$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft (raw, json) Hash identifier: 468t4NfN69If0I3xoh4XSlObbYPK6OF+H1MZcZ9AhIE= Subject key identifier: A8:64:9A:C5:2D:AC:F9:D0:D5:45:BD:9D:69:74:D0:99:E7:BE:44:D9 Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Certificate serial: 01198D7C173943E5C0A3857796A9501BDB4C6BAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft Manifest number: 97 Signing time: Tue 04 Nov 2025 04:52:54 +0000 Manifest this update: Tue 04 Nov 2025 04:47:54 +0000 Manifest next update: Fri 07 Nov 2025 11:51:54 +0000 Files and hashes: 1: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: AjQWrzHL79ZgGYoMIgBN0STrzOvHGkHtvWRV6Sqos+E=) 2: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 396wvI67jqZy7okjsFOHdqyMEvjwT/V6xQtKNILvTEU=) 3: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl (hash: I14sP1aaSA6gmhzZ4kVdTXtBfCHKekPAq5IO8FY2B1E=) 4: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: t5UQflYV4fmOKRuImyydzjWxt8L0DDMOftvIQeAVR58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:19:8d:7c:17:39:43:e5:c0:a3:85:77:96:a9:50:1b:db:4c:6b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Validity Not Before: Nov 4 04:47:54 2025 GMT Not After : Nov 7 11:51:54 2025 GMT Subject: CN=A8649AC52DACF9D0D545BD9D6974D099E7BE44D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:d3:ca:2e:03:d0:2d:23:47:dd:05:c5:c4: e2:74:e7:7f:ff:39:00:94:4e:40:d3:df:f1:9a:4c: 8b:7e:ec:9b:68:d0:79:73:1e:0b:91:eb:a1:07:a5: 26:62:cd:3f:ac:6f:1a:a1:3f:5c:8c:69:0a:0a:f2: f1:d1:47:0f:b0:10:66:c9:fb:05:8e:64:30:30:c1: 29:1b:82:b4:ce:74:1a:65:e1:12:3c:99:0c:a2:21: 91:99:4e:67:81:02:44:59:f8:97:8a:2b:56:03:f6: 68:bd:b6:24:67:8f:4f:6f:41:08:06:7c:f0:13:fb: 6d:4f:0e:f2:2c:f1:62:c3:5e:54:5f:ad:25:f8:8c: a4:1f:ae:17:bd:fc:1a:90:52:8c:3d:14:ca:db:48: dd:dd:02:d4:cb:81:d9:92:4a:32:3d:9c:18:8c:d1: 4f:e3:c4:1c:1e:f3:03:86:8f:fb:9c:85:d7:f7:ab: 6e:06:14:2a:b0:fc:c3:6f:7b:4a:9e:54:6b:a2:e3: 6a:fc:7f:ea:49:e2:92:8f:e4:b4:cf:b9:fc:5f:e7: 92:95:8f:1d:c8:06:c5:b6:ee:5e:ab:2b:01:ab:62: ef:db:09:38:32:97:0f:a2:79:38:6e:d2:38:e2:f1: 7c:aa:e0:ed:56:fe:d2:a9:6d:24:39:52:81:21:ac: 6e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:64:9A:C5:2D:AC:F9:D0:D5:45:BD:9D:69:74:D0:99:E7:BE:44:D9 X509v3 Authority Key Identifier: keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4f:87:33:b7:da:5e:b9:f8:2a:f3:c2:78:31:30:d8:27:fe: a8:fa:c3:77:f8:a0:2a:d0:36:df:94:3b:c7:b4:09:fe:54:ee: 00:f4:ca:c0:5d:1b:b0:8e:f4:71:13:14:bd:dd:33:3a:89:34: 79:d0:e1:cc:12:27:4e:0a:9b:f3:fa:60:df:a5:0e:7b:99:41: 96:ec:bb:fe:06:62:8f:a8:32:d8:31:3e:e8:23:4b:48:5d:a3: 58:95:f2:6b:43:7a:ff:9c:59:d3:c0:0c:15:f2:ae:db:57:31: cf:05:b6:0e:74:54:7d:00:9f:53:03:d4:53:90:e9:95:a1:41: f0:5b:ba:dd:03:ad:c7:32:ff:e9:42:b5:02:20:04:40:30:ab: 99:15:da:8b:93:86:ff:bf:43:63:87:5a:01:51:a8:b8:f0:55: e3:ca:7d:6f:07:b9:89:95:4a:a1:3a:98:f8:df:7f:f5:7c:2a: 59:93:f9:de:70:62:2f:b2:ae:d9:c8:51:92:f5:23:9d:bc:32: b1:0a:61:b9:d7:ca:44:8d:9d:9f:11:49:17:2f:9c:3b:0c:e4: bc:eb:bd:32:d5:c8:f7:d4:98:70:b0:01:38:25:94:58:60:76: 8d:77:0d:ca:42:f9:56:f7:32:0a:7b:73:14:fc:eb:3e:2c:8a: 9b:b0:71:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARmNfBc5Q+XAo4V3lqlQG9tMa6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3 Q0NCRTQ0MTAeFw0yNTExMDQwNDQ3NTRaFw0yNTExMDcxMTUxNTRaMDMxMTAvBgNV BAMTKEE4NjQ5QUM1MkRBQ0Y5RDBENTQ1QkQ5RDY5NzREMDk5RTdCRTQ0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSdPKLgPQLSNH3QXFxOJ053// OQCUTkDT3/GaTIt+7Jto0HlzHguR66EHpSZizT+sbxqhP1yMaQoK8vHRRw+wEGbJ +wWOZDAwwSkbgrTOdBpl4RI8mQyiIZGZTmeBAkRZ+JeKK1YD9mi9tiRnj09vQQgG fPAT+21PDvIs8WLDXlRfrSX4jKQfrhe9/BqQUow9FMrbSN3dAtTLgdmSSjI9nBiM 0U/jxBwe8wOGj/uchdf3q24GFCqw/MNve0qeVGui42r8f+pJ4pKP5LTPufxf55KV jx3IBsW27l6rKwGrYu/bCTgylw+ieThu0jji8Xyq4O1W/tKpbSQ5UoEhrG73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGSaxS2s+dDVRb2daXTQmee+RNkwHwYDVR0j BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2 OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC RTQ0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FG Rjc3Q0NCRTQ0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFPhzO32l65+CrzwngxMNgn/qj6w3f4oCrQ Nt+UO8e0Cf5U7gD0ysBdG7CO9HETFL3dMzqJNHnQ4cwSJ04Km/P6YN+lDnuZQZbs u/4GYo+oMtgxPugjS0hdo1iV8mtDev+cWdPADBXyrttXMc8Ftg50VH0An1MD1FOQ 6ZWhQfBbut0Drccy/+lCtQIgBEAwq5kV2ouThv+/Q2OHWgFRqLjwVePKfW8HuYmV SqE6mPjff/V8KlmT+d5wYi+yrtnIUZL1I528MrEKYbnXykSNnZ8RSRcvnDsM5Lzr vTLVyPfUmHCwATgllFhgdo13DcpC+Vb3Mgp7cxT86z4sipuwcVk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:07:57 2025 by rpki-client