$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: oeVkipwqQ43VVknDQaLlxzU3Q/0x1g9UYJj50T3M3ws= Subject key identifier: 33:E8:5A:12:59:10:1F:A0:D6:59:30:8C:AA:AC:1F:94:7A:73:3D:F0 Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 18ED6376BD027483397B460D5958C9442979BFAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 0189 Signing time: Sat 18 Oct 2025 21:20:46 +0000 Manifest this update: Sat 18 Oct 2025 21:15:46 +0000 Manifest next update: Wed 22 Oct 2025 01:54:46 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: hhGGWYOjP0eSg1PGT5nPwnO3Sq3vQBhNU1EiIK2Ep74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:63:76:bd:02:74:83:39:7b:46:0d:59:58:c9:44:29:79:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Oct 18 21:15:46 2025 GMT Not After : Oct 22 01:54:46 2025 GMT Subject: CN=33E85A1259101FA0D659308CAAAC1F947A733DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:f4:e5:cd:77:ec:9e:ee:86:c9:f5:36:ec: 0e:22:21:18:30:ce:ed:fc:7d:9a:6b:90:f3:87:d7: 71:38:26:ee:ad:f5:df:9f:c5:1d:5e:62:1e:b2:47: 9f:c9:a0:84:97:45:c5:36:93:77:c9:82:82:a4:53: 23:ae:89:1a:15:db:c4:58:b8:2d:f6:cd:fc:22:13: 44:7d:0e:a3:3d:d7:f6:b9:ba:80:c0:48:75:ee:4f: ef:5d:ae:1e:4e:91:15:01:4a:88:29:ea:47:27:9d: e9:ff:06:5e:d5:02:1b:f8:51:59:0c:7a:18:21:69: 91:90:48:fe:09:21:e0:bd:7f:28:a4:1b:0a:b2:f4: 04:1f:5d:c6:1b:b7:7e:fe:de:69:d4:b3:b6:e7:e7: 0a:f9:ff:d5:8c:59:b5:b7:7f:37:ac:ca:f2:b9:b0: 19:8e:da:89:24:a7:b1:64:50:ae:a3:82:3b:f0:57: 25:09:16:96:5a:12:a6:75:7c:e4:af:7d:a5:e5:d5: 72:dd:5b:02:41:d9:4b:56:5b:cb:ca:b1:c7:9b:66: ff:df:c3:0c:20:f0:fe:5f:4b:14:3e:b4:28:67:3a: a5:a0:1c:15:e6:0b:0f:09:ee:1c:83:4b:79:8e:47: b8:32:18:ee:58:c0:2c:28:6d:fa:e8:5a:bf:a3:2f: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:5A:12:59:10:1F:A0:D6:59:30:8C:AA:AC:1F:94:7A:73:3D:F0 X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:36:22:43:85:60:54:13:c6:59:72:d0:84:a1:7e:e5:bd: 50:38:aa:36:6d:60:e8:80:d2:1f:83:64:2e:98:e5:ac:3a:9b: f1:9b:2c:7b:01:7a:4e:e9:e7:3f:27:d6:f1:62:2b:ad:a8:99: 44:1e:45:cf:e1:fa:f9:1b:ac:d4:04:38:2f:ff:85:af:c0:66: 71:4d:fa:b7:f9:f8:b5:43:58:12:3e:9a:ec:e3:fc:8b:f5:ae: 70:c6:2b:90:f6:80:16:52:1c:29:7b:79:d4:97:8c:48:4b:89: 1b:e4:2e:0c:ca:6e:60:ed:15:59:dd:03:8e:e0:d3:07:5f:b8: 5f:e1:cc:3d:20:b8:f9:5b:c4:a8:28:bb:2f:ac:f2:90:59:5a: d4:bf:a5:c4:ec:03:d8:28:64:cd:dd:40:79:60:5c:64:65:38: 5d:18:88:5a:0c:b9:74:6e:3f:95:66:e7:75:52:e6:29:d1:b4: 4f:39:e0:2a:72:9c:c4:f4:fd:04:59:e3:38:87:2e:79:a0:ff: 02:d1:f5:86:2b:99:72:b6:9f:ae:7a:e7:93:fe:d9:b7:0a:20: 4d:f5:0c:43:34:fb:0c:df:1b:59:2d:a3:e5:b1:d2:f2:1f:71: 52:ec:49:02:81:8a:b0:e9:73:7b:54:0c:bc:53:01:bd:c2:8b: 5c:8b:af:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO1jdr0CdIM5e0YNWVjJRCl5v60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTEwMTgyMTE1NDZaFw0yNTEwMjIwMTU0NDZaMDMxMTAvBgNV BAMTKDMzRTg1QTEyNTkxMDFGQTBENjU5MzA4Q0FBQUMxRjk0N0E3MzNERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGfTlzXfsnu6GyfU27A4iIRgw zu38fZprkPOH13E4Ju6t9d+fxR1eYh6yR5/JoISXRcU2k3fJgoKkUyOuiRoV28RY uC32zfwiE0R9DqM91/a5uoDASHXuT+9drh5OkRUBSogp6kcnnen/Bl7VAhv4UVkM ehghaZGQSP4JIeC9fyikGwqy9AQfXcYbt37+3mnUs7bn5wr5/9WMWbW3fzesyvK5 sBmO2okkp7FkUK6jgjvwVyUJFpZaEqZ1fOSvfaXl1XLdWwJB2UtWW8vKscebZv/f wwwg8P5fSxQ+tChnOqWgHBXmCw8J7hyDS3mOR7gyGO5YwCwobfroWr+jL2BpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+haElkQH6DWWTCMqqwflHpzPfAwHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ29NiJDhWBUE8ZZctCEoX7lvVA4qjZtYOiA 0h+DZC6Y5aw6m/GbLHsBek7p5z8n1vFiK62omUQeRc/h+vkbrNQEOC//ha/AZnFN +rf5+LVDWBI+muzj/Iv1rnDGK5D2gBZSHCl7edSXjEhLiRvkLgzKbmDtFVndA47g 0wdfuF/hzD0guPlbxKgouy+s8pBZWtS/pcTsA9goZM3dQHlgXGRlOF0YiFoMuXRu P5Vm53VS5inRtE854CpynMT0/QRZ4ziHLnmg/wLR9YYrmXK2n65655P+2bcKIE31 DEM0+wzfG1kto+Wx0vIfcVLsSQKBirDpc3tUDLxTAb3Ci1yLr1M= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:55 2025 by rpki-client