$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: PquN0wp02QzipcL7Ux0UKB0BA64Ga/1X0yFhRfjlbDM= Subject key identifier: 35:94:E2:5D:76:10:03:C1:24:AD:60:3D:05:83:E5:12:C2:02:1E:E2 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 464B13E63B97F7958E4AB11024A2110B666B22A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 020D Signing time: Mon 03 Nov 2025 15:01:39 +0000 Manifest this update: Mon 03 Nov 2025 14:56:39 +0000 Manifest next update: Thu 06 Nov 2025 23:07:39 +0000 Files and hashes: 1: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: ZJwsiwBWVgvsPNNlXSlB3RcaTNwzaS2Go/dpFa5IX0Y=) 2: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 3: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 4: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4b:13:e6:3b:97:f7:95:8e:4a:b1:10:24:a2:11:0b:66:6b:22:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Nov 3 14:56:39 2025 GMT Not After : Nov 6 23:07:39 2025 GMT Subject: CN=3594E25D761003C124AD603D0583E512C2021EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:77:38:ba:3e:ed:52:bb:95:1c:d4:6c:35: fd:80:f3:3f:aa:8f:25:6b:7d:df:9b:5b:d0:be:2d: ef:4e:3a:f7:b6:a9:6a:d3:1c:f3:08:a8:78:d5:e5: 60:5f:d6:ce:a1:74:ca:24:71:47:c7:36:ef:2d:f8: 3e:d4:85:20:80:da:b7:d4:9d:a3:00:21:48:6f:5a: 04:51:ee:d2:14:7f:f8:a5:cc:f2:0d:ee:7e:e7:a8: 93:be:32:dc:e4:c5:05:a3:4f:cf:b7:f9:5e:7f:a9: db:f8:25:6b:ba:d8:e5:3c:38:67:c8:73:ab:05:fa: 1a:3e:d6:fb:31:c0:e4:e6:d3:a9:46:cd:57:04:c0: 78:9f:38:24:96:53:af:3d:47:c7:ac:0a:7c:ca:78: d1:e7:f0:ac:53:b8:70:04:15:7a:07:3a:26:f0:e0: 86:d9:ef:b6:bb:41:96:ac:d2:ae:6b:35:28:a5:6e: 77:59:11:81:b3:bf:2e:bb:86:19:74:c1:d8:ef:c7: c4:71:a8:2e:32:ad:63:74:34:35:63:74:be:31:5d: c8:9e:39:20:79:0a:5b:1c:d7:86:d8:9a:da:73:01: ee:1d:ae:dc:7a:d9:59:d0:a1:a7:80:77:ed:32:df: f8:4a:68:ee:7e:c7:1a:85:85:97:5e:7a:93:d9:a4: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:E2:5D:76:10:03:C1:24:AD:60:3D:05:83:E5:12:C2:02:1E:E2 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a8:4d:82:85:e0:e7:0c:21:42:37:f2:51:d6:50:8a:c8:d5: a6:76:68:e5:8b:d0:60:3b:c6:cd:64:a6:26:f5:28:4b:46:29: ba:e8:a9:85:15:79:fc:89:1a:7b:ed:a2:f5:6b:e9:20:a2:a4: a2:ad:10:0a:15:ad:de:b5:ed:df:7a:b8:5e:2e:2b:43:91:74: d5:f9:af:f4:7f:38:e3:62:32:a1:ce:80:33:6f:86:7d:a2:9b: 3d:41:22:c0:dc:2d:3f:f0:0f:2b:b4:ee:30:3b:98:0a:2c:9d: c0:b5:0e:d1:6e:12:b3:42:9c:66:ad:90:ab:30:2d:74:de:6d: ff:9b:5a:5b:df:0d:81:5b:9e:89:8d:f0:de:1e:83:57:34:b5: b1:06:bd:04:27:8a:b4:f9:0d:ef:3a:6b:f6:85:ab:fb:be:63: 84:fa:02:1c:d8:0c:99:6b:c9:a3:c2:f9:52:d7:38:d2:57:14: 70:b0:c4:92:9c:8b:b9:e2:c5:38:59:15:ca:ea:33:05:92:b5: ca:da:8d:da:1a:97:cd:85:9e:7f:c5:e0:e9:4f:56:a8:c9:54: df:3f:61:bf:cb:15:94:d6:dc:fd:fb:80:3b:31:df:6e:74:2f: c0:7f:a6:58:3f:58:79:64:4c:9e:8d:80:d9:e6:b1:ee:a6:ac: c9:06:8f:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURksT5juX95WOSrEQJKIRC2ZrIqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTExMDMxNDU2MzlaFw0yNTExMDYyMzA3MzlaMDMxMTAvBgNV BAMTKDM1OTRFMjVENzYxMDAzQzEyNEFENjAzRDA1ODNFNTEyQzIwMjFFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PXc4uj7tUruVHNRsNf2A8z+q jyVrfd+bW9C+Le9OOve2qWrTHPMIqHjV5WBf1s6hdMokcUfHNu8t+D7UhSCA2rfU naMAIUhvWgRR7tIUf/ilzPIN7n7nqJO+MtzkxQWjT8+3+V5/qdv4JWu62OU8OGfI c6sF+ho+1vsxwOTm06lGzVcEwHifOCSWU689R8esCnzKeNHn8KxTuHAEFXoHOibw 4IbZ77a7QZas0q5rNSilbndZEYGzvy67hhl0wdjvx8RxqC4yrWN0NDVjdL4xXcie OSB5Clsc14bYmtpzAe4drtx62VnQoaeAd+0y3/hKaO5+xxqFhZdeepPZpM+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZTiXXYQA8EkrWA9BYPlEsICHuIwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeoTYKF4OcMIUI38lHWUIrI1aZ2aOWL0GA7 xs1kpib1KEtGKbroqYUVefyJGnvtovVr6SCipKKtEAoVrd617d96uF4uK0ORdNX5 r/R/OONiMqHOgDNvhn2imz1BIsDcLT/wDyu07jA7mAosncC1DtFuErNCnGatkKsw LXTebf+bWlvfDYFbnomN8N4eg1c0tbEGvQQnirT5De86a/aFq/u+Y4T6AhzYDJlr yaPC+VLXONJXFHCwxJKci7nixThZFcrqMwWStcrajdoal82Fnn/F4OlPVqjJVN8/ Yb/LFZTW3P37gDsx3250L8B/plg/WHlkTJ6NgNnmse6mrMkGj/o= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:39 2025 by rpki-client