$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: GJdWdQaTg8B6i97lk1ici/ng/E3DCBtsD1QF3I103CA= Subject key identifier: 0D:18:36:95:E8:9F:D0:C2:73:F5:16:C0:3B:2B:7D:33:6B:5D:46:06 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 6904BF8F8F995F60EAEDA64321D7C404BB69B684 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: B3 Signing time: Tue 04 Nov 2025 04:01:51 +0000 Manifest this update: Tue 04 Nov 2025 03:56:51 +0000 Manifest next update: Fri 07 Nov 2025 15:25:51 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: 145v8fHW/eyQnGLvv9RrqBO4SLaMyHnnqzk3NHpjqQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:04:bf:8f:8f:99:5f:60:ea:ed:a6:43:21:d7:c4:04:bb:69:b6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Nov 4 03:56:51 2025 GMT Not After : Nov 7 15:25:51 2025 GMT Subject: CN=0D183695E89FD0C273F516C03B2B7D336B5D4606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:23:ae:28:a2:8a:be:c5:2b:7a:7d:d5:00: 45:9d:8f:01:23:5c:a9:ef:06:ae:75:23:90:5c:d7: f9:8b:9f:9a:ad:74:73:bc:04:61:24:72:8b:e2:d9: b7:ff:52:9d:0a:41:0e:bf:55:a7:b7:ac:58:c4:95: 4a:e8:c1:da:3c:20:43:a7:70:9c:7f:0d:8c:bc:00: 87:b8:fd:7a:89:6c:80:6b:06:a4:33:8c:24:3a:d7: 05:39:ae:29:a3:61:2c:d9:18:ad:18:f3:19:b6:89: da:79:d4:80:ca:bc:63:91:37:aa:e9:4a:b4:bc:3a: b5:0c:bf:fb:fe:44:51:e7:bf:46:f7:07:51:be:d4: 3c:64:0c:41:21:40:f1:d7:00:43:87:09:7b:30:30: 71:67:29:72:45:3c:b6:a3:e5:63:82:a4:31:c8:fe: 96:fe:27:23:ca:e2:65:84:d6:2c:d7:54:a8:41:f2: ad:67:90:c1:eb:d1:a9:f1:c4:cf:02:41:ba:5d:08: f2:14:e3:a7:4b:c1:d7:3b:a6:1f:4a:7b:39:e6:1f: 78:ea:70:c9:b7:11:b3:6a:d6:a2:b2:ab:71:2e:18: 1e:b6:c4:2d:eb:eb:87:f0:c0:98:46:d1:ea:eb:49: 85:ea:87:00:5b:d6:1d:fb:02:d2:a6:88:7d:12:80: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:36:95:E8:9F:D0:C2:73:F5:16:C0:3B:2B:7D:33:6B:5D:46:06 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:f1:20:b2:f6:2e:07:ed:ba:1c:0b:96:0d:19:fb:cc:f3: 55:a3:4b:46:00:6a:f9:53:56:f0:5c:c4:20:50:55:a0:d5:1d: 68:74:bb:48:ea:81:f3:25:ce:97:8e:77:d7:fa:ce:c2:f3:91: 85:67:be:76:c7:f1:a5:87:9b:d5:e2:e3:49:e7:c0:da:bb:8d: 5f:c3:6c:1d:09:4a:b3:5a:16:0d:21:d4:df:42:64:f6:1a:a1: 80:81:fd:74:8e:af:e8:00:75:94:90:42:01:25:4d:a1:a4:02: b7:42:65:75:27:3c:3a:9e:02:00:9f:c4:7a:c1:41:7d:86:a7: 58:82:0c:d8:60:83:93:c9:10:29:a6:42:e4:ee:67:4d:30:0f: 81:7c:0d:72:ec:d0:87:92:4d:0d:e2:87:8a:c4:e9:92:dc:e7: 11:58:61:70:9d:e7:8f:2b:22:aa:a4:97:04:49:4c:dd:3f:91: fe:d7:aa:56:c5:ff:de:8e:fc:5f:52:d5:2b:5e:3c:7d:15:6c: ad:af:a2:9f:06:84:57:8a:26:e1:7b:a8:ff:9f:cc:16:b6:3a: 3e:39:e6:31:52:5b:ad:13:88:24:e8:6a:02:68:cd:f1:01:59: b3:45:7b:15:01:0c:79:00:1f:95:fc:ed:96:c4:0a:61:9d:c9: fb:6b:d6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQS/j4+ZX2Dq7aZDIdfEBLtptoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTExMDQwMzU2NTFaFw0yNTExMDcxNTI1NTFaMDMxMTAvBgNV BAMTKDBEMTgzNjk1RTg5RkQwQzI3M0Y1MTZDMDNCMkI3RDMzNkI1RDQ2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKCOuKKKKvsUren3VAEWdjwEj XKnvBq51I5Bc1/mLn5qtdHO8BGEkcovi2bf/Up0KQQ6/Vae3rFjElUrowdo8IEOn cJx/DYy8AIe4/XqJbIBrBqQzjCQ61wU5rimjYSzZGK0Y8xm2idp51IDKvGORN6rp SrS8OrUMv/v+RFHnv0b3B1G+1DxkDEEhQPHXAEOHCXswMHFnKXJFPLaj5WOCpDHI /pb+JyPK4mWE1izXVKhB8q1nkMHr0anxxM8CQbpdCPIU46dLwdc7ph9KeznmH3jq cMm3EbNq1qKyq3EuGB62xC3r64fwwJhG0errSYXqhwBb1h37AtKmiH0SgE7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDRg2leif0MJz9RbAOyt9M2tdRgYwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqS8SCy9i4H7bocC5YNGfvM81WjS0YAavlT VvBcxCBQVaDVHWh0u0jqgfMlzpeOd9f6zsLzkYVnvnbH8aWHm9Xi40nnwNq7jV/D bB0JSrNaFg0h1N9CZPYaoYCB/XSOr+gAdZSQQgElTaGkArdCZXUnPDqeAgCfxHrB QX2Gp1iCDNhgg5PJECmmQuTuZ00wD4F8DXLs0IeSTQ3ih4rE6ZLc5xFYYXCd548r IqqklwRJTN0/kf7XqlbF/96O/F9S1StePH0VbK2vop8GhFeKJuF7qP+fzBa2Oj45 5jFSW60TiCToagJozfEBWbNFexUBDHkAH5X87ZbECmGdyftr1mk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:05 2025 by rpki-client