$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: vWtQ6PbULxE9zenDI5559zqu0qc/ItH1nEPfkmGQ6m8= Subject key identifier: FE:B1:0A:ED:D3:4D:05:19:2B:CD:E6:6C:D4:50:DD:35:71:C0:89:D7 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 3019DE341C52321A325EF847A088203E75439655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01E9 Signing time: Mon 03 Nov 2025 19:50:58 +0000 Manifest this update: Mon 03 Nov 2025 19:45:58 +0000 Manifest next update: Fri 07 Nov 2025 05:47:58 +0000 Files and hashes: 1: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=) 2: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) 3: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: ZSh4cZD9Ai7jz/+kRnqNdNCmZVIaBU0kLCeN2wUJVsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:19:de:34:1c:52:32:1a:32:5e:f8:47:a0:88:20:3e:75:43:96:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Nov 3 19:45:58 2025 GMT Not After : Nov 7 05:47:58 2025 GMT Subject: CN=FEB10AEDD34D05192BCDE66CD450DD3571C089D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:07:a4:01:f3:b7:96:fe:43:a3:81:b1:d6: 11:58:fe:39:aa:a3:bc:b4:f8:2a:79:fd:43:82:53: 97:e4:46:6f:66:cc:2f:41:17:8d:18:d3:62:ec:66: ff:40:0c:95:9b:b8:e4:34:53:6a:6d:db:c0:e2:f9: 0c:f5:2c:67:3a:b3:05:4d:5e:b5:0a:05:4a:3e:1e: b4:de:2d:fa:ac:b7:d2:39:67:e8:ff:21:ac:f4:c2: b6:1c:bb:b2:49:0b:c1:55:0a:a0:46:06:ab:44:23: 27:9b:a6:0a:e4:2c:7e:63:c4:3b:05:a8:53:d5:95: 0b:f9:fa:11:f5:f1:52:9e:08:eb:44:38:68:c8:1d: 60:88:fe:86:1d:6d:b2:66:a2:42:db:fd:69:0a:0a: af:59:80:94:cb:96:53:83:e8:f3:ba:b6:99:42:03: e0:a0:75:a0:9e:22:f4:66:d4:7d:ae:d9:60:f8:5d: 03:d0:d1:1b:45:87:f9:4b:79:4b:3c:25:db:4f:70: 99:70:85:cd:74:2e:49:ba:9c:7d:ff:a9:75:82:a6: 1d:f5:b6:cf:b7:bf:72:4b:83:b8:2b:be:b4:6c:36: 37:6b:73:c3:2f:ca:00:e5:0d:77:fb:17:0d:66:70: b1:83:06:90:57:6b:e4:ab:41:ee:66:e9:52:cd:d9: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B1:0A:ED:D3:4D:05:19:2B:CD:E6:6C:D4:50:DD:35:71:C0:89:D7 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:5b:12:02:af:f0:f6:fb:cf:36:b1:fe:e6:14:61:05:27: e3:1a:9d:b3:25:63:34:a6:fc:07:15:20:3c:09:0f:48:1c:fc: 3f:a9:7d:e0:a8:0f:32:1a:42:f5:aa:2f:85:dc:a4:6a:51:74: 27:d8:3e:9b:3e:0b:e7:66:bd:15:70:e9:26:8c:ed:a1:a4:48: ce:b3:df:3f:47:45:dd:58:35:eb:20:77:95:0e:f8:50:0e:c1: ba:98:d9:f5:8c:a0:23:10:86:87:db:88:8e:a7:cb:9d:7a:75: f9:b8:20:d2:06:f5:48:42:d4:47:6f:1d:75:bd:3e:95:3d:dd: c6:ab:e4:8a:06:30:cc:b3:ec:4d:fa:4a:7e:70:f5:6e:d2:14: 69:1b:4f:e6:ce:ab:a7:84:a4:26:d0:d7:38:3d:d3:e5:91:07: d5:69:be:75:79:e9:ef:d8:62:56:d3:54:d8:87:cc:3d:2e:64: 5e:14:a8:f0:87:66:d9:33:f9:73:31:4c:37:ec:d1:65:f9:ea: d8:6f:ce:09:07:b1:84:5f:65:c4:77:fa:4c:6d:9a:98:9a:f2: 1d:38:62:b5:75:af:1e:7e:35:f3:86:5f:7a:a4:3d:bc:d2:c2: 6a:0d:b4:4e:63:75:35:73:2b:94:32:e8:49:58:df:92:c8:17: 97:34:3a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBneNBxSMhoyXvhHoIggPnVDllUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTExMDMxOTQ1NThaFw0yNTExMDcwNTQ3NThaMDMxMTAvBgNV BAMTKEZFQjEwQUVERDM0RDA1MTkyQkNERTY2Q0Q0NTBERDM1NzFDMDg5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YAekAfO3lv5Do4Gx1hFY/jmq o7y0+Cp5/UOCU5fkRm9mzC9BF40Y02LsZv9ADJWbuOQ0U2pt28Di+Qz1LGc6swVN XrUKBUo+HrTeLfqst9I5Z+j/Iaz0wrYcu7JJC8FVCqBGBqtEIyebpgrkLH5jxDsF qFPVlQv5+hH18VKeCOtEOGjIHWCI/oYdbbJmokLb/WkKCq9ZgJTLllOD6PO6tplC A+CgdaCeIvRm1H2u2WD4XQPQ0RtFh/lLeUs8JdtPcJlwhc10Lkm6nH3/qXWCph31 ts+3v3JLg7grvrRsNjdrc8MvygDlDXf7Fw1mcLGDBpBXa+SrQe5m6VLN2QSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rEK7dNNBRkrzeZs1FDdNXHAidcwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM5WxICr/D2+882sf7mFGEFJ+ManbMlYzSm /AcVIDwJD0gc/D+pfeCoDzIaQvWqL4XcpGpRdCfYPps+C+dmvRVw6SaM7aGkSM6z 3z9HRd1YNesgd5UO+FAOwbqY2fWMoCMQhofbiI6ny516dfm4INIG9UhC1EdvHXW9 PpU93car5IoGMMyz7E36Sn5w9W7SFGkbT+bOq6eEpCbQ1zg90+WRB9VpvnV56e/Y YlbTVNiHzD0uZF4UqPCHZtkz+XMxTDfs0WX56thvzgkHsYRfZcR3+kxtmpia8h04 YrV1rx5+NfOGX3qkPbzSwmoNtE5jdTVzK5Qy6ElY35LIF5c0Omw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:35:59 2025 by rpki-client