$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: W6+6j8aPn176Oz8U3O1p+EkRuo4j3Png+v7zG3fP7FA= Subject key identifier: 64:87:56:B7:6D:D4:F6:04:63:FC:5B:15:94:C6:00:B7:A7:DE:46:F0 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 095980691B84195BB319384C9DDC357CD0B97F54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 08:33:58 +0000 Manifest this update: Mon 03 Nov 2025 08:28:58 +0000 Manifest next update: Thu 06 Nov 2025 13:25:58 +0000 Files and hashes: 1: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: 1JacAPKl/A1jDc5Y/1N5ZVO3z6cGe9lWvEcIJPGQrWg=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:59:80:69:1b:84:19:5b:b3:19:38:4c:9d:dc:35:7c:d0:b9:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Nov 3 08:28:58 2025 GMT Not After : Nov 6 13:25:58 2025 GMT Subject: CN=648756B76DD4F60463FC5B1594C600B7A7DE46F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:29:76:b8:5f:90:f7:61:2d:1f:77:46:fc: 92:4f:52:52:32:e3:3d:84:47:73:09:92:14:c5:30: ee:38:16:55:c8:04:3a:ef:81:b8:6b:ac:ac:1d:b2: ab:fe:0d:4a:8c:53:f1:c9:64:b2:0b:47:20:83:d9: a4:f6:e7:0d:74:00:6d:be:c3:0e:62:6e:c0:95:15: ba:79:3e:2f:b3:fa:9a:53:70:f1:64:a7:68:70:20: 2b:6b:99:ae:b1:9f:52:21:92:58:aa:8d:ef:0e:3a: ce:ed:1c:16:31:c9:a5:95:1d:94:5d:14:6a:00:b0: 13:77:50:13:a4:45:2a:9a:7b:53:b6:93:75:ab:54: 3e:39:39:74:64:b1:5d:3c:28:63:bf:73:72:ca:bb: 56:62:8b:36:86:51:39:d1:97:c4:99:b2:03:09:a9: b2:69:ec:b5:cf:7f:ed:a2:cc:7c:e3:ad:36:9a:35: f3:51:55:ea:f6:4c:18:b9:bb:87:1c:50:f4:dd:bb: 3c:97:bc:06:03:49:3b:ae:ff:a8:e7:2d:9a:c9:9e: a2:9f:21:32:d9:4c:98:d4:97:95:fe:81:d1:d7:2b: b0:e8:ea:63:01:8c:46:b0:ce:a6:6e:73:1d:71:70: 02:fb:6b:25:3c:04:03:4e:50:53:28:62:ef:ba:c5: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:56:B7:6D:D4:F6:04:63:FC:5B:15:94:C6:00:B7:A7:DE:46:F0 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:c7:71:61:91:35:99:ca:8f:c5:78:3c:90:42:e6:d4:43: a7:95:bb:fa:36:71:6f:38:23:6a:9d:b8:58:8e:3b:a1:9b:75: 67:1c:b1:48:33:4e:ec:24:81:0f:24:cf:f5:b9:5b:14:8a:3a: d0:11:2d:01:5d:db:ff:12:c0:fa:68:5f:5d:7d:1c:ac:9c:06: e1:b8:d5:94:9a:84:b2:f1:03:71:9d:c0:83:6d:6f:0d:47:3d: 6e:10:66:0f:60:8c:50:df:c8:f4:a4:75:9f:92:25:84:d4:3e: ac:25:24:9e:fe:e7:98:c8:38:3d:8d:99:65:43:7c:02:56:fd: 9b:70:62:5e:02:e6:b9:f2:07:83:7c:54:62:33:e0:5c:98:27: e5:ec:a0:5b:b2:a3:51:07:1e:24:1d:8a:90:4c:f5:da:4d:8c: 1c:1b:fa:ed:86:8d:7f:45:7e:df:2d:6d:7b:42:cc:aa:36:ea: d1:b3:a4:08:ae:0a:7c:59:38:f5:23:3f:f6:b3:4d:77:bc:02: e4:44:0b:3b:94:ab:f4:3c:0d:50:6a:ac:f7:9b:fb:d0:17:5d: 4e:4e:02:cf:65:95:d8:a6:ee:00:24:a7:b3:34:51:9b:ec:b0: 34:5d:c2:3a:d9:cb:d5:1b:14:6f:f5:52:69:27:26:b6:d6:e4: a0:cb:61:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVmAaRuEGVuzGThMndw1fNC5f1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTExMDMwODI4NThaFw0yNTExMDYxMzI1NThaMDMxMTAvBgNV BAMTKDY0ODc1NkI3NkRENEY2MDQ2M0ZDNUIxNTk0QzYwMEI3QTdERTQ2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjil2uF+Q92EtH3dG/JJPUlIy 4z2ER3MJkhTFMO44FlXIBDrvgbhrrKwdsqv+DUqMU/HJZLILRyCD2aT25w10AG2+ ww5ibsCVFbp5Pi+z+ppTcPFkp2hwICtrma6xn1Ihkliqje8OOs7tHBYxyaWVHZRd FGoAsBN3UBOkRSqae1O2k3WrVD45OXRksV08KGO/c3LKu1ZiizaGUTnRl8SZsgMJ qbJp7LXPf+2izHzjrTaaNfNRVer2TBi5u4ccUPTduzyXvAYDSTuu/6jnLZrJnqKf ITLZTJjUl5X+gdHXK7Do6mMBjEawzqZucx1xcAL7ayU8BANOUFMoYu+6xTElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIdWt23U9gRj/FsVlMYAt6feRvAwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdox3FhkTWZyo/FeDyQQubUQ6eVu/o2cW84 I2qduFiOO6GbdWccsUgzTuwkgQ8kz/W5WxSKOtARLQFd2/8SwPpoX119HKycBuG4 1ZSahLLxA3GdwINtbw1HPW4QZg9gjFDfyPSkdZ+SJYTUPqwlJJ7+55jIOD2NmWVD fAJW/ZtwYl4C5rnyB4N8VGIz4FyYJ+XsoFuyo1EHHiQdipBM9dpNjBwb+u2GjX9F ft8tbXtCzKo26tGzpAiuCnxZOPUjP/azTXe8AuRECzuUq/Q8DVBqrPeb+9AXXU5O As9lldim7gAkp7M0UZvssDRdwjrZy9UbFG/1UmknJrbW5KDLYd4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:35 2025 by rpki-client