$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: PUQ9iuq4/EwVgv23fxXTGKXrrZzWIHHBnZcJoU+XZD0= Subject key identifier: BC:9A:81:15:8E:7D:B7:C1:3C:C4:0E:DE:84:93:2D:5A:3D:4D:D9:66 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 0F68DA41D27AB3C462868975E0669EC69340C77E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 01A2 Signing time: Sun 02 Nov 2025 05:41:45 +0000 Manifest this update: Sun 02 Nov 2025 05:36:45 +0000 Manifest next update: Wed 05 Nov 2025 11:26:45 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 2: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: 02glPE3JoxbJ1bx1LCKvY+L846bGHZj0DOdicUegiaI=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:68:da:41:d2:7a:b3:c4:62:86:89:75:e0:66:9e:c6:93:40:c7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Nov 2 05:36:45 2025 GMT Not After : Nov 5 11:26:45 2025 GMT Subject: CN=BC9A81158E7DB7C13CC40EDE84932D5A3D4DD966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:24:8e:ef:e0:fa:0e:1e:ee:ee:46:de:0b: ed:cc:c6:3c:7b:c2:0f:d9:71:f7:f6:e5:3d:2f:b2: a1:84:89:12:31:b2:02:53:71:2e:34:d3:05:23:15: 8f:48:88:ac:20:07:ef:3a:23:9b:de:d7:81:07:32: 19:31:7e:fa:ea:60:f2:33:7c:3a:3d:55:e8:e6:b0: a9:44:96:ec:d0:dc:79:e1:d4:46:c9:d8:8c:48:3a: fa:c9:ea:69:38:d5:e6:2f:16:63:6b:ec:07:22:5e: aa:19:cf:eb:a2:7b:e7:cd:38:7a:52:73:64:77:ca: 72:7c:61:c6:57:34:a1:ad:ca:51:ff:1a:17:ac:97: cd:c9:74:24:10:a0:bf:69:74:ec:d7:d2:da:29:ec: 5b:da:6a:ea:aa:75:5e:4f:60:fb:d8:15:97:f8:5c: d7:67:5d:2f:3d:ba:4d:b6:ac:71:0f:75:48:52:e1: 28:f3:54:1b:ab:03:11:e0:18:7e:11:c6:6e:9a:60: 2f:0d:b4:ab:3c:06:43:24:e9:36:7a:e3:e8:8a:7d: 01:ad:6b:ef:8e:ec:5f:34:be:70:50:66:1f:93:1e: 93:a2:d9:7e:83:6b:2e:61:5b:63:0e:2f:c8:28:7b: e7:29:42:87:00:f9:97:e0:a3:8f:0c:12:16:c8:fc: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9A:81:15:8E:7D:B7:C1:3C:C4:0E:DE:84:93:2D:5A:3D:4D:D9:66 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2c:b3:e5:79:42:6e:69:66:83:d1:0b:9a:67:02:a2:44:f3: 57:a4:e4:d1:16:db:ed:2f:c6:10:fb:0d:88:43:ec:3a:0a:0c: cf:03:38:7f:77:aa:d3:53:5f:7d:99:58:1f:0c:50:25:a8:b5: 61:cb:2d:d1:4f:dc:b0:7b:fb:d0:d8:77:dc:92:df:98:3a:ef: f0:cf:f6:a5:0c:35:ae:cf:07:19:0b:f8:f4:5e:92:c8:b1:20: e2:3a:84:0f:a6:08:12:63:18:f4:1a:a7:bc:e4:d5:de:ec:30: 7a:79:51:cc:a1:b4:98:2a:06:2b:9b:91:e5:93:e6:6a:47:58: 20:f5:5d:3b:09:49:a2:3b:36:ff:47:da:4a:11:68:d4:dd:fc: aa:3d:dc:5b:67:2d:09:96:3c:da:17:e3:83:0c:ef:6a:75:a6: c2:aa:04:2e:86:6d:21:a8:3e:a9:a7:eb:bf:7e:7b:dd:5c:06: 5e:d1:04:79:28:d4:10:c6:ad:af:27:18:5d:4a:ce:a4:d3:98: 9e:70:c5:7d:11:85:fc:1c:ae:95:5b:f7:0f:8f:78:78:34:d9: c7:e8:34:73:32:63:bc:13:f3:5e:8b:77:87:e0:b7:00:94:7f: 7b:88:05:be:62:98:f1:59:30:9d:95:b8:e2:ca:8e:8c:98:15: 87:32:8b:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2jaQdJ6s8Rihol14GaexpNAx34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTExMDIwNTM2NDVaFw0yNTExMDUxMTI2NDVaMDMxMTAvBgNV BAMTKEJDOUE4MTE1OEU3REI3QzEzQ0M0MEVERTg0OTMyRDVBM0Q0REQ5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfCSO7+D6Dh7u7kbeC+3Mxjx7 wg/Zcff25T0vsqGEiRIxsgJTcS400wUjFY9IiKwgB+86I5ve14EHMhkxfvrqYPIz fDo9VejmsKlEluzQ3Hnh1EbJ2IxIOvrJ6mk41eYvFmNr7AciXqoZz+uie+fNOHpS c2R3ynJ8YcZXNKGtylH/Ghesl83JdCQQoL9pdOzX0top7FvaauqqdV5PYPvYFZf4 XNdnXS89uk22rHEPdUhS4SjzVBurAxHgGH4Rxm6aYC8NtKs8BkMk6TZ64+iKfQGt a++O7F80vnBQZh+THpOi2X6Day5hW2MOL8goe+cpQocA+Zfgo48MEhbI/L/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJqBFY59t8E8xA7ehJMtWj1N2WYwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQss+V5Qm5pZoPRC5pnAqJE81ek5NEW2+0v xhD7DYhD7DoKDM8DOH93qtNTX32ZWB8MUCWotWHLLdFP3LB7+9DYd9yS35g67/DP 9qUMNa7PBxkL+PReksixIOI6hA+mCBJjGPQap7zk1d7sMHp5UcyhtJgqBiubkeWT 5mpHWCD1XTsJSaI7Nv9H2koRaNTd/Ko93FtnLQmWPNoX44MM72p1psKqBC6GbSGo Pqmn679+e91cBl7RBHko1BDGra8nGF1KzqTTmJ5wxX0RhfwcrpVb9w+PeHg02cfo NHMyY7wT816Ld4fgtwCUf3uIBb5imPFZMJ2VuOLKjoyYFYcyi7c= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client