$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: Uc9Ab2a1ff4HmMJpwZltOmhtVtyPBdxRN2P8xxiUk3A= Subject key identifier: 92:E6:53:73:6C:EB:AB:8A:60:49:B6:29:76:33:22:3E:AC:8E:98:6A Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 1BBE2F1CD8E099D2649A6A321847202580C40EB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 95 Signing time: Sun 02 Nov 2025 17:51:14 +0000 Manifest this update: Sun 02 Nov 2025 17:46:14 +0000 Manifest next update: Thu 06 Nov 2025 01:47:14 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: ixmoCPiJWAOVzFu05RLq76A5N8Nfj5m4j7IpUmALbKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:be:2f:1c:d8:e0:99:d2:64:9a:6a:32:18:47:20:25:80:c4:0e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Nov 2 17:46:14 2025 GMT Not After : Nov 6 01:47:14 2025 GMT Subject: CN=92E653736CEBAB8A6049B6297633223EAC8E986A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:b9:90:8e:de:27:d7:ee:56:dd:3f:f8:de: 12:27:b6:3f:a9:22:10:f0:99:00:be:39:cc:c3:ee: 74:55:f7:e8:b2:9b:74:cd:f3:99:57:dd:32:fe:53: a7:4f:5a:17:6c:78:6f:ea:2f:29:67:30:3d:f7:97: 52:bf:80:2a:d4:db:5b:40:be:1a:71:94:ed:08:0e: a0:5e:f9:f5:22:f7:80:d5:c5:5d:9d:83:45:db:9d: a0:f9:12:1b:c8:d1:e5:a9:86:66:a0:ed:e3:b9:8c: 5e:26:44:a8:09:32:09:eb:f1:bc:1f:c2:28:69:cf: af:9f:95:62:90:04:b0:14:65:1e:5e:e9:ae:f6:18: 03:e2:6c:9f:5b:f3:6f:ac:bb:a8:e1:15:f2:1c:17: 7f:c0:1e:22:82:95:92:82:e8:38:af:a6:30:6f:ae: 89:82:dc:03:8d:c1:87:8b:98:85:86:7b:59:ea:1d: 26:3a:04:8e:67:7a:a8:80:40:ff:06:d5:dc:4e:ba: 08:f4:62:2e:9a:9c:2e:78:16:aa:c1:33:7e:92:09: bb:a8:d9:28:af:b0:d8:23:2a:ec:b7:9a:e5:5d:12: a1:43:30:a0:43:57:e2:43:61:e3:2b:4d:ee:2c:7d: f3:08:90:48:31:ab:88:8f:67:d2:38:82:0d:e6:2d: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:53:73:6C:EB:AB:8A:60:49:B6:29:76:33:22:3E:AC:8E:98:6A X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9e:a1:bd:b4:f2:89:d1:d5:e9:96:b6:0d:e8:e2:85:6f:33: 6b:e1:2e:83:ec:cb:39:7b:1c:36:b7:a0:07:97:c2:66:d8:cd: be:72:e8:c8:5f:0b:eb:e3:67:8f:95:23:73:97:1a:39:79:cb: 97:56:a4:df:0c:aa:78:93:4d:85:37:85:a2:42:ac:08:ee:d2: 5e:eb:87:ce:de:f0:b4:85:ca:48:49:6e:c9:58:d4:d1:a4:10: fd:b6:43:ef:ce:93:a3:61:33:70:54:be:aa:2e:8c:f0:38:9e: 03:e7:17:2d:bf:52:91:7d:3e:17:a4:0c:1e:2a:b9:5e:95:5d: 3d:97:82:df:b5:17:02:f8:97:c0:56:ac:7d:cc:c8:8e:9b:0e: fc:3e:ef:0d:d0:88:e6:de:97:32:ce:50:39:cd:02:38:b0:1c: 75:54:a5:e7:21:76:eb:45:0c:f7:2f:dd:3d:49:c7:da:1c:f9: 46:33:c6:b6:23:86:44:bc:0c:30:cb:0c:9f:ff:8e:58:d5:2f: c5:cf:22:23:4c:82:7d:d5:83:0d:6a:e1:74:19:ff:b8:66:2c: 7f:ef:06:d7:ff:ac:3e:97:b9:18:39:9b:c8:05:6e:67:af:3f: 19:dc:c0:85:09:89:67:e7:0c:e8:29:ee:3c:b0:b1:c0:eb:f3: 83:77:28:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG74vHNjgmdJkmmoyGEcgJYDEDrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTExMDIxNzQ2MTRaFw0yNTExMDYwMTQ3MTRaMDMxMTAvBgNV BAMTKDkyRTY1MzczNkNFQkFCOEE2MDQ5QjYyOTc2MzMyMjNFQUM4RTk4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfLmQjt4n1+5W3T/43hIntj+p IhDwmQC+OczD7nRV9+iym3TN85lX3TL+U6dPWhdseG/qLylnMD33l1K/gCrU21tA vhpxlO0IDqBe+fUi94DVxV2dg0XbnaD5EhvI0eWphmag7eO5jF4mRKgJMgnr8bwf wihpz6+flWKQBLAUZR5e6a72GAPibJ9b82+su6jhFfIcF3/AHiKClZKC6DivpjBv romC3AONwYeLmIWGe1nqHSY6BI5neqiAQP8G1dxOugj0Yi6anC54FqrBM36SCbuo 2SivsNgjKuy3muVdEqFDMKBDV+JDYeMrTe4sffMIkEgxq4iPZ9I4gg3mLaTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkuZTc2zrq4pgSbYpdjMiPqyOmGowHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOeob208onR1emWtg3o4oVvM2vhLoPsyzl7 HDa3oAeXwmbYzb5y6MhfC+vjZ4+VI3OXGjl5y5dWpN8MqniTTYU3haJCrAju0l7r h87e8LSFykhJbslY1NGkEP22Q+/Ok6NhM3BUvqoujPA4ngPnFy2/UpF9PhekDB4q uV6VXT2Xgt+1FwL4l8BWrH3MyI6bDvw+7w3QiObelzLOUDnNAjiwHHVUpechdutF DPcv3T1Jx9oc+UYzxrYjhkS8DDDLDJ//jljVL8XPIiNMgn3Vgw1q4XQZ/7hmLH/v Btf/rD6XuRg5m8gFbmevPxncwIUJiWfnDOgp7jywscDr84N3KBA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:54 2025 by rpki-client