$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json) Hash identifier: hApMdznOUULYP2jPYd31PNTIsgXCOf/v/B+tQg9pgOA= Subject key identifier: 5C:26:B5:B1:94:39:4F:D9:C2:AD:88:F3:F0:95:A6:D7:FD:1B:95:B6 Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Certificate serial: 02FE464E859ED02C8E42EC8ECB7BDD427E3D1653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft Manifest number: 01D1 Signing time: Mon 03 Nov 2025 19:31:22 +0000 Manifest this update: Mon 03 Nov 2025 19:26:22 +0000 Manifest next update: Fri 07 Nov 2025 05:11:22 +0000 Files and hashes: 1: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: ZqLlJtG3n+rXDpflOQjagHXCDIbRFwDKqVfaHsyobUA=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 8iEgHOEIqDfpr7gSt8jxyho1deCIzw83qW565uPVSgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fe:46:4e:85:9e:d0:2c:8e:42:ec:8e:cb:7b:dd:42:7e:3d:16:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Validity Not Before: Nov 3 19:26:22 2025 GMT Not After : Nov 7 05:11:22 2025 GMT Subject: CN=5C26B5B194394FD9C2AD88F3F095A6D7FD1B95B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:91:e3:13:64:cb:61:29:f3:12:4f:a7:20: 1f:52:c6:ca:4f:bd:61:5d:49:cf:b7:94:e9:80:03: 9c:22:e2:ad:3f:36:8e:2c:91:18:7a:b0:98:f7:81: 34:64:01:52:b3:75:31:85:33:1e:bc:89:c8:27:66: a2:80:c9:27:29:83:7c:aa:13:21:7d:ce:ac:e0:61: 26:22:07:02:39:eb:b8:35:fb:45:83:e8:c1:ac:9c: ea:62:5a:f4:51:e6:c1:5f:fc:b7:d1:8a:24:a3:9d: df:85:4f:96:17:48:01:19:ff:2e:a2:ee:1c:d8:fa: 2f:a2:54:8c:1c:fe:0d:19:8e:59:96:fa:a2:a6:d0: 13:a4:14:18:d9:59:b1:bd:0f:50:c4:88:2f:ed:95: 2a:e9:b7:c1:02:79:06:2f:98:ca:00:1b:54:68:b2: 3e:9c:e3:0b:ea:a2:e9:51:55:ab:5d:07:5a:48:17: 05:37:8c:5c:58:57:55:8f:a7:b6:5f:4c:65:a7:ed: 16:29:8c:ed:b2:e8:bc:bd:b7:a8:9a:a3:c6:df:86: 51:25:5b:12:53:40:49:bd:4a:4c:27:de:58:06:b9: ed:c9:08:75:1d:75:68:cd:f9:90:91:9a:4b:cc:34: ad:33:a6:c4:17:86:7e:1e:27:4c:6e:97:14:cd:36: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:B5:B1:94:39:4F:D9:C2:AD:88:F3:F0:95:A6:D7:FD:1B:95:B6 X509v3 Authority Key Identifier: keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ec:1f:8b:ac:97:9a:68:e8:87:4b:4a:cd:b5:e9:49:25:36: f7:a3:35:a9:c6:6f:af:d0:9b:99:31:3a:d9:47:83:cc:47:5b: d8:7a:8c:7d:8a:26:49:fa:00:10:7e:c4:85:9e:ab:a1:3f:1f: 51:08:9f:d0:32:d3:81:b5:12:ad:53:e0:ae:8e:ce:93:19:1a: 58:f0:c4:7e:41:99:cd:69:48:4f:a4:5d:a1:2e:ae:10:f5:f7: bc:a0:95:09:fa:99:a4:a0:67:97:01:51:f6:6f:11:0a:04:1e: 80:91:9b:76:94:68:03:7d:ca:68:30:85:d7:c2:22:5a:c8:7a: 9b:ef:a7:e3:99:d3:71:6b:8d:0d:40:39:39:ab:89:60:8d:57: b7:69:ad:48:49:da:7f:00:95:2e:91:76:ab:14:67:fe:f9:40: bb:ae:e4:c0:29:4d:29:3f:04:23:a2:11:2f:80:e2:c0:4d:32: ac:33:ff:aa:d2:f2:11:4f:ae:70:7f:96:f0:ef:55:aa:67:62: 2a:dd:df:7b:50:ef:e8:30:c0:5f:b6:a0:22:25:39:54:b7:05: 92:16:de:40:3f:69:ee:5b:3c:bb:a5:bc:e1:04:10:80:df:a2: 56:24:65:e7:fd:18:4d:b8:0a:56:46:b5:9f:ef:bd:f5:3f:33: 95:e2:ea:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv5GToWe0CyOQuyOy3vdQn49FlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1 RUMzODcxRjAeFw0yNTExMDMxOTI2MjJaFw0yNTExMDcwNTExMjJaMDMxMTAvBgNV BAMTKDVDMjZCNUIxOTQzOTRGRDlDMkFEODhGM0YwOTVBNkQ3RkQxQjk1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuG5HjE2TLYSnzEk+nIB9SxspP vWFdSc+3lOmAA5wi4q0/No4skRh6sJj3gTRkAVKzdTGFMx68icgnZqKAyScpg3yq EyF9zqzgYSYiBwI567g1+0WD6MGsnOpiWvRR5sFf/LfRiiSjnd+FT5YXSAEZ/y6i 7hzY+i+iVIwc/g0ZjlmW+qKm0BOkFBjZWbG9D1DEiC/tlSrpt8ECeQYvmMoAG1Ro sj6c4wvqoulRVatdB1pIFwU3jFxYV1WPp7ZfTGWn7RYpjO2y6Ly9t6iao8bfhlEl WxJTQEm9Skwn3lgGue3JCHUddWjN+ZCRmkvMNK0zpsQXhn4eJ0xulxTNNhRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCa1sZQ5T9nCrYjz8JWm1/0blbYwHwYDVR0j BBgwFoAUZ6Qo09yJ3e9b56xD+3yIF17Dhx8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjZhOGYyOC05YTAzLTQzNzYtYjYxMi0zMWY1YWQxYzFlZDYvMC82N0E0MjhEM0RD ODlEREVGNUJFN0FDNDNGQjdDODgxNzVFQzM4NzFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1RUMz ODcxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4 MTc1RUMzODcxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfsH4usl5po6IdLSs216UklNvejNanGb6/Q m5kxOtlHg8xHW9h6jH2KJkn6ABB+xIWeq6E/H1EIn9Ay04G1Eq1T4K6OzpMZGljw xH5Bmc1pSE+kXaEurhD197yglQn6maSgZ5cBUfZvEQoEHoCRm3aUaAN9ymgwhdfC IlrIepvvp+OZ03FrjQ1AOTmriWCNV7dprUhJ2n8AlS6RdqsUZ/75QLuu5MApTSk/ BCOiES+A4sBNMqwz/6rS8hFPrnB/lvDvVapnYird33tQ7+gwwF+2oCIlOVS3BZIW 3kA/ae5bPLulvOEEEIDfolYkZef9GE24ClZGtZ/vvfU/M5Xi6iY= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:23 2025 by rpki-client