$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: WQ//dhQwQPYAjGJqb9beU39MTHE3f5KjSI3lB8bmVfs= Subject key identifier: C3:9F:2A:8F:6C:AE:56:63:D6:ED:4F:CF:D1:A2:00:D7:15:C5:4E:2A Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 2809FC6F7900435ACF3FA998500D003942F4C452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 053B Signing time: Sun 02 Nov 2025 23:40:41 +0000 Manifest this update: Sun 02 Nov 2025 23:35:41 +0000 Manifest next update: Wed 05 Nov 2025 23:50:41 +0000 Files and hashes: 1: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) 4: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: RH+9vExSq2kD3YYpmJAm2QTMR0ZS6j/3FDlH7by1AbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:09:fc:6f:79:00:43:5a:cf:3f:a9:98:50:0d:00:39:42:f4:c4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Nov 2 23:35:41 2025 GMT Not After : Nov 5 23:50:41 2025 GMT Subject: CN=C39F2A8F6CAE5663D6ED4FCFD1A200D715C54E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:50:e5:e5:91:23:fd:e0:c0:65:ff:58:c0: fc:1f:a7:93:1d:f4:f1:da:35:fe:1b:16:e2:c7:8e: 89:4f:6b:f9:26:8b:f7:03:e2:90:74:08:e4:68:e5: d0:a7:19:45:96:ba:92:00:93:f3:78:34:c2:9f:d0: d4:3c:d8:15:c5:90:fb:81:81:2c:d5:27:60:f8:19: 71:84:eb:a7:48:92:ce:e1:d7:5f:7e:4f:95:66:35: a5:7e:ef:85:2f:85:85:c9:82:c2:bc:3f:60:fa:90: 7e:44:f1:1a:a9:01:71:7a:53:56:8f:a7:b5:a1:cb: fd:d6:ca:69:fa:53:6d:4d:38:e2:27:08:4f:95:17: 24:ed:6a:5b:6b:25:34:52:a1:8a:13:a5:70:a4:56: c8:f4:d8:cf:23:fe:6d:64:16:ae:ae:97:e2:06:d3: e1:81:fa:9c:9e:63:a0:eb:89:16:19:54:36:f5:a2: 40:80:ab:a2:04:81:d1:3f:91:7a:b4:6d:9e:aa:4a: 5d:dc:a6:8a:31:c3:a5:7e:55:a0:f8:e6:9c:0d:49: d7:e9:c6:8a:9b:e7:22:02:95:d0:e1:ac:bd:be:27: 61:8a:9d:57:5f:30:38:a9:7e:2c:2a:ff:a9:78:d5: 2d:da:d4:5a:57:26:0b:6a:21:bc:df:e7:64:fc:c3: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9F:2A:8F:6C:AE:56:63:D6:ED:4F:CF:D1:A2:00:D7:15:C5:4E:2A X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f5:49:b9:5d:dd:41:24:91:93:4b:f2:65:6b:65:ef:e0:6f: 40:ef:7e:30:6d:53:41:9a:9b:90:c9:f6:4b:1d:67:1a:c9:2c: 8d:87:eb:d3:ec:50:42:2b:ae:fe:28:82:b7:c4:87:72:3a:b1: db:c6:d8:b3:20:65:cb:ae:f6:66:cd:c2:2c:36:30:6b:54:41: 83:ac:67:c4:00:aa:0c:27:d8:25:c7:ef:92:69:94:f0:1f:ea: fd:0b:f7:17:28:35:26:ac:3e:77:ae:a5:2b:b9:db:74:72:e8: 16:68:f9:39:2e:14:3f:02:73:10:a7:f9:53:62:0c:63:b4:6f: cd:b0:bb:f2:aa:ab:28:d9:ad:b9:62:bd:bf:85:67:45:ed:85: 19:cd:5e:3d:f9:8c:2b:90:8d:88:0d:28:29:42:e2:45:51:6b: 8d:af:d8:85:f6:40:cd:5d:0b:94:b9:94:38:61:0d:d0:36:68: 23:68:2d:f0:8b:aa:25:0e:2e:da:03:bb:fa:af:27:42:16:18: fd:33:35:9b:93:0a:d3:90:5a:13:c7:ca:6f:26:be:a3:34:17: 2e:f4:11:a4:36:54:75:24:4b:dc:0c:66:45:b2:a8:6d:ce:44: 12:72:9f:1d:09:5a:8a:2c:41:0a:e6:8f:5a:8d:0e:cb:21:01: 8c:6b:08:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAn8b3kAQ1rPP6mYUA0AOUL0xFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTExMDIyMzM1NDFaFw0yNTExMDUyMzUwNDFaMDMxMTAvBgNV BAMTKEMzOUYyQThGNkNBRTU2NjNENkVENEZDRkQxQTIwMEQ3MTVDNTRFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9n1Dl5ZEj/eDAZf9YwPwfp5Md 9PHaNf4bFuLHjolPa/kmi/cD4pB0CORo5dCnGUWWupIAk/N4NMKf0NQ82BXFkPuB gSzVJ2D4GXGE66dIks7h119+T5VmNaV+74UvhYXJgsK8P2D6kH5E8RqpAXF6U1aP p7Why/3Wymn6U21NOOInCE+VFyTtaltrJTRSoYoTpXCkVsj02M8j/m1kFq6ul+IG 0+GB+pyeY6DriRYZVDb1okCAq6IEgdE/kXq0bZ6qSl3cpooxw6V+VaD45pwNSdfp xoqb5yICldDhrL2+J2GKnVdfMDipfiwq/6l41S3a1FpXJgtqIbzf52T8wzanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw58qj2yuVmPW7U/P0aIA1xXFTiowHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKv1Sbld3UEkkZNL8mVrZe/gb0DvfjBtU0Ga m5DJ9ksdZxrJLI2H69PsUEIrrv4ogrfEh3I6sdvG2LMgZcuu9mbNwiw2MGtUQYOs Z8QAqgwn2CXH75JplPAf6v0L9xcoNSasPneupSu523Ry6BZo+TkuFD8CcxCn+VNi DGO0b82wu/KqqyjZrblivb+FZ0XthRnNXj35jCuQjYgNKClC4kVRa42v2IX2QM1d C5S5lDhhDdA2aCNoLfCLqiUOLtoDu/qvJ0IWGP0zNZuTCtOQWhPHym8mvqM0Fy70 EaQ2VHUkS9wMZkWyqG3ORBJynx0JWoosQQrmj1qNDsshAYxrCOU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:44 2025 by rpki-client