$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: 7hPwoyPXKNuiHKV7I7Mz03k1ru34tDqUVTlH+PAtVdQ= Subject key identifier: 19:2E:CB:0D:83:3A:69:43:29:0C:D2:CB:9B:F7:D0:6B:AF:6E:4F:9E Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 7738CF4D87258B5B8EBF42606F6AB81AB2603EFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 013C Signing time: Sat 18 Oct 2025 19:00:48 +0000 Manifest this update: Sat 18 Oct 2025 18:55:48 +0000 Manifest next update: Wed 22 Oct 2025 05:30:48 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: GVGLfM4gLx2n9mthD7MVIDmxFVvOqCXQih3jl9fWnnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:38:cf:4d:87:25:8b:5b:8e:bf:42:60:6f:6a:b8:1a:b2:60:3e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Oct 18 18:55:48 2025 GMT Not After : Oct 22 05:30:48 2025 GMT Subject: CN=192ECB0D833A6943290CD2CB9BF7D06BAF6E4F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:90:02:96:64:67:9b:b7:35:7e:60:57:59: 09:31:a8:65:ef:e0:c1:b1:d5:2d:25:08:59:f7:4c: e1:58:5d:0f:9c:a7:cd:18:25:22:fa:6a:24:fd:c2: d2:aa:5a:30:f9:f0:ef:f3:1c:0a:52:6b:40:0b:d6: 08:ee:03:0a:7b:14:ff:f7:df:82:2d:7a:6b:13:b9: 10:b2:eb:cf:4f:3f:b4:37:2c:ea:e4:ca:a0:52:41: 88:e7:4f:f6:a3:cb:4d:7e:73:59:f5:13:dc:0a:6e: 94:e3:78:1a:a3:9d:5a:24:0e:57:25:4e:2d:5e:63: 86:dd:7d:cd:eb:c2:1a:21:22:05:d6:e1:da:56:39: 94:5d:43:7a:e7:4f:4d:62:58:a0:d6:94:49:ab:91: 72:d2:1b:eb:e8:12:22:8c:5d:79:cf:53:9a:e3:04: 8c:66:39:79:f2:46:a3:22:bd:fc:a6:f8:be:65:95: 03:8a:96:7d:82:a8:5d:5a:b6:e7:ac:40:93:a6:06: df:cb:43:e9:66:b5:40:7b:d5:6f:19:5c:2c:df:fc: c7:15:1f:2a:fb:74:61:8d:ad:43:68:1f:39:28:6b: 22:c1:a6:85:36:fa:43:13:d1:c7:db:4b:a4:fa:16: a2:27:93:bd:b1:e9:f4:36:2e:c9:90:15:3c:bb:e0: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:CB:0D:83:3A:69:43:29:0C:D2:CB:9B:F7:D0:6B:AF:6E:4F:9E X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:ee:13:d8:68:d2:25:e5:2d:cc:32:fc:90:f9:6a:99:5c: 1f:74:95:8d:c8:6a:fc:fe:c5:48:32:2d:23:c4:bc:0c:52:b9: 65:14:de:63:2c:a4:2b:a9:49:bc:8c:5c:84:74:b7:ab:7e:d2: b8:1b:dd:d4:36:2c:cb:08:8a:e9:9c:bf:34:72:06:db:eb:cd: a1:0a:97:b5:77:e6:4e:07:f8:f4:a5:4b:82:6c:fd:fd:eb:cf: 7f:21:19:3f:11:b0:0c:72:37:b5:05:f2:82:55:7c:ec:cc:8e: 8d:8c:6f:34:9f:70:41:0c:5a:f0:e7:06:6f:a4:da:8c:5b:88: 90:48:61:3d:61:00:83:d0:41:06:69:45:e3:2a:b9:c1:53:34: be:10:2c:32:e9:b1:60:10:c4:53:5b:51:6f:75:ef:9c:ef:eb: b6:53:fe:af:c8:be:4f:9a:9d:c4:48:6b:ff:80:bd:f7:66:f1: 14:21:24:20:de:ad:f3:56:4c:75:78:11:7c:8c:9a:c8:8c:52: 10:87:cd:69:3a:42:8c:fa:49:b3:11:25:95:48:c3:45:07:f3: ce:96:ba:31:54:b1:d8:23:8b:11:86:83:f1:47:94:07:93:55: d2:30:33:05:02:b5:69:cd:b7:2c:76:dc:fb:52:b8:cb:9c:23: ff:c0:4e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzjPTYcli1uOv0Jgb2q4GrJgPv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTEwMTgxODU1NDhaFw0yNTEwMjIwNTMwNDhaMDMxMTAvBgNV BAMTKDE5MkVDQjBEODMzQTY5NDMyOTBDRDJDQjlCRjdEMDZCQUY2RTRGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAZAClmRnm7c1fmBXWQkxqGXv 4MGx1S0lCFn3TOFYXQ+cp80YJSL6aiT9wtKqWjD58O/zHApSa0AL1gjuAwp7FP/3 34ItemsTuRCy689PP7Q3LOrkyqBSQYjnT/ajy01+c1n1E9wKbpTjeBqjnVokDlcl Ti1eY4bdfc3rwhohIgXW4dpWOZRdQ3rnT01iWKDWlEmrkXLSG+voEiKMXXnPU5rj BIxmOXnyRqMivfym+L5llQOKln2CqF1atuesQJOmBt/LQ+lmtUB71W8ZXCzf/McV Hyr7dGGNrUNoHzkoayLBpoU2+kMT0cfbS6T6FqInk72x6fQ2LsmQFTy74OJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGS7LDYM6aUMpDNLLm/fQa69uT54wHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0p7hPYaNIl5S3MMvyQ+WqZXB90lY3Iavz+ xUgyLSPEvAxSuWUU3mMspCupSbyMXIR0t6t+0rgb3dQ2LMsIiumcvzRyBtvrzaEK l7V35k4H+PSlS4Js/f3rz38hGT8RsAxyN7UF8oJVfOzMjo2MbzSfcEEMWvDnBm+k 2oxbiJBIYT1hAIPQQQZpReMqucFTNL4QLDLpsWAQxFNbUW9175zv67ZT/q/Ivk+a ncRIa/+Avfdm8RQhJCDerfNWTHV4EXyMmsiMUhCHzWk6Qoz6SbMRJZVIw0UH886W ujFUsdgjixGGg/FHlAeTVdIwMwUCtWnNtyx23PtSuMucI//ATqE= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:35 2025 by rpki-client