$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: JiTET/N0t9y5fbuaSIbSCoj5x9msWZxDte1I82xs47Q= Subject key identifier: 1B:4B:EA:50:8B:A6:4C:31:E4:5C:B6:43:C7:C0:A7:AD:13:73:0E:22 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 40551AAB8FF336C08FACF477BF48D86D393C053C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: DC Signing time: Sun 02 Nov 2025 19:21:36 +0000 Manifest this update: Sun 02 Nov 2025 19:16:36 +0000 Manifest next update: Thu 06 Nov 2025 05:09:36 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: UVM36yEJpfLaoz1pkZc6fq3h+TnoOZyNAk2I/2thGrk=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:1a:ab:8f:f3:36:c0:8f:ac:f4:77:bf:48:d8:6d:39:3c:05:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Nov 2 19:16:36 2025 GMT Not After : Nov 6 05:09:36 2025 GMT Subject: CN=1B4BEA508BA64C31E45CB643C7C0A7AD13730E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:d9:4b:de:68:fd:cb:42:0c:d9:41:08:aa: 9c:cf:4f:ac:87:9e:d4:6a:2c:01:d3:2e:f3:e8:ea: 42:29:e5:a4:af:12:56:3a:8e:46:e3:3f:97:a4:86: a4:1a:f6:3d:27:94:c3:ae:f1:d6:b7:09:c4:70:d6: b2:bb:42:c1:b6:b8:dc:58:be:43:84:b2:6f:47:b0: dd:89:51:aa:32:f4:0a:2f:ca:ae:bb:23:cb:9d:14: 91:02:da:2b:d3:e4:53:01:02:0c:67:21:c1:05:c6: 6f:43:b3:ba:18:89:b0:55:a0:cd:1e:82:b4:96:c9: fc:3f:85:70:28:16:d8:9f:35:e7:60:41:ee:d3:f4: 14:38:ab:a4:9f:a1:02:24:87:a6:36:d8:93:a0:19: 9a:cf:fd:84:92:57:9b:62:70:d6:55:58:40:d5:70: 56:8f:8c:11:e7:46:4d:35:49:b3:39:e1:9f:d0:56: 94:b4:1e:67:14:18:88:eb:64:4d:f9:20:0a:ad:a1: dd:0b:2e:78:25:0a:87:cd:94:a2:78:de:92:e6:03: 51:31:6a:24:82:0c:94:9c:59:ed:f3:c5:34:d4:37: 10:85:98:de:59:86:1f:3c:f9:12:b7:6f:33:4b:88: de:8a:08:f5:f7:36:9b:f5:1b:1f:0e:92:e6:f5:13: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4B:EA:50:8B:A6:4C:31:E4:5C:B6:43:C7:C0:A7:AD:13:73:0E:22 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:49:63:c2:01:ce:a6:5b:db:ce:d4:d2:40:2b:f9:f1:f3:02: 6f:1d:e6:fd:0d:b8:39:4d:1b:53:87:67:74:55:60:33:e1:7f: ed:29:7c:1b:bc:d1:b0:13:26:94:f2:c0:d2:63:91:d0:b3:44: bd:a0:9f:ea:8b:bb:6c:d6:a2:ee:85:d5:14:8d:4f:09:48:0d: 60:3c:d7:6c:f9:76:ad:a0:7b:e2:95:f0:62:ee:3c:e6:d5:47: 42:f8:f5:e3:ad:31:bb:33:4f:9c:f6:40:29:c9:4b:45:f0:5a: 98:97:6b:56:43:d9:af:5c:5b:c1:92:61:22:c7:81:87:f2:bf: 48:0d:83:b9:7a:0f:62:4b:f9:1b:e9:b1:16:8e:af:60:8d:20: 36:fd:68:ba:4d:46:08:cd:d2:07:a9:46:f4:ef:3b:a1:47:01: 14:cb:7f:cf:77:78:f4:c9:18:f3:3f:0f:97:d9:01:6a:55:02: 05:74:e4:f2:12:be:97:97:05:6f:2a:e4:0f:ca:d6:1d:a2:2a: 23:aa:6b:c0:bd:26:ba:fb:5d:57:d9:4c:08:26:ea:88:64:bc: 09:55:90:5c:4d:aa:14:c7:ea:7d:2b:19:19:d2:6f:df:c1:32: 32:8a:3b:7e:6f:47:39:7c:72:ab:fe:e9:1b:18:2f:f4:5a:30: a4:4d:b8:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFUaq4/zNsCPrPR3v0jYbTk8BTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTExMDIxOTE2MzZaFw0yNTExMDYwNTA5MzZaMDMxMTAvBgNV BAMTKDFCNEJFQTUwOEJBNjRDMzFFNDVDQjY0M0M3QzBBN0FEMTM3MzBFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5C9lL3mj9y0IM2UEIqpzPT6yH ntRqLAHTLvPo6kIp5aSvElY6jkbjP5ekhqQa9j0nlMOu8da3CcRw1rK7QsG2uNxY vkOEsm9HsN2JUaoy9Aovyq67I8udFJEC2ivT5FMBAgxnIcEFxm9Ds7oYibBVoM0e grSWyfw/hXAoFtifNedgQe7T9BQ4q6SfoQIkh6Y22JOgGZrP/YSSV5ticNZVWEDV cFaPjBHnRk01SbM54Z/QVpS0HmcUGIjrZE35IAqtod0LLnglCofNlKJ43pLmA1Ex aiSCDJScWe3zxTTUNxCFmN5Zhh88+RK3bzNLiN6KCPX3Npv1Gx8Okub1Ewv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0vqUIumTDHkXLZDx8CnrRNzDiIwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFJY8IBzqZb287U0kAr+fHzAm8d5v0NuDlN G1OHZ3RVYDPhf+0pfBu80bATJpTywNJjkdCzRL2gn+qLu2zWou6F1RSNTwlIDWA8 12z5dq2ge+KV8GLuPObVR0L49eOtMbszT5z2QCnJS0XwWpiXa1ZD2a9cW8GSYSLH gYfyv0gNg7l6D2JL+RvpsRaOr2CNIDb9aLpNRgjN0gepRvTvO6FHARTLf893ePTJ GPM/D5fZAWpVAgV05PISvpeXBW8q5A/K1h2iKiOqa8C9Jrr7XVfZTAgm6ohkvAlV kFxNqhTH6n0rGRnSb9/BMjKKO35vRzl8cqv+6RsYL/RaMKRNuGk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:55 2025 by rpki-client