$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft File: 1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json) Hash identifier: VS6L/hWXVjKwvU1tVLykzqbVWpnQhzUMUmTTLPj5D7U= Subject key identifier: C4:F9:2E:F5:CB:A1:2C:6D:E9:AD:F0:67:33:DF:77:96:9D:4D:16:21 Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Certificate serial: 2E583F7E795A85B37F609FAD0B1A916652C97447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft Manifest number: 034A Signing time: Mon 03 Nov 2025 06:11:23 +0000 Manifest this update: Mon 03 Nov 2025 06:06:23 +0000 Manifest next update: Thu 06 Nov 2025 13:00:23 +0000 Files and hashes: 1: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: Z5YWh08q/RLrsdFAaI/2eKsxWWsleV5m7AcMfVYyf/Q=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:58:3f:7e:79:5a:85:b3:7f:60:9f:ad:0b:1a:91:66:52:c9:74:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Validity Not Before: Nov 3 06:06:23 2025 GMT Not After : Nov 6 13:00:23 2025 GMT Subject: CN=C4F92EF5CBA12C6DE9ADF06733DF77969D4D1621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:0b:d3:30:e3:10:8d:37:55:08:12:01:46: aa:73:bb:85:b8:16:82:bc:78:79:a1:2c:35:ae:b7: ea:0a:8f:77:33:c5:25:dc:88:d6:fa:03:44:16:85: f7:82:37:ce:d1:d5:35:ff:f9:0d:ea:7c:15:ea:99: f2:f1:b1:88:bb:6f:29:2e:8e:9d:54:cd:58:77:90: 7f:49:89:1a:97:d0:35:64:79:e0:eb:16:40:74:50: c0:c2:c0:09:52:22:d1:cd:7c:ef:66:ec:eb:98:eb: 46:c3:c8:b8:57:7b:d8:68:60:2e:32:6e:c4:20:37: 95:f7:27:5f:ca:d5:89:8a:b4:23:ad:15:e4:a5:78: 0d:d1:6c:38:00:09:1f:5c:11:75:59:9b:52:18:05: 82:1c:03:60:50:fe:ee:be:1a:62:da:a0:88:21:29: 69:00:6d:2d:62:d3:d5:3a:2e:cf:da:56:b8:e3:48: ba:6a:a5:b9:82:87:3e:81:23:60:bc:7c:71:3b:0d: 19:3f:20:ed:50:1c:84:95:8d:71:0c:bc:e2:3f:42: 2c:b6:75:8a:5a:3b:45:9b:ac:bd:77:01:0c:d1:39: 8f:a8:6e:2a:4c:0a:05:62:e6:c0:f1:c0:2d:2f:f7: 7d:32:f1:da:7b:21:b8:8b:b9:04:ce:a6:ea:93:69: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:2E:F5:CB:A1:2C:6D:E9:AD:F0:67:33:DF:77:96:9D:4D:16:21 X509v3 Authority Key Identifier: keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6e:45:da:03:96:8b:1d:98:cb:43:81:ad:5d:24:f7:5b:0c: 1c:93:7a:5f:10:f2:5e:13:e2:dd:fe:a9:70:33:c9:8e:d9:cc: 4e:fe:26:1d:d1:21:74:88:25:e7:33:6d:09:05:b6:89:9d:52: 62:89:67:32:4c:3e:38:80:a0:f2:cd:a3:bb:bf:25:1f:30:1b: b9:2b:56:45:cf:2b:f8:e1:2f:5e:ce:02:1f:60:e3:77:31:d6: 96:ef:dc:0c:70:58:81:6c:59:fd:d2:50:d0:cb:e2:d3:a3:89: 86:00:a3:2d:8f:d4:7d:5c:1c:b0:35:fb:4d:0c:07:7b:54:b7: a1:08:db:b1:43:89:8e:08:80:91:0d:0f:06:68:e4:bc:5c:28: 73:b9:22:6d:fd:b4:6e:b8:f6:50:4e:0f:08:97:38:08:4c:5f: e5:05:60:12:73:4d:48:e3:40:37:9b:bd:26:62:88:3f:c4:ef: 4e:37:7a:4f:25:0d:06:21:d0:67:58:f5:58:fd:22:ea:3f:83: f3:3f:c3:c6:fd:eb:c3:51:a1:27:02:de:85:35:3e:de:bf:22: 3f:46:2c:57:a1:a6:e7:94:e0:dd:5d:84:63:eb:07:dc:88:92: 3b:75:ff:af:0c:74:7c:80:b1:f5:9f:4d:4b:e2:d4:46:0e:f0: ec:69:57:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlg/fnlahbN/YJ+tCxqRZlLJdEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw OENFNjAwMzAeFw0yNTExMDMwNjA2MjNaFw0yNTExMDYxMzAwMjNaMDMxMTAvBgNV BAMTKEM0RjkyRUY1Q0JBMTJDNkRFOUFERjA2NzMzREY3Nzk2OUQ0RDE2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxgvTMOMQjTdVCBIBRqpzu4W4 FoK8eHmhLDWut+oKj3czxSXciNb6A0QWhfeCN87R1TX/+Q3qfBXqmfLxsYi7byku jp1UzVh3kH9JiRqX0DVkeeDrFkB0UMDCwAlSItHNfO9m7OuY60bDyLhXe9hoYC4y bsQgN5X3J1/K1YmKtCOtFeSleA3RbDgACR9cEXVZm1IYBYIcA2BQ/u6+GmLaoIgh KWkAbS1i09U6Ls/aVrjjSLpqpbmChz6BI2C8fHE7DRk/IO1QHISVjXEMvOI/Qiy2 dYpaO0WbrL13AQzROY+obipMCgVi5sDxwC0v930y8dp7IbiLuQTOpuqTaQuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPku9cuhLG3prfBnM993lp1NFiEwHwYDVR0j BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF NjAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlB OEMwOENFNjAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAduRdoDlosdmMtDga1dJPdbDByTel8Q8l4T 4t3+qXAzyY7ZzE7+Jh3RIXSIJeczbQkFtomdUmKJZzJMPjiAoPLNo7u/JR8wG7kr VkXPK/jhL17OAh9g43cx1pbv3AxwWIFsWf3SUNDL4tOjiYYAoy2P1H1cHLA1+00M B3tUt6EI27FDiY4IgJENDwZo5LxcKHO5Im39tG649lBODwiXOAhMX+UFYBJzTUjj QDebvSZiiD/E7043ek8lDQYh0GdY9Vj9Iuo/g/M/w8b968NRoScC3oU1Pt6/Ij9G LFehpueU4N1dhGPrB9yIkjt1/68MdHyAsfWfTUvi1EYO8OxpV+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:11 2025 by rpki-client