$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: JvE6JiLDFCTaGhdJYa7l8+KISpZDJd+nz5oF7aweL8E= Subject key identifier: 96:4D:33:3B:C2:9C:4F:25:0A:15:A6:A4:54:59:92:5F:93:AB:E8:BE Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 5BDF96F4199978FCEDD2C6D96B375813BD963B7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: 011D Signing time: Mon 03 Nov 2025 16:41:48 +0000 Manifest this update: Mon 03 Nov 2025 16:36:48 +0000 Manifest next update: Thu 06 Nov 2025 23:44:48 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: VHpWx/ELEtp63dh9v37pcf0dfq0fnpuWymrPIJ3Qc9I=) 2: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: 1Y22heZzLW1uLBI2dj0FhbkrNAtQ677tG4XL0MCWVic=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: JJoDtolcZE+KR7sFSmDxYz3v23eUKolYl+DqisOigZw=) 4: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: DReBUSco8VokdPDjUhvRVntqGVlnIi0VvoGVK2k0+Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:96:f4:19:99:78:fc:ed:d2:c6:d9:6b:37:58:13:bd:96:3b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Nov 3 16:36:48 2025 GMT Not After : Nov 6 23:44:48 2025 GMT Subject: CN=964D333BC29C4F250A15A6A45459925F93ABE8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:33:7b:89:f5:de:9f:d8:ae:cc:d9:89:c7: 93:ae:66:f4:89:9d:96:80:39:98:00:ad:14:c0:20: f3:1f:01:8d:db:01:58:dc:7d:67:83:57:77:3d:42: 99:ee:36:f1:ee:ab:00:80:65:05:a9:8e:34:4e:5c: aa:bd:58:0f:e3:99:0f:e3:d3:cb:91:78:fe:a0:ae: 13:30:37:fb:76:26:08:2c:e7:af:c2:4d:92:c1:29: 7e:d2:aa:6b:a2:d0:a4:76:3f:2f:74:65:9c:31:3d: 04:bc:7d:1e:76:72:8e:8c:05:df:bd:57:4f:e9:e2: 8b:f0:34:ec:4f:20:42:94:19:92:ab:11:d0:00:e2: 29:5f:fe:63:46:8a:b0:61:cf:ea:a3:41:55:a6:87: 28:1c:01:60:e1:0a:cd:95:27:97:fc:ed:a4:61:96: 00:f7:7a:8d:12:33:38:dd:34:1d:86:5f:fc:fb:21: 24:6e:8e:d7:7e:bf:6a:3c:47:6c:93:22:3b:6d:88: c9:d4:70:5a:0d:ba:f6:8f:b3:3a:ef:7d:26:de:30: b2:57:0a:e8:e1:9d:00:c8:cb:1a:4d:f3:80:49:dc: 25:d8:ea:98:10:ee:df:b1:53:29:a3:66:e2:fc:fa: 35:ad:34:17:55:f0:a6:70:1f:8d:e6:4e:44:46:6e: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:33:3B:C2:9C:4F:25:0A:15:A6:A4:54:59:92:5F:93:AB:E8:BE X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:96:e1:c0:45:b1:91:0c:db:d6:b1:c5:8c:a6:d4:81:54:f4: f7:86:e3:50:d8:2b:fb:3c:a9:3c:46:2e:7a:62:08:e7:4e:33: 0a:69:64:0b:d0:cc:20:ad:6a:b6:33:5f:ae:48:1e:e9:d2:86: af:d7:89:40:c4:de:63:79:39:c5:6b:22:94:79:3d:eb:a3:3e: 79:60:be:03:26:35:7d:c7:62:21:d7:ad:6b:fd:a6:e6:bb:a9: 28:88:56:be:f6:31:96:9b:6e:3f:1f:fe:1b:11:5b:ea:fb:c1: a7:e7:eb:a1:16:a0:07:18:95:a0:27:4c:28:27:c2:9a:1a:d3: 07:0d:79:68:de:c3:ba:0d:ce:13:00:4a:f5:83:12:c0:2b:1b: c0:99:53:81:f8:71:48:a7:3c:68:01:81:d4:7d:e2:9f:a2:30: a5:32:b6:b3:e1:b6:19:f0:dc:d0:e3:be:c0:92:60:20:4d:05: a8:be:55:f9:16:3b:32:a7:6d:b4:9f:43:e7:02:4d:f6:7d:a6: 7e:e6:25:df:4f:12:c7:ca:a9:b1:bf:df:21:6a:9b:09:bd:69: 54:db:61:ed:fa:d4:22:f4:58:5a:c9:a5:30:96:c9:f9:0e:0e: 79:17:d9:4e:4d:7d:cb:0e:59:86:1b:76:70:5e:d2:1c:fc:0e: 2e:1d:33:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9+W9BmZePzt0sbZazdYE72WO30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTExMDMxNjM2NDhaFw0yNTExMDYyMzQ0NDhaMDMxMTAvBgNV BAMTKDk2NEQzMzNCQzI5QzRGMjUwQTE1QTZBNDU0NTk5MjVGOTNBQkU4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaDN7ifXen9iuzNmJx5OuZvSJ nZaAOZgArRTAIPMfAY3bAVjcfWeDV3c9QpnuNvHuqwCAZQWpjjROXKq9WA/jmQ/j 08uReP6grhMwN/t2Jggs56/CTZLBKX7Sqmui0KR2Py90ZZwxPQS8fR52co6MBd+9 V0/p4ovwNOxPIEKUGZKrEdAA4ilf/mNGirBhz+qjQVWmhygcAWDhCs2VJ5f87aRh lgD3eo0SMzjdNB2GX/z7ISRujtd+v2o8R2yTIjttiMnUcFoNuvaPszrvfSbeMLJX CujhnQDIyxpN84BJ3CXY6pgQ7t+xUymjZuL8+jWtNBdV8KZwH43mTkRGbtPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlk0zO8KcTyUKFaakVFmSX5Or6L4wHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWW4cBFsZEM29axxYym1IFU9PeG41DYK/s8 qTxGLnpiCOdOMwppZAvQzCCtarYzX65IHunShq/XiUDE3mN5OcVrIpR5PeujPnlg vgMmNX3HYiHXrWv9pua7qSiIVr72MZabbj8f/hsRW+r7wafn66EWoAcYlaAnTCgn wpoa0wcNeWjew7oNzhMASvWDEsArG8CZU4H4cUinPGgBgdR94p+iMKUytrPhthnw 3NDjvsCSYCBNBai+VfkWOzKnbbSfQ+cCTfZ9pn7mJd9PEsfKqbG/3yFqmwm9aVTb Ye361CL0WFrJpTCWyfkODnkX2U5NfcsOWYYbdnBe0hz8Di4dM2E= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:48 2025 by rpki-client