$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: Cbp6WJRHby1xzfucTg7cPE7UZu7DMDSJY86QFMbk6YY= Subject key identifier: DF:F0:7B:5C:20:C0:35:33:5C:B7:14:A0:CD:7A:40:E1:14:D4:9D:59 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 3A3498B75EFD899D334408A695B092E13BE50CCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01EA Signing time: Mon 03 Nov 2025 03:32:21 +0000 Manifest this update: Mon 03 Nov 2025 03:27:21 +0000 Manifest next update: Thu 06 Nov 2025 12:13:21 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: M25ACsc1khLsnoOvuw97gQAC7yQc6mXkvu4ZK2n7FbU=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:34:98:b7:5e:fd:89:9d:33:44:08:a6:95:b0:92:e1:3b:e5:0c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Nov 3 03:27:21 2025 GMT Not After : Nov 6 12:13:21 2025 GMT Subject: CN=DFF07B5C20C035335CB714A0CD7A40E114D49D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:79:1b:a1:40:57:0a:96:1d:6b:59:2c:aa: fc:f1:f4:73:74:83:92:a1:3e:3d:30:32:2c:7e:07: 0c:aa:6d:b8:73:4b:9c:c6:15:57:d7:e2:ca:a8:d1: 6a:58:ed:b4:34:23:77:c2:81:5a:79:af:0a:d0:bb: 90:b7:d2:db:d3:57:49:4c:b2:2d:a3:3f:15:28:27: 73:1b:cb:e6:d2:f0:7f:f4:7e:d3:ea:8d:6e:da:b3: b5:f5:6f:b2:d2:e3:8f:7f:92:ef:88:b1:5d:80:8c: c1:06:86:b8:a1:ab:74:40:1c:5f:9f:e9:94:03:9e: 06:53:10:54:4e:d0:be:e1:f8:91:d0:2a:a2:bc:ca: 47:7e:33:e4:91:e6:d8:1b:37:5a:20:c7:9a:03:fd: 66:62:7d:d7:56:a9:85:64:97:40:de:2f:80:29:76: 29:08:65:0b:bd:de:05:90:87:67:4f:f3:1e:04:bd: a1:7e:f5:bc:30:44:32:cd:08:49:fb:5b:37:7f:92: 19:fe:84:fa:02:8c:14:42:c0:d7:34:01:78:2a:aa: e9:99:ed:cf:89:dc:ec:83:28:c7:76:55:eb:63:da: 3a:27:b0:59:4d:6b:29:80:11:a0:a7:b0:93:26:73: 6c:73:af:2f:7a:b3:a2:45:cc:17:f1:ed:f6:ce:96: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:7B:5C:20:C0:35:33:5C:B7:14:A0:CD:7A:40:E1:14:D4:9D:59 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:d0:d1:14:5e:e8:55:06:7c:bf:55:43:11:87:ab:ec:70:19: d4:22:71:96:08:21:27:a8:81:99:92:8c:67:d1:87:80:26:5c: bb:4a:a4:8a:ab:b2:21:2e:ec:5d:c5:64:38:8e:b1:24:1d:d8: ba:eb:70:19:d8:4b:27:38:a7:0c:09:f9:d5:1d:87:48:ed:22: 95:72:aa:1a:51:29:bf:6f:88:43:ea:3b:2e:e9:cf:90:c4:bf: 18:40:8a:50:59:e9:98:2b:43:76:cd:64:bb:a1:cf:bf:1a:8e: e1:e8:72:8e:9b:12:55:f8:6c:9c:ed:22:42:5a:5e:5c:8d:d4: 7d:b2:d6:da:51:9e:68:21:b7:d4:9b:c3:85:76:95:b8:ae:61: 3d:9a:d0:49:f4:ca:a1:05:7b:19:bb:41:5c:ed:83:9e:0b:53: f2:d2:56:ca:bc:dc:fa:a8:4d:24:94:9f:54:07:7d:0c:26:2d: 2d:d2:19:de:26:4d:61:7d:1e:86:0e:11:d1:78:73:a6:84:3f: 9c:43:cd:d9:31:38:41:11:d0:1a:a1:32:02:dd:4d:36:6a:8b: 0a:a1:b8:e5:99:9f:82:c0:5e:3e:c8:f8:7b:76:e3:09:b2:02: e3:e2:ac:3e:09:80:90:a9:4b:5b:17:63:51:9a:10:47:74:03: 67:a9:95:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjSYt179iZ0zRAimlbCS4TvlDMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTExMDMwMzI3MjFaFw0yNTExMDYxMjEzMjFaMDMxMTAvBgNV BAMTKERGRjA3QjVDMjBDMDM1MzM1Q0I3MTRBMENEN0E0MEUxMTRENDlENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dHkboUBXCpYda1ksqvzx9HN0 g5KhPj0wMix+BwyqbbhzS5zGFVfX4sqo0WpY7bQ0I3fCgVp5rwrQu5C30tvTV0lM si2jPxUoJ3Mby+bS8H/0ftPqjW7as7X1b7LS449/ku+IsV2AjMEGhrihq3RAHF+f 6ZQDngZTEFRO0L7h+JHQKqK8ykd+M+SR5tgbN1ogx5oD/WZifddWqYVkl0DeL4Ap dikIZQu93gWQh2dP8x4EvaF+9bwwRDLNCEn7Wzd/khn+hPoCjBRCwNc0AXgqqumZ 7c+J3OyDKMd2Vetj2jonsFlNaymAEaCnsJMmc2xzry96s6JFzBfx7fbOltwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/B7XCDANTNctxSgzXpA4RTUnVkwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANDQ0RRe6FUGfL9VQxGHq+xwGdQicZYIISeo gZmSjGfRh4AmXLtKpIqrsiEu7F3FZDiOsSQd2LrrcBnYSyc4pwwJ+dUdh0jtIpVy qhpRKb9viEPqOy7pz5DEvxhAilBZ6ZgrQ3bNZLuhz78ajuHoco6bElX4bJztIkJa XlyN1H2y1tpRnmght9Sbw4V2lbiuYT2a0En0yqEFexm7QVztg54LU/LSVsq83Pqo TSSUn1QHfQwmLS3SGd4mTWF9HoYOEdF4c6aEP5xDzdkxOEER0BqhMgLdTTZqiwqh uOWZn4LAXj7I+Ht24wmyAuPirD4JgJCpS1sXY1GaEEd0A2eplak= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:50 2025 by rpki-client