$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: hjiYUShayGF6spIQ/AkMjep/XYlTBOru//VCzJZ7aZw= Subject key identifier: AF:F7:DE:74:8A:F9:24:4C:4D:F8:2A:08:A4:1D:B9:4E:74:91:F4:7F Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 73CA19C000C520002B78A931B8E3DD794FC0FECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: DA Signing time: Mon 03 Nov 2025 16:10:56 +0000 Manifest this update: Mon 03 Nov 2025 16:05:56 +0000 Manifest next update: Thu 06 Nov 2025 18:59:56 +0000 Files and hashes: 1: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) 2: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: Ce9L4TkpBfywxkGY9a4o80uHoQ1jHRk/4LGO2ZQCsfo=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ca:19:c0:00:c5:20:00:2b:78:a9:31:b8:e3:dd:79:4f:c0:fe:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Nov 3 16:05:56 2025 GMT Not After : Nov 6 18:59:56 2025 GMT Subject: CN=AFF7DE748AF9244C4DF82A08A41DB94E7491F47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:f6:e6:79:3d:06:99:81:57:b8:a4:50:16: 26:39:93:58:29:3f:57:e7:94:73:12:78:d1:48:c3: 91:90:31:8c:83:93:f4:5b:37:e3:50:ec:d9:1b:71: 03:17:e1:0e:4e:1f:b3:73:9c:29:fa:37:47:da:5b: 31:b3:06:66:ba:0c:af:1d:81:be:2b:d8:f8:d9:f8: 35:49:98:ad:fc:07:07:a0:31:2d:a7:66:b5:04:4e: f6:ff:76:3f:9d:4b:bd:a9:19:29:4b:fc:f3:c7:01: b4:a4:af:cc:3c:cc:41:60:cc:4c:49:e5:80:d6:58: 86:f6:b8:e8:64:ec:46:4a:b4:98:30:4b:96:39:e9: 06:4a:4d:5a:ec:60:2c:d5:29:f6:77:72:cd:42:76: 5e:d0:cb:4c:bb:0f:d8:9e:16:c5:65:c8:b9:d4:67: a3:48:07:47:71:0e:44:52:d8:b2:96:5f:a5:ac:5c: f3:14:34:2d:ce:53:30:ca:d9:f6:45:60:e0:5d:70: 8a:2d:66:e7:b7:4d:5f:1e:b9:95:d4:2f:79:53:60: bb:7a:a1:00:4b:5e:22:c0:76:12:b6:7c:57:7c:e0: e1:98:8c:77:e2:7a:46:6d:f2:56:b8:54:25:cd:39: d8:ec:48:dc:bd:49:31:9a:db:d2:92:9c:8a:a4:ce: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F7:DE:74:8A:F9:24:4C:4D:F8:2A:08:A4:1D:B9:4E:74:91:F4:7F X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:35:44:18:2a:0d:64:ab:5e:a2:8d:8b:00:dd:40:07:d8:6d: 2f:20:df:0d:0b:91:02:d3:49:77:e5:d6:07:37:c1:99:c2:3f: f7:ba:c2:06:81:45:4d:6e:55:bf:ca:60:ae:50:d8:cf:f5:dc: 7e:22:2a:40:fc:40:93:2a:17:99:97:43:07:ba:b2:41:36:79: fc:5a:6c:51:35:95:17:56:a9:4e:63:6f:51:c3:6c:09:98:86: 10:90:ca:21:0f:8a:42:3b:71:a8:76:77:7c:e0:12:78:32:68: 6a:95:6d:d5:11:00:80:c6:b8:46:c7:07:47:6a:8e:a5:18:6d: 04:11:03:b1:37:d7:66:c1:5a:b4:4d:98:76:4a:89:25:ea:39: fe:18:71:0d:3e:57:37:e6:83:32:4f:a9:d3:42:e1:c3:10:c9: d3:db:38:6f:a1:1e:b1:3c:d8:60:15:0d:38:a5:b0:fb:a7:26: fc:30:09:e5:f6:e4:b7:a5:4f:2e:33:b2:10:57:84:26:4a:87: 9b:3d:6a:bf:82:af:51:c2:37:7f:e3:fa:4d:65:3f:16:84:f3: 98:ba:de:99:47:71:1b:0f:41:82:8a:a4:a2:34:49:c7:8a:c4: 2c:cd:16:c8:f9:41:4a:cb:bb:1e:4e:8a:65:e1:8e:3e:52:b8: bf:08:65:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8oZwADFIAAreKkxuOPdeU/A/swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTExMDMxNjA1NTZaFw0yNTExMDYxODU5NTZaMDMxMTAvBgNV BAMTKEFGRjdERTc0OEFGOTI0NEM0REY4MkEwOEE0MURCOTRFNzQ5MUY0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4fbmeT0GmYFXuKRQFiY5k1gp P1fnlHMSeNFIw5GQMYyDk/RbN+NQ7NkbcQMX4Q5OH7NznCn6N0faWzGzBma6DK8d gb4r2PjZ+DVJmK38BwegMS2nZrUETvb/dj+dS72pGSlL/PPHAbSkr8w8zEFgzExJ 5YDWWIb2uOhk7EZKtJgwS5Y56QZKTVrsYCzVKfZ3cs1Cdl7Qy0y7D9ieFsVlyLnU Z6NIB0dxDkRS2LKWX6WsXPMUNC3OUzDK2fZFYOBdcIotZue3TV8euZXUL3lTYLt6 oQBLXiLAdhK2fFd84OGYjHfiekZt8la4VCXNOdjsSNy9STGa29KSnIqkzptDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/fedIr5JExN+CoIpB25TnSR9H8wHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB41RBgqDWSrXqKNiwDdQAfYbS8g3w0LkQLT SXfl1gc3wZnCP/e6wgaBRU1uVb/KYK5Q2M/13H4iKkD8QJMqF5mXQwe6skE2efxa bFE1lRdWqU5jb1HDbAmYhhCQyiEPikI7cah2d3zgEngyaGqVbdURAIDGuEbHB0dq jqUYbQQRA7E312bBWrRNmHZKiSXqOf4YcQ0+VzfmgzJPqdNC4cMQydPbOG+hHrE8 2GAVDTilsPunJvwwCeX25LelTy4zshBXhCZKh5s9ar+Cr1HCN3/j+k1lPxaE85i6 3plHcRsPQYKKpKI0SceKxCzNFsj5QUrLux5OimXhjj5SuL8IZYA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:36 2025 by rpki-client