$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft File: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft (raw, json) Hash identifier: EuhkSgCY1WO8T7RUjqHIPpt7NgrB19T4ukvlKDHFScs= Subject key identifier: 8F:71:98:E5:75:9F:3F:68:42:DD:51:5E:3A:1B:D3:98:5C:D5:B1:A7 Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 Certificate issuer: /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Certificate serial: 3A7350876CCDBDF589949E96EA8A24AB52CA0EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft Manifest number: 0526 Signing time: Mon 03 Nov 2025 06:20:41 +0000 Manifest this update: Mon 03 Nov 2025 06:15:41 +0000 Manifest next update: Thu 06 Nov 2025 15:46:41 +0000 Files and hashes: 1: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: bUSsrxVSpx0QU4u2uNBA7y70+DlmrDl9YAKqMzKuk/Y=) 2: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: gsHZwZaZZrGPSnKeaXQwKe0du+uegJ+SJ020XW50DPw=) 3: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: VFU5DB8dG4nbadxLuF1q/tdYpIsYXQE4+EO3tI62s+c=) 4: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: 3A9aXUT5ZliAMgJstYpcWHFTfUmMESodAfeb3G4B9tY=) 5: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 5TAHWOIN003fsG8ycbo1mXpMVA4osDGLXqixgvxFexI=) 6: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl (hash: T3a9TmeJSMJZWswAiqtP7hS7g6xRZ2PjUgIXAXY7uFk=) 7: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: hlIP+MRQ5Nc1S7Ft5ZfPefr9DGR/+EoZGD9rJ2XoFDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:50:87:6c:cd:bd:f5:89:94:9e:96:ea:8a:24:ab:52:ca:0e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Validity Not Before: Nov 3 06:15:41 2025 GMT Not After : Nov 6 15:46:41 2025 GMT Subject: CN=8F7198E5759F3F6842DD515E3A1BD3985CD5B1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:68:a7:0c:98:32:12:4d:3a:06:b2:45:2d: 0f:62:03:17:e4:eb:97:29:ca:50:d2:59:5a:f1:b2: fb:3b:c7:40:09:a0:09:21:e8:42:2d:4a:f6:95:b5: bf:60:53:80:bb:39:e9:be:d1:5a:45:ca:a3:24:ab: 32:6d:0e:1f:3b:c1:ab:7a:8d:87:d6:c2:88:18:a0: 9d:98:e0:30:50:fd:99:af:d7:0f:74:dc:b5:c8:c8: 2a:66:3d:1d:57:fd:cc:15:f3:52:4f:16:93:07:aa: da:53:9e:12:78:eb:a4:55:b6:a1:d1:68:bc:13:5c: af:ed:2b:8b:18:e1:d5:c0:da:d8:58:e7:f8:f7:fd: 03:ec:07:8c:ef:8d:d2:5f:78:07:84:cf:ae:4f:32: ed:70:c7:da:5f:4c:c7:e2:3e:75:ca:99:1e:72:ac: 93:8e:95:1f:26:94:9b:9d:ad:e9:fe:01:be:3d:9a: f1:b8:6f:44:97:0e:3b:ba:2c:b4:29:01:b1:d9:3f: 8d:e4:95:c3:fb:25:6a:25:ac:79:36:6c:11:30:a4: ed:39:5f:e5:8d:d8:84:3c:99:c3:44:63:20:23:83: 37:66:a0:26:f0:56:30:cc:ed:c1:f5:1d:fc:59:d3: 3e:14:98:5a:75:da:ad:5d:cc:a8:f1:49:63:4c:f3: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:71:98:E5:75:9F:3F:68:42:DD:51:5E:3A:1B:D3:98:5C:D5:B1:A7 X509v3 Authority Key Identifier: keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5c:2f:ed:22:32:fb:d1:20:ed:49:08:de:b8:6c:1f:ed:31: 03:dc:9f:7b:54:51:db:01:9e:3b:d4:86:21:93:16:40:c2:06: 04:0d:cd:ee:9d:e5:5c:aa:7e:81:38:99:97:67:63:21:33:f8: aa:32:ad:0a:95:04:35:54:12:2c:53:de:fa:07:ce:23:a6:81: 3e:65:f0:08:44:d6:c1:db:f3:2c:bb:46:94:76:f2:cf:f6:bc: 3f:6b:7c:a7:0f:43:e9:8a:1d:31:be:06:36:b8:d2:9d:57:6b: 5a:02:ec:ac:fa:86:2c:f1:d5:9a:d4:70:69:5c:40:9e:d9:14: 02:66:1f:6d:1c:f2:96:ec:d8:9a:db:cd:73:dc:b6:00:b7:95: 70:49:e8:5c:38:62:9e:0d:8f:5d:c6:1d:10:04:26:53:36:de: fc:60:11:56:34:51:97:57:90:48:52:f3:9c:35:48:68:cf:16: d9:ef:a5:8a:8a:d1:93:e5:bc:ba:2f:07:95:bd:e8:a9:01:dd: fe:a2:15:cb:b0:f7:ca:37:73:98:c9:4f:e6:c5:a8:f8:a2:b9: dd:a6:11:76:ff:4e:95:f5:1a:ae:0c:d9:66:11:88:10:9b:56: b6:15:25:f1:d2:0e:51:e7:f7:ec:cd:d7:e1:72:a8:ff:a5:c8: a0:e8:80:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnNQh2zNvfWJlJ6W6ookq1LKDq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBE RTE0RkQ4OTAeFw0yNTExMDMwNjE1NDFaFw0yNTExMDYxNTQ2NDFaMDMxMTAvBgNV BAMTKDhGNzE5OEU1NzU5RjNGNjg0MkRENTE1RTNBMUJEMzk4NUNENUIxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo2inDJgyEk06BrJFLQ9iAxfk 65cpylDSWVrxsvs7x0AJoAkh6EItSvaVtb9gU4C7Oem+0VpFyqMkqzJtDh87wat6 jYfWwogYoJ2Y4DBQ/Zmv1w903LXIyCpmPR1X/cwV81JPFpMHqtpTnhJ466RVtqHR aLwTXK/tK4sY4dXA2thY5/j3/QPsB4zvjdJfeAeEz65PMu1wx9pfTMfiPnXKmR5y rJOOlR8mlJudren+Ab49mvG4b0SXDju6LLQpAbHZP43klcP7JWolrHk2bBEwpO05 X+WN2IQ8mcNEYyAjgzdmoCbwVjDM7cH1HfxZ0z4UmFp12q1dzKjxSWNM8+CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3GY5XWfP2hC3VFeOhvTmFzVsacwHwYDVR0j BBgwFoAUkubKaDr6GOoDGd7Bfd9T4N4U/YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMC85MkU2Q0E2ODNB RkExOEVBMDMxOURFQzE3RERGNTNFMERFMTRGRDg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBERTE0 RkQ4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUz RTBERTE0RkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANcL+0iMvvRIO1JCN64bB/tMQPcn3tUUdsB njvUhiGTFkDCBgQNze6d5VyqfoE4mZdnYyEz+KoyrQqVBDVUEixT3voHziOmgT5l 8AhE1sHb8yy7RpR28s/2vD9rfKcPQ+mKHTG+Bja40p1Xa1oC7Kz6hizx1ZrUcGlc QJ7ZFAJmH20c8pbs2JrbzXPctgC3lXBJ6Fw4Yp4Nj13GHRAEJlM23vxgEVY0UZdX kEhS85w1SGjPFtnvpYqK0ZPlvLovB5W96KkB3f6iFcuw98o3c5jJT+bFqPiiud2m EXb/TpX1Gq4M2WYRiBCbVrYVJfHSDlHn9+zN1+FyqP+lyKDogH8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:18 2025 by rpki-client