$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: 3PIAUu69iwzNadTWG2LfCLo/vbFK2UcnshDECZi4sW0= Subject key identifier: 1E:86:9E:33:13:1E:2D:69:19:D2:92:4E:3A:1A:99:7D:6F:7E:E7:46 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 6D64E023D69249F2420769A24E5157069BAA1078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: D9 Signing time: Mon 03 Nov 2025 20:51:36 +0000 Manifest this update: Mon 03 Nov 2025 20:46:36 +0000 Manifest next update: Fri 07 Nov 2025 01:20:36 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: jP9zqBLAfTnLOlSkg16oAu424NNqmKh9EisjB8E/Hcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:64:e0:23:d6:92:49:f2:42:07:69:a2:4e:51:57:06:9b:aa:10:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Nov 3 20:46:36 2025 GMT Not After : Nov 7 01:20:36 2025 GMT Subject: CN=1E869E33131E2D6919D2924E3A1A997D6F7EE746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:8d:e4:a3:1e:3a:13:4f:dd:8a:2a:b8:a5: 4f:cb:03:f2:39:e1:fb:4e:d3:4d:d5:e3:a7:e9:1a: 74:9b:a4:c5:77:52:bd:5e:70:c1:73:56:8f:6c:7b: 6f:c8:72:10:a3:53:76:df:e5:f1:e2:d8:bc:a0:72: 67:15:68:28:b4:86:1b:6f:7d:85:17:dd:3b:24:69: 99:61:a0:7e:0a:5c:73:53:57:ce:8a:99:6a:a6:7f: 99:ce:f7:ab:e0:2d:93:d8:e4:3e:ac:2d:70:13:a7: d2:c5:0e:20:ea:55:30:84:70:1b:94:30:22:36:33: 04:e3:7a:a5:3c:c4:c0:c3:22:75:b7:f1:26:6c:ff: cb:72:71:c9:4a:00:81:c6:77:a7:30:6a:86:8d:0c: 48:23:db:df:32:cf:c0:6b:40:b8:4d:49:45:29:97: 2a:e8:cb:2f:8c:02:0d:94:1d:bc:0f:a4:ab:ad:93: 47:3c:67:29:e0:72:ae:13:0a:fc:ad:97:11:09:65: 2c:0d:bf:e5:08:db:36:97:06:da:a6:56:df:09:73: 33:ec:50:c7:ef:bd:6f:25:2a:c9:18:de:cc:ce:63: bf:e2:33:a6:51:d6:87:8d:55:a6:0e:6d:5c:de:31: e0:6d:fe:4d:15:27:11:a3:d9:57:91:eb:13:22:63: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:9E:33:13:1E:2D:69:19:D2:92:4E:3A:1A:99:7D:6F:7E:E7:46 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6c:f9:93:9a:b3:5b:59:7b:52:f6:ee:92:8b:56:13:d9:2a: 8e:2d:3b:c5:38:29:84:d9:67:cd:4b:89:47:8f:53:87:72:15: cc:04:1d:55:5e:46:94:c1:7d:e9:10:6c:74:fb:be:04:22:50: 00:e3:a6:66:fd:f2:4f:f5:6a:88:07:73:ef:87:7e:0a:96:eb: 86:44:33:30:3b:07:75:3f:8e:ad:0b:bd:b0:1f:d3:1d:31:da: 33:72:fd:c3:a4:e2:12:d8:cd:ca:bf:cb:77:2c:cc:1d:5a:7b: 32:c8:7a:a9:c8:62:5b:f1:d4:ca:db:0e:6a:30:52:cf:a5:20: e2:28:77:ce:ff:a7:7b:9c:22:89:d8:09:03:4a:0d:d8:7e:ae: 52:0e:56:f8:7f:b3:b1:dd:b9:b3:ab:74:b9:dd:02:1a:6c:0d: 7a:09:ea:8f:b5:85:74:db:e9:33:a4:e4:95:3c:bf:a9:b2:48: b7:ca:fe:e4:4d:b2:06:1c:6c:ae:7d:43:6a:1f:fe:04:94:d9: ff:96:66:62:74:4f:59:ba:a4:ed:c6:59:b1:02:61:d1:35:0c: c9:e5:29:55:f8:6a:d1:4b:40:58:3f:87:36:75:51:d3:e9:21: 19:31:a7:2a:ac:cc:2d:c2:3d:9b:67:04:9c:c9:72:2a:6b:50: d8:e1:64:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWTgI9aSSfJCB2miTlFXBpuqEHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTExMDMyMDQ2MzZaFw0yNTExMDcwMTIwMzZaMDMxMTAvBgNV BAMTKDFFODY5RTMzMTMxRTJENjkxOUQyOTI0RTNBMUE5OTdENkY3RUU3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9o3kox46E0/diiq4pU/LA/I5 4ftO003V46fpGnSbpMV3Ur1ecMFzVo9se2/IchCjU3bf5fHi2LygcmcVaCi0hhtv fYUX3TskaZlhoH4KXHNTV86KmWqmf5nO96vgLZPY5D6sLXATp9LFDiDqVTCEcBuU MCI2MwTjeqU8xMDDInW38SZs/8tycclKAIHGd6cwaoaNDEgj298yz8BrQLhNSUUp lyroyy+MAg2UHbwPpKutk0c8Zyngcq4TCvytlxEJZSwNv+UI2zaXBtqmVt8JczPs UMfvvW8lKskY3szOY7/iM6ZR1oeNVaYObVzeMeBt/k0VJxGj2VeR6xMiY+xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHoaeMxMeLWkZ0pJOOhqZfW9+50YwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNs+ZOas1tZe1L27pKLVhPZKo4tO8U4KYTZ Z81LiUePU4dyFcwEHVVeRpTBfekQbHT7vgQiUADjpmb98k/1aogHc++HfgqW64ZE MzA7B3U/jq0LvbAf0x0x2jNy/cOk4hLYzcq/y3cszB1aezLIeqnIYlvx1MrbDmow Us+lIOIod87/p3ucIonYCQNKDdh+rlIOVvh/s7HdubOrdLndAhpsDXoJ6o+1hXTb 6TOk5JU8v6mySLfK/uRNsgYcbK59Q2of/gSU2f+WZmJ0T1m6pO3GWbECYdE1DMnl KVX4atFLQFg/hzZ1UdPpIRkxpyqszC3CPZtnBJzJciprUNjhZNU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:27 2025 by rpki-client