$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: dicdgzfTWW4l0p+vdi7+6bN+7N3kRBf52XUChfVQjgk= Subject key identifier: A4:9E:A9:25:05:9B:BB:89:CA:C1:3A:B3:12:90:F3:DC:6C:5A:86:2D Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 5B7BBE26C8CA2D1DFD32E40A0A4443B9A5FC947F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 01C3 Signing time: Sun 02 Nov 2025 19:10:44 +0000 Manifest this update: Sun 02 Nov 2025 19:05:44 +0000 Manifest next update: Thu 06 Nov 2025 02:57:44 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: j6oxs2o3xQ6g3JEmVdI1kGBqW7fZJufKmPvgCLHmPvs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7b:be:26:c8:ca:2d:1d:fd:32:e4:0a:0a:44:43:b9:a5:fc:94:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Nov 2 19:05:44 2025 GMT Not After : Nov 6 02:57:44 2025 GMT Subject: CN=A49EA925059BBB89CAC13AB31290F3DC6C5A862D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:91:86:d2:7f:42:14:08:5a:41:1a:cd:9b: 9a:45:36:1e:69:4f:d5:62:4a:f5:90:63:de:b8:1f: 2f:95:a7:d7:87:05:d4:a5:6f:9c:52:2d:f4:ec:d6: 02:30:4e:ce:ad:4b:e8:43:e0:28:2f:0f:76:d6:f4: f4:3c:31:6e:ca:32:4c:58:11:9b:a6:28:b4:37:6a: 51:d9:b4:a9:f7:05:ae:dd:e2:76:87:e6:bb:4f:fc: 66:29:64:0a:f4:59:54:aa:25:11:85:bb:7a:f3:50: 8a:06:f2:5f:00:23:e9:01:43:bb:d2:fd:87:78:51: 50:f4:9a:f2:41:af:3a:13:35:5d:b9:e1:ed:e4:4a: 9c:73:19:5f:91:91:2a:02:33:a6:f3:41:0c:d6:89: 28:ce:75:50:57:54:9f:36:ce:03:eb:45:c6:0b:50: 78:f2:f5:e5:59:92:62:f8:6c:3d:f6:44:fa:4b:63: d9:5b:32:34:fc:2c:0c:b7:85:21:9c:92:cb:3f:c6: b8:80:50:bc:6e:83:ed:ce:f9:a2:73:e5:66:66:d6: 12:ed:ba:75:1a:3d:87:25:7d:22:ca:1a:9b:b6:33: 8c:59:9c:a9:ee:a9:15:96:cc:a0:1a:35:04:25:5e: 7b:fe:b5:d5:19:9d:27:f1:a9:35:b0:c5:83:ae:c7: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9E:A9:25:05:9B:BB:89:CA:C1:3A:B3:12:90:F3:DC:6C:5A:86:2D X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d4:2c:84:9b:f8:43:93:38:c0:94:b2:c6:17:c3:ec:6d:3b: 96:e2:1e:25:4a:29:85:70:6d:0a:0c:55:0b:ec:d4:85:6f:96: 5b:ba:4c:ff:39:e1:31:d2:80:f7:05:3f:75:c4:d2:2f:98:ae: cc:6b:30:16:8f:52:44:e4:e8:40:64:f5:01:15:3e:fb:11:eb: fb:48:c6:82:3e:65:12:51:05:7c:a0:eb:b5:56:aa:df:13:33: 17:b2:3a:c1:4f:7b:b4:c4:80:a5:7a:08:bb:db:c6:51:32:ed: ce:80:82:94:86:f8:d0:fe:ef:94:26:bc:13:7f:b2:25:04:e6: 4b:c2:3f:bb:02:b5:6a:15:7e:b9:75:4f:58:e1:bb:e5:6f:f8: f2:bb:50:ed:55:11:49:36:87:62:54:a4:f3:1b:a1:78:52:32: b3:03:a5:a1:00:91:5c:09:5a:f0:93:e5:27:68:55:26:b5:06: ee:e5:3b:c1:63:c8:e6:0a:a5:00:98:41:28:f6:14:b1:eb:95: 45:05:50:5d:f0:aa:57:9c:9b:2e:04:b7:4c:6d:59:ee:52:ef: 23:d9:7a:bf:eb:5e:6a:4e:49:7b:0e:89:b9:fb:fa:f8:2a:da: be:2c:4c:a5:c0:69:ba:a7:bd:31:55:4d:34:6d:94:89:97:9c: 9a:35:73:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3u+JsjKLR39MuQKCkRDuaX8lH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTExMDIxOTA1NDRaFw0yNTExMDYwMjU3NDRaMDMxMTAvBgNV BAMTKEE0OUVBOTI1MDU5QkJCODlDQUMxM0FCMzEyOTBGM0RDNkM1QTg2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg5GG0n9CFAhaQRrNm5pFNh5p T9ViSvWQY964Hy+Vp9eHBdSlb5xSLfTs1gIwTs6tS+hD4CgvD3bW9PQ8MW7KMkxY EZumKLQ3alHZtKn3Ba7d4naH5rtP/GYpZAr0WVSqJRGFu3rzUIoG8l8AI+kBQ7vS /Yd4UVD0mvJBrzoTNV254e3kSpxzGV+RkSoCM6bzQQzWiSjOdVBXVJ82zgPrRcYL UHjy9eVZkmL4bD32RPpLY9lbMjT8LAy3hSGckss/xriAULxug+3O+aJz5WZm1hLt unUaPYclfSLKGpu2M4xZnKnuqRWWzKAaNQQlXnv+tdUZnSfxqTWwxYOux3B1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJ6pJQWbu4nKwTqzEpDz3Gxahi0wHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErULISb+EOTOMCUssYXw+xtO5biHiVKKYVw bQoMVQvs1IVvllu6TP854THSgPcFP3XE0i+YrsxrMBaPUkTk6EBk9QEVPvsR6/tI xoI+ZRJRBXyg67VWqt8TMxeyOsFPe7TEgKV6CLvbxlEy7c6AgpSG+ND+75QmvBN/ siUE5kvCP7sCtWoVfrl1T1jhu+Vv+PK7UO1VEUk2h2JUpPMboXhSMrMDpaEAkVwJ WvCT5SdoVSa1Bu7lO8FjyOYKpQCYQSj2FLHrlUUFUF3wqlecmy4Et0xtWe5S7yPZ er/rXmpOSXsOibn7+vgq2r4sTKXAabqnvTFVTTRtlImXnJo1c7c= -----END CERTIFICATE-----Generated at Tue Nov 4 22:55:26 2025 by rpki-client