$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: hv4uBiQDtjQww8R1q3pXe7rommj0/CpnsN8kX50Okhc= Subject key identifier: 57:C9:DC:E7:83:9A:32:F7:65:71:5A:E5:6A:8B:30:A9:CE:2E:F6:6B Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 2B26DC7D34F88119B43623D2DFA2D0FD34E3DF94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: E7 Signing time: Sun 02 Nov 2025 02:51:24 +0000 Manifest this update: Sun 02 Nov 2025 02:46:24 +0000 Manifest next update: Wed 05 Nov 2025 08:42:24 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: N2RrQpPQrBHdM+oS4FMruisSC4bi9JhMV0EwtdNEjqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 08:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:26:dc:7d:34:f8:81:19:b4:36:23:d2:df:a2:d0:fd:34:e3:df:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Nov 2 02:46:24 2025 GMT Not After : Nov 5 08:42:24 2025 GMT Subject: CN=57C9DCE7839A32F765715AE56A8B30A9CE2EF66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:10:c9:b5:7e:94:33:0b:b8:33:03:38:b6: 82:f0:f7:a9:9b:3b:7d:54:19:0b:8a:cc:ca:18:61: 7d:94:ca:83:60:f1:87:3c:1f:cd:f1:63:b2:e6:96: 95:7b:14:57:f1:02:8d:46:ee:6c:4d:c4:33:f7:10: 09:76:c6:db:eb:56:8d:e5:67:54:d6:d0:86:19:67: 56:6c:12:65:01:5d:29:ce:d0:aa:51:28:f1:b1:e7: ae:83:f0:9f:c6:ad:81:28:d2:de:45:8c:eb:97:f0: d2:f8:31:8e:8a:ec:39:b3:10:75:e6:11:c2:d3:9e: e8:91:37:3f:93:68:79:59:f1:18:2a:c9:01:af:0f: d1:f6:96:cc:a4:db:93:9b:8c:0f:bc:96:41:dc:4b: 53:33:47:55:db:cc:ab:94:cd:7b:58:f2:8e:23:19: 54:3c:60:db:c2:02:db:e1:b6:73:16:b1:89:14:91: e6:e6:a6:1a:51:48:97:ee:f0:7a:dd:4b:3d:ee:de: 6d:1a:e9:e7:3f:4a:09:7a:61:c9:0b:36:ba:d2:e3: 36:db:6b:e8:12:f0:fb:dd:cd:5b:7e:7b:c8:11:c8: 5e:ac:06:53:49:e0:11:82:0d:f8:e7:c9:dc:56:8a: 1f:b3:dd:c4:43:4c:34:7b:ad:5f:44:5f:ef:c6:33: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C9:DC:E7:83:9A:32:F7:65:71:5A:E5:6A:8B:30:A9:CE:2E:F6:6B X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:20:fa:de:12:d8:c9:86:1c:61:de:69:46:c7:d4:c9:4d:64: bd:00:36:9c:a0:bf:dd:f1:ce:c3:17:33:dd:bb:46:bf:37:fd: 66:ab:24:a2:e1:00:70:46:90:44:72:73:a7:63:54:df:ee:99: 30:32:c5:60:53:43:d3:8b:d7:cf:99:d4:aa:9e:0e:76:9f:bb: 32:d5:d7:22:72:f1:bb:75:9e:09:ff:1d:b2:ae:9d:2e:42:9a: 6d:2d:d7:38:96:10:a2:f9:80:d5:ae:2d:20:10:0c:d8:61:ee: 07:0a:28:fc:22:88:e4:43:f0:db:7b:75:96:eb:d8:eb:a5:dc: 9e:29:e5:51:ab:73:37:4d:1e:48:20:06:e3:88:b1:8e:e4:17: 01:f3:ee:6a:2c:de:28:ea:63:99:9f:5d:75:00:7e:60:ce:47: b1:6b:c0:84:e7:e5:2f:43:f2:75:35:4c:02:f0:96:71:0a:39: 57:e2:38:c0:9e:d1:fd:d0:6e:29:31:b5:29:0f:dd:dc:09:a6: 9c:76:1f:ff:47:d9:aa:32:ae:f2:27:6e:0b:eb:84:6e:4a:2b: 4c:79:e9:ec:d1:33:2c:11:90:30:47:4a:00:84:12:dc:d0:d5: d4:7e:ff:5c:38:d5:f3:b0:87:86:28:1d:95:7f:48:94:6b:af: 5f:25:25:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKybcfTT4gRm0NiPS36LQ/TTj35QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTExMDIwMjQ2MjRaFw0yNTExMDUwODQyMjRaMDMxMTAvBgNV BAMTKDU3QzlEQ0U3ODM5QTMyRjc2NTcxNUFFNTZBOEIzMEE5Q0UyRUY2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHhDJtX6UMwu4MwM4toLw96mb O31UGQuKzMoYYX2UyoNg8Yc8H83xY7LmlpV7FFfxAo1G7mxNxDP3EAl2xtvrVo3l Z1TW0IYZZ1ZsEmUBXSnO0KpRKPGx566D8J/GrYEo0t5FjOuX8NL4MY6K7DmzEHXm EcLTnuiRNz+TaHlZ8RgqyQGvD9H2lsyk25ObjA+8lkHcS1MzR1XbzKuUzXtY8o4j GVQ8YNvCAtvhtnMWsYkUkebmphpRSJfu8HrdSz3u3m0a6ec/Sgl6YckLNrrS4zbb a+gS8PvdzVt+e8gRyF6sBlNJ4BGCDfjnydxWih+z3cRDTDR7rV9EX+/GMz1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV8nc54OaMvdlcVrlaoswqc4u9mswHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0g+t4S2MmGHGHeaUbH1MlNZL0ANpygv93x zsMXM927Rr83/WarJKLhAHBGkERyc6djVN/umTAyxWBTQ9OL18+Z1KqeDnafuzLV 1yJy8bt1ngn/HbKunS5Cmm0t1ziWEKL5gNWuLSAQDNhh7gcKKPwiiORD8Nt7dZbr 2Oul3J4p5VGrczdNHkggBuOIsY7kFwHz7mos3ijqY5mfXXUAfmDOR7FrwITn5S9D 8nU1TALwlnEKOVfiOMCe0f3QbikxtSkP3dwJppx2H/9H2aoyrvInbgvrhG5KK0x5 6ezRMywRkDBHSgCEEtzQ1dR+/1w41fOwh4YoHZV/SJRrr18lJeo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:27 2025 by rpki-client