$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: X5tmP93BlJ9OHEycP3MKsSN6Hnify1kSLeojR0Gui98= Subject key identifier: CD:04:10:1B:DC:29:E2:39:A6:E1:A7:3D:B8:2A:94:5B:FF:13:6D:04 Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 3D1D72CF94194E293A46A64EC273DE93B9182473 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 01E9 Signing time: Mon 20 Oct 2025 04:21:40 +0000 Manifest this update: Mon 20 Oct 2025 04:16:40 +0000 Manifest next update: Thu 23 Oct 2025 13:00:40 +0000 Files and hashes: 1: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: ED86WUKmWy5CwVrN3zoqKOtUDzCgtlHfydD755evrUE=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1d:72:cf:94:19:4e:29:3a:46:a6:4e:c2:73:de:93:b9:18:24:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Oct 20 04:16:40 2025 GMT Not After : Oct 23 13:00:40 2025 GMT Subject: CN=CD04101BDC29E239A6E1A73DB82A945BFF136D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:ab:25:ec:84:03:f3:57:16:f9:0f:e5:2d: c6:90:75:57:6b:ab:8c:86:b6:21:69:5f:dd:d1:b5: c6:87:b5:4e:55:5c:d3:fd:22:9a:fc:10:8d:7a:63: da:87:40:2c:4d:3c:65:3f:08:d2:5b:2e:1d:a3:e0: ba:fe:73:ff:b9:de:12:71:6a:77:25:8a:62:e3:c2: c9:71:32:da:e7:6c:22:dd:06:b4:17:6e:7f:69:c4: 8c:4e:76:02:57:b1:c4:1d:f8:70:18:6d:21:4a:d3: ac:c5:c4:5b:aa:cf:06:33:fb:ae:ca:59:93:5c:07: 14:fb:a6:16:0c:04:f6:75:4e:c4:e9:88:e7:f3:85: bf:e3:52:e6:80:f9:8d:36:0d:99:62:44:3d:fe:b2: c8:65:90:d2:a0:63:76:99:82:d2:76:11:c6:d5:4b: b0:12:6a:67:a0:9e:46:fc:94:65:75:76:52:9a:5c: 5c:ab:70:fc:a9:ef:3c:08:c5:28:d6:b2:b8:c0:c8: 55:c0:ca:15:f6:b5:c0:0a:d1:1c:d0:16:a3:a7:ae: 3e:7d:8c:66:de:ba:ec:29:83:50:21:7e:9f:12:dc: 1f:7c:58:78:5e:b8:d7:88:f6:bc:75:4d:76:fc:cb: 5d:4d:6b:dd:9d:70:93:b6:04:53:27:b2:97:29:2f: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:10:1B:DC:29:E2:39:A6:E1:A7:3D:B8:2A:94:5B:FF:13:6D:04 X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d6:cb:48:91:f8:60:3e:4c:85:0a:23:0f:ed:cf:01:41:1c: c4:de:7b:a2:97:ac:5f:57:98:ce:fe:8a:d7:0f:63:b0:04:e7: 86:ec:f0:23:57:4c:27:23:34:e2:59:6a:57:5d:3a:a9:2a:f4: 39:1e:61:e6:15:b0:c0:ab:e0:5d:db:95:ce:38:19:b7:9a:e7: 7b:c5:80:71:c5:7d:0e:b8:72:3f:3d:00:af:4b:e4:d1:60:b8: 4c:74:0b:bd:0a:a1:1d:04:d9:83:07:ea:78:6d:f4:d3:b1:61: 04:2a:d5:4c:f3:39:1c:10:22:ac:0b:40:7f:92:8f:73:65:57: 49:7b:76:c0:39:94:55:41:3d:38:54:db:ea:a0:23:84:1d:d7: c8:aa:35:e4:5d:7b:47:78:85:44:1b:23:53:6f:b3:1b:fe:42: 13:7c:f7:a0:41:c8:23:d4:4d:ca:ef:f4:53:86:eb:78:06:0c: 30:8d:19:83:8f:2e:37:a5:bf:09:d4:e9:2a:72:e5:d7:3f:63: e6:38:75:66:84:d8:79:9e:6b:1f:a1:66:81:dd:dd:17:93:6d: 8b:f1:78:b9:09:4d:ea:79:95:99:3a:a8:1f:88:d2:01:bc:d5: 99:a5:81:92:8b:e6:01:43:c9:1d:3b:a7:99:48:35:b9:e4:b3: fa:da:c3:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPR1yz5QZTik6RqZOwnPek7kYJHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNTEwMjAwNDE2NDBaFw0yNTEwMjMxMzAwNDBaMDMxMTAvBgNV BAMTKENEMDQxMDFCREMyOUUyMzlBNkUxQTczREI4MkE5NDVCRkYxMzZEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEKsl7IQD81cW+Q/lLcaQdVdr q4yGtiFpX93RtcaHtU5VXNP9Ipr8EI16Y9qHQCxNPGU/CNJbLh2j4Lr+c/+53hJx anclimLjwslxMtrnbCLdBrQXbn9pxIxOdgJXscQd+HAYbSFK06zFxFuqzwYz+67K WZNcBxT7phYMBPZ1TsTpiOfzhb/jUuaA+Y02DZliRD3+sshlkNKgY3aZgtJ2EcbV S7ASamegnkb8lGV1dlKaXFyrcPyp7zwIxSjWsrjAyFXAyhX2tcAK0RzQFqOnrj59 jGbeuuwpg1Ahfp8S3B98WHheuNeI9rx1TXb8y11Na92dcJO2BFMnspcpL0qzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQQQG9wp4jmm4ac9uCqUW/8TbQQwHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7Wy0iR+GA+TIUKIw/tzwFBHMTee6KXrF9X mM7+itcPY7AE54bs8CNXTCcjNOJZalddOqkq9DkeYeYVsMCr4F3blc44Gbea53vF gHHFfQ64cj89AK9L5NFguEx0C70KoR0E2YMH6nht9NOxYQQq1UzzORwQIqwLQH+S j3NlV0l7dsA5lFVBPThU2+qgI4Qd18iqNeRde0d4hUQbI1Nvsxv+QhN896BByCPU Tcrv9FOG63gGDDCNGYOPLjelvwnU6Spy5dc/Y+Y4dWaE2Hmeax+hZoHd3ReTbYvx eLkJTep5lZk6qB+I0gG81ZmlgZKL5gFDyR07p5lINbnks/raw6k= -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:35 2025 by rpki-client