$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: 0kopdqjmZ4/hVurXkdgaHT/pPoBa1x/rvPr7HM5NDzs= Subject key identifier: 39:A3:15:F3:52:E1:2F:6F:F0:4E:FC:77:FC:F0:67:AD:F2:6A:93:46 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 10D42218656A13BAB89BB0F564CA233057190BF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: D8 Signing time: Tue 04 Nov 2025 05:50:40 +0000 Manifest this update: Tue 04 Nov 2025 05:45:40 +0000 Manifest next update: Fri 07 Nov 2025 07:55:40 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) 2: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: sxCcwpyrzUmeeQrwxJ5VD+DDB/FgtIQcccH8sU87nu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:22:18:65:6a:13:ba:b8:9b:b0:f5:64:ca:23:30:57:19:0b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Nov 4 05:45:40 2025 GMT Not After : Nov 7 07:55:40 2025 GMT Subject: CN=39A315F352E12F6FF04EFC77FCF067ADF26A9346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:2e:28:f1:e1:4c:d7:d9:6c:a4:45:6b:5b: 6a:e3:a8:1e:c4:39:96:c0:0a:fe:d8:02:0d:0d:72: b0:f9:cb:ef:3a:a0:d4:39:0f:d7:41:06:16:27:91: 4b:3a:59:c2:fc:8a:41:54:36:d4:78:de:d1:06:a3: d5:d2:3d:ce:8a:61:be:15:7f:f8:e3:42:80:3e:12: b4:6b:09:1d:95:fd:16:b7:ea:11:39:7e:86:31:96: a6:ff:28:a9:81:fc:84:e0:0f:83:eb:a2:26:80:a1: 7f:04:e7:e0:5a:19:ad:90:58:9c:21:8c:58:97:30: 68:d4:d0:bb:9f:81:6f:b8:1a:d7:bd:0d:8b:5c:5f: 9b:cd:c4:87:9c:5c:d7:4b:39:1c:d5:a3:cc:25:2d: 08:ba:ee:41:35:aa:2f:bb:d4:a5:72:6d:52:e0:ba: a8:16:84:71:bc:64:31:88:93:fa:62:3d:58:ab:8e: ed:88:82:33:fd:ad:40:88:51:a7:7f:14:7e:de:ff: e6:76:d2:3f:cd:84:f0:67:4f:ab:94:4b:85:cc:b8: d0:e3:d7:b9:23:44:36:9b:35:2f:27:77:b9:4f:e3: 51:be:4f:af:c6:85:35:63:f6:2e:45:7d:4b:bf:c7: 03:85:af:9e:2c:aa:00:4b:ac:b5:da:c7:34:29:6a: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:15:F3:52:E1:2F:6F:F0:4E:FC:77:FC:F0:67:AD:F2:6A:93:46 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:59:ce:d6:86:fb:28:9d:67:30:91:25:3d:ab:5a:85:c3:5d: 8b:b5:46:04:64:15:24:d6:78:0b:e4:90:a0:24:d6:55:76:eb: 34:be:3b:96:d5:d6:d6:0c:15:1a:62:ce:2a:5b:f5:0a:4b:43: b9:f9:aa:4e:3f:3e:18:24:12:9a:94:c4:f5:8d:46:8a:3e:a6: a2:9f:83:cf:68:fe:74:78:a7:92:37:19:d1:59:20:ca:8c:7f: 33:a7:e4:29:af:76:e7:89:e0:1c:98:be:1c:88:3c:d0:e7:ff: 24:e1:0e:50:ac:42:d1:68:08:31:2e:16:b6:7d:61:5e:7b:09: e7:11:1a:56:fb:c9:38:d6:43:12:db:6f:31:3f:28:8f:5d:4a: fb:af:dd:52:e3:01:71:ad:71:f7:68:68:20:cf:dc:0e:26:0f: 92:d1:4c:2e:2f:73:ef:a6:b7:fd:81:d4:c7:8f:b0:b3:85:4f: 42:8e:c8:97:46:db:81:21:57:f1:92:4e:e1:fa:99:c6:93:6d: aa:52:3c:11:9a:78:90:00:48:bf:79:99:a5:ac:39:3c:a9:c5: 92:b6:54:fb:fe:f3:8c:7b:a0:6f:ce:1e:e9:64:f0:a9:ac:db: cf:74:1c:ed:d5:63:09:c6:7e:b0:91:48:b9:e3:a5:80:be:8c: f7:18:9d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENQiGGVqE7q4m7D1ZMojMFcZC/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTExMDQwNTQ1NDBaFw0yNTExMDcwNzU1NDBaMDMxMTAvBgNV BAMTKDM5QTMxNUYzNTJFMTJGNkZGMDRFRkM3N0ZDRjA2N0FERjI2QTkzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91S4o8eFM19lspEVrW2rjqB7E OZbACv7YAg0NcrD5y+86oNQ5D9dBBhYnkUs6WcL8ikFUNtR43tEGo9XSPc6KYb4V f/jjQoA+ErRrCR2V/Ra36hE5foYxlqb/KKmB/ITgD4ProiaAoX8E5+BaGa2QWJwh jFiXMGjU0LufgW+4Gte9DYtcX5vNxIecXNdLORzVo8wlLQi67kE1qi+71KVybVLg uqgWhHG8ZDGIk/piPVirju2IgjP9rUCIUad/FH7e/+Z20j/NhPBnT6uUS4XMuNDj 17kjRDabNS8nd7lP41G+T6/GhTVj9i5FfUu/xwOFr54sqgBLrLXaxzQpajuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOaMV81LhL2/wTvx3/PBnrfJqk0YwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxZztaG+yidZzCRJT2rWoXDXYu1RgRkFSTW eAvkkKAk1lV26zS+O5bV1tYMFRpizipb9QpLQ7n5qk4/PhgkEpqUxPWNRoo+pqKf g89o/nR4p5I3GdFZIMqMfzOn5CmvdueJ4ByYvhyIPNDn/yThDlCsQtFoCDEuFrZ9 YV57CecRGlb7yTjWQxLbbzE/KI9dSvuv3VLjAXGtcfdoaCDP3A4mD5LRTC4vc++m t/2B1MePsLOFT0KOyJdG24EhV/GSTuH6mcaTbapSPBGaeJAASL95maWsOTypxZK2 VPv+84x7oG/OHulk8Kms2890HO3VYwnGfrCRSLnjpYC+jPcYnaE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:41 2025 by rpki-client