$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: DlW2ay30FJtGBZp3Si5gSiYQtA8oeHhQ1Ur8rexdoNo= Subject key identifier: 25:96:7F:2A:D8:3F:51:0D:87:05:FA:FE:CA:F3:D0:70:97:C4:C3:77 Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 799550898BEC321C02EEA2ECB57D34DF9D559697 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 01A4 Signing time: Sun 02 Nov 2025 17:21:37 +0000 Manifest this update: Sun 02 Nov 2025 17:16:37 +0000 Manifest next update: Thu 06 Nov 2025 04:58:37 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) 2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: N+VuyWYlNHmf8sE/aoabsFxdCNaIv6WilCTPE20UnVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:95:50:89:8b:ec:32:1c:02:ee:a2:ec:b5:7d:34:df:9d:55:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Nov 2 17:16:37 2025 GMT Not After : Nov 6 04:58:37 2025 GMT Subject: CN=25967F2AD83F510D8705FAFECAF3D07097C4C377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:23:93:a3:ed:57:e3:94:cb:40:2c:3d:5b: ac:4b:06:23:96:1d:95:df:6b:ea:fa:fa:2e:8b:e9: d9:06:77:e0:0e:be:93:87:fb:bb:28:e2:8c:0e:6a: 22:14:4f:ea:1d:06:9e:dc:0f:f2:3d:8f:37:f1:d5: f5:20:81:62:56:6f:01:00:3a:bb:0a:05:eb:67:65: 5c:ef:62:ee:1b:fd:37:f7:3f:80:96:fb:10:92:6f: 86:b0:69:c4:15:43:0f:4b:d6:9e:c5:51:2f:32:b6: 97:78:df:27:c6:fe:e5:32:16:7f:de:29:13:93:4a: 26:7d:ca:5c:41:8d:30:5b:6a:0a:ce:b8:bd:a5:24: d7:31:6c:c3:1f:d3:b7:4a:2e:53:75:92:d8:20:db: 0e:d9:fb:55:0e:d3:dd:28:fe:ce:9a:e9:1b:4f:f3: c9:ae:83:69:45:ee:45:76:8b:f1:45:6c:04:42:aa: 61:c9:a1:a6:73:f5:a8:a7:7b:a6:6d:87:df:46:05: c9:91:f2:12:c2:c7:66:36:c3:61:a0:5a:56:d0:a6: a6:3b:c9:12:f3:37:dc:28:4d:78:02:8f:59:fe:cd: b3:bf:1e:3c:96:45:9b:26:36:41:7e:f2:e8:df:5e: 31:03:de:59:76:90:0f:fa:ad:4f:23:24:f0:33:d1: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:7F:2A:D8:3F:51:0D:87:05:FA:FE:CA:F3:D0:70:97:C4:C3:77 X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8a:82:f6:c5:8e:03:34:e5:b4:e8:87:05:ad:31:d7:3e:cd: 88:3f:b9:4c:18:44:89:68:11:6f:2a:55:f5:ad:5c:fb:12:ab: 30:f4:37:8a:27:9b:b1:98:3e:08:0f:c1:79:91:ac:ae:07:95: 79:9e:30:47:84:84:4f:17:a2:33:2a:c8:60:b0:2c:99:bb:56: ca:ba:74:f2:36:4f:2c:d6:85:a8:4c:b4:c7:14:c2:7d:e3:7f: 6b:cf:cf:17:d4:fa:09:ec:8f:ed:ff:f7:65:47:4c:af:4a:fb: 7d:0b:96:80:1a:3a:14:39:9b:c2:66:d4:ca:3b:52:58:27:67: 26:14:88:47:f6:cb:9d:e4:d0:9d:5c:85:07:ef:4e:81:78:6d: bf:be:56:f0:3f:4f:f7:ff:6d:22:74:8d:13:29:f2:ef:c3:cb: 59:96:d7:cf:6e:f6:a6:82:9a:75:bc:1b:9e:2c:cf:99:3d:83: 9a:89:0f:9f:c2:e9:67:e1:62:c6:73:b6:6e:85:f7:18:9f:4f: e2:ef:92:e1:25:06:38:4b:1d:d5:18:18:e6:b9:03:59:63:b8: fd:1b:05:18:7c:2b:18:d3:c7:81:09:25:6c:29:f7:d6:47:29: 9e:ac:46:be:27:fb:6d:56:03:c9:c8:0d:15:41:a8:46:6a:66: 33:a0:83:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZVQiYvsMhwC7qLstX00351VlpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTExMDIxNzE2MzdaFw0yNTExMDYwNDU4MzdaMDMxMTAvBgNV BAMTKDI1OTY3RjJBRDgzRjUxMEQ4NzA1RkFGRUNBRjNEMDcwOTdDNEMzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PSOTo+1X45TLQCw9W6xLBiOW HZXfa+r6+i6L6dkGd+AOvpOH+7so4owOaiIUT+odBp7cD/I9jzfx1fUggWJWbwEA OrsKBetnZVzvYu4b/Tf3P4CW+xCSb4awacQVQw9L1p7FUS8ytpd43yfG/uUyFn/e KROTSiZ9ylxBjTBbagrOuL2lJNcxbMMf07dKLlN1ktgg2w7Z+1UO090o/s6a6RtP 88mug2lF7kV2i/FFbARCqmHJoaZz9aine6Zth99GBcmR8hLCx2Y2w2GgWlbQpqY7 yRLzN9woTXgCj1n+zbO/HjyWRZsmNkF+8ujfXjED3ll2kA/6rU8jJPAz0Z/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZZ/Ktg/UQ2HBfr+yvPQcJfEw3cwHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaKgvbFjgM05bTohwWtMdc+zYg/uUwYRIlo EW8qVfWtXPsSqzD0N4onm7GYPggPwXmRrK4HlXmeMEeEhE8XojMqyGCwLJm7Vsq6 dPI2TyzWhahMtMcUwn3jf2vPzxfU+gnsj+3/92VHTK9K+30LloAaOhQ5m8Jm1Mo7 UlgnZyYUiEf2y53k0J1chQfvToF4bb++VvA/T/f/bSJ0jRMp8u/Dy1mW189u9qaC mnW8G54sz5k9g5qJD5/C6WfhYsZztm6F9xifT+LvkuElBjhLHdUYGOa5A1ljuP0b BRh8KxjTx4EJJWwp99ZHKZ6sRr4n+21WA8nIDRVBqEZqZjOgg8Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:02 2025 by rpki-client