$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: mpWMC852MN43m1xjTa4VtHzKZmZCDtYVzyqOHWgkaW4= Subject key identifier: 91:C5:88:CC:CE:6A:4E:EA:78:37:80:2C:93:5C:96:F4:1B:8F:0A:C4 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 18BD603D63769A4BC76465EE288B76905071804E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0284 Signing time: Tue 04 Nov 2025 14:31:07 +0000 Manifest this update: Tue 04 Nov 2025 14:26:07 +0000 Manifest next update: Sat 08 Nov 2025 01:39:07 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: lDf/bdnSR/lPQCyxXnS6VtB/TpYOuevQPSefKpNjKzU=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bd:60:3d:63:76:9a:4b:c7:64:65:ee:28:8b:76:90:50:71:80:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Nov 4 14:26:07 2025 GMT Not After : Nov 8 01:39:07 2025 GMT Subject: CN=91C588CCCE6A4EEA7837802C935C96F41B8F0AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:b9:2f:32:05:b6:6a:3d:b5:12:c7:b3:92: 60:7e:62:fe:95:0b:1d:bd:d2:be:17:fc:75:5a:2b: 3a:f7:1c:04:17:2c:af:5f:50:0e:6a:aa:82:8e:33: 1c:bc:f5:42:90:42:51:81:a9:2b:45:35:9f:32:a4: ed:d4:11:55:c5:8b:31:46:55:d7:47:66:4b:41:b3: 8e:04:85:27:a5:d5:4d:f9:01:26:bf:be:00:51:f6: bd:c5:2e:5b:9f:4a:d7:57:9c:e2:0e:3a:be:c0:9b: cb:70:67:87:d5:61:09:2c:53:ea:e3:f5:d4:e2:fa: c2:55:50:cb:6a:f5:92:ad:18:8d:55:dc:ee:8c:60: 73:de:9b:d1:b9:39:ac:37:fa:af:c2:44:2a:fb:6f: 69:d7:f4:de:9b:3e:1b:14:de:c1:be:33:d1:35:45: 73:d2:1f:91:13:2e:40:bd:ad:60:ea:a4:9f:c0:bf: 4c:2e:4c:fc:a4:a2:1b:46:8c:0c:38:59:30:4c:f9: d1:1c:75:5b:f9:00:24:08:06:99:cb:db:30:d1:6a: 4d:d4:4c:43:ea:ef:42:21:a1:bc:61:d1:a2:77:a6: 17:0a:bb:a7:92:53:fd:52:ad:4a:dc:ac:31:19:7d: 27:52:b7:9d:b5:d5:c6:0b:f9:1c:05:cb:4d:9c:a7: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:88:CC:CE:6A:4E:EA:78:37:80:2C:93:5C:96:F4:1B:8F:0A:C4 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:56:8c:c6:01:57:f0:d1:2f:84:b1:b4:3c:fb:af:d2:2a: 9e:4f:d6:35:91:af:81:2a:16:73:2c:2e:7f:38:84:9e:b2:50: 01:65:c7:1c:9b:4d:f0:31:45:78:e9:4c:9e:11:c3:41:be:2d: 41:05:fe:95:f4:59:b5:2f:c1:33:10:9e:05:ec:27:20:89:54: 74:9a:6f:8f:75:64:0b:4f:8e:f6:8f:97:65:7d:5a:dc:f2:01: dc:47:58:f0:57:a3:17:45:3d:8a:85:8a:ab:e3:39:f3:b7:24: e8:92:e4:d2:db:b7:3b:fd:8a:a2:b0:d4:b3:54:67:28:37:9d: 52:2e:6c:2d:be:a5:07:fb:17:b0:a6:da:9a:c1:83:3f:2e:59: 46:f4:e7:89:95:4f:c5:b6:f6:63:fd:ff:3a:48:0e:a5:1b:3b: 0d:43:be:81:25:5e:89:5c:f3:83:89:74:b2:dc:af:b9:a3:51: a2:be:6e:84:80:f9:06:bd:42:5a:3e:bc:39:c0:5b:87:ef:cb: 29:0e:ae:e2:cb:01:17:61:4a:0d:d4:1a:68:49:62:24:1a:57: 45:97:4e:bf:36:52:5f:b5:5b:c1:f2:17:ce:88:ce:f5:99:a2: 36:42:81:6e:2f:b9:0e:10:aa:ba:4e:97:34:4b:54:8e:99:40: 70:dc:ab:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGL1gPWN2mkvHZGXuKIt2kFBxgE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTExMDQxNDI2MDdaFw0yNTExMDgwMTM5MDdaMDMxMTAvBgNV BAMTKDkxQzU4OENDQ0U2QTRFRUE3ODM3ODAyQzkzNUM5NkY0MUI4RjBBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75bkvMgW2aj21EsezkmB+Yv6V Cx290r4X/HVaKzr3HAQXLK9fUA5qqoKOMxy89UKQQlGBqStFNZ8ypO3UEVXFizFG VddHZktBs44EhSel1U35ASa/vgBR9r3FLlufStdXnOIOOr7Am8twZ4fVYQksU+rj 9dTi+sJVUMtq9ZKtGI1V3O6MYHPem9G5Oaw3+q/CRCr7b2nX9N6bPhsU3sG+M9E1 RXPSH5ETLkC9rWDqpJ/Av0wuTPykohtGjAw4WTBM+dEcdVv5ACQIBpnL2zDRak3U TEPq70Ihobxh0aJ3phcKu6eSU/1SrUrcrDEZfSdSt5211cYL+RwFy02cp0w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkcWIzM5qTup4N4Ask1yW9BuPCsQwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbGVozGAVfw0S+EsbQ8+6/SKp5P1jWRr4Eq FnMsLn84hJ6yUAFlxxybTfAxRXjpTJ4Rw0G+LUEF/pX0WbUvwTMQngXsJyCJVHSa b491ZAtPjvaPl2V9WtzyAdxHWPBXoxdFPYqFiqvjOfO3JOiS5NLbtzv9iqKw1LNU Zyg3nVIubC2+pQf7F7Cm2prBgz8uWUb054mVT8W29mP9/zpIDqUbOw1DvoElXolc 84OJdLLcr7mjUaK+boSA+Qa9Qlo+vDnAW4fvyykOruLLARdhSg3UGmhJYiQaV0WX Tr82Ul+1W8HyF86IzvWZojZCgW4vuQ4QqrpOlzRLVI6ZQHDcq68= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:50 2025 by rpki-client