$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: TQa9pyt3dy+xc5+8b4conLkNIBebxVO502BYOz59wg4= Subject key identifier: 7D:D8:01:2F:BC:BD:4D:84:76:19:61:23:48:B3:F7:29:A5:67:19:B8 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 02BE8AAA9E12576B543F29F58B42F0823F1275C3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0523 Signing time: Wed 05 Nov 2025 07:40:35 +0000 Manifest this update: Wed 05 Nov 2025 07:35:35 +0000 Manifest next update: Sat 08 Nov 2025 10:43:35 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: FTRNjGyLF6xbx+SVo5ENSKG/mVYsUiGkpkZoxXXuC/c=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:8a:aa:9e:12:57:6b:54:3f:29:f5:8b:42:f0:82:3f:12:75:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Nov 5 07:35:35 2025 GMT Not After : Nov 8 10:43:35 2025 GMT Subject: CN=7DD8012FBCBD4D847619612348B3F729A56719B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:46:65:35:e0:0c:7f:66:1d:ec:a4:0a:c6: 7d:2b:23:f2:8d:78:52:5f:45:5c:2f:95:c8:6f:76: a3:5a:82:81:90:81:ca:ef:94:36:bb:2b:2e:96:57: ce:3f:b0:a9:34:d4:43:22:62:0c:70:1d:e1:ee:67: ef:ce:f0:e2:f4:9c:22:52:5e:9a:46:5c:71:0b:48: 96:7b:3e:e7:7b:4b:ed:5c:3d:72:00:00:b9:27:68: 90:38:b2:8f:bd:43:6e:ac:e8:31:54:81:3a:29:ca: f7:e5:d7:2c:e6:7a:df:2e:6d:9f:74:04:80:56:32: 34:6c:28:57:5d:a6:1c:b1:26:25:b9:65:e9:3f:7f: c2:df:7f:11:14:2c:72:13:ea:e9:4f:59:a0:d1:1f: e6:59:eb:a3:f2:b5:15:da:5f:8b:fa:9f:ff:25:fc: 47:49:c4:01:43:1f:d4:9a:72:bd:ab:84:c6:de:9a: 11:19:3a:f1:25:20:30:cd:4b:96:84:c6:5b:98:25: f0:10:a6:bb:b6:ad:e3:53:c4:c8:8e:2a:76:a3:ab: 49:08:66:0d:61:8f:c4:5c:85:7a:b0:33:21:c8:4f: 41:6b:bb:38:16:48:4f:5b:86:ae:27:dd:32:94:f8: 2c:ae:1f:76:19:d6:08:1b:2e:74:a1:ed:45:62:26: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:01:2F:BC:BD:4D:84:76:19:61:23:48:B3:F7:29:A5:67:19:B8 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:dd:bc:b9:33:d1:ca:29:4b:0e:1a:dd:0c:1e:7b:81:76:b5: 41:29:51:45:87:f7:b8:9d:eb:d4:cf:df:b6:d1:a5:48:a7:23: 15:7f:b3:9a:cb:ac:95:66:17:46:90:1e:5f:7f:8b:12:f9:b1: 1d:24:9c:da:2e:5a:e1:47:79:f2:9b:50:e5:7e:25:9a:aa:f9: 85:53:4d:62:a0:2f:21:7e:66:30:29:e2:8e:b2:91:41:19:60: 30:cd:7e:47:9d:08:c2:bf:29:5d:ee:2c:46:78:07:a2:09:7c: 2a:f1:2d:39:a3:8d:53:b0:12:f6:31:fb:c7:01:de:bc:f3:54: d0:e4:9c:e3:9c:d9:2c:ba:28:d2:05:32:f4:5a:ef:95:69:42: c5:55:c8:11:2a:bc:6f:a7:52:24:41:28:2d:c9:8e:a7:b9:e8: e4:0d:2e:b2:85:ee:dc:80:9a:b9:44:2b:ae:79:74:8b:26:aa: 1d:7f:0f:d6:8e:78:c8:42:08:3b:2c:7a:72:85:26:fe:70:1b: e0:66:e0:2c:99:24:9d:dc:77:e1:4b:26:0d:e9:8d:11:86:dc: 68:f3:99:95:db:ee:14:45:b2:b9:b7:5d:9c:c2:f5:2b:24:5d: fb:29:1b:03:d6:c8:18:42:a1:fd:30:d1:35:dd:74:2e:95:db: 07:32:69:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUAr6Kqp4SV2tUPyn1i0Lwgj8SdcMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MTEwNTA3MzUzNVoX DTI1MTEwODEwNDMzNVowMzExMC8GA1UEAxMoN0REODAxMkZCQ0JENEQ4NDc2MTk2 MTIzNDhCM0Y3MjlBNTY3MTlCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuBRmU14Ax/Zh3spArGfSsj8o14Ul9FXC+VyG92o1qCgZCByu+UNrsrLpZX zj+wqTTUQyJiDHAd4e5n787w4vScIlJemkZccQtIlns+53tL7Vw9cgAAuSdokDiy j71DbqzoMVSBOinK9+XXLOZ63y5tn3QEgFYyNGwoV12mHLEmJbll6T9/wt9/ERQs chPq6U9ZoNEf5lnro/K1Fdpfi/qf/yX8R0nEAUMf1JpyvauExt6aERk68SUgMM1L loTGW5gl8BCmu7at41PEyI4qdqOrSQhmDWGPxFyFerAzIchPQWu7OBZIT1uGrifd MpT4LK4fdhnWCBsudKHtRWImh4sCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBR92AEv vL1NhHYZYSNIs/cppWcZuDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW928uTPR yilLDhrdDB57gXa1QSlRRYf3uJ3r1M/fttGlSKcjFX+zmsuslWYXRpAeX3+LEvmx HSSc2i5a4Ud58ptQ5X4lmqr5hVNNYqAvIX5mMCnijrKRQRlgMM1+R50Iwr8pXe4s RngHogl8KvEtOaONU7AS9jH7xwHevPNU0OSc45zZLLoo0gUy9FrvlWlCxVXIESq8 b6dSJEEoLcmOp7no5A0usoXu3ICauUQrrnl0iyaqHX8P1o54yEIIOyx6coUm/nAb 4GbgLJkkndx34UsmDemNEYbcaPOZldvuFEWyubddnML1KyRd+ykbA9bIGEKh/TDR Nd10LpXbBzJp2A== -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:13 2025 by rpki-client