$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: VOlNcSgbNpwfpI0vWW3mtKma0WORgNEYe814EeZGHzw= Subject key identifier: F4:C0:93:45:83:58:3B:DF:D8:DA:71:84:C3:FB:1F:5C:F5:75:22:7E Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 01209177BED748A78B81540888147B99EB2797BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 08:41:45 +0000 Manifest this update: Mon 03 Nov 2025 08:36:45 +0000 Manifest next update: Thu 06 Nov 2025 20:38:45 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: /yvcrrPS5R+d+LpY2KZnl0Tf04HQ+RG7yfLBUhm1aBI=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: R9+89SgRY/t0tmu72BY2SfLfNg/9wdtNupYFgMHeobM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:20:91:77:be:d7:48:a7:8b:81:54:08:88:14:7b:99:eb:27:97:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Nov 3 08:36:45 2025 GMT Not After : Nov 6 20:38:45 2025 GMT Subject: CN=F4C0934583583BDFD8DA7184C3FB1F5CF575227E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:e9:52:07:bc:96:ea:46:8d:be:12:ad:e6: 86:90:0a:4b:d9:c2:47:be:e0:c2:50:3b:20:23:c1: 2e:6a:c9:53:54:4e:2b:5e:7d:6c:14:67:fc:1b:6d: 89:2b:56:e2:fc:36:ad:41:48:82:2b:e2:4f:d4:22: 77:31:d4:2a:ab:25:27:49:9e:e4:46:6d:f7:e6:15: 75:16:d6:c9:f6:1c:b6:5d:d2:db:ad:65:1c:fc:c8: c2:63:5a:b6:e4:ea:c1:c1:ad:86:ee:a5:17:76:1b: 89:a6:fc:92:94:83:9c:62:16:12:3d:0d:e3:1c:79: 2f:db:ac:c7:d0:ff:c5:59:d5:bf:5d:2d:08:c8:2f: d8:cc:a5:3c:c7:3c:0c:7c:63:90:cb:8e:09:a4:c9: 1f:57:03:f8:49:e9:2f:bd:58:29:6d:e4:65:57:ac: ae:35:ce:e3:8e:14:27:f6:68:e9:1e:b7:77:3f:a3: be:fd:15:c4:34:9b:44:ce:8d:ce:d9:7f:1f:41:30: dd:11:25:d5:eb:d7:6a:59:78:cf:79:80:ab:98:0a: 10:bd:49:15:75:a1:0b:95:4b:7c:f7:60:cd:d9:ef: 6a:eb:c0:cd:f2:a7:f5:d0:eb:82:8e:cc:03:33:e4: ee:f2:0d:fa:78:24:82:1b:5f:32:b4:6d:d5:34:77: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:93:45:83:58:3B:DF:D8:DA:71:84:C3:FB:1F:5C:F5:75:22:7E X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:49:ea:e7:aa:75:8a:72:9e:b1:b5:35:3c:bb:dd:68:2c:d4: be:38:95:0f:bf:a8:cd:c1:29:ef:23:ae:94:db:40:c4:42:08: bb:16:88:df:cc:e6:29:ab:00:55:36:61:d9:2e:7d:6d:1e:9b: 3a:5b:9f:52:5d:c1:ee:d7:51:82:e4:ed:f6:84:b8:0b:8e:3c: 1d:d2:3d:9b:48:29:2b:b8:6e:61:cf:84:79:2b:05:d5:95:40: fd:6c:3f:15:b0:8e:f5:a7:b7:13:1a:60:6a:f1:d0:ce:b4:78: a8:01:21:b1:78:70:dc:bd:01:06:9e:e5:ae:c4:6a:ba:90:83: 1e:12:20:17:a6:99:f1:e8:b2:ff:5c:09:11:a1:ef:a0:45:95: d0:a0:bc:a9:bf:23:79:1b:0c:a8:f0:cf:e5:62:ea:d2:9f:a1: cc:49:28:52:ba:04:84:f4:de:2a:fe:fa:dd:80:ba:eb:ca:b5: 6c:96:c0:0f:c7:49:eb:d6:5d:f1:29:b7:d5:fd:ee:ca:da:39: 93:92:26:3a:ed:18:e7:37:b4:7a:0e:0a:ea:1a:4e:f3:c6:f2: 91:dd:fa:1e:92:fb:67:11:4d:10:59:f1:8b:9c:bc:4f:fd:36: d4:40:ce:d3:81:ce:76:5a:12:84:02:02:76:11:1a:ea:07:c6: 40:ca:c4:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASCRd77XSKeLgVQIiBR7mesnl7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTExMDMwODM2NDVaFw0yNTExMDYyMDM4NDVaMDMxMTAvBgNV BAMTKEY0QzA5MzQ1ODM1ODNCREZEOERBNzE4NEMzRkIxRjVDRjU3NTIyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dOlSB7yW6kaNvhKt5oaQCkvZ wke+4MJQOyAjwS5qyVNUTitefWwUZ/wbbYkrVuL8Nq1BSIIr4k/UIncx1CqrJSdJ nuRGbffmFXUW1sn2HLZd0tutZRz8yMJjWrbk6sHBrYbupRd2G4mm/JKUg5xiFhI9 DeMceS/brMfQ/8VZ1b9dLQjIL9jMpTzHPAx8Y5DLjgmkyR9XA/hJ6S+9WClt5GVX rK41zuOOFCf2aOket3c/o779FcQ0m0TOjc7Zfx9BMN0RJdXr12pZeM95gKuYChC9 SRV1oQuVS3z3YM3Z72rrwM3yp/XQ64KOzAMz5O7yDfp4JIIbXzK0bdU0d9QTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MCTRYNYO9/Y2nGEw/sfXPV1In4wHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBJ6ueqdYpynrG1NTy73Wgs1L44lQ+/qM3B Ke8jrpTbQMRCCLsWiN/M5imrAFU2YdkufW0emzpbn1Jdwe7XUYLk7faEuAuOPB3S PZtIKSu4bmHPhHkrBdWVQP1sPxWwjvWntxMaYGrx0M60eKgBIbF4cNy9AQae5a7E arqQgx4SIBemmfHosv9cCRGh76BFldCgvKm/I3kbDKjwz+Vi6tKfocxJKFK6BIT0 3ir++t2AuuvKtWyWwA/HSevWXfEpt9X97sraOZOSJjrtGOc3tHoOCuoaTvPG8pHd +h6S+2cRTRBZ8YucvE/9NtRAztOBznZaEoQCAnYRGuoHxkDKxGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:08 2025 by rpki-client