$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: r5lvoHTfBY0GNr4J19nsovpbGzdNSb48G0mMc3VE8qQ= Subject key identifier: 7E:EF:83:97:64:D3:7D:50:5D:32:6A:01:46:08:6B:F2:25:6F:65:2D Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 7A69937DF130BBA7BF0024E52DBF9CEA665F72D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02BD Signing time: Mon 03 Nov 2025 22:02:22 +0000 Manifest this update: Mon 03 Nov 2025 21:57:22 +0000 Manifest next update: Thu 06 Nov 2025 22:15:22 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: wgAYx7HRln1oGW4xof2R6EnPYgonvWu9jiYyHdZA9lA=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:69:93:7d:f1:30:bb:a7:bf:00:24:e5:2d:bf:9c:ea:66:5f:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Nov 3 21:57:22 2025 GMT Not After : Nov 6 22:15:22 2025 GMT Subject: CN=7EEF839764D37D505D326A0146086BF2256F652D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:8d:f1:9c:84:d2:10:e4:b5:d9:7d:99:89: a8:71:8d:31:bf:43:8c:cf:79:a6:2f:c2:45:e4:5f: fd:5e:f9:57:5d:99:c6:cf:c8:98:9c:00:50:1c:0a: dc:2b:2d:0e:3a:63:2f:83:93:1a:c9:ec:5d:c7:2a: 53:4f:bc:1b:d6:d6:28:14:00:ae:95:3a:f1:67:55: 67:37:69:9c:01:eb:43:9e:d4:78:d7:12:05:1f:f4: e8:52:56:7b:c6:0e:d3:65:70:dd:a1:89:2e:88:af: 6f:53:38:a5:cb:e0:9e:9e:1b:35:a8:da:9b:a8:fa: 0a:c2:90:db:2f:50:38:36:9c:9b:be:27:ae:b3:df: eb:c4:d2:2e:8a:24:58:5b:22:a9:83:8e:31:77:fa: 69:e5:d8:64:ca:9e:47:fe:f5:87:8d:f3:2a:55:ca: 06:f8:37:cf:d0:1f:3c:2f:66:3f:d5:8b:11:57:6d: 67:39:12:27:c1:4e:78:bf:2d:91:34:7d:25:bb:7c: c9:36:d8:75:30:45:74:66:37:d6:d7:48:7a:c0:84: f3:52:f6:1e:9c:a9:9f:25:4f:a6:ec:da:a6:02:82: 50:98:9a:19:1a:85:28:12:e4:49:95:92:fa:a4:66: 3b:ad:b2:6a:23:96:34:5d:0c:c0:a7:b9:69:32:0b: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EF:83:97:64:D3:7D:50:5D:32:6A:01:46:08:6B:F2:25:6F:65:2D X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:2e:b3:73:a1:ac:ae:c1:57:36:eb:db:14:af:af:84:a3: e9:82:c9:17:c6:34:64:a6:19:de:ac:f2:1e:fd:cf:66:21:dd: 68:bd:81:c6:b7:7f:87:20:68:fd:d1:1b:11:42:3a:a5:23:7e: 9d:17:f8:98:ca:a6:a7:45:ef:f9:a8:a0:9e:a3:86:ef:0f:15: 51:d7:d7:1d:44:1e:ef:ec:73:3d:2a:82:94:49:b6:1e:1e:c8: 4f:23:e0:32:40:71:a4:79:a7:a7:00:8a:eb:41:06:3d:23:16: 81:0f:7a:f6:5e:33:40:05:84:5d:aa:56:8b:5d:de:15:28:15: e7:76:ba:c4:32:57:52:60:11:c8:64:2a:0c:a1:ea:4a:12:58: 5b:bd:38:42:31:84:66:d6:f6:a5:bb:68:a9:f2:26:ef:df:fa: 79:77:c3:68:2e:38:3c:43:5d:61:cc:a8:4b:bb:ed:6e:f0:1a: be:52:6a:4e:7d:73:c4:16:d1:e7:49:91:fc:aa:0f:82:e9:2d: f7:24:a5:0f:ab:cc:67:22:79:f0:fd:77:08:b1:d4:e5:02:9c: aa:90:8f:ed:04:5e:6b:ab:77:49:36:3c:74:cf:05:f5:b6:99: 14:42:74:5a:b4:94:0f:ce:d4:11:ac:12:55:c9:c6:d7:0d:b2: c7:8c:4c:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemmTffEwu6e/ACTlLb+c6mZfctIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTExMDMyMTU3MjJaFw0yNTExMDYyMjE1MjJaMDMxMTAvBgNV BAMTKDdFRUY4Mzk3NjREMzdENTA1RDMyNkEwMTQ2MDg2QkYyMjU2RjY1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIY3xnITSEOS12X2ZiahxjTG/ Q4zPeaYvwkXkX/1e+VddmcbPyJicAFAcCtwrLQ46Yy+DkxrJ7F3HKlNPvBvW1igU AK6VOvFnVWc3aZwB60Oe1HjXEgUf9OhSVnvGDtNlcN2hiS6Ir29TOKXL4J6eGzWo 2puo+grCkNsvUDg2nJu+J66z3+vE0i6KJFhbIqmDjjF3+mnl2GTKnkf+9YeN8ypV ygb4N8/QHzwvZj/VixFXbWc5EifBTni/LZE0fSW7fMk22HUwRXRmN9bXSHrAhPNS 9h6cqZ8lT6bs2qYCglCYmhkahSgS5EmVkvqkZjutsmojljRdDMCnuWkyC/7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfu+Dl2TTfVBdMmoBRghr8iVvZS0wHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdHLrNzoayuwVc269sUr6+Eo+mCyRfGNGSm Gd6s8h79z2Yh3Wi9gca3f4cgaP3RGxFCOqUjfp0X+JjKpqdF7/mooJ6jhu8PFVHX 1x1EHu/scz0qgpRJth4eyE8j4DJAcaR5p6cAiutBBj0jFoEPevZeM0AFhF2qVotd 3hUoFed2usQyV1JgEchkKgyh6koSWFu9OEIxhGbW9qW7aKnyJu/f+nl3w2guODxD XWHMqEu77W7wGr5Sak59c8QW0edJkfyqD4LpLfckpQ+rzGciefD9dwix1OUCnKqQ j+0EXmurd0k2PHTPBfW2mRRCdFq0lA/O1BGsElXJxtcNsseMTB8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:30 2025 by rpki-client