$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: h64/JP311qRbhe93EWnGoFENazc8wOJiNhtBjUoC1PM= Subject key identifier: 83:73:9D:A0:A7:7F:E4:CC:28:3B:D8:9D:93:D5:10:D0:2F:FC:8F:CE Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 750B53F1CAAD734F7740285C96ECC61E7982B0FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: F1 Signing time: Sun 02 Nov 2025 21:41:11 +0000 Manifest this update: Sun 02 Nov 2025 21:36:11 +0000 Manifest next update: Thu 06 Nov 2025 04:19:11 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: AinUDXl22kzYgtexZ/DlY3ayMFeyifaRUYOGz/UbrHQ=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:53:f1:ca:ad:73:4f:77:40:28:5c:96:ec:c6:1e:79:82:b0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Nov 2 21:36:11 2025 GMT Not After : Nov 6 04:19:11 2025 GMT Subject: CN=83739DA0A77FE4CC283BD89D93D510D02FFC8FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:4f:41:8e:f4:b0:a0:98:53:38:6d:5c:c3: ae:b7:ed:27:35:c8:d1:b8:4e:41:e8:ae:37:f4:99: 11:8e:f0:97:e0:b0:dc:09:e4:d9:22:88:47:1f:98: 4b:d6:8f:b0:35:f4:3e:46:51:07:3c:00:ce:76:fd: cc:c6:ac:e1:8d:f5:56:25:7c:04:68:6d:51:6f:f4: b0:0f:76:31:29:a3:f8:d4:9d:44:0a:94:47:12:66: 5a:57:54:5d:89:0e:74:b5:cb:5e:d0:ce:cc:a3:de: 47:23:64:82:a5:b1:bb:c6:21:75:96:8f:b1:4c:24: ef:df:8d:95:1e:f6:d8:e4:11:8c:f5:08:b1:88:91: c9:70:9f:68:2b:e3:c0:44:0d:25:ea:0c:28:01:52: a4:6e:09:3e:a9:ae:1d:3c:45:32:2c:ba:f5:6c:a6: c8:10:2d:42:97:ed:84:65:1e:92:8d:f9:83:2b:09: c5:e4:10:8e:60:da:a5:90:58:72:69:73:88:ab:45: 4a:c7:06:70:1a:d7:b1:bd:ed:6b:88:e5:27:54:aa: 39:10:fc:95:11:89:2c:f3:c1:81:79:ce:5a:64:8f: 7a:86:8d:77:18:12:1e:d9:a6:36:df:30:f8:0b:61: b2:d0:b7:d1:3d:a2:04:60:b5:a1:80:16:f6:cb:e7: 0e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:73:9D:A0:A7:7F:E4:CC:28:3B:D8:9D:93:D5:10:D0:2F:FC:8F:CE X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:5b:9c:5d:f2:24:21:ac:4f:29:4b:98:40:3a:b5:6d:cb: 76:fe:c7:83:75:64:d0:33:f3:75:8f:5b:09:07:2e:d4:11:b1: 62:db:5e:db:33:34:b3:56:86:5b:69:c2:fd:82:2d:e3:db:43: df:c1:c4:d9:b4:93:32:84:d4:85:d1:02:35:07:f3:07:04:87: 3a:cb:5b:e4:27:f4:17:ad:a7:b7:d2:a6:74:a2:86:4c:8f:81: 0a:d3:da:99:ca:8c:78:61:52:57:43:70:62:1e:5e:84:37:0b: c1:28:61:06:98:c6:94:6d:61:e1:c9:b7:10:fb:d1:65:ab:b3: 10:83:c7:18:ce:6e:ab:58:5a:73:73:f0:d6:e6:93:f7:1d:8b: ae:b5:4e:c5:e5:a9:91:10:c6:2f:81:34:8c:29:b9:33:c9:21: d2:17:e3:ec:2b:69:58:14:3b:2e:56:76:87:89:4d:3f:75:b0: 21:d0:81:3a:06:0c:b9:dd:c2:80:f2:21:94:77:3a:4e:c5:5b: 18:74:d1:c7:67:ce:6e:32:d3:c0:cc:4c:2b:68:fc:c1:00:b0: d8:2d:0d:4b:33:7e:e7:e3:12:37:8a:ec:9f:e4:5f:65:ab:ff: 87:3e:8e:c3:06:10:47:94:a4:be:80:ac:53:75:de:11:f6:d7: 31:fc:11:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQtT8cqtc093QChcluzGHnmCsPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTExMDIyMTM2MTFaFw0yNTExMDYwNDE5MTFaMDMxMTAvBgNV BAMTKDgzNzM5REEwQTc3RkU0Q0MyODNCRDg5RDkzRDUxMEQwMkZGQzhGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNc09BjvSwoJhTOG1cw6637Sc1 yNG4TkHorjf0mRGO8JfgsNwJ5NkiiEcfmEvWj7A19D5GUQc8AM52/czGrOGN9VYl fARobVFv9LAPdjEpo/jUnUQKlEcSZlpXVF2JDnS1y17Qzsyj3kcjZIKlsbvGIXWW j7FMJO/fjZUe9tjkEYz1CLGIkclwn2gr48BEDSXqDCgBUqRuCT6prh08RTIsuvVs psgQLUKX7YRlHpKN+YMrCcXkEI5g2qWQWHJpc4irRUrHBnAa17G97WuI5SdUqjkQ /JURiSzzwYF5zlpkj3qGjXcYEh7ZpjbfMPgLYbLQt9E9ogRgtaGAFvbL5w6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3OdoKd/5MwoO9idk9UQ0C/8j84wHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqcW5xd8iQhrE8pS5hAOrVty3b+x4N1ZNAz 83WPWwkHLtQRsWLbXtszNLNWhltpwv2CLePbQ9/BxNm0kzKE1IXRAjUH8wcEhzrL W+Qn9Betp7fSpnSihkyPgQrT2pnKjHhhUldDcGIeXoQ3C8EoYQaYxpRtYeHJtxD7 0WWrsxCDxxjObqtYWnNz8Nbmk/cdi661TsXlqZEQxi+BNIwpuTPJIdIX4+wraVgU Oy5WdoeJTT91sCHQgToGDLndwoDyIZR3Ok7FWxh00cdnzm4y08DMTCto/MEAsNgt DUszfufjEjeK7J/kX2Wr/4c+jsMGEEeUpL6ArFN13hH21zH8EV0= -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:44 2025 by rpki-client