$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: wZrWHBz1LI2VD6yWkOOcTJCrubc051hy2qgFbnE5ems= Subject key identifier: 56:20:88:B5:EE:E1:D3:63:0F:6B:FD:BE:20:28:DE:D4:70:29:CE:A9 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 33EABA024F36B3DFB88889B96BCBA1706810607E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: AD Signing time: Mon 03 Nov 2025 14:51:04 +0000 Manifest this update: Mon 03 Nov 2025 14:46:04 +0000 Manifest next update: Thu 06 Nov 2025 15:30:04 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: bayYHmvqnChZkUjmjvut51uC7pwctufDWcYzLnfXb9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ea:ba:02:4f:36:b3:df:b8:88:89:b9:6b:cb:a1:70:68:10:60:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Nov 3 14:46:04 2025 GMT Not After : Nov 6 15:30:04 2025 GMT Subject: CN=562088B5EEE1D3630F6BFDBE2028DED47029CEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:86:42:b2:81:e7:62:32:2e:48:bf:2f:a9: dc:a3:13:93:ad:35:62:71:f7:70:b0:62:1b:83:36: b2:b9:52:27:4b:f3:c4:a2:60:fc:ad:b4:0b:f4:5c: 3c:9c:d1:64:af:6c:d2:a7:25:7c:e4:b6:3c:6a:1c: 18:0d:66:30:42:bd:1f:24:b8:d1:c2:3f:1f:4b:c3: 86:f0:a9:1e:65:22:64:53:4f:ba:47:9a:15:d5:ee: ab:70:6a:01:9f:62:bb:d2:32:07:be:4d:b7:c2:aa: 1f:4f:70:a9:ef:0c:9d:7f:0c:cc:10:82:6d:69:13: e2:06:d4:04:ed:4c:ba:25:2c:c4:eb:54:4b:70:9e: 34:f5:44:ac:f5:05:77:ab:0b:5f:c4:0f:4e:fe:4d: e0:f8:46:87:63:90:e8:31:50:db:9f:bd:1c:2d:d1: 14:1c:64:c8:c5:09:8b:fc:9d:7e:61:c2:9d:53:73: 3b:92:8b:17:f2:1b:9d:22:1b:3c:a4:66:11:d7:c9: d1:01:4e:6c:8e:f8:3c:c3:67:f6:4e:76:6e:af:10: 13:0d:50:d2:04:6b:c4:2f:d7:2b:dd:a1:f8:58:33: d4:f5:aa:5c:ad:4b:ea:ea:80:b0:d1:46:21:f9:aa: c6:58:f6:18:fb:e2:e0:99:95:8a:61:17:71:22:a3: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:88:B5:EE:E1:D3:63:0F:6B:FD:BE:20:28:DE:D4:70:29:CE:A9 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:de:16:20:ff:8a:02:ca:7f:13:75:e3:cf:6b:94:1d:e1:64: 07:30:98:32:d0:c5:a1:09:0a:bb:d7:c3:d6:2e:32:78:73:76: 20:d5:0f:32:3a:a9:1a:76:a1:67:bd:07:d6:82:31:f7:82:c9: 89:c4:0a:bd:c3:03:5f:4b:26:15:81:53:47:c2:18:fd:0e:92: dd:63:9d:b6:64:b6:88:68:4c:49:46:19:d5:69:f3:56:90:a0: d0:05:ea:15:18:fe:28:32:26:f7:79:a4:74:75:78:38:c4:c5: 76:48:6b:9e:06:c3:71:ad:4e:fa:9a:a5:7f:b9:c1:67:31:ac: f1:79:f3:ea:6c:e7:52:f9:5a:53:03:9e:1e:b9:ab:1d:ca:88: e5:c0:27:df:6a:87:cf:77:a1:f2:47:e4:89:a6:ec:b0:c1:c8: ad:0a:eb:27:2f:18:ea:a4:06:52:c0:3b:91:70:66:64:10:ca: eb:a0:80:fa:38:ba:42:e2:2d:c1:d1:e6:b7:ff:97:44:f4:90: 01:e4:8a:e9:c9:e2:97:d0:a8:5c:73:23:70:90:f6:b2:98:f1: c1:2e:b9:ac:c7:c1:8e:a6:93:ca:b9:2b:21:df:bc:5b:5c:15: 4d:45:07:b3:19:e5:f2:b7:e1:4e:03:ac:9f:9e:45:f0:a1:e5: d1:d4:6a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+q6Ak82s9+4iIm5a8uhcGgQYH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTExMDMxNDQ2MDRaFw0yNTExMDYxNTMwMDRaMDMxMTAvBgNV BAMTKDU2MjA4OEI1RUVFMUQzNjMwRjZCRkRCRTIwMjhERUQ0NzAyOUNFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUoZCsoHnYjIuSL8vqdyjE5Ot NWJx93CwYhuDNrK5UidL88SiYPyttAv0XDyc0WSvbNKnJXzktjxqHBgNZjBCvR8k uNHCPx9Lw4bwqR5lImRTT7pHmhXV7qtwagGfYrvSMge+TbfCqh9PcKnvDJ1/DMwQ gm1pE+IG1ATtTLolLMTrVEtwnjT1RKz1BXerC1/ED07+TeD4RodjkOgxUNufvRwt 0RQcZMjFCYv8nX5hwp1TczuSixfyG50iGzykZhHXydEBTmyO+DzDZ/ZOdm6vEBMN UNIEa8Qv1yvdofhYM9T1qlytS+rqgLDRRiH5qsZY9hj74uCZlYphF3Eio9dTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViCIte7h02MPa/2+ICje1HApzqkwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzeFiD/igLKfxN1489rlB3hZAcwmDLQxaEJ CrvXw9YuMnhzdiDVDzI6qRp2oWe9B9aCMfeCyYnECr3DA19LJhWBU0fCGP0Okt1j nbZktohoTElGGdVp81aQoNAF6hUY/igyJvd5pHR1eDjExXZIa54Gw3GtTvqapX+5 wWcxrPF58+ps51L5WlMDnh65qx3KiOXAJ99qh893ofJH5Imm7LDByK0K6ycvGOqk BlLAO5FwZmQQyuuggPo4ukLiLcHR5rf/l0T0kAHkiunJ4pfQqFxzI3CQ9rKY8cEu uazHwY6mk8q5KyHfvFtcFU1FB7MZ5fK34U4DrJ+eRfCh5dHUaqI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:43 2025 by rpki-client