$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: K9NvS9MeV9T7mM6he181b+fof14K+bjUUoQ4seXSGwg= Subject key identifier: 14:42:76:11:D7:B3:E4:6F:AC:BE:38:75:A1:88:2D:BC:96:F9:98:81 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 150C64A194179BEAA215AD7DEDAE4BB49376B75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: A3 Signing time: Tue 04 Nov 2025 03:51:05 +0000 Manifest this update: Tue 04 Nov 2025 03:46:05 +0000 Manifest next update: Fri 07 Nov 2025 11:15:05 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: lGBe0bmn+MRRiNKtNNoYBzgwrB2MBD/aC8i/wDLlc0w=) 2: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) 3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0c:64:a1:94:17:9b:ea:a2:15:ad:7d:ed:ae:4b:b4:93:76:b7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Nov 4 03:46:05 2025 GMT Not After : Nov 7 11:15:05 2025 GMT Subject: CN=14427611D7B3E46FACBE3875A1882DBC96F99881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:72:66:42:16:91:f0:18:96:c8:e7:e0:68: 95:d7:35:91:3b:67:b4:02:46:a8:db:c0:ca:70:37: 6d:04:ea:ef:14:96:aa:42:2c:7a:1e:7b:f8:93:d8: 7f:84:8f:36:36:6c:7a:5d:52:ce:2a:b8:2d:3a:1d: c4:7b:ad:b2:19:76:04:46:80:72:6a:d1:76:ec:28: a0:c0:df:d9:b9:55:53:e5:79:76:1c:55:e4:3d:e3: 74:54:16:96:8d:bd:e1:c8:fd:d7:25:7d:f7:0a:d0: 7c:98:44:fc:ec:03:54:e6:46:eb:83:08:18:49:b3: db:74:98:34:79:58:0b:db:c3:20:e5:eb:ab:b7:de: e0:c8:10:69:df:17:09:9c:a6:2c:5d:73:63:24:45: 57:27:d0:ac:5b:17:e3:d5:f4:23:ec:ea:69:71:27: bf:02:a7:de:fa:ca:e5:53:0d:1d:b3:1d:41:af:95: 26:7a:d8:ea:7b:78:07:d3:b0:10:3b:a5:75:68:8e: 0a:65:26:6d:7d:d3:2a:9b:19:b1:75:dd:94:c2:b2: df:b5:9b:64:69:96:99:cd:32:f3:54:19:fd:89:d4: d2:6f:30:7b:7c:37:d0:5f:f6:a3:1e:01:eb:fc:fe: 25:ec:dc:fa:89:91:f1:20:f3:47:6e:6a:db:63:79: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:42:76:11:D7:B3:E4:6F:AC:BE:38:75:A1:88:2D:BC:96:F9:98:81 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:5a:cb:67:82:6f:c6:57:ef:0b:aa:7d:6c:53:ba:9f:43:20: a8:37:69:56:fe:60:c3:de:7a:e5:7b:61:9b:12:51:97:2c:67: 7d:5b:23:b7:8d:f2:36:86:38:87:04:88:dc:cd:c0:9b:b4:15: 8f:9e:10:c3:4d:0a:65:86:68:7c:fd:a3:10:27:a0:85:7b:f8: 17:d8:54:9f:bf:43:ab:67:b1:33:7c:32:8e:51:0d:aa:bc:cd: 3f:aa:37:eb:e6:e2:c6:13:0b:3b:e1:80:f9:b7:db:dc:c3:30: 20:99:5e:91:6d:24:8e:8b:4f:4d:aa:5d:50:2b:c5:29:01:96: ea:2b:c5:10:5f:47:2d:6f:6f:bb:03:2b:b6:1f:83:85:43:96: 1e:8c:e3:cf:c1:96:82:76:cf:4e:37:65:67:96:0b:c6:ef:3f: a3:41:72:7c:0f:80:aa:10:08:17:b8:ad:9c:a3:0d:a6:f0:83: 33:74:22:f1:f2:cb:a3:30:d9:83:b6:03:fd:c7:06:e0:64:2c: d1:82:52:4e:65:82:58:11:6a:0f:46:29:92:49:5d:82:d2:a8: 87:41:d4:ac:ac:0d:c8:35:f6:1e:52:8a:0a:62:6b:f3:77:3b: b5:4d:70:4a:c9:c0:8f:cf:74:36:04:2d:8e:7e:20:d3:59:61: aa:f2:85:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQxkoZQXm+qiFa197a5LtJN2t18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTExMDQwMzQ2MDVaFw0yNTExMDcxMTE1MDVaMDMxMTAvBgNV BAMTKDE0NDI3NjExRDdCM0U0NkZBQ0JFMzg3NUExODgyREJDOTZGOTk4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFunJmQhaR8BiWyOfgaJXXNZE7 Z7QCRqjbwMpwN20E6u8UlqpCLHoee/iT2H+EjzY2bHpdUs4quC06HcR7rbIZdgRG gHJq0XbsKKDA39m5VVPleXYcVeQ943RUFpaNveHI/dclffcK0HyYRPzsA1TmRuuD CBhJs9t0mDR5WAvbwyDl66u33uDIEGnfFwmcpixdc2MkRVcn0KxbF+PV9CPs6mlx J78Cp976yuVTDR2zHUGvlSZ62Op7eAfTsBA7pXVojgplJm190yqbGbF13ZTCst+1 m2RplpnNMvNUGf2J1NJvMHt8N9Bf9qMeAev8/iXs3PqJkfEg80duattjeQSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFEJ2Edez5G+svjh1oYgtvJb5mIEwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMday2eCb8ZX7wuqfWxTup9DIKg3aVb+YMPe euV7YZsSUZcsZ31bI7eN8jaGOIcEiNzNwJu0FY+eEMNNCmWGaHz9oxAnoIV7+BfY VJ+/Q6tnsTN8Mo5RDaq8zT+qN+vm4sYTCzvhgPm329zDMCCZXpFtJI6LT02qXVAr xSkBluorxRBfRy1vb7sDK7Yfg4VDlh6M48/BloJ2z043ZWeWC8bvP6NBcnwPgKoQ CBe4rZyjDabwgzN0IvHyy6Mw2YO2A/3HBuBkLNGCUk5lglgRag9GKZJJXYLSqIdB 1KysDcg19h5Sigpia/N3O7VNcErJwI/PdDYELY5+INNZYaryhYw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:12 2025 by rpki-client