$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: uSzfDdOQFC4cjj/VtW4llVFYlHfEdBXJJBeqkvduEwE= Subject key identifier: 59:7F:F7:F7:1D:9C:44:3C:E3:37:CC:C8:41:7C:A1:D7:10:2F:80:A1 Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 65531556075CADEA2B14FEE3D4E522CC3C2D430C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 03:21:09 +0000 Manifest this update: Mon 03 Nov 2025 03:16:09 +0000 Manifest next update: Thu 06 Nov 2025 11:59:09 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: cZvHltKBNmngAci9IeKNcemM2QNO3nvbHx6QQiXC95M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:53:15:56:07:5c:ad:ea:2b:14:fe:e3:d4:e5:22:cc:3c:2d:43:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Nov 3 03:16:09 2025 GMT Not After : Nov 6 11:59:09 2025 GMT Subject: CN=597FF7F71D9C443CE337CCC8417CA1D7102F80A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:f9:69:2a:9d:c2:01:dd:81:89:21:5e:27: f0:02:fa:0b:85:7b:9c:d9:95:60:14:88:bd:5e:c0: aa:ea:42:09:f8:a9:77:21:35:56:a8:77:f8:1e:58: 0c:8d:93:5b:1e:73:94:c2:62:06:75:a1:6b:4c:9c: eb:41:91:cb:5e:4a:c6:fd:bb:3f:41:e2:2d:41:37: 00:aa:8c:d5:f4:92:c4:c8:bb:4c:2e:7a:bd:6a:cd: 5e:9c:f8:01:98:de:b2:f5:ce:cc:bb:4e:44:4c:34: a5:e7:dd:bd:a8:6c:9a:93:96:45:16:8c:11:c4:ab: 63:c3:30:39:f0:cd:02:83:a0:60:05:ae:a6:0b:6d: af:d4:6b:77:b8:2d:55:84:9c:56:ff:39:f3:5b:11: d6:cb:a5:7b:2c:b9:b9:37:ca:ca:0f:32:ef:a7:a2: 8e:7a:ed:3f:6b:61:0a:02:25:cc:70:37:9e:a5:b0: e0:05:51:f1:ca:bd:e7:32:71:c9:37:88:01:56:6c: 11:f2:ab:27:5d:90:d7:7c:fc:9c:9e:33:4a:6f:30: ca:3d:60:45:a2:8d:e6:68:71:8c:41:96:59:af:6b: 92:68:20:94:81:57:c2:66:e4:64:19:c2:5f:e7:d3: a2:a6:0c:35:33:71:27:b1:85:91:33:04:ec:a1:c8: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:F7:F7:1D:9C:44:3C:E3:37:CC:C8:41:7C:A1:D7:10:2F:80:A1 X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cd:16:97:a6:ff:d9:d4:1f:3b:0c:e1:69:ed:9e:dc:88:66: df:b2:2a:88:fd:dd:ce:cb:39:c2:41:61:e1:37:a4:ce:99:75: 43:b5:13:72:e1:07:28:56:fd:1d:38:65:f6:d3:38:8e:c9:a8: 52:a5:58:f8:83:85:c1:32:c6:0a:b1:22:ff:10:4e:e7:3a:6d: dd:e4:ef:29:5c:ac:07:31:77:60:1b:3d:0e:3e:83:dc:89:6a: 47:03:cd:89:6e:57:43:a1:fa:48:0a:3e:81:b6:88:4e:09:3c: 1c:48:1f:28:22:ab:36:ed:e8:50:2c:a2:f6:0a:c5:dd:e5:06: 6c:6f:68:cb:9b:37:03:63:e2:96:98:fe:7b:ef:54:35:a9:00: bb:38:cc:02:d2:64:3f:de:cc:06:1b:3e:9f:9f:39:a0:cd:04: 2a:a2:34:91:70:5b:8d:13:4b:d9:93:26:eb:b1:65:a2:2a:eb: a4:36:50:3f:b6:22:96:e8:1c:2c:6a:55:5d:11:70:a8:55:e6: 19:7e:ed:0f:cc:a6:27:e8:24:40:d6:61:7f:98:ce:bc:c2:5b: 90:67:be:a7:67:97:4c:5b:12:de:a5:58:33:f9:45:63:09:ae: 0a:d2:f1:4d:85:2e:bd:94:db:bd:b9:4c:03:1b:ec:7a:52:40: 88:55:9a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVMVVgdcreorFP7j1OUizDwtQwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNTExMDMwMzE2MDlaFw0yNTExMDYxMTU5MDlaMDMxMTAvBgNV BAMTKDU5N0ZGN0Y3MUQ5QzQ0M0NFMzM3Q0NDODQxN0NBMUQ3MTAyRjgwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iPlpKp3CAd2BiSFeJ/AC+guF e5zZlWAUiL1ewKrqQgn4qXchNVaod/geWAyNk1sec5TCYgZ1oWtMnOtBkcteSsb9 uz9B4i1BNwCqjNX0ksTIu0wuer1qzV6c+AGY3rL1zsy7TkRMNKXn3b2obJqTlkUW jBHEq2PDMDnwzQKDoGAFrqYLba/Ua3e4LVWEnFb/OfNbEdbLpXssubk3ysoPMu+n oo567T9rYQoCJcxwN56lsOAFUfHKvecycck3iAFWbBHyqyddkNd8/JyeM0pvMMo9 YEWijeZocYxBllmva5JoIJSBV8Jm5GQZwl/n06KmDDUzcSexhZEzBOyhyFlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWX/39x2cRDzjN8zIQXyh1xAvgKEwHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzNFpem/9nUHzsM4WntntyIZt+yKoj93c7L OcJBYeE3pM6ZdUO1E3LhByhW/R04ZfbTOI7JqFKlWPiDhcEyxgqxIv8QTuc6bd3k 7ylcrAcxd2AbPQ4+g9yJakcDzYluV0Oh+kgKPoG2iE4JPBxIHygiqzbt6FAsovYK xd3lBmxvaMubNwNj4paY/nvvVDWpALs4zALSZD/ezAYbPp+fOaDNBCqiNJFwW40T S9mTJuuxZaIq66Q2UD+2IpboHCxqVV0RcKhV5hl+7Q/MpifoJEDWYX+YzrzCW5Bn vqdnl0xbEt6lWDP5RWMJrgrS8U2FLr2U2725TAMb7HpSQIhVmn4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:50 2025 by rpki-client