$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: JIgiJgXcIZy4U3y198YjvRpFdGAW8RES/0cbRrE73vQ= Subject key identifier: 76:EB:8B:F7:F9:E2:19:AC:D6:A3:99:C7:48:68:B5:4F:9D:52:9D:27 Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 46A5D7D965F84F700FCCF19CBC8E53C4AA6CB2D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 0221 Signing time: Mon 03 Nov 2025 23:51:10 +0000 Manifest this update: Mon 03 Nov 2025 23:46:10 +0000 Manifest next update: Fri 07 Nov 2025 10:56:10 +0000 Files and hashes: 1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: PsVHvsDQBU+PVOO4d26ClKdy8USMt+N8mi9R9foqMKE=) 2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a5:d7:d9:65:f8:4f:70:0f:cc:f1:9c:bc:8e:53:c4:aa:6c:b2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Nov 3 23:46:10 2025 GMT Not After : Nov 7 10:56:10 2025 GMT Subject: CN=76EB8BF7F9E219ACD6A399C74868B54F9D529D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4e:f9:a9:7a:5a:6b:d9:ec:cc:29:0c:8e:ac: f8:24:95:d2:5b:8e:09:ab:e7:2d:5c:51:87:2f:c3: 2e:e7:39:7f:d1:1c:90:5c:b8:a6:89:9a:3d:8c:77: 77:70:49:17:a2:25:3f:8b:a3:7f:49:d8:c8:cd:35: 74:49:22:96:6d:27:c8:60:a0:d0:bb:c8:47:52:71: 0f:59:a5:ba:de:20:9e:18:ea:bb:29:b3:4f:40:55: f1:fa:73:b2:8f:e5:7f:2d:f8:60:03:96:bd:12:41: 7f:03:e8:73:64:f9:a4:2c:8f:70:8b:4c:ec:17:c5: 00:12:9d:90:e4:09:f0:fd:f0:1c:01:cd:4d:72:d2: db:e5:4c:e9:75:29:0b:2b:68:e2:8e:3d:23:be:df: 11:2d:a9:7a:38:52:64:e3:1a:02:06:7c:dd:b6:c4: 90:0d:d8:d5:87:66:75:b7:80:5a:24:98:ea:00:5e: d4:51:11:62:78:7a:50:33:e0:5c:99:6b:a7:12:0b: 4e:ed:ba:2b:6c:ad:bb:95:92:e7:06:bb:48:61:e0: 49:43:1b:3b:47:8f:a3:89:3f:e1:7e:89:74:17:83: 60:34:5c:22:0a:7c:fd:f2:bf:a7:11:f0:54:86:89: 28:d0:34:e9:d7:df:78:e6:41:d5:54:56:0e:06:60: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EB:8B:F7:F9:E2:19:AC:D6:A3:99:C7:48:68:B5:4F:9D:52:9D:27 X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:66:e4:bf:57:2d:0c:4d:a9:db:90:fd:38:73:df:42:69:cf: 85:92:72:24:f5:a8:7c:f5:19:f2:17:dd:75:e0:ff:99:db:17: f3:5d:f8:01:4c:ad:7a:06:ba:00:49:91:89:05:67:ed:63:9f: a7:1b:39:79:30:75:e8:7d:3a:b5:df:d6:09:d5:ae:cd:a4:2b: 14:5e:8c:5a:48:93:90:13:9c:d3:5b:2e:fa:3a:eb:e9:67:d9: 6d:fe:38:3e:19:73:c1:93:b5:85:a8:a2:3b:5a:c0:31:e0:71: 05:5d:ca:e3:4f:dd:ba:88:2b:b1:e1:95:48:e6:12:a4:4f:72: 20:7f:a7:0d:bd:95:6c:3b:3e:51:5a:5d:c9:c5:fc:61:01:f4: 8d:e2:81:35:b8:38:35:3c:e5:f9:57:1f:b4:cb:44:5a:c5:aa: 40:d7:5d:bf:75:8d:6c:52:88:83:9d:09:10:41:23:c7:87:7d: a0:49:44:4d:7e:b9:1b:35:68:65:dd:e7:83:a5:73:ef:47:32: e7:3e:ac:e8:84:7d:d5:bc:09:42:03:7e:ed:6a:06:aa:8e:03: e1:8d:bb:22:46:94:16:d0:d9:d2:16:7c:96:e1:29:40:9b:03: ff:5d:ad:ae:cb:d6:6e:c0:8a:7c:36:1b:66:4f:95:79:2c:85: 9d:fa:25:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqXX2WX4T3APzPGcvI5TxKpsstkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTExMDMyMzQ2MTBaFw0yNTExMDcxMDU2MTBaMDMxMTAvBgNV BAMTKDc2RUI4QkY3RjlFMjE5QUNENkEzOTlDNzQ4NjhCNTRGOUQ1MjlEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyTvmpelpr2ezMKQyOrPgkldJb jgmr5y1cUYcvwy7nOX/RHJBcuKaJmj2Md3dwSReiJT+Lo39J2MjNNXRJIpZtJ8hg oNC7yEdScQ9ZpbreIJ4Y6rsps09AVfH6c7KP5X8t+GADlr0SQX8D6HNk+aQsj3CL TOwXxQASnZDkCfD98BwBzU1y0tvlTOl1KQsraOKOPSO+3xEtqXo4UmTjGgIGfN22 xJAN2NWHZnW3gFokmOoAXtRREWJ4elAz4FyZa6cSC07tuitsrbuVkucGu0hh4ElD GztHj6OJP+F+iXQXg2A0XCIKfP3yv6cR8FSGiSjQNOnX33jmQdVUVg4GYE9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduuL9/niGazWo5nHSGi1T51SnScwHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1m5L9XLQxNqduQ/Thz30Jpz4WSciT1qHz1 GfIX3XXg/5nbF/Nd+AFMrXoGugBJkYkFZ+1jn6cbOXkwdeh9OrXf1gnVrs2kKxRe jFpIk5ATnNNbLvo66+ln2W3+OD4Zc8GTtYWoojtawDHgcQVdyuNP3bqIK7HhlUjm EqRPciB/pw29lWw7PlFaXcnF/GEB9I3igTW4ODU85flXH7TLRFrFqkDXXb91jWxS iIOdCRBBI8eHfaBJRE1+uRs1aGXd54Olc+9HMuc+rOiEfdW8CUIDfu1qBqqOA+GN uyJGlBbQ2dIWfJbhKUCbA/9dra7L1m7Ainw2G2ZPlXkshZ36JcM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:31 2025 by rpki-client