$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: Kh5UqFbjlTWlwKvuRnnKa0WQxLZrydwwi4d1hgqrD3k= Subject key identifier: BA:A8:F9:8B:9E:F2:93:A6:1F:A9:56:0E:3C:0E:F8:F1:35:0D:6F:A4 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 637F71B64D35DC358FE33ED1B3182FE1ABAB770D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0222 Signing time: Sun 19 Oct 2025 23:40:38 +0000 Manifest this update: Sun 19 Oct 2025 23:35:38 +0000 Manifest next update: Thu 23 Oct 2025 10:34:38 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: ABz4+ieycTzqpu9QW246cZutI2OwZvtiVEn2rAv2HR0=) 2: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 3: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 4: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7f:71:b6:4d:35:dc:35:8f:e3:3e:d1:b3:18:2f:e1:ab:ab:77:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Oct 19 23:35:38 2025 GMT Not After : Oct 23 10:34:38 2025 GMT Subject: CN=BAA8F98B9EF293A61FA9560E3C0EF8F1350D6FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:c0:48:5f:e8:1e:2b:9d:05:b0:d9:c8:bb: 35:2c:47:4c:08:59:27:2b:6e:e1:88:9d:5f:4f:6f: 52:f9:b9:b1:6c:b1:c3:59:7b:c8:8d:ad:c2:3a:a1: fd:a8:16:dd:24:fe:2b:f0:2b:36:22:88:e1:cd:8d: dd:f9:d9:0a:b9:d9:4e:66:d0:b6:38:18:de:6f:26: 87:ef:ad:12:8c:5c:9a:07:19:a6:13:73:70:fb:67: 01:79:59:b3:fc:51:14:1b:78:90:fb:a3:f4:ff:bf: 4f:89:51:c8:b7:89:cf:37:fd:5d:a9:28:fa:76:85: 68:fc:75:2f:2b:57:81:b4:65:05:21:ac:cb:17:ec: 50:82:6f:a5:ff:35:2a:5d:e2:1c:a8:82:3a:a2:a9: f3:16:1e:40:4d:fd:8d:cf:09:ae:b4:25:86:b8:aa: cd:f1:4a:93:b6:1e:98:20:15:e0:72:71:cf:a9:11: e6:c8:64:b5:93:d6:2f:b2:3c:80:1e:53:04:b1:ea: 9e:1a:4e:24:27:9a:18:31:5d:ee:68:34:f0:da:ac: 14:f5:3b:46:7d:2e:fe:ae:6a:66:e3:56:12:7d:c9: 39:f4:25:fc:8e:71:e0:59:92:df:fb:0f:a4:33:bb: ca:ab:f4:2f:21:0e:51:b5:c6:65:15:59:28:6c:1c: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A8:F9:8B:9E:F2:93:A6:1F:A9:56:0E:3C:0E:F8:F1:35:0D:6F:A4 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ed:6c:d7:f8:71:9e:7b:23:ca:dc:97:9b:c0:21:1d:33:14: ca:0b:e6:23:0f:1c:86:8e:6d:62:19:0b:95:d4:1b:10:28:59: 31:39:ff:e4:07:b9:bb:86:18:66:77:df:52:87:d3:cf:3b:d7: cf:29:ae:80:5c:2a:98:16:3f:bd:f0:81:77:ec:95:65:3e:54: e6:04:93:a4:b9:b4:d6:fd:df:97:5c:eb:2d:64:08:36:f3:5e: dc:2c:7e:1b:18:08:63:7f:dd:ab:e5:75:a8:d1:a9:35:a5:d5: 27:86:bd:9d:40:88:1b:01:7a:d1:65:38:a7:78:9a:aa:65:a7: 6d:e3:39:c6:f3:6b:96:c6:f7:fb:15:cd:c0:e3:62:28:89:31: 07:e7:6d:3f:6a:40:50:b9:15:c8:a0:99:6f:96:5c:58:19:57: 93:3c:3a:c7:c1:56:72:62:94:96:90:03:d9:1b:ce:e1:eb:9f: 29:a6:b7:e6:f2:79:17:b0:96:76:c3:69:84:7a:42:c6:d2:79: d6:4b:93:a0:8f:8b:af:78:fe:44:c4:ca:9c:0b:2f:45:81:f9: 09:f3:f4:79:63:b4:6e:ef:81:68:be:2f:77:67:a6:e7:ab:c8: 70:fa:72:9f:c0:b1:e9:d4:ab:cd:e9:5e:62:4d:01:8b:76:f1: a4:ba:79:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY39xtk013DWP4z7Rsxgv4aurdw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTEwMTkyMzM1MzhaFw0yNTEwMjMxMDM0MzhaMDMxMTAvBgNV BAMTKEJBQThGOThCOUVGMjkzQTYxRkE5NTYwRTNDMEVGOEYxMzUwRDZGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSsBIX+geK50FsNnIuzUsR0wI WScrbuGInV9Pb1L5ubFsscNZe8iNrcI6of2oFt0k/ivwKzYiiOHNjd352Qq52U5m 0LY4GN5vJofvrRKMXJoHGaYTc3D7ZwF5WbP8URQbeJD7o/T/v0+JUci3ic83/V2p KPp2hWj8dS8rV4G0ZQUhrMsX7FCCb6X/NSpd4hyogjqiqfMWHkBN/Y3PCa60JYa4 qs3xSpO2HpggFeBycc+pEebIZLWT1i+yPIAeUwSx6p4aTiQnmhgxXe5oNPDarBT1 O0Z9Lv6uambjVhJ9yTn0JfyOceBZkt/7D6Qzu8qr9C8hDlG1xmUVWShsHM6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqj5i57yk6YfqVYOPA748TUNb6QwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLtbNf4cZ57I8rcl5vAIR0zFMoL5iMPHIaO bWIZC5XUGxAoWTE5/+QHubuGGGZ331KH0887188proBcKpgWP73wgXfslWU+VOYE k6S5tNb935dc6y1kCDbzXtwsfhsYCGN/3avldajRqTWl1SeGvZ1AiBsBetFlOKd4 mqplp23jOcbza5bG9/sVzcDjYiiJMQfnbT9qQFC5FcigmW+WXFgZV5M8OsfBVnJi lJaQA9kbzuHrnymmt+byeRewlnbDaYR6QsbSedZLk6CPi694/kTEypwLL0WB+Qnz 9HljtG7vgWi+L3dnpueryHD6cp/AsenUq83pXmJNAYt28aS6eUM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:52:02 2025 by rpki-client