$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: f5/w8++OX77QArXBdoHm6/aSHrBJgpQHJwIV3zkyUxk= Subject key identifier: 3C:90:27:36:E7:C7:B7:F5:38:E8:B5:2E:CB:50:BD:D7:37:D9:AD:79 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 32326352B645D3CE954761806FB1BA524E201871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 021B Signing time: Mon 03 Nov 2025 13:01:12 +0000 Manifest this update: Mon 03 Nov 2025 12:56:12 +0000 Manifest next update: Thu 06 Nov 2025 14:29:12 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: fQQ8sRKwut2eZq0XJVVJcMp5HazzEC3TR6wOnx3yBwU=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:32:63:52:b6:45:d3:ce:95:47:61:80:6f:b1:ba:52:4e:20:18:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Nov 3 12:56:12 2025 GMT Not After : Nov 6 14:29:12 2025 GMT Subject: CN=3C902736E7C7B7F538E8B52ECB50BDD737D9AD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:ad:8b:19:9c:09:47:3c:16:2d:c5:ce:c3: 72:51:58:4b:a4:74:b1:1e:47:d1:a5:0e:67:98:8c: eb:2c:92:d6:e1:03:55:c3:26:50:90:51:d0:dd:05: 7d:16:f1:55:ac:62:c8:99:e6:40:46:da:f2:84:53: fe:d9:f8:d4:f2:37:52:7c:06:c9:56:fc:28:15:a9: 4e:f1:f8:16:fc:8c:a7:9c:fd:53:6b:73:ae:1a:7e: dd:8a:b3:a2:43:20:e3:89:53:a8:30:c8:ce:76:db: 10:95:b7:e7:f6:eb:7b:e8:5f:d0:b5:bc:4b:11:06: a6:6e:d2:fd:59:ac:2e:fe:4a:3e:47:eb:59:a5:46: ed:52:4a:64:84:b1:a3:65:7c:58:a6:b5:10:f4:47: b5:56:64:d1:41:b2:88:b9:6e:28:8a:55:5a:da:66: 40:db:d9:0b:1d:02:7b:9e:80:e8:79:54:e7:c9:f1: cd:00:bb:34:cd:52:3f:d3:c6:d2:e1:f4:c6:4d:1c: da:5b:24:e0:c1:96:d4:81:5f:99:4b:e0:32:08:52: fb:c9:e9:6f:42:76:f0:d9:4a:6f:c2:f3:c7:de:14: 7e:df:87:7f:2c:3d:e6:80:09:9c:1b:08:8c:df:84: 9b:d4:74:11:c4:ec:98:d4:ed:46:fa:99:7e:28:bc: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:90:27:36:E7:C7:B7:F5:38:E8:B5:2E:CB:50:BD:D7:37:D9:AD:79 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:75:1f:c0:8e:18:e7:9f:0d:d2:53:c6:88:39:9a:ad:ba: e8:2f:72:88:57:e5:9f:a4:8b:ba:ad:d2:63:dc:d6:a2:91:d6: e9:43:10:8c:05:ea:87:f4:c8:b2:99:ee:81:60:5d:bf:cd:0d: c2:97:34:e1:a9:8c:b2:79:14:55:d5:39:2b:da:c1:45:af:ac: 02:27:4c:9d:4a:6d:13:54:44:55:7b:e0:4e:c0:68:21:ff:fa: 70:fd:0f:5a:1e:21:16:3d:f4:04:44:63:9a:57:fc:74:d5:a5: 72:a6:55:59:c5:e6:7a:51:e2:68:f1:7c:46:6d:68:89:ac:85: 91:20:57:fa:9c:04:ba:90:57:82:cb:61:09:7d:06:f4:3e:34: 15:34:ba:83:67:4a:99:f3:a6:26:70:8f:60:5b:70:9e:27:0d: 9d:e5:2e:5a:b3:f9:a0:95:ef:2c:12:d4:9d:48:a6:25:71:6f: d1:59:1a:48:15:a9:6d:63:e3:b1:80:0e:f6:a5:27:23:cb:85: e1:8b:55:11:f0:b9:da:7f:19:55:2b:93:89:63:bd:2b:b2:65: 84:f6:13:14:db:a1:86:cd:41:23:c6:f7:fe:6f:81:d8:b9:87: c0:ce:ab:08:6b:09:5a:7d:c3:72:5e:c5:f0:11:9d:37:08:5c: b8:4b:76:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjJjUrZF086VR2GAb7G6Uk4gGHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTExMDMxMjU2MTJaFw0yNTExMDYxNDI5MTJaMDMxMTAvBgNV BAMTKDNDOTAyNzM2RTdDN0I3RjUzOEU4QjUyRUNCNTBCREQ3MzdEOUFENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Sq2LGZwJRzwWLcXOw3JRWEuk dLEeR9GlDmeYjOssktbhA1XDJlCQUdDdBX0W8VWsYsiZ5kBG2vKEU/7Z+NTyN1J8 BslW/CgVqU7x+Bb8jKec/VNrc64aft2Ks6JDIOOJU6gwyM522xCVt+f263voX9C1 vEsRBqZu0v1ZrC7+Sj5H61mlRu1SSmSEsaNlfFimtRD0R7VWZNFBsoi5biiKVVra ZkDb2QsdAnuegOh5VOfJ8c0AuzTNUj/TxtLh9MZNHNpbJODBltSBX5lL4DIIUvvJ 6W9CdvDZSm/C88feFH7fh38sPeaACZwbCIzfhJvUdBHE7JjU7Ub6mX4ovHKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJAnNufHt/U46LUuy1C91zfZrXkwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQkdR/Ajhjnnw3SU8aIOZqtuugvcohX5Z+k i7qt0mPc1qKR1ulDEIwF6of0yLKZ7oFgXb/NDcKXNOGpjLJ5FFXVOSvawUWvrAIn TJ1KbRNURFV74E7AaCH/+nD9D1oeIRY99AREY5pX/HTVpXKmVVnF5npR4mjxfEZt aImshZEgV/qcBLqQV4LLYQl9BvQ+NBU0uoNnSpnzpiZwj2BbcJ4nDZ3lLlqz+aCV 7ywS1J1IpiVxb9FZGkgVqW1j47GADvalJyPLheGLVRHwudp/GVUrk4ljvSuyZYT2 ExTboYbNQSPG9/5vgdi5h8DOqwhrCVp9w3JexfARnTcIXLhLdr4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:51 2025 by rpki-client