$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft File: 00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json) Hash identifier: A0XaOf9vm1RCRb1Ad+uMiAt4CAmtM6EFAhIevzHM7YM= Subject key identifier: 68:AF:3D:35:34:1C:0A:12:57:B9:66:2B:0F:DB:AE:24:C3:FA:FD:BC Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Certificate issuer: /CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Certificate serial: 5526367A5FBB749A648D2CAF7F9B96037AD5B3C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 07:51:43 +0000 Manifest this update: Mon 03 Nov 2025 07:46:43 +0000 Manifest next update: Thu 06 Nov 2025 15:44:43 +0000 Files and hashes: 1: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: TavHqs8K0Xs8P62YUM+rzG3lvohJwn/UjKetW1FJhAY=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:26:36:7a:5f:bb:74:9a:64:8d:2c:af:7f:9b:96:03:7a:d5:b3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Validity Not Before: Nov 3 07:46:43 2025 GMT Not After : Nov 6 15:44:43 2025 GMT Subject: CN=68AF3D35341C0A1257B9662B0FDBAE24C3FAFDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:0d:4a:5d:8f:b6:9c:45:c2:3d:32:a1:e7: 6e:2f:0b:e0:9e:87:75:b3:5f:4d:7f:11:b8:f0:61: f7:a8:20:51:b3:19:e0:a1:6b:bf:51:14:52:18:73: df:24:98:bf:42:0f:96:d8:6f:4d:02:a9:ac:b1:ca: 5d:2d:11:fd:38:2b:47:4a:e1:2c:e0:53:36:68:52: f6:4b:42:25:45:f5:f3:f0:da:16:1e:79:3c:3b:e7: 55:82:29:36:cb:16:d2:56:ad:e7:cf:9c:45:42:b5: ad:88:1e:9c:96:52:13:75:92:b1:56:a5:cd:b8:51: d2:34:ae:88:2f:3c:34:40:0e:84:b9:da:2f:e5:9f: 8b:4c:be:c8:fc:0b:dd:81:80:80:82:4e:2d:64:a9: 69:68:56:48:c7:83:44:5b:7e:38:dd:ae:48:a2:38: cf:74:5c:de:c2:83:3a:cb:0e:0c:f8:e4:9e:c8:6c: 62:ea:ee:05:83:c9:8a:30:d3:73:ad:0b:a5:07:16: 95:c1:8d:d5:99:54:c6:40:21:98:e3:52:5c:73:51: 19:bf:13:c3:f4:24:fa:b0:d4:05:0c:d9:70:6b:cd: fe:5e:b9:99:17:c5:d6:7d:fd:a3:c0:65:0c:f1:a0: 1c:7b:d6:b3:12:b8:a9:53:27:5c:f5:ff:04:63:39: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:3D:35:34:1C:0A:12:57:B9:66:2B:0F:DB:AE:24:C3:FA:FD:BC X509v3 Authority Key Identifier: keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:d3:e7:1c:db:a7:8b:39:4c:5d:c1:07:14:bf:93:1b:7b: a3:59:d5:6e:70:e9:68:d3:18:18:86:c0:a1:19:e6:93:83:31: fe:60:3a:9e:24:b7:b9:b3:b7:e0:89:9e:ab:47:71:56:de:19: 08:6b:0e:92:a9:21:59:23:a1:e4:89:cd:2b:65:03:eb:1c:2f: 0a:36:a7:0b:40:11:00:12:1c:f2:c1:07:35:cf:db:fa:ff:63: d0:c1:eb:72:ac:97:bf:6f:f9:eb:18:cb:b7:c1:32:37:6f:3f: dc:49:c7:ff:dd:56:d4:50:87:7c:a8:b7:db:ff:6d:2d:f5:16: b7:fd:dd:ed:61:d7:c3:32:c8:51:61:e9:68:cc:2d:e8:5d:d1: ad:9b:9d:35:85:32:90:7f:6b:80:38:91:d3:99:b3:1e:f0:2f: ab:04:9d:25:48:56:5a:04:77:43:74:58:fe:a0:00:ac:28:56: f5:31:e5:36:de:70:b3:f1:e2:04:02:66:72:d8:ec:bf:0c:9f: 55:38:63:d5:7c:f8:65:9e:bd:dd:c6:b4:c3:a3:22:fc:4c:f9: f3:09:38:80:51:bb:9d:de:d1:1a:98:69:b9:8e:cb:ff:71:a4: 88:0f:1c:45:1c:3f:e3:a3:64:7f:ab:4b:a6:1e:83:02:bc:7c: 47:66:55:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSY2el+7dJpkjSyvf5uWA3rVs8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJF MDE3OTYyODAeFw0yNTExMDMwNzQ2NDNaFw0yNTExMDYxNTQ0NDNaMDMxMTAvBgNV BAMTKDY4QUYzRDM1MzQxQzBBMTI1N0I5NjYyQjBGREJBRTI0QzNGQUZEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuA1KXY+2nEXCPTKh524vC+Ce h3WzX01/EbjwYfeoIFGzGeCha79RFFIYc98kmL9CD5bYb00Cqayxyl0tEf04K0dK 4SzgUzZoUvZLQiVF9fPw2hYeeTw751WCKTbLFtJWrefPnEVCta2IHpyWUhN1krFW pc24UdI0rogvPDRADoS52i/ln4tMvsj8C92BgICCTi1kqWloVkjHg0Rbfjjdrkii OM90XN7CgzrLDgz45J7IbGLq7gWDyYow03OtC6UHFpXBjdWZVMZAIZjjUlxzURm/ E8P0JPqw1AUM2XBrzf5euZkXxdZ9/aPAZQzxoBx71rMSuKlTJ1z1/wRjOWUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaK89NTQcChJXuWYrD9uuJMP6/bwwHwYDVR0j BBgwFoAUAMHrO+6XHOq1MddWNh+TS+AXligwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMC8wMEMxRUIzQkVF OTcxQ0VBQjUzMUQ3NTYzNjFGOTM0QkUwMTc5NjI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJFMDE3 OTYyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkz NEJFMDE3OTYyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr90+cc26eLOUxdwQcUv5Mbe6NZ1W5w6WjT GBiGwKEZ5pODMf5gOp4kt7mzt+CJnqtHcVbeGQhrDpKpIVkjoeSJzStlA+scLwo2 pwtAEQASHPLBBzXP2/r/Y9DB63Ksl79v+esYy7fBMjdvP9xJx//dVtRQh3yot9v/ bS31Frf93e1h18MyyFFh6WjMLehd0a2bnTWFMpB/a4A4kdOZsx7wL6sEnSVIVloE d0N0WP6gAKwoVvUx5TbecLPx4gQCZnLY7L8Mn1U4Y9V8+GWevd3GtMOjIvxM+fMJ OIBRu53e0RqYabmOy/9xpIgPHEUcP+OjZH+rS6YegwK8fEdmVVU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:49 2025 by rpki-client