$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: uMkSGWoQVM4ntuXuditoXx+1B7ENW7z9k+CXSChv6jw= Subject key identifier: E6:95:54:36:CD:6D:58:C4:DC:CB:B5:74:6A:E2:A4:D2:FE:EE:34:9A Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 7244981B7364AA74C540B9B10AA4B93E8DF42C50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0240 Signing time: Sun 02 Nov 2025 18:31:29 +0000 Manifest this update: Sun 02 Nov 2025 18:26:29 +0000 Manifest next update: Wed 05 Nov 2025 22:06:29 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: ++mLs7pndKkrv2TKo7NGVpsLkNLtblRC+BUrjVMeEno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:44:98:1b:73:64:aa:74:c5:40:b9:b1:0a:a4:b9:3e:8d:f4:2c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Nov 2 18:26:29 2025 GMT Not After : Nov 5 22:06:29 2025 GMT Subject: CN=E6955436CD6D58C4DCCBB5746AE2A4D2FEEE349A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:88:70:c4:2f:47:db:f8:de:21:54:28:e0: 20:d5:9d:11:03:62:b3:03:04:8c:b2:cc:0f:e2:df: 88:ff:bf:00:f1:57:cf:69:d3:ca:a7:32:c2:0a:74: ee:43:05:2e:c4:b6:c7:d6:bd:c5:4d:c6:a8:4b:32: f3:d0:5f:dd:1d:3f:e1:36:b9:bc:b5:63:c6:68:79: 25:91:43:80:b7:e1:e5:3e:0c:c4:9b:c8:63:35:2d: cf:7b:45:4e:93:84:86:f7:44:dd:70:6a:a7:8a:4c: f5:45:4a:bc:8c:50:02:34:ca:4e:31:7c:02:99:77: f9:1e:82:73:a6:ac:fa:d2:f4:8b:3b:fc:fe:03:47: 01:b2:41:74:2b:2a:fd:48:49:dd:32:4d:3c:03:3b: 24:00:aa:27:12:a8:33:b3:4a:10:ca:34:0b:e7:f2: ef:9c:f1:86:d8:da:e9:e5:38:9c:21:cf:5e:b8:87: 73:05:59:86:18:f3:71:33:65:ae:3c:1c:5e:cb:39: ad:d5:33:ab:ee:bf:8a:e3:02:57:49:08:bf:b6:42: fc:4c:ec:b8:b2:8b:a1:2f:67:61:75:76:59:18:99: 73:12:e5:10:a1:f0:c2:41:ee:4a:c4:60:2e:90:30: e8:72:47:21:4d:e6:38:cb:a7:8f:0a:94:54:54:30: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:54:36:CD:6D:58:C4:DC:CB:B5:74:6A:E2:A4:D2:FE:EE:34:9A X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:2c:38:df:f6:4a:db:86:0c:6e:98:ca:24:4f:56:22:ba: 1d:64:ab:7f:42:f0:32:47:3a:99:06:2f:8d:e7:0f:f2:5f:d8: 41:28:28:62:be:34:86:0e:5b:a1:7b:c3:55:7f:1d:35:d4:55: c4:3c:69:0c:d2:87:f2:da:36:ee:49:cd:27:f8:b6:95:4b:47: 65:4d:11:f4:f3:a8:99:3a:86:19:7a:e0:ea:8c:00:c1:89:8b: 71:51:d9:0a:8a:c0:28:dd:83:f0:09:67:8c:c6:3b:64:83:b6: 0c:18:85:b0:de:12:85:98:14:8f:d0:c4:93:b7:45:b8:26:4d: f3:33:ca:2d:17:2a:cd:ba:10:3d:c5:78:bd:81:ee:40:29:99: b2:d5:ec:a3:4c:96:82:4e:ab:c6:f8:74:5d:ff:0c:34:f7:7d: 2c:20:69:43:5e:56:c7:e4:46:ec:08:65:87:6a:ed:c6:04:64: 6f:ac:36:3e:4f:82:c9:e0:f2:19:a2:f8:7e:3a:d9:5f:10:9a: 19:5a:5c:d0:ff:a7:f9:a2:f3:d4:51:a3:83:d4:16:39:7c:cd: fe:ad:fa:a8:b1:11:5f:a6:dc:42:dc:65:ef:10:31:69:88:40: 1a:59:81:38:a6:95:48:ab:97:1b:94:97:50:2a:61:0b:3b:81: 3d:ac:68:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckSYG3NkqnTFQLmxCqS5Po30LFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTExMDIxODI2MjlaFw0yNTExMDUyMjA2MjlaMDMxMTAvBgNV BAMTKEU2OTU1NDM2Q0Q2RDU4QzREQ0NCQjU3NDZBRTJBNEQyRkVFRTM0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrYhwxC9H2/jeIVQo4CDVnRED YrMDBIyyzA/i34j/vwDxV89p08qnMsIKdO5DBS7EtsfWvcVNxqhLMvPQX90dP+E2 uby1Y8ZoeSWRQ4C34eU+DMSbyGM1Lc97RU6ThIb3RN1waqeKTPVFSryMUAI0yk4x fAKZd/kegnOmrPrS9Is7/P4DRwGyQXQrKv1ISd0yTTwDOyQAqicSqDOzShDKNAvn 8u+c8YbY2unlOJwhz164h3MFWYYY83EzZa48HF7LOa3VM6vuv4rjAldJCL+2QvxM 7Liyi6EvZ2F1dlkYmXMS5RCh8MJB7krEYC6QMOhyRyFN5jjLp48KlFRUMHiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pVUNs1tWMTcy7V0auKk0v7uNJowHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPhLDjf9krbhgxumMokT1Yiuh1kq39C8DJH OpkGL43nD/Jf2EEoKGK+NIYOW6F7w1V/HTXUVcQ8aQzSh/LaNu5JzSf4tpVLR2VN EfTzqJk6hhl64OqMAMGJi3FR2QqKwCjdg/AJZ4zGO2SDtgwYhbDeEoWYFI/QxJO3 RbgmTfMzyi0XKs26ED3FeL2B7kApmbLV7KNMloJOq8b4dF3/DDT3fSwgaUNeVsfk RuwIZYdq7cYEZG+sNj5Pgsng8hmi+H462V8QmhlaXND/p/mi89RRo4PUFjl8zf6t +qixEV+m3ELcZe8QMWmIQBpZgTimlUirlxuUl1AqYQs7gT2saDg= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:25 2025 by rpki-client