$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: WR0ypKwSl+SCWTYNrRZKziAqbDVnvp8cn24a71Wl4qo= Subject key identifier: F0:F1:A7:84:32:83:2F:2A:D9:B0:3E:45:D2:9C:CF:6C:7D:69:D4:AE Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 6D3DEFB3C0A9C3BF0066938F642E766864F082DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 0390 Signing time: Tue 04 Nov 2025 04:41:42 +0000 Manifest this update: Tue 04 Nov 2025 04:36:42 +0000 Manifest next update: Fri 07 Nov 2025 06:35:42 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: 8+zrX3tyYU1o46u8AArHuZe+GQjeUDWug1/u+6Q/aNA=) 2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3d:ef:b3:c0:a9:c3:bf:00:66:93:8f:64:2e:76:68:64:f0:82:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Nov 4 04:36:42 2025 GMT Not After : Nov 7 06:35:42 2025 GMT Subject: CN=F0F1A78432832F2AD9B03E45D29CCF6C7D69D4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:f6:8c:7d:f8:f7:6a:d3:e5:c5:c1:9d:f5: c7:5f:7f:4c:75:cc:f1:f7:28:b9:6b:86:e8:a8:6b: a4:f6:c4:e8:7f:9e:1c:9c:7b:43:df:42:d2:92:b7: ee:4b:5e:ab:de:d0:c4:b2:eb:b1:29:fd:49:28:1b: 42:7c:3e:4c:fa:3f:1c:05:8c:22:ef:69:e3:96:52: 4c:94:5b:05:14:89:80:ed:ef:7a:cb:ef:c2:e0:77: a6:aa:a2:31:a2:76:98:38:ba:af:49:71:13:a2:33: 24:2b:4e:c0:1f:ea:58:dd:f3:4b:b9:a8:fa:65:12: 0c:6a:fe:b1:11:e4:63:70:d1:05:1d:5a:21:41:6d: 9a:fe:74:de:03:54:91:f9:39:ab:b6:3b:02:7d:4d: f1:0f:00:95:54:4a:f0:08:3e:42:ac:cd:3a:4f:05: 64:eb:87:16:f4:33:02:dd:eb:4e:3f:4c:d4:de:31: ad:a6:a0:55:6b:e1:cc:25:72:72:cd:23:3c:0b:e0: 32:18:99:65:af:f6:c1:b1:d3:2d:66:46:ee:4d:8b: 1a:5c:11:87:7f:73:55:c5:1a:0e:5f:e8:dd:09:5b: c4:ed:ef:35:48:02:0c:ae:07:a7:9b:d1:c1:a8:da: ff:14:d3:b9:14:d1:95:73:cc:e8:41:95:41:eb:6f: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:A7:84:32:83:2F:2A:D9:B0:3E:45:D2:9C:CF:6C:7D:69:D4:AE X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:9b:e8:8a:17:48:df:f4:a3:1b:19:11:0a:c9:b8:75:e6: 5c:63:71:a6:87:d0:1d:ce:12:44:86:24:20:00:3f:73:ce:aa: 87:e5:03:db:ae:7b:09:93:dd:f4:23:08:24:b1:c6:02:48:7e: 7f:9e:e7:d1:f9:a7:b5:34:40:cf:bc:06:7e:c2:28:e0:e2:97: c1:5b:cd:3e:f0:19:87:40:7b:7b:ad:7a:19:28:e7:03:5f:18: fd:7f:04:51:65:ce:ee:f0:5c:50:93:3c:8b:43:8d:ad:91:0c: 4f:d3:18:2c:35:c9:69:0a:90:c7:dd:f4:93:25:5f:2e:0f:63: 04:56:2a:79:f0:2b:03:6d:9d:6f:60:44:67:86:2d:ea:6f:4b: dc:62:3f:20:f5:82:dc:97:24:c9:7d:91:15:6a:4f:2c:25:b1: 71:1e:8d:37:52:ff:49:28:c8:15:1e:4a:5b:83:1a:36:e2:47: 75:5b:5a:82:a2:19:7b:e0:42:0e:7b:59:c8:62:20:7c:68:3a: 63:63:10:c1:e9:e4:73:8a:73:6e:5b:e3:b0:83:04:c5:a8:49: 10:c4:1f:a9:a1:4b:24:31:44:6f:5b:ee:2b:ef:22:9d:71:aa: 79:bc:b3:0c:28:e1:05:09:94:b0:50:ac:93:27:2a:a7:33:ef: fb:cb:93:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT3vs8Cpw78AZpOPZC52aGTwgtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTExMDQwNDM2NDJaFw0yNTExMDcwNjM1NDJaMDMxMTAvBgNV BAMTKEYwRjFBNzg0MzI4MzJGMkFEOUIwM0U0NUQyOUNDRjZDN0Q2OUQ0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHI/aMffj3atPlxcGd9cdff0x1 zPH3KLlrhuioa6T2xOh/nhyce0PfQtKSt+5LXqve0MSy67Ep/UkoG0J8Pkz6PxwF jCLvaeOWUkyUWwUUiYDt73rL78Lgd6aqojGidpg4uq9JcROiMyQrTsAf6ljd80u5 qPplEgxq/rER5GNw0QUdWiFBbZr+dN4DVJH5Oau2OwJ9TfEPAJVUSvAIPkKszTpP BWTrhxb0MwLd604/TNTeMa2moFVr4cwlcnLNIzwL4DIYmWWv9sGx0y1mRu5Nixpc EYd/c1XFGg5f6N0JW8Tt7zVIAgyuB6eb0cGo2v8U07kU0ZVzzOhBlUHrb4nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PGnhDKDLyrZsD5F0pzPbH1p1K4wHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP1m+iKF0jf9KMbGREKybh15lxjcaaH0B3O EkSGJCAAP3POqoflA9uuewmT3fQjCCSxxgJIfn+e59H5p7U0QM+8Bn7CKODil8Fb zT7wGYdAe3utehko5wNfGP1/BFFlzu7wXFCTPItDja2RDE/TGCw1yWkKkMfd9JMl Xy4PYwRWKnnwKwNtnW9gRGeGLepvS9xiPyD1gtyXJMl9kRVqTywlsXEejTdS/0ko yBUeSluDGjbiR3VbWoKiGXvgQg57WchiIHxoOmNjEMHp5HOKc25b47CDBMWoSRDE H6mhSyQxRG9b7ivvIp1xqnm8swwo4QUJlLBQrJMnKqcz7/vLk2M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:41 2025 by rpki-client