$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: lOBAYhY0OAiT1rAbwtGnb495RCbLuxo+BEw1W4Dg99E= Subject key identifier: C6:20:62:1D:E7:D0:73:FC:70:52:7F:BD:47:DD:05:5D:23:F7:E2:6E Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 2429E8A296E2015571B22B03396236CB61EAF44E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 0109 Signing time: Sun 19 Oct 2025 12:10:02 +0000 Manifest this update: Sun 19 Oct 2025 12:05:02 +0000 Manifest next update: Wed 22 Oct 2025 21:57:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: e0GbWBpFot8wBhO7Lrw0taVRxE0e74AqSQqzSSkOZYw=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:29:e8:a2:96:e2:01:55:71:b2:2b:03:39:62:36:cb:61:ea:f4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Oct 19 12:05:02 2025 GMT Not After : Oct 22 21:57:02 2025 GMT Subject: CN=C620621DE7D073FC70527FBD47DD055D23F7E26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:61:a2:91:10:00:19:da:02:1a:72:df:a2: 8b:9e:86:c5:0f:c8:7b:92:a2:e9:a0:f1:d0:d4:32: 70:04:3c:30:1b:19:32:b3:ac:60:8b:cf:79:4a:32: 27:64:4e:3e:ff:c6:b8:7f:4b:07:7b:67:d5:b1:d6: 56:e7:e2:4e:42:fc:48:4e:3c:4e:a4:aa:db:8f:39: 25:4a:e8:38:a8:2f:16:5f:37:b2:f5:bd:44:4b:d8: e0:75:11:71:d5:a8:fa:2f:bd:ff:dd:99:96:37:88: 13:74:05:0e:0c:8f:29:a3:45:12:9b:ce:be:7f:19: d3:48:4f:b6:32:43:c8:75:80:37:a1:c8:55:a9:47: 37:94:67:65:50:8a:a8:c5:de:a3:b1:c0:65:1a:b0: 14:cf:c7:40:e9:74:ba:db:49:16:8c:ef:91:99:f3: 4a:69:a4:f2:fc:8c:86:5b:c3:fc:2d:12:24:4f:2f: 39:99:27:40:54:2e:8a:20:8c:3b:21:ce:8b:ee:6d: 18:4e:0e:54:81:f4:9f:a4:4b:f3:ab:8d:29:c7:1c: d2:cd:e6:92:1f:da:6b:1a:2b:f3:98:cf:52:be:32: ac:1e:7d:c0:03:78:c6:e2:34:9a:36:7f:9a:d1:0d: b9:b0:2a:00:17:84:4e:9d:cd:90:91:9d:86:c7:45: 66:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:20:62:1D:E7:D0:73:FC:70:52:7F:BD:47:DD:05:5D:23:F7:E2:6E X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c4:ab:f0:56:20:57:c6:ca:de:0f:82:01:25:3a:ad:54:52: 1e:64:e8:17:18:88:b7:b3:d5:c5:10:13:b7:d9:4a:9e:98:91: 71:4d:18:50:74:d4:e2:66:39:e6:66:71:f7:20:34:d1:de:06: f3:9d:02:07:31:b0:4f:32:95:dc:2f:a2:1c:ae:13:71:c5:f7: ff:e2:7d:70:12:57:4e:a0:fc:c8:aa:d0:49:55:f1:68:a6:07: 2c:5a:11:78:a5:3f:26:f2:68:f1:81:8f:d9:63:3a:92:94:ba: 95:eb:16:07:f2:72:d9:e6:d5:e7:a5:b5:9b:cf:12:82:88:2e: c5:4d:b4:27:e4:54:a6:21:3d:dd:4b:93:20:e0:49:91:c9:32: f0:1d:5d:27:89:b2:ad:2b:df:66:a9:e1:7b:60:8f:cd:4b:23: db:8a:1a:36:9e:ca:9d:ff:3c:a0:13:51:c6:4d:1a:39:7f:74: be:71:fb:f6:b7:69:ae:15:02:44:45:24:9d:17:f1:08:a5:81: 68:95:3c:1a:64:9f:8e:63:c2:54:e1:c2:84:52:62:15:cb:23: ba:20:bc:3d:4a:d7:67:a1:23:59:05:97:8d:7a:51:2e:50:05: 02:24:51:70:d5:db:7b:e4:e3:a6:16:19:93:63:53:82:c2:35: 14:51:1d:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCnoopbiAVVxsisDOWI2y2Hq9E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTEwMTkxMjA1MDJaFw0yNTEwMjIyMTU3MDJaMDMxMTAvBgNV BAMTKEM2MjA2MjFERTdEMDczRkM3MDUyN0ZCRDQ3REQwNTVEMjNGN0UyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAWGikRAAGdoCGnLfoouehsUP yHuSoumg8dDUMnAEPDAbGTKzrGCLz3lKMidkTj7/xrh/Swd7Z9Wx1lbn4k5C/EhO PE6kqtuPOSVK6DioLxZfN7L1vURL2OB1EXHVqPovvf/dmZY3iBN0BQ4MjymjRRKb zr5/GdNIT7YyQ8h1gDehyFWpRzeUZ2VQiqjF3qOxwGUasBTPx0DpdLrbSRaM75GZ 80pppPL8jIZbw/wtEiRPLzmZJ0BULoogjDshzovubRhODlSB9J+kS/OrjSnHHNLN 5pIf2msaK/OYz1K+MqwefcADeMbiNJo2f5rRDbmwKgAXhE6dzZCRnYbHRWatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiBiHefQc/xwUn+9R90FXSP34m4wHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7Eq/BWIFfGyt4PggElOq1UUh5k6BcYiLez 1cUQE7fZSp6YkXFNGFB01OJmOeZmcfcgNNHeBvOdAgcxsE8yldwvohyuE3HF9//i fXASV06g/Miq0ElV8WimByxaEXilPybyaPGBj9ljOpKUupXrFgfyctnm1eeltZvP EoKILsVNtCfkVKYhPd1LkyDgSZHJMvAdXSeJsq0r32ap4Xtgj81LI9uKGjaeyp3/ PKATUcZNGjl/dL5x+/a3aa4VAkRFJJ0X8QilgWiVPBpkn45jwlThwoRSYhXLI7og vD1K12ehI1kFl416US5QBQIkUXDV23vk46YWGZNjU4LCNRRRHXU= -----END CERTIFICATE-----Generated at Mon Oct 20 22:22:04 2025 by rpki-client