$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: BG3k7IqDv5f8QoeWK995ocBDB2iLJZivbsUSs86VxeQ= Subject key identifier: 81:E9:77:D8:6C:B7:F9:63:72:09:CE:08:C6:B2:FF:D0:12:0B:D2:13 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 35FFC09CFA9B37D5C0AEFA308CD62546848886D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 0280 Signing time: Mon 03 Nov 2025 13:52:22 +0000 Manifest this update: Mon 03 Nov 2025 13:47:22 +0000 Manifest next update: Thu 06 Nov 2025 17:39:22 +0000 Files and hashes: 1: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: waQAsWY+r7HUCBs26Gyr1ffiNHgifOKm00EmEZO4uWw=) 2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) 3: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ff:c0:9c:fa:9b:37:d5:c0:ae:fa:30:8c:d6:25:46:84:88:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Nov 3 13:47:22 2025 GMT Not After : Nov 6 17:39:22 2025 GMT Subject: CN=81E977D86CB7F9637209CE08C6B2FFD0120BD213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:2e:c7:0d:4b:88:99:9a:da:fb:fe:68:73: d4:6d:69:d1:51:9c:c7:6d:83:88:ee:23:70:33:a9: 81:5a:cf:43:37:ee:af:29:95:79:a8:00:67:66:d2: f8:81:a3:5e:7c:b1:36:1e:1b:4b:b7:b1:98:75:2e: 7f:1d:14:8f:0f:4c:98:ed:b8:81:f0:3d:88:de:d3: 31:cc:10:c2:08:28:0d:f0:1f:ff:39:95:6e:aa:7c: fa:8a:58:76:f9:b9:85:9a:09:5a:5f:d3:4b:34:4b: 71:e6:93:0d:04:4c:e1:96:f8:ec:af:f4:15:b5:29: 36:aa:50:83:f9:38:23:3d:41:bb:81:57:b7:8c:9b: 7f:07:84:6f:d5:50:79:e8:81:d9:ee:23:e8:f0:8a: 48:47:4c:82:3a:3e:c2:7e:99:70:11:39:6f:25:19: 90:c2:f3:a0:be:b4:44:a4:2c:b7:9e:02:e1:50:5f: 81:93:a8:07:74:ec:56:0b:26:fa:8f:59:bf:eb:b4: 63:ab:da:04:4e:65:a8:6f:1c:cd:56:98:0e:92:2e: 94:89:4e:4d:c3:8f:a4:fb:73:eb:f8:e2:3a:38:62: e6:25:64:84:c9:2c:95:33:b4:c0:d9:67:19:02:2e: 31:3b:dd:5d:a3:fd:1d:d5:59:5e:d1:4b:71:0d:ea: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E9:77:D8:6C:B7:F9:63:72:09:CE:08:C6:B2:FF:D0:12:0B:D2:13 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:21:31:5c:84:e5:29:b7:03:e8:13:77:ae:b9:a7:84:88: e1:9a:a3:5f:e8:f2:1f:1f:1a:52:36:9e:47:3c:71:aa:0a:0a: e2:fe:53:8a:39:27:b7:f4:5d:4b:8e:6f:e5:41:fb:34:a9:0a: 63:c5:1b:85:16:19:e5:6e:b5:8f:a9:b9:0b:85:4a:80:20:c6: 01:ae:b1:a4:cf:97:c5:a7:bd:b0:4b:41:9f:64:7a:7d:e8:47: f3:10:fe:99:de:76:8e:1c:65:bf:fc:ee:13:10:b4:74:33:aa: 15:a0:54:2f:0c:92:3d:16:4e:89:3f:77:45:6d:53:57:5f:16: 53:a5:d6:fb:0b:9e:13:d4:01:62:03:32:cc:ea:bd:1e:ac:13: ed:d0:63:29:07:72:f4:da:03:d2:5e:3d:34:25:cd:f8:3c:a0: 61:c7:86:f8:2e:11:a3:66:36:0b:81:79:e8:78:fc:e7:49:da: 96:75:65:01:cf:76:1e:67:f1:a9:a6:b5:03:8e:8a:93:4b:09: 0c:c4:f8:8d:a7:c6:b3:52:84:88:a6:16:75:c2:92:61:b7:e2: a6:af:be:48:f3:aa:96:39:74:1b:8f:ef:f3:b8:37:eb:60:c9: 8c:bb:cc:b8:32:aa:76:b7:7a:75:46:03:fd:c8:83:27:1b:69: d5:12:b3:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf/AnPqbN9XArvowjNYlRoSIhtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTExMDMxMzQ3MjJaFw0yNTExMDYxNzM5MjJaMDMxMTAvBgNV BAMTKDgxRTk3N0Q4NkNCN0Y5NjM3MjA5Q0UwOEM2QjJGRkQwMTIwQkQyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8i7HDUuImZra+/5oc9RtadFR nMdtg4juI3AzqYFaz0M37q8plXmoAGdm0viBo158sTYeG0u3sZh1Ln8dFI8PTJjt uIHwPYje0zHMEMIIKA3wH/85lW6qfPqKWHb5uYWaCVpf00s0S3Hmkw0ETOGW+Oyv 9BW1KTaqUIP5OCM9QbuBV7eMm38HhG/VUHnogdnuI+jwikhHTII6PsJ+mXAROW8l GZDC86C+tESkLLeeAuFQX4GTqAd07FYLJvqPWb/rtGOr2gROZahvHM1WmA6SLpSJ Tk3Dj6T7c+v44jo4YuYlZITJLJUztMDZZxkCLjE73V2j/R3VWV7RS3EN6uOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgel32Gy3+WNyCc4IxrL/0BIL0hMwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgRITFchOUptwPoE3euuaeEiOGao1/o8h8f GlI2nkc8caoKCuL+U4o5J7f0XUuOb+VB+zSpCmPFG4UWGeVutY+puQuFSoAgxgGu saTPl8WnvbBLQZ9ken3oR/MQ/pnedo4cZb/87hMQtHQzqhWgVC8Mkj0WTok/d0Vt U1dfFlOl1vsLnhPUAWIDMszqvR6sE+3QYykHcvTaA9JePTQlzfg8oGHHhvguEaNm NguBeeh4/OdJ2pZ1ZQHPdh5n8ammtQOOipNLCQzE+I2nxrNShIimFnXCkmG34qav vkjzqpY5dBuP7/O4N+tgyYy7zLgyqna3enVGA/3IgycbadUSs2w= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client