$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: /Wt95C0QXf/z9hwvQTsiYBshk9wCBLYQl3t4JEiXESQ= Subject key identifier: 67:C4:E9:A0:DC:D0:94:5F:A7:C6:7F:03:81:E8:C3:F7:E0:22:2F:8C Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 3433EC05ECA079317C87320035B6CA85E5288BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: D4 Signing time: Mon 03 Nov 2025 04:20:50 +0000 Manifest this update: Mon 03 Nov 2025 04:15:50 +0000 Manifest next update: Thu 06 Nov 2025 04:43:50 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: NHKbAetVY4OrQ71qY8yD+v9k2RoV58OZStjbtFrn20o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:33:ec:05:ec:a0:79:31:7c:87:32:00:35:b6:ca:85:e5:28:8b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Nov 3 04:15:50 2025 GMT Not After : Nov 6 04:43:50 2025 GMT Subject: CN=67C4E9A0DCD0945FA7C67F0381E8C3F7E0222F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:9b:24:92:bf:4e:97:37:c8:c4:8b:67:c3: 96:41:db:38:4c:49:06:ed:84:ad:92:98:13:48:7d: d2:ad:23:f8:3a:d3:e2:eb:4c:14:7d:c7:0f:cb:e2: b1:1f:9d:dd:15:ce:ab:22:72:7b:ac:f7:bc:f2:dd: a3:1c:b1:d6:7d:1e:15:d2:a1:1a:13:38:51:7a:f1: 4f:41:60:a5:98:00:1d:9a:b1:e7:5f:29:02:f6:dc: c6:00:1d:dc:b1:c6:80:09:2f:c6:61:27:19:bd:e7: a9:b9:1c:f1:6e:a0:c4:72:22:4e:89:c9:52:8e:31: a9:bb:c8:19:20:ea:b1:d9:1a:35:6b:18:15:7a:47: 34:12:28:93:f4:44:65:7a:e2:c2:5a:3a:5f:90:2a: 3d:64:ea:63:50:89:e6:dc:cd:fa:19:42:40:d8:57: 0d:6b:45:45:50:8c:2f:ec:63:c9:75:1e:1a:de:80: 74:5c:d9:bb:17:cd:ba:46:bc:1c:4a:cf:7e:0a:cd: 7d:d4:10:cb:64:32:1f:a5:f7:c0:77:f0:17:de:cf: b3:8e:94:61:45:8a:38:a6:96:78:bf:fd:34:93:51: ff:9c:1f:e4:e3:cb:c7:17:24:97:f1:d7:e7:34:d7: 4d:30:84:62:fa:3c:cf:39:a4:e4:37:cc:aa:1d:36: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C4:E9:A0:DC:D0:94:5F:A7:C6:7F:03:81:E8:C3:F7:E0:22:2F:8C X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f1:68:a8:e4:94:a2:67:4e:67:5b:79:a7:17:0c:08:29:9e: c5:4d:f4:06:3d:13:ea:15:14:4a:ed:b7:78:72:b0:ae:8a:30: 1b:bb:e0:24:3c:08:33:ba:7c:58:c6:d9:d9:a5:f5:d5:20:c9: 57:a7:7c:3b:89:78:31:96:65:a7:a0:e3:65:19:41:13:f3:24: 52:d6:59:24:0e:2b:20:76:28:46:4a:df:b4:8c:24:f6:a5:31: 11:23:82:a2:f1:13:eb:63:c4:38:3e:6a:78:c7:02:f9:a9:18: 64:8c:25:0f:5a:38:12:85:0e:be:2e:b9:20:c0:cf:cf:83:08: 64:3c:be:84:4b:4e:9d:cf:73:c9:31:93:91:8a:65:51:4b:6e: 4c:33:20:ed:ff:41:7e:f3:c4:36:3d:06:3e:49:81:d8:5f:c4: 89:c3:b8:d8:27:af:54:1f:5a:20:13:18:06:3c:8b:51:42:7d: b4:1d:cb:1c:d0:0a:c7:65:79:dc:d2:9e:0b:0f:78:46:36:6a: b5:e2:7d:11:0f:0e:7f:9e:09:63:58:40:4f:b0:e5:ce:31:f4: b7:c5:23:63:a5:d5:30:ec:96:24:d9:6a:6e:14:93:c6:fe:72: d2:6f:d5:3f:fa:39:97:ee:da:95:ef:8f:de:97:b7:9b:5b:37: 2e:70:29:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDPsBeygeTF8hzIANbbKheUoi7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTExMDMwNDE1NTBaFw0yNTExMDYwNDQzNTBaMDMxMTAvBgNV BAMTKDY3QzRFOUEwRENEMDk0NUZBN0M2N0YwMzgxRThDM0Y3RTAyMjJGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaJskkr9OlzfIxItnw5ZB2zhM SQbthK2SmBNIfdKtI/g60+LrTBR9xw/L4rEfnd0Vzqsicnus97zy3aMcsdZ9HhXS oRoTOFF68U9BYKWYAB2asedfKQL23MYAHdyxxoAJL8ZhJxm956m5HPFuoMRyIk6J yVKOMam7yBkg6rHZGjVrGBV6RzQSKJP0RGV64sJaOl+QKj1k6mNQiebczfoZQkDY Vw1rRUVQjC/sY8l1HhregHRc2bsXzbpGvBxKz34KzX3UEMtkMh+l98B38Bfez7OO lGFFijimlni//TSTUf+cH+Tjy8cXJJfx1+c0100whGL6PM85pOQ3zKodNrTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ8TpoNzQlF+nxn8DgejD9+AiL4wwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrxaKjklKJnTmdbeacXDAgpnsVN9AY9E+oV FErtt3hysK6KMBu74CQ8CDO6fFjG2dml9dUgyVenfDuJeDGWZaeg42UZQRPzJFLW WSQOKyB2KEZK37SMJPalMREjgqLxE+tjxDg+anjHAvmpGGSMJQ9aOBKFDr4uuSDA z8+DCGQ8voRLTp3Pc8kxk5GKZVFLbkwzIO3/QX7zxDY9Bj5JgdhfxInDuNgnr1Qf WiATGAY8i1FCfbQdyxzQCsdledzSngsPeEY2arXifREPDn+eCWNYQE+w5c4x9LfF I2Ol1TDsliTZam4Uk8b+ctJv1T/6OZfu2pXvj96Xt5tbNy5wKXk= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:32 2025 by rpki-client