$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: CNTtEuNqmz/D0vK/YTBtSDHmlrUHnD2NgTb71ng7GPU= Subject key identifier: 99:5B:3E:34:1F:E2:47:AA:A3:91:C4:86:5C:DC:B6:02:5E:05:9E:92 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 7F4F730E86BB2FB5B28B5F3F4676B12A8072F4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0231 Signing time: Mon 03 Nov 2025 09:22:06 +0000 Manifest this update: Mon 03 Nov 2025 09:17:06 +0000 Manifest next update: Thu 06 Nov 2025 17:20:06 +0000 Files and hashes: 1: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 2: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: 5u1UOejWykmfp8bdkJ0PS3krouHZYCM2P+4POOv6myQ=) 3: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 4: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4f:73:0e:86:bb:2f:b5:b2:8b:5f:3f:46:76:b1:2a:80:72:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Nov 3 09:17:06 2025 GMT Not After : Nov 6 17:20:06 2025 GMT Subject: CN=995B3E341FE247AAA391C4865CDCB6025E059E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:09:8a:8a:fa:df:8d:4d:b9:97:ea:3e:6a: e4:40:d6:2a:95:44:9d:ef:91:a0:76:f8:95:a7:a4: c4:98:73:9d:10:39:12:a3:72:34:8c:37:ac:5d:18: a9:6f:e3:f3:64:76:c2:a8:5f:de:fc:ac:a2:93:8b: 0b:94:49:22:bd:6e:de:fc:54:e4:55:eb:fe:bc:2c: 60:d5:52:9d:52:99:2c:17:af:11:8b:b6:c7:99:e7: 6b:e8:08:60:48:82:3d:13:c8:27:f6:13:c6:13:05: 47:8e:73:7f:b8:06:19:40:92:bd:87:45:3f:43:6d: e7:ef:ec:9a:5b:16:0a:9d:61:36:1e:32:6a:ad:06: 15:af:32:c6:23:d2:60:9c:3b:dd:65:83:ae:f3:98: af:01:e1:88:10:ba:c5:fe:a8:6a:bb:ad:58:78:a9: 55:dc:cd:07:00:bd:38:3f:0f:84:43:51:dc:dc:9d: da:48:25:e2:e6:89:a7:95:f5:aa:a1:a4:92:b9:30: f5:da:b0:15:6c:69:68:bf:81:23:77:1a:e1:0a:1a: 3f:2c:33:c5:25:e0:61:99:53:da:f0:6d:43:1c:3f: 6d:f0:ee:92:78:b4:c6:9b:14:ea:df:41:29:73:49: be:4c:87:88:de:cf:9d:4f:10:c2:3c:df:86:5f:65: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:3E:34:1F:E2:47:AA:A3:91:C4:86:5C:DC:B6:02:5E:05:9E:92 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3e:60:77:ae:4d:e9:f4:cf:2d:30:79:ed:c8:33:cb:7f:72: 64:38:f4:30:f3:b7:84:d3:f0:8b:2c:e9:b0:1c:46:6c:14:40: c1:28:2e:1c:83:13:83:f1:fb:2c:bd:4e:cf:4d:1d:68:a1:5a: c3:19:d4:42:00:80:bc:4c:4f:3e:bf:16:fc:06:61:52:e2:57: be:ef:a7:f9:8e:f4:77:9e:fb:61:e4:41:72:2d:f9:20:c2:43: f1:67:bc:b8:a0:5d:68:6f:32:45:d5:bb:c8:4f:b1:c2:9b:7f: 11:1d:14:98:33:7c:b9:dc:5a:12:3c:94:94:47:9d:b8:7a:1c: 48:ed:3a:ca:d6:1a:4e:da:3f:ca:d9:bf:b9:7d:ac:00:28:e2: 7e:61:2f:d2:d3:8f:25:f0:ed:55:40:27:55:ce:08:de:e3:23: b6:ba:8e:b3:1a:f0:96:80:03:f9:57:a5:9a:fe:69:cd:5a:b2: bb:53:c8:ce:1b:51:8d:12:cf:8d:57:f6:d6:a5:63:0a:c4:78: 45:ed:83:91:a5:42:16:b9:c8:9e:a1:4f:ee:1f:60:1c:11:97: 1e:0c:5b:e1:4d:63:65:da:a2:75:92:c5:ae:5b:d6:e9:2e:eb: ee:e1:41:57:a2:d3:ea:6a:67:57:bf:1f:6f:59:ad:39:da:6b: f6:36:e1:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf09zDoa7L7Wyi18/RnaxKoBy9KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTExMDMwOTE3MDZaFw0yNTExMDYxNzIwMDZaMDMxMTAvBgNV BAMTKDk5NUIzRTM0MUZFMjQ3QUFBMzkxQzQ4NjVDRENCNjAyNUUwNTlFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjwmKivrfjU25l+o+auRA1iqV RJ3vkaB2+JWnpMSYc50QORKjcjSMN6xdGKlv4/NkdsKoX978rKKTiwuUSSK9bt78 VORV6/68LGDVUp1SmSwXrxGLtseZ52voCGBIgj0TyCf2E8YTBUeOc3+4BhlAkr2H RT9Dbefv7JpbFgqdYTYeMmqtBhWvMsYj0mCcO91lg67zmK8B4YgQusX+qGq7rVh4 qVXczQcAvTg/D4RDUdzcndpIJeLmiaeV9aqhpJK5MPXasBVsaWi/gSN3GuEKGj8s M8Ul4GGZU9rwbUMcP23w7pJ4tMabFOrfQSlzSb5Mh4jez51PEMI834ZfZcYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmVs+NB/iR6qjkcSGXNy2Al4FnpIwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ+YHeuTen0zy0wee3IM8t/cmQ49DDzt4TT 8Iss6bAcRmwUQMEoLhyDE4Px+yy9Ts9NHWihWsMZ1EIAgLxMTz6/FvwGYVLiV77v p/mO9Hee+2HkQXIt+SDCQ/FnvLigXWhvMkXVu8hPscKbfxEdFJgzfLncWhI8lJRH nbh6HEjtOsrWGk7aP8rZv7l9rAAo4n5hL9LTjyXw7VVAJ1XOCN7jI7a6jrMa8JaA A/lXpZr+ac1asrtTyM4bUY0Sz41X9talYwrEeEXtg5GlQha5yJ6hT+4fYBwRlx4M W+FNY2XaonWSxa5b1uku6+7hQVei0+pqZ1e/H29ZrTnaa/Y24WM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:44 2025 by rpki-client