$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: wdf4lJLX5hNLjmE4I77rtMbEBbBNWdv3/VIqW+fu/Uo= Subject key identifier: 7D:96:F7:3C:E7:E3:99:EA:56:F7:33:2F:24:AB:43:99:89:4B:72:55 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 154B2A754969CCB0D8DBA690723B3EE947BA5048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0149 Signing time: Mon 03 Nov 2025 18:21:21 +0000 Manifest this update: Mon 03 Nov 2025 18:16:21 +0000 Manifest next update: Thu 06 Nov 2025 20:40:21 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=) 2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: gk5n3U0e7sAUpFrySFX6LA88WtFSFGiblGZZmRMQGwc=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=) 4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4b:2a:75:49:69:cc:b0:d8:db:a6:90:72:3b:3e:e9:47:ba:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Nov 3 18:16:21 2025 GMT Not After : Nov 6 20:40:21 2025 GMT Subject: CN=7D96F73CE7E399EA56F7332F24AB4399894B7255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:c7:13:e8:e0:cf:71:75:d6:56:f8:76:44: 55:96:bc:d2:d9:be:bb:d6:48:a7:9d:dd:cb:62:7a: 82:c4:29:8e:ca:fa:f8:96:d8:38:77:1a:39:9f:6a: 2b:25:39:3a:48:7a:14:86:25:bb:e7:ae:06:22:c7: ae:b3:6a:ff:b5:61:c8:b1:26:c9:8c:3b:c9:f3:4d: 42:36:e9:01:17:19:1d:9e:b0:7e:82:a2:1f:67:bd: 4c:42:98:48:b2:55:28:63:88:d6:9f:bd:7d:28:44: d0:e7:c5:19:52:c4:de:1e:a7:4b:30:1d:3c:e6:21: 2e:3e:9f:09:2a:f3:e4:e0:1a:7f:1f:59:d1:2b:d9: 9c:2d:29:0a:12:20:20:c2:07:38:39:cc:d1:22:8f: 6f:a7:38:e6:1f:cd:ed:d6:b1:ba:23:c6:b2:9f:ea: fc:a9:c5:07:ba:84:02:61:fc:2d:7c:17:ed:ca:3c: 8a:bb:da:f2:7a:20:a9:6e:17:16:8e:5a:a3:78:87: 55:6e:6a:c2:d5:ca:cb:34:ef:24:3c:34:83:a7:89: ff:9b:73:f2:bb:fe:ac:c5:30:c9:29:49:79:3d:bc: 8e:79:85:f9:1d:65:fe:71:4d:b6:ed:f6:53:65:bd: b4:60:40:59:d1:e2:a5:e0:c8:5b:b3:e4:a7:c1:0e: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:F7:3C:E7:E3:99:EA:56:F7:33:2F:24:AB:43:99:89:4B:72:55 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8c:a4:49:4d:c6:ad:0a:d6:a3:fa:a2:24:cd:25:13:26:26: ce:f8:0a:dc:a0:55:43:89:58:fb:78:f6:6d:6f:b4:4e:ae:8d: 30:a1:29:a6:c3:30:71:7c:f9:09:9e:8f:7b:a5:66:16:7e:8f: dc:09:2d:4c:fa:12:c5:46:c7:a1:4a:41:2b:b9:4e:e4:77:85: bb:51:3f:54:4f:90:0a:0f:4c:50:d6:9d:27:a5:0d:4d:44:8a: 12:5d:d8:7b:d1:12:af:b0:53:23:8c:01:bf:68:47:00:fe:ed: f3:2c:a5:90:e8:04:6b:3c:8f:88:77:fd:a0:e0:80:36:49:6a: ae:72:15:62:4d:f5:c5:5b:a2:08:f4:7d:76:12:79:48:83:d5: 4c:66:6d:90:df:63:ff:2b:22:ed:8d:ea:69:8f:06:3c:ba:f5: ac:20:ae:45:b9:63:96:3b:88:7d:3b:76:e4:70:d2:19:37:28: 3d:67:e8:37:21:eb:54:7f:77:dd:5f:aa:fa:21:da:2c:13:2f: 74:55:3c:92:91:85:f1:37:5c:1a:1a:d4:9c:6c:ad:0d:fb:5f: 39:63:95:f9:14:37:af:b4:f4:06:f9:18:ca:6c:69:e5:4b:13: 0c:87:68:dc:bc:0c:46:9f:aa:b0:51:89:92:0c:9e:c2:83:fa: 66:c7:93:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUsqdUlpzLDY26aQcjs+6Ue6UEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTExMDMxODE2MjFaFw0yNTExMDYyMDQwMjFaMDMxMTAvBgNV BAMTKDdEOTZGNzNDRTdFMzk5RUE1NkY3MzMyRjI0QUI0Mzk5ODk0QjcyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyccT6ODPcXXWVvh2RFWWvNLZ vrvWSKed3ctieoLEKY7K+viW2Dh3GjmfaislOTpIehSGJbvnrgYix66zav+1Ycix JsmMO8nzTUI26QEXGR2esH6Coh9nvUxCmEiyVShjiNafvX0oRNDnxRlSxN4ep0sw HTzmIS4+nwkq8+TgGn8fWdEr2ZwtKQoSICDCBzg5zNEij2+nOOYfze3WsbojxrKf 6vypxQe6hAJh/C18F+3KPIq72vJ6IKluFxaOWqN4h1VuasLVyss07yQ8NIOnif+b c/K7/qzFMMkpSXk9vI55hfkdZf5xTbbt9lNlvbRgQFnR4qXgyFuz5KfBDs2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfZb3POfjmepW9zMvJKtDmYlLclUwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOMpElNxq0K1qP6oiTNJRMmJs74CtygVUOJ WPt49m1vtE6ujTChKabDMHF8+Qmej3ulZhZ+j9wJLUz6EsVGx6FKQSu5TuR3hbtR P1RPkAoPTFDWnSelDU1EihJd2HvREq+wUyOMAb9oRwD+7fMspZDoBGs8j4h3/aDg gDZJaq5yFWJN9cVbogj0fXYSeUiD1UxmbZDfY/8rIu2N6mmPBjy69awgrkW5Y5Y7 iH07duRw0hk3KD1n6Dch61R/d91fqvoh2iwTL3RVPJKRhfE3XBoa1JxsrQ37Xzlj lfkUN6+09Ab5GMpsaeVLEwyHaNy8DEafqrBRiZIMnsKD+mbHk5A= -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:22 2025 by rpki-client