$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: CU+a3VJuXnNYuwUQZ7lboEJChx8QVzrUOzUHprVwlPk= Subject key identifier: 43:67:17:A9:B1:67:94:9A:AB:B5:36:70:06:04:7D:50:3A:5F:DE:A0 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 1C03C1194B409BCB45AF1D9506294313939D180B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0381 Signing time: Sun 19 Oct 2025 23:01:40 +0000 Manifest this update: Sun 19 Oct 2025 22:56:40 +0000 Manifest next update: Wed 22 Oct 2025 23:07:40 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: XFhw/llUBGV28MW8pd+MyBLiyhf33bkuSHFnF0X6aTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:03:c1:19:4b:40:9b:cb:45:af:1d:95:06:29:43:13:93:9d:18:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Oct 19 22:56:40 2025 GMT Not After : Oct 22 23:07:40 2025 GMT Subject: CN=436717A9B167949AABB5367006047D503A5FDEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:ca:0a:5e:12:2a:23:cc:08:2d:15:71:98: 15:f4:5b:d8:56:6a:f8:d4:85:28:48:d5:55:db:df: 51:00:b3:80:6b:4a:44:e2:6b:d0:ea:6e:e0:a0:10: dc:93:c7:09:b1:37:36:94:ab:da:ab:e8:04:14:ec: 04:14:d1:e0:be:78:00:e1:1d:de:a1:bf:85:59:7c: 6c:b6:e6:94:63:30:df:7d:da:e3:25:15:e2:f7:7a: 83:75:49:82:89:6a:c1:be:9e:dd:05:54:bb:b1:72: b9:76:27:31:6e:00:9b:c2:88:88:77:6a:7e:91:57: e9:c7:ab:3c:60:82:ce:e9:58:2d:ad:19:1b:6d:30: bb:95:97:31:1a:5b:d2:e6:86:d9:ba:a2:d4:df:c1: 7f:85:5e:67:86:22:ee:c9:bd:46:56:ca:0b:49:7c: 07:90:93:11:16:9a:f6:f3:35:4c:5a:54:d4:c8:30: 07:7c:5c:77:a4:c8:3f:7e:67:d6:0d:64:81:24:5a: 69:d6:20:2e:f8:49:0e:8a:a9:0d:4b:f5:3e:e1:6d: a3:d0:b3:19:51:28:cb:44:9d:69:e4:05:6f:fd:2c: 7d:69:2b:7b:e3:13:63:83:46:c6:bb:e6:38:47:5a: e2:74:f7:7f:5b:0c:73:de:89:3e:d9:1f:16:be:bc: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:17:A9:B1:67:94:9A:AB:B5:36:70:06:04:7D:50:3A:5F:DE:A0 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1b:15:94:be:c3:6d:12:13:73:09:30:96:5e:e5:3e:ea:54: a4:c9:05:83:a2:db:70:8a:dd:90:85:a3:99:41:0a:58:68:d3: 2b:bd:26:0b:3f:f2:33:a4:8b:cc:49:45:9e:53:50:d9:2c:a4: f2:ea:d0:e6:75:88:f4:0c:c2:eb:53:1c:5f:58:9f:fa:f8:a0: ff:bc:52:23:8d:f7:4f:7d:81:df:de:7f:b9:2a:19:c4:fe:59: cc:16:ba:e3:7d:6e:04:87:c7:23:a2:2a:d5:02:7e:2e:b0:19: 8a:57:a5:ad:7a:fe:d9:16:7c:c3:e0:38:36:1b:2a:0f:93:98: 13:6c:43:03:61:0d:e7:c4:62:48:5f:73:0d:c6:6c:6b:f6:6e: 70:f5:4a:4d:43:a4:8b:fa:0a:19:32:cd:95:10:c4:da:b2:67: f1:76:58:99:7e:ab:86:43:c9:2c:be:a6:e9:41:4d:f2:63:cc: 4c:d3:32:2b:3e:e2:24:d0:23:6d:69:20:90:6a:3d:6f:d0:e3: a3:46:eb:2c:56:f3:5a:51:09:94:ce:67:41:22:0a:5b:2e:17: 36:37:01:21:ed:26:10:6c:a2:5f:37:8f:b7:29:1e:89:7b:5f: bc:c8:02:8a:3d:64:0f:a9:78:75:e6:95:a4:09:38:d3:d4:9c: 96:76:48:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAPBGUtAm8tFrx2VBilDE5OdGAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTEwMTkyMjU2NDBaFw0yNTEwMjIyMzA3NDBaMDMxMTAvBgNV BAMTKDQzNjcxN0E5QjE2Nzk0OUFBQkI1MzY3MDA2MDQ3RDUwM0E1RkRFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgH8oKXhIqI8wILRVxmBX0W9hW avjUhShI1VXb31EAs4BrSkTia9DqbuCgENyTxwmxNzaUq9qr6AQU7AQU0eC+eADh Hd6hv4VZfGy25pRjMN992uMlFeL3eoN1SYKJasG+nt0FVLuxcrl2JzFuAJvCiIh3 an6RV+nHqzxggs7pWC2tGRttMLuVlzEaW9Lmhtm6otTfwX+FXmeGIu7JvUZWygtJ fAeQkxEWmvbzNUxaVNTIMAd8XHekyD9+Z9YNZIEkWmnWIC74SQ6KqQ1L9T7hbaPQ sxlRKMtEnWnkBW/9LH1pK3vjE2ODRsa75jhHWuJ0939bDHPeiT7ZHxa+vIt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2cXqbFnlJqrtTZwBgR9UDpf3qAwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUbFZS+w20SE3MJMJZe5T7qVKTJBYOi23CK 3ZCFo5lBClho0yu9Jgs/8jOki8xJRZ5TUNkspPLq0OZ1iPQMwutTHF9Yn/r4oP+8 UiON9099gd/ef7kqGcT+WcwWuuN9bgSHxyOiKtUCfi6wGYpXpa16/tkWfMPgODYb Kg+TmBNsQwNhDefEYkhfcw3GbGv2bnD1Sk1DpIv6ChkyzZUQxNqyZ/F2WJl+q4ZD ySy+pulBTfJjzEzTMis+4iTQI21pIJBqPW/Q46NG6yxW81pRCZTOZ0EiClsuFzY3 ASHtJhBsol83j7cpHol7X7zIAoo9ZA+peHXmlaQJONPUnJZ2SMU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:20 2025 by rpki-client