$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json) Hash identifier: fLvJsYjKtlSFbO/OtUpQyCNvh0n4wmmvf/IUQE/mUmA= Subject key identifier: FF:4E:75:51:C9:92:B0:82:BD:67:18:AD:77:60:82:C1:C3:3B:29:B1 Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A Certificate serial: 7EB48AFF85E36F45C56D63EB345CD969E1137CCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft Manifest number: E8 Signing time: Tue 04 Nov 2025 05:00:02 +0000 Manifest this update: Tue 04 Nov 2025 04:55:02 +0000 Manifest next update: Fri 07 Nov 2025 16:09:02 +0000 Files and hashes: 1: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: QQwpYqmb5I8kpczJqvRjc77WWYHjkoE+uDArf9NmgyQ=) 2: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b4:8a:ff:85:e3:6f:45:c5:6d:63:eb:34:5c:d9:69:e1:13:7c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A Validity Not Before: Nov 4 04:55:02 2025 GMT Not After : Nov 7 16:09:02 2025 GMT Subject: CN=FF4E7551C992B082BD6718AD776082C1C33B29B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:2d:39:b9:20:88:02:25:bb:07:74:48:eb: a5:13:9b:4f:78:5b:d4:b1:81:78:d5:b2:95:50:69: 08:d6:83:07:08:6e:af:0d:d6:f2:c8:e3:4b:5a:01: b2:bf:d0:e0:55:99:36:40:32:d4:1a:5e:6f:99:c9: bc:54:39:63:75:ea:5f:73:4d:1e:47:2d:f2:00:ba: d0:f5:e6:46:63:cb:0f:4d:3b:5d:ce:bf:42:ee:0f: 82:ea:4a:52:09:7a:0d:4e:10:13:82:33:20:b2:df: b4:9a:26:8d:b5:b1:48:25:e6:ee:ef:a7:0e:eb:36: ab:49:fa:61:6f:d2:6d:e8:df:98:8f:6a:98:0b:cb: c1:f8:e6:ef:da:73:2f:c0:5e:ed:bf:95:4d:bb:ca: f4:e1:55:88:31:51:66:c8:6c:ae:ee:4a:a0:d3:35: 6d:de:09:51:64:ec:dc:ab:d3:f9:99:6d:4c:90:97: a0:e9:5e:3c:6e:00:b4:9a:98:26:b3:59:b1:8e:a9: b4:d7:66:95:df:16:f6:ac:58:54:3b:8e:c1:0a:e4: de:b1:55:f1:76:8d:9f:f2:e9:96:91:7a:dc:88:47: 83:f5:cb:da:d9:3f:8d:2c:b1:de:93:c4:dd:e2:3a: af:71:5f:ee:df:04:30:f3:4c:58:b0:5b:6b:ad:9b: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4E:75:51:C9:92:B0:82:BD:67:18:AD:77:60:82:C1:C3:3B:29:B1 X509v3 Authority Key Identifier: keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0a:3a:bf:7c:e6:a5:2e:53:6d:0e:19:39:f2:e9:64:5a:35: 3d:77:ba:00:30:f2:75:6d:5b:9e:04:21:75:5c:f5:09:a7:18: 94:22:79:7e:9c:89:c6:8c:af:11:db:9c:f1:ef:38:7d:bd:b5: 24:1c:08:f0:d1:ce:a2:41:ae:26:50:56:c6:6c:bb:ef:04:fe: db:27:49:9e:8b:54:33:95:3b:42:d0:2f:f8:c3:4e:b6:03:cf: f4:a6:36:c8:ef:a2:71:c3:e2:e5:dc:02:9e:f4:af:3a:5e:46: 9a:0a:95:ea:60:77:32:9f:28:d3:f0:bb:fa:00:aa:f5:79:85: 4c:13:c6:79:bd:8b:92:12:14:41:1d:65:b1:b3:70:54:e5:6e: 67:9a:81:34:7f:d0:2b:b3:33:4c:25:c9:d7:5b:5b:92:96:79: c5:9c:d6:c6:a2:15:eb:d5:2e:a9:fe:13:db:20:d3:86:23:bc: 47:4e:57:18:41:bf:5e:83:00:e5:24:6b:53:cc:58:f5:4f:2b: d0:82:dc:c5:85:11:54:9d:78:d2:c6:6c:1b:e9:d7:b7:04:c4: 59:0c:4a:a2:51:bc:eb:70:0b:1e:21:46:d9:d4:90:80:aa:79: 68:ce:cc:fe:76:f5:0a:20:19:59:80:ee:b2:91:96:54:d7:b3: 83:0d:3e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrSK/4Xjb0XFbWPrNFzZaeETfM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMz QzQwQkE3QTAeFw0yNTExMDQwNDU1MDJaFw0yNTExMDcxNjA5MDJaMDMxMTAvBgNV BAMTKEZGNEU3NTUxQzk5MkIwODJCRDY3MThBRDc3NjA4MkMxQzMzQjI5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkS05uSCIAiW7B3RI66UTm094 W9SxgXjVspVQaQjWgwcIbq8N1vLI40taAbK/0OBVmTZAMtQaXm+ZybxUOWN16l9z TR5HLfIAutD15kZjyw9NO13Ov0LuD4LqSlIJeg1OEBOCMyCy37SaJo21sUgl5u7v pw7rNqtJ+mFv0m3o35iPapgLy8H45u/acy/AXu2/lU27yvThVYgxUWbIbK7uSqDT NW3eCVFk7Nyr0/mZbUyQl6DpXjxuALSamCazWbGOqbTXZpXfFvasWFQ7jsEK5N6x VfF2jZ/y6ZaRetyIR4P1y9rZP40ssd6TxN3iOq9xX+7fBDDzTFiwW2utm04FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/051UcmSsIK9Zxitd2CCwcM7KbEwHwYDVR0j BBgwFoAUFwl5wOMZWPp2JZ82C4QFIzxAunowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC8xNzA5NzlDMEUz MTk1OEZBNzYyNTlGMzYwQjg0MDUyMzNDNDBCQTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMzQzQw QkE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1 MjMzQzQwQkE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEKOr985qUuU20OGTny6WRaNT13ugAw8nVt W54EIXVc9QmnGJQieX6cicaMrxHbnPHvOH29tSQcCPDRzqJBriZQVsZsu+8E/tsn SZ6LVDOVO0LQL/jDTrYDz/SmNsjvonHD4uXcAp70rzpeRpoKlepgdzKfKNPwu/oA qvV5hUwTxnm9i5ISFEEdZbGzcFTlbmeagTR/0CuzM0wlyddbW5KWecWc1saiFevV Lqn+E9sg04YjvEdOVxhBv16DAOUka1PMWPVPK9CC3MWFEVSdeNLGbBvp17cExFkM SqJRvOtwCx4hRtnUkICqeWjOzP529QogGVmA7rKRllTXs4MNPoc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:17 2025 by rpki-client