7Z4oOhN2uCc9Wb hteHiOzVBOzRq9YHnsZyOj9CaqgxjL/+8Xm2/BbPsLzoryDDp5KsaxCIxHB18vap U8vsIDHJXCdcG4exF5K7eLFbPAxc742kbiVJW9y4pAdjPXuoTuc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:06 2025 by rpki-client