$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft File: 93D212CCFA351E8E694E5AFB214D80DC8C741916.mft (raw, json) Hash identifier: sIQpZWuBuoTrIdtOP6uAGBSn7Ez2sJAroqp9JV7IPQA= Subject key identifier: B8:0A:E1:69:87:F0:44:C9:66:71:E3:A9:CD:5A:81:B6:13:69:58:2D Authority key identifier: 93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 Certificate issuer: /CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Certificate serial: 0FE7D25C5F74E5AC00E1C42557E7FF7FECA218AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft Manifest number: 0101 Signing time: Mon 03 Nov 2025 14:50:46 +0000 Manifest this update: Mon 03 Nov 2025 14:45:46 +0000 Manifest next update: Fri 07 Nov 2025 01:43:46 +0000 Files and hashes: 1: 93D212CCFA351E8E694E5AFB214D80DC8C741916.crl (hash: P/ULwaqGGZx8PUhJt7USft0MLfIUHeSu3QVdfS6nDik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e7:d2:5c:5f:74:e5:ac:00:e1:c4:25:57:e7:ff:7f:ec:a2:18:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Validity Not Before: Nov 3 14:45:46 2025 GMT Not After : Nov 7 01:43:46 2025 GMT Subject: CN=B80AE16987F044C96671E3A9CD5A81B61369582D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:f4:b1:f3:f0:ad:48:35:66:7f:55:30:45: 99:75:ec:1d:2b:81:34:76:4a:2f:58:48:73:25:24: 5b:57:72:cd:cf:8e:0e:2d:ba:5c:7c:10:53:8e:b9: 2c:29:3b:69:28:56:df:16:fb:f3:ae:e5:ac:9e:ef: 6d:9e:3a:bf:4e:da:49:58:74:a3:68:56:16:71:17: 5f:40:41:9d:6b:ce:02:11:ab:a2:31:e2:6f:c0:86: 44:e0:0b:3a:f5:74:2b:02:9d:5f:8c:80:d9:05:f0: 11:fe:b9:f0:b6:fb:85:88:5a:af:2a:fc:40:49:0b: f5:f8:d3:e5:42:09:1d:6c:03:7b:47:8c:7e:51:4d: ec:72:9f:36:ff:4c:60:19:6d:71:55:4e:e6:38:f6: e4:0e:bc:20:5e:df:64:5b:44:9a:2a:be:61:98:9c: de:1e:ac:cd:a4:b6:6a:81:f6:90:cf:1e:48:45:24: 6c:5e:d7:8c:7c:5e:ab:62:ab:f0:c1:4b:18:06:d7: 3c:31:ef:43:c1:bb:45:38:95:62:1b:6b:65:0f:fa: 28:34:19:08:01:b5:af:53:51:24:ef:15:1a:cf:42: 34:47:78:de:aa:d1:01:e0:f5:95:a2:da:f3:5a:e2: 23:af:bb:c6:46:54:d9:15:25:c2:6a:ea:0e:61:0d: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0A:E1:69:87:F0:44:C9:66:71:E3:A9:CD:5A:81:B6:13:69:58:2D X509v3 Authority Key Identifier: keyid:93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:30:f5:69:19:9d:1f:fe:37:a8:57:e1:02:54:36:90:13: 2d:c8:9b:24:da:11:48:76:3b:fc:0f:23:46:83:ec:29:ee:07: a1:7d:1b:3d:96:76:68:4f:ab:7a:91:9e:96:a2:72:12:0a:ea: b3:a6:0a:56:2c:2d:9f:94:8f:59:df:52:8e:fa:9f:2f:9c:83: 24:d7:b6:e6:9e:37:0b:1e:c3:bb:fe:25:38:fb:0b:76:8e:11: 00:11:db:5d:02:3b:3b:42:e6:11:0f:03:2f:a8:03:c6:d1:21: e9:b9:c4:ae:9a:24:99:ad:30:ba:0b:d6:90:ee:e0:8a:1d:ae: 8e:ab:86:a2:44:8c:bf:7e:77:2f:a6:a6:f1:1f:f9:a6:c5:fd: 48:a4:b5:3a:d0:2c:b7:91:9f:74:0a:a1:fe:0b:ff:3b:53:ed: 59:84:ff:6e:e2:41:53:8c:2a:b5:af:3b:9c:b0:6e:9a:1a:d2: ae:4a:cb:c2:3c:86:22:39:ce:d1:34:5f:b6:32:d7:a8:aa:c8: 1d:00:5a:ab:d9:5a:b2:01:8c:51:39:1a:22:5b:af:c8:24:62: b8:6d:10:77:5a:88:5e:06:02:d7:1e:3d:74:b1:33:5a:c9:b8: e7:af:f4:35:72:e3:d6:91:4c:cf:8f:75:69:be:30:aa:cb:f6: b3:5a:e8:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+fSXF905awA4cQlV+f/f+yiGKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4 Qzc0MTkxNjAeFw0yNTExMDMxNDQ1NDZaFw0yNTExMDcwMTQzNDZaMDMxMTAvBgNV BAMTKEI4MEFFMTY5ODdGMDQ0Qzk2NjcxRTNBOUNENUE4MUI2MTM2OTU4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb/Sx8/CtSDVmf1UwRZl17B0r gTR2Si9YSHMlJFtXcs3Pjg4tulx8EFOOuSwpO2koVt8W+/Ou5aye722eOr9O2klY dKNoVhZxF19AQZ1rzgIRq6Ix4m/AhkTgCzr1dCsCnV+MgNkF8BH+ufC2+4WIWq8q /EBJC/X40+VCCR1sA3tHjH5RTexynzb/TGAZbXFVTuY49uQOvCBe32RbRJoqvmGY nN4erM2ktmqB9pDPHkhFJGxe14x8Xqtiq/DBSxgG1zwx70PBu0U4lWIba2UP+ig0 GQgBta9TUSTvFRrPQjRHeN6q0QHg9ZWi2vNa4iOvu8ZGVNkVJcJq6g5hDYM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuArhaYfwRMlmceOpzVqBthNpWC0wHwYDVR0j BBgwFoAUk9ISzPo1Ho5pTlr7IU2A3Ix0GRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS85M0QyMTJDQ0ZB MzUxRThFNjk0RTVBRkIyMTREODBEQzhDNzQxOTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4Qzc0 MTkxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgw REM4Qzc0MTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUJMPVpGZ0f/jeoV+ECVDaQEy3ImyTaEUh2 O/wPI0aD7CnuB6F9Gz2WdmhPq3qRnpaichIK6rOmClYsLZ+Uj1nfUo76ny+cgyTX tuaeNwsew7v+JTj7C3aOEQAR210COztC5hEPAy+oA8bRIem5xK6aJJmtMLoL1pDu 4Iodro6rhqJEjL9+dy+mpvEf+abF/UiktTrQLLeRn3QKof4L/ztT7VmE/27iQVOM KrWvO5ywbpoa0q5Ky8I8hiI5ztE0X7Yy16iqyB0AWqvZWrIBjFE5GiJbr8gkYrht EHdaiF4GAtcePXSxM1rJuOev9DVy49aRTM+PdWm+MKrL9rNa6H0= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:49 2025 by rpki-client