$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: hMHsuC8bx8HGgDmJfm2m0mMMEJ72W+SGia9HOAyrL3s= Subject key identifier: 73:48:18:CA:53:3B:D1:4C:43:F3:7C:EB:80:A3:55:32:AD:1F:FC:1E Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 7E20F0D48873A549216302A6673AAC69B31A96D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: EE Signing time: Mon 03 Nov 2025 03:31:09 +0000 Manifest this update: Mon 03 Nov 2025 03:26:09 +0000 Manifest next update: Thu 06 Nov 2025 15:30:09 +0000 Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 2: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) 3: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 4: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: QZIel8mtcHCH90tFW3eCmQ3oYosK/t6VIQV3aFndAUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:20:f0:d4:88:73:a5:49:21:63:02:a6:67:3a:ac:69:b3:1a:96:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Nov 3 03:26:09 2025 GMT Not After : Nov 6 15:30:09 2025 GMT Subject: CN=734818CA533BD14C43F37CEB80A35532AD1FFC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:77:51:42:37:6b:6b:fd:78:39:e3:cf:48: c4:a1:41:16:95:92:a1:dd:5d:5f:62:86:a1:da:5b: fb:d9:b9:6f:6f:3f:13:cc:d2:71:e4:4d:bb:65:be: db:4a:e9:8b:d7:7b:d1:d8:8f:76:87:e6:1d:5e:c9: e1:65:cb:92:7a:9a:7f:de:6a:5b:1c:e8:84:08:52: ef:37:82:2c:bd:16:f2:a7:fb:c4:6b:4b:16:c1:b6: 95:7f:b1:75:65:3b:24:2d:e5:0e:0c:bd:3e:24:66: 9e:93:e8:51:18:3c:f4:08:78:ba:f8:cf:bf:a3:0b: 3e:75:f3:ea:74:a6:8c:d1:ba:d2:2a:5e:35:52:bd: 24:4a:6b:7f:46:85:2a:ad:7e:a5:05:13:f1:39:cb: 44:e3:c9:09:51:7d:cb:15:b7:fa:72:b3:6f:cf:75: 12:87:64:d6:2e:89:78:ca:6f:b8:d6:d0:cd:90:5a: e1:31:9c:3d:4f:15:12:08:76:26:f7:3b:1d:75:d1: c6:72:66:8f:78:e8:8f:71:07:fd:42:eb:ef:c7:e3: f0:93:b3:c0:1d:84:0f:5c:78:39:34:27:2c:c3:6a: da:86:ce:4a:da:9e:ce:af:27:3a:59:46:8a:33:d5: 4f:52:3d:ff:da:28:bc:f5:ab:02:3d:03:42:ad:fe: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:48:18:CA:53:3B:D1:4C:43:F3:7C:EB:80:A3:55:32:AD:1F:FC:1E X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:57:40:e2:7d:76:70:eb:f6:58:6b:5f:d8:ae:69:fa:36:4e: c5:06:7d:60:53:78:91:4c:62:51:1c:c3:14:46:24:9b:e5:a9: d4:46:f4:3d:ec:e2:63:05:ec:98:52:cb:61:8e:ba:b7:98:6e: 3a:61:ae:ab:4f:21:c0:80:f5:36:46:74:e3:40:70:4f:15:99: 06:2f:8a:31:18:1f:27:51:0d:e5:56:da:c8:f2:da:10:48:94: a2:79:dd:b5:5a:6f:eb:39:6c:f7:a2:67:ce:99:3b:6b:de:57: 7c:29:27:7f:ac:74:27:d5:59:95:6a:d1:f2:c0:36:0f:cb:a2: f3:53:79:d6:2f:26:3e:29:96:9e:26:ab:e7:19:41:00:22:70: 41:b7:e0:8f:d4:71:bc:fb:17:0a:1f:02:1e:7f:ca:a3:99:8b: 52:dc:6d:3b:ce:10:50:b2:b2:83:19:40:da:fd:f8:68:2f:d0: de:8d:68:96:69:b5:d8:bf:bd:a4:21:3d:2b:2f:42:4a:e0:b0: f3:0a:87:c4:c3:0b:d4:8a:3b:68:3b:af:87:b0:41:78:4b:0b: a3:8f:ba:5f:aa:f5:d4:0f:12:40:74:53:fe:66:1c:61:6d:53: f9:b3:db:9c:a1:da:c2:50:03:e6:09:03:2b:db:f6:19:bd:b8: 2a:aa:ce:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiDw1IhzpUkhYwKmZzqsabMaltIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTExMDMwMzI2MDlaFw0yNTExMDYxNTMwMDlaMDMxMTAvBgNV BAMTKDczNDgxOENBNTMzQkQxNEM0M0YzN0NFQjgwQTM1NTMyQUQxRkZDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXj3dRQjdra/14OePPSMShQRaV kqHdXV9ihqHaW/vZuW9vPxPM0nHkTbtlvttK6YvXe9HYj3aH5h1eyeFly5J6mn/e alsc6IQIUu83giy9FvKn+8RrSxbBtpV/sXVlOyQt5Q4MvT4kZp6T6FEYPPQIeLr4 z7+jCz518+p0pozRutIqXjVSvSRKa39GhSqtfqUFE/E5y0TjyQlRfcsVt/pys2/P dRKHZNYuiXjKb7jW0M2QWuExnD1PFRIIdib3Ox110cZyZo946I9xB/1C6+/H4/CT s8AdhA9ceDk0JyzDatqGzkrans6vJzpZRooz1U9SPf/aKLz1qwI9A0Kt/g3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0gYylM70UxD83zrgKNVMq0f/B4wHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdXQOJ9dnDr9lhrX9iuafo2TsUGfWBTeJFM YlEcwxRGJJvlqdRG9D3s4mMF7JhSy2GOureYbjphrqtPIcCA9TZGdONAcE8VmQYv ijEYHydRDeVW2sjy2hBIlKJ53bVab+s5bPeiZ86ZO2veV3wpJ3+sdCfVWZVq0fLA Ng/LovNTedYvJj4plp4mq+cZQQAicEG34I/Ucbz7FwofAh5/yqOZi1LcbTvOEFCy soMZQNr9+Ggv0N6NaJZptdi/vaQhPSsvQkrgsPMKh8TDC9SKO2g7r4ewQXhLC6OP ul+q9dQPEkB0U/5mHGFtU/mz25yh2sJQA+YJAyvb9hm9uCqqzrw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:50 2025 by rpki-client