$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: igm/Y4mSjhSQK9x8/Mwi2lHsrKZXHSFqhUvRihJBqI8= Subject key identifier: 3E:65:71:6C:B5:7E:88:2E:82:DB:F4:FE:F1:E6:4D:AB:0E:AB:C9:DC Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 688157F41BD17629F242F0004654F07346B3D439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: EC Signing time: Wed 05 Nov 2025 16:20:37 +0000 Manifest this update: Wed 05 Nov 2025 16:15:37 +0000 Manifest next update: Sat 08 Nov 2025 22:23:37 +0000 Files and hashes: 1: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 2: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: /BeLDlxQXadWnK1YRccgVMsQpDIldXWe5zN6bb0cjiY=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:81:57:f4:1b:d1:76:29:f2:42:f0:00:46:54:f0:73:46:b3:d4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Nov 5 16:15:37 2025 GMT Not After : Nov 8 22:23:37 2025 GMT Subject: CN=3E65716CB57E882E82DBF4FEF1E64DAB0EABC9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:d5:65:59:44:47:b2:81:a0:c0:cf:29:f0: f7:04:39:be:2b:9c:54:04:25:3f:7e:f9:5e:9a:59: 67:cb:fb:53:d1:96:f5:d7:26:2f:ff:fe:51:5d:01: fb:6d:aa:c9:7b:d7:bb:ff:3a:4a:de:7b:2d:e2:32: ec:67:2c:a8:4a:e2:eb:51:a2:40:3d:e4:28:17:84: 4d:ca:df:ad:b5:3d:a2:7a:05:6d:d3:b3:3f:eb:b2: 53:7d:c2:d8:c8:22:46:e7:51:23:e6:73:99:c3:bf: c6:2f:4e:3b:eb:73:7e:35:ef:e5:0d:f7:39:94:21: 92:4f:51:b4:6a:43:52:c6:2b:15:d7:4a:34:0c:ca: ef:ae:1a:be:a1:94:54:96:20:ed:15:30:00:be:71: d8:89:bf:54:8f:55:13:21:20:63:0c:b5:14:1e:f3: fb:af:5a:a0:40:63:9a:f0:a0:a7:28:f3:d1:ee:62: 39:80:30:85:0f:19:be:ab:c9:eb:70:13:48:cb:23: 1e:37:fd:4e:64:11:97:96:7a:77:e7:c6:34:1c:d2: 17:4e:e7:d3:9e:07:3e:b0:57:ff:d1:2c:4d:f9:b6: c7:aa:1e:64:66:4e:10:84:68:94:3e:d0:80:5d:f3: 53:fc:bf:90:e3:bd:65:2a:8e:5b:7b:0a:d3:fe:8f: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:65:71:6C:B5:7E:88:2E:82:DB:F4:FE:F1:E6:4D:AB:0E:AB:C9:DC X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a2:83:23:32:f6:f8:21:41:1c:f1:77:81:36:b5:9c:69:11: 8c:cd:dc:b0:98:3e:92:2b:3a:bd:99:1b:b3:92:76:a9:51:32: 20:0f:ba:f8:14:2b:5a:c9:63:11:15:5e:81:ad:dc:63:9b:bf: 88:d6:82:e6:98:d6:fe:9a:64:62:27:3f:18:27:b6:83:9e:62: dd:ca:2a:47:05:b3:a0:a6:45:38:b5:e0:eb:5c:bf:98:65:48: 77:92:9a:97:1a:24:4f:e9:47:e4:f7:12:7f:5c:08:7f:eb:73: c6:99:48:19:5c:77:87:51:0e:96:c9:ac:b5:22:79:da:fa:2f: eb:37:68:89:3f:68:46:47:2a:bf:36:f6:6d:94:e2:a7:51:6e: ea:95:df:d8:db:a5:28:b4:2c:39:b8:cb:c2:18:07:42:fb:31: 3c:f1:ee:cf:5b:8d:81:d1:fe:ad:a8:43:79:ac:de:a7:21:fb: df:74:86:b1:08:b7:a7:1c:a1:c9:53:b8:43:ec:1f:20:2f:62: 12:fc:42:07:db:5d:c8:99:e0:16:03:0b:a9:6a:ac:f5:66:17: e9:63:13:94:ec:3c:74:78:3e:92:04:04:b1:a2:e7:a1:d0:c8: 35:2c:d0:da:4f:be:6c:07:6a:58:3b:38:46:5d:5d:4a:30:f6: 2e:57:55:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIFX9BvRdinyQvAARlTwc0az1DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTExMDUxNjE1MzdaFw0yNTExMDgyMjIzMzdaMDMxMTAvBgNV BAMTKDNFNjU3MTZDQjU3RTg4MkU4MkRCRjRGRUYxRTY0REFCMEVBQkM5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVytVlWURHsoGgwM8p8PcEOb4r nFQEJT9++V6aWWfL+1PRlvXXJi///lFdAfttqsl717v/Okreey3iMuxnLKhK4utR okA95CgXhE3K3621PaJ6BW3Tsz/rslN9wtjIIkbnUSPmc5nDv8YvTjvrc3417+UN 9zmUIZJPUbRqQ1LGKxXXSjQMyu+uGr6hlFSWIO0VMAC+cdiJv1SPVRMhIGMMtRQe 8/uvWqBAY5rwoKco89HuYjmAMIUPGb6ryetwE0jLIx43/U5kEZeWenfnxjQc0hdO 59OeBz6wV//RLE35tseqHmRmThCEaJQ+0IBd81P8v5DjvWUqjlt7CtP+j0vvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmVxbLV+iC6C2/T+8eZNqw6rydwwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCigyMy9vghQRzxd4E2tZxpEYzN3LCYPpIr Or2ZG7OSdqlRMiAPuvgUK1rJYxEVXoGt3GObv4jWguaY1v6aZGInPxgntoOeYt3K KkcFs6CmRTi14Otcv5hlSHeSmpcaJE/pR+T3En9cCH/rc8aZSBlcd4dRDpbJrLUi edr6L+s3aIk/aEZHKr829m2U4qdRbuqV39jbpSi0LDm4y8IYB0L7MTzx7s9bjYHR /q2oQ3ms3qch+990hrEIt6ccoclTuEPsHyAvYhL8QgfbXciZ4BYDC6lqrPVmF+lj E5TsPHR4PpIEBLGi56HQyDUs0NpPvmwHalg7OEZdXUow9i5XVWw= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:26 2025 by rpki-client