$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: 55Gg8oYxHi16cZVAgHiEdioDGvK5yNllRXl6NM7LDns= Subject key identifier: 30:66:0B:E8:DF:F6:B2:18:6A:54:1F:3D:C0:D7:16:E4:11:2F:52:58 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 4BA7ACBD9C83549313A92EE8CF3B1DA77ED444AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 0218 Signing time: Sat 18 Oct 2025 04:52:01 +0000 Manifest this update: Sat 18 Oct 2025 04:47:01 +0000 Manifest next update: Tue 21 Oct 2025 10:33:01 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: bkZtGUnIRXJNW6ugxZWQ36sRhP+opstOnCClR1bXgd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:ac:bd:9c:83:54:93:13:a9:2e:e8:cf:3b:1d:a7:7e:d4:44:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Oct 18 04:47:01 2025 GMT Not After : Oct 21 10:33:01 2025 GMT Subject: CN=30660BE8DFF6B2186A541F3DC0D716E4112F5258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:50:42:65:60:2a:ae:1c:31:2c:3d:d6:ef: 7e:20:d9:de:5d:c6:83:2a:c8:75:c7:c9:37:51:ff: 69:b4:c7:c9:0a:a8:16:b8:a0:fd:a1:5f:c3:7c:8b: 1b:c5:92:e3:1f:da:89:31:d1:f0:77:16:85:6f:10: 66:33:64:cc:ec:3d:e2:bc:b1:74:d0:7f:43:51:71: 4d:31:4b:97:d7:0d:00:57:cc:79:cc:b7:20:41:85: 12:22:13:85:74:a0:a8:df:19:74:d1:ac:e0:3c:8d: a9:29:4c:e1:8e:97:7a:60:fb:5f:d1:d1:ff:34:2b: 65:24:fd:74:69:a5:f2:e1:24:77:93:f4:e1:1c:0e: d1:63:02:51:12:bf:ae:73:95:60:1c:2d:a8:90:97: af:4c:08:55:ab:36:63:a1:f9:90:38:7d:20:c2:3d: 26:56:14:1e:aa:bd:d9:f2:c1:fb:47:7e:16:81:ad: 1a:ae:16:69:97:a3:5d:80:a1:d3:b9:4e:d3:32:29: 19:f9:40:0a:14:e6:e1:d9:3a:c3:cd:65:19:fa:22: a5:62:8f:1a:e6:c5:8e:98:e5:2f:c8:ce:1d:60:de: 3a:69:77:22:a3:5c:80:5a:4b:5d:50:9a:36:04:e3: 73:02:0d:e2:e1:1f:db:99:68:67:47:55:30:ac:24: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:66:0B:E8:DF:F6:B2:18:6A:54:1F:3D:C0:D7:16:E4:11:2F:52:58 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ba:22:a4:05:09:78:89:0a:8c:74:05:26:02:b3:a8:70:be: ab:13:85:6b:fe:a4:87:ec:bf:98:92:60:af:e0:8a:13:a9:dd: da:5a:fb:7c:79:c3:5e:52:a8:10:b0:52:30:c1:a8:5d:84:27: e7:7d:79:7c:0b:bf:7b:1b:58:f5:a6:f7:69:f5:d6:10:0b:3e: 56:b7:93:e1:f9:a8:92:31:d4:f6:fa:0c:c4:28:61:d4:98:27: 65:68:ec:90:d5:ce:c4:f9:e9:64:c9:4a:39:d5:c9:22:ca:cd: 18:85:2c:96:4f:55:2f:4f:1c:cb:31:e7:d2:44:db:e6:da:c9: 9f:36:1c:79:ab:d4:cd:9e:37:94:13:c0:d2:57:c3:da:2f:28: 9f:98:a6:a7:f2:6c:c3:ae:0c:0d:45:2a:33:77:63:5d:6e:2e: 83:8c:99:55:ce:9c:1c:2d:ed:dc:33:01:11:98:53:45:9e:a7: 52:98:55:4c:20:82:75:d0:1b:4d:75:89:dc:a7:4b:8a:8a:d0: c0:72:aa:7f:0d:12:6f:23:f2:86:26:c3:8f:61:9b:4e:0e:2e: 1c:62:43:f9:c3:6c:f7:e4:eb:3b:ae:93:3f:dc:91:5a:4c:69: ce:46:1e:e8:2a:84:c2:f1:7f:d4:87:98:1e:23:88:d7:8f:a5: 61:b3:98:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6esvZyDVJMTqS7ozzsdp37URKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTEwMTgwNDQ3MDFaFw0yNTEwMjExMDMzMDFaMDMxMTAvBgNV BAMTKDMwNjYwQkU4REZGNkIyMTg2QTU0MUYzREMwRDcxNkU0MTEyRjUyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm11BCZWAqrhwxLD3W734g2d5d xoMqyHXHyTdR/2m0x8kKqBa4oP2hX8N8ixvFkuMf2okx0fB3FoVvEGYzZMzsPeK8 sXTQf0NRcU0xS5fXDQBXzHnMtyBBhRIiE4V0oKjfGXTRrOA8jakpTOGOl3pg+1/R 0f80K2Uk/XRppfLhJHeT9OEcDtFjAlESv65zlWAcLaiQl69MCFWrNmOh+ZA4fSDC PSZWFB6qvdnywftHfhaBrRquFmmXo12AodO5TtMyKRn5QAoU5uHZOsPNZRn6IqVi jxrmxY6Y5S/Izh1g3jppdyKjXIBaS11QmjYE43MCDeLhH9uZaGdHVTCsJJ3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGYL6N/2shhqVB89wNcW5BEvUlgwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS6IqQFCXiJCox0BSYCs6hwvqsThWv+pIfs v5iSYK/gihOp3dpa+3x5w15SqBCwUjDBqF2EJ+d9eXwLv3sbWPWm92n11hALPla3 k+H5qJIx1Pb6DMQoYdSYJ2Vo7JDVzsT56WTJSjnVySLKzRiFLJZPVS9PHMsx59JE 2+bayZ82HHmr1M2eN5QTwNJXw9ovKJ+YpqfybMOuDA1FKjN3Y11uLoOMmVXOnBwt 7dwzARGYU0Wep1KYVUwggnXQG011idynS4qK0MByqn8NEm8j8oYmw49hm04OLhxi Q/nDbPfk6zuukz/ckVpMac5GHugqhMLxf9SHmB4jiNePpWGzmKM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:24 2025 by rpki-client