$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: AL6l/LmqMk9MtufQz1EqLA0sQ7DH9KYAHHoVFX+/td0= Subject key identifier: 41:86:8B:A1:43:31:67:98:6E:40:8F:FA:D1:B3:8C:F7:BC:F3:CF:55 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 7D84848191EDE6744945FD60FEEC3B0A7D28D0CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: CA Signing time: Mon 03 Nov 2025 06:10:36 +0000 Manifest this update: Mon 03 Nov 2025 06:05:36 +0000 Manifest next update: Thu 06 Nov 2025 16:30:36 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: v89wbvMiGxsZ5IOvdj8YVI/DBVMpazzxwMLSBarQrfk=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:84:84:81:91:ed:e6:74:49:45:fd:60:fe:ec:3b:0a:7d:28:d0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Nov 3 06:05:36 2025 GMT Not After : Nov 6 16:30:36 2025 GMT Subject: CN=41868BA1433167986E408FFAD1B38CF7BCF3CF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:cd:a9:f4:30:f2:1b:df:96:9f:82:34:93: ef:34:41:cd:5c:37:06:7e:8c:d6:c5:42:ef:2d:1b: d3:e8:64:a8:b9:66:ee:91:b6:2b:2b:31:51:5b:2f: 25:8b:d9:d9:50:8e:54:7c:f1:07:8f:3e:10:d7:9e: e9:ff:e1:2d:4e:5e:65:5b:39:3a:7e:42:6b:92:e9: 70:f8:2c:ab:59:f5:ce:16:3c:73:2f:ab:e0:2f:3f: 94:39:36:69:1c:7e:61:83:45:9a:0c:e1:23:c8:ef: 4b:ef:61:06:5e:01:6d:41:3f:a5:ca:f9:42:86:0a: e9:07:83:0b:93:59:d1:34:59:61:6a:77:52:fb:5b: c6:a8:89:ba:eb:e1:d0:d1:f7:8d:2f:4b:79:ef:10: ec:32:c1:c1:cf:11:f0:c8:c1:04:a6:13:17:3e:6a: 4b:7c:7b:6e:58:37:b6:e0:5a:22:90:dd:71:4c:9c: 7a:02:7f:b0:8b:4b:c2:3b:47:35:cb:3c:7d:c2:c8: c2:25:ae:66:15:51:21:37:bf:bf:f6:d8:dc:60:3e: 02:00:00:62:07:e3:d1:ff:a0:79:96:25:53:c9:98: 11:ad:c3:c8:e4:d0:98:42:9c:bd:06:f7:3d:1b:83: ce:15:4f:aa:3a:f3:be:ce:20:29:f9:25:03:44:ce: 9d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:8B:A1:43:31:67:98:6E:40:8F:FA:D1:B3:8C:F7:BC:F3:CF:55 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:c2:5d:82:84:98:95:00:a1:57:09:6e:0c:4d:03:b4:4a: d7:36:60:8d:56:4d:d4:81:94:51:11:b3:08:b3:97:bf:ac:72: 8f:3f:3c:61:3d:49:e8:fe:81:29:ea:d1:66:32:96:3d:90:f3: fe:4a:eb:42:22:95:02:0e:1e:a7:e6:f7:58:eb:72:8e:83:5a: 89:ea:f8:36:77:0f:62:41:5d:a0:d9:37:ca:8a:33:f8:50:27: bc:b7:dc:24:b0:8c:4a:f6:60:34:92:fc:74:af:6d:88:35:c0: cd:d5:53:ec:03:4d:2d:64:03:88:9d:84:89:38:64:ad:9d:3d: 84:21:14:82:6e:10:47:3e:53:e7:73:3e:6d:99:f7:ec:57:75: 43:30:0a:9f:8a:38:c3:e9:fc:a1:ed:c8:b0:db:64:71:00:79: 4d:a7:0c:94:12:54:39:b4:b7:f8:2f:a8:8d:79:2d:7e:8a:ef: 8b:4a:33:74:06:81:bc:14:f3:b7:45:8f:8c:c0:d8:d9:bd:ad: ab:ae:8c:93:1f:e1:69:24:e1:a2:82:96:b3:39:51:80:d2:dc: f0:ff:03:5f:76:44:e3:4b:41:f5:17:d9:5a:66:f7:1f:c3:c3: 62:19:3e:2c:43:81:e1:e6:27:e1:ec:38:cd:e8:fe:b8:91:f5: fd:d1:f2:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYSEgZHt5nRJRf1g/uw7Cn0o0M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTExMDMwNjA1MzZaFw0yNTExMDYxNjMwMzZaMDMxMTAvBgNV BAMTKDQxODY4QkExNDMzMTY3OTg2RTQwOEZGQUQxQjM4Q0Y3QkNGM0NGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1s2p9DDyG9+Wn4I0k+80Qc1c NwZ+jNbFQu8tG9PoZKi5Zu6RtisrMVFbLyWL2dlQjlR88QePPhDXnun/4S1OXmVb OTp+QmuS6XD4LKtZ9c4WPHMvq+AvP5Q5NmkcfmGDRZoM4SPI70vvYQZeAW1BP6XK +UKGCukHgwuTWdE0WWFqd1L7W8aoibrr4dDR940vS3nvEOwywcHPEfDIwQSmExc+ akt8e25YN7bgWiKQ3XFMnHoCf7CLS8I7RzXLPH3CyMIlrmYVUSE3v7/22NxgPgIA AGIH49H/oHmWJVPJmBGtw8jk0JhCnL0G9z0bg84VT6o6877OICn5JQNEzp1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYaLoUMxZ5huQI/60bOM97zzz1UwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/awl2ChJiVAKFXCW4MTQO0Stc2YI1WTdSB lFERswizl7+sco8/PGE9Sej+gSnq0WYylj2Q8/5K60IilQIOHqfm91jrco6DWonq +DZ3D2JBXaDZN8qKM/hQJ7y33CSwjEr2YDSS/HSvbYg1wM3VU+wDTS1kA4idhIk4 ZK2dPYQhFIJuEEc+U+dzPm2Z9+xXdUMwCp+KOMPp/KHtyLDbZHEAeU2nDJQSVDm0 t/gvqI15LX6K74tKM3QGgbwU87dFj4zA2Nm9rauujJMf4Wkk4aKClrM5UYDS3PD/ A192RONLQfUX2Vpm9x/Dw2IZPixDgeHmJ+HsOM3o/riR9f3R8n4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:35:58 2025 by rpki-client