$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: fc2mUYyG63r9pmLbIOR/r6+XZseBIr6EsNNYIvGdx/o= Subject key identifier: 13:49:EB:85:94:2A:72:5C:3E:C4:7D:18:71:88:56:AE:67:ED:4A:DB Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 1C6120EA128724F03F58BEBE5B34AE5F6129D57F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02DD Signing time: Mon 20 Oct 2025 08:52:23 +0000 Manifest this update: Mon 20 Oct 2025 08:47:23 +0000 Manifest next update: Thu 23 Oct 2025 15:43:23 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=) 2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=) 3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: k+4An1J3pE7o4xssprCU6VrFNvowCuHfpVA8KDZxMrc=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 15:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:61:20:ea:12:87:24:f0:3f:58:be:be:5b:34:ae:5f:61:29:d5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Oct 20 08:47:23 2025 GMT Not After : Oct 23 15:43:23 2025 GMT Subject: CN=1349EB85942A725C3EC47D18718856AE67ED4ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:97:a2:0e:1c:47:d8:6b:c2:ff:4a:4a:d9: cd:28:b3:ed:70:d4:09:6d:87:d3:76:44:fb:d0:fb: 03:25:48:5d:1a:48:d3:a2:28:4f:0d:fa:2e:5c:ee: 0b:12:db:de:b8:c2:0c:57:1a:3a:ff:4c:94:18:00: 7d:62:d7:87:99:e0:15:d9:15:71:e6:9c:9b:5a:1b: 16:71:4d:da:27:e0:93:d9:f9:42:bb:4e:90:2b:90: ab:5a:06:3a:19:88:92:8a:44:ce:77:43:15:df:88: 86:79:40:61:d2:73:e7:bc:51:36:9b:e1:d6:0c:cf: 10:76:bb:da:ac:8a:a3:bf:6f:e8:e6:bc:87:b3:7d: d7:3b:78:98:6b:be:86:fe:ae:98:75:1d:d1:32:a2: 0a:03:04:01:71:38:8b:08:0c:d0:1d:e5:95:e0:66: 08:cd:69:72:d1:98:e7:49:54:6a:44:1d:1f:e9:f9: f1:63:9f:09:c2:c6:54:58:f4:fd:10:8c:81:1c:22: f3:4c:96:db:47:3d:61:59:92:a0:a9:1b:c9:99:d0: f9:8f:cc:c9:b8:8c:d1:19:cf:ed:fc:c8:f2:fb:8b: 26:0a:7d:f3:d0:93:54:5a:7c:ec:1b:00:16:42:d4: 38:85:0b:27:06:2d:87:6e:3c:df:c3:5b:4a:27:f3: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:EB:85:94:2A:72:5C:3E:C4:7D:18:71:88:56:AE:67:ED:4A:DB X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:87:d8:b0:18:15:6e:78:08:af:83:43:6b:1a:ee:1d:33:f1: 80:45:9f:e8:fa:04:27:fa:64:d3:d2:07:1a:ad:9f:b4:75:de: 32:78:f1:d9:94:97:8f:ea:c5:2e:a2:9f:a0:7e:10:63:6e:d2: 49:96:ee:a8:44:60:b7:b6:8d:0f:ff:0a:55:90:62:17:5c:49: 2a:61:b4:08:43:c9:1c:9e:ec:29:7a:8f:dd:f2:d3:ca:84:ee: 77:4a:ed:6b:9e:e5:ab:80:25:7c:fc:61:09:08:79:ce:e5:70: 54:82:f9:b8:3b:9d:04:0b:f7:3a:5d:3f:a4:11:4b:62:4c:a1: c8:10:3f:55:f4:87:9a:c3:8e:58:d8:c9:66:32:a7:0c:94:81: b7:7e:3f:86:9c:e6:19:cc:0d:ca:b5:20:35:f3:7f:d1:e7:bd: b5:ac:80:81:c5:f2:f7:b9:d3:ad:5c:07:30:c2:26:da:5b:3b: 8b:83:c1:df:db:e2:01:fd:b0:1a:0b:a0:b1:f4:22:c3:85:f7: eb:8b:f3:62:3a:03:a1:56:1d:37:8a:ed:ae:41:40:99:8d:f3: 68:e4:6f:35:9f:98:eb:ba:8a:1d:5b:4d:26:03:78:ef:39:99: 21:2e:5d:03:31:88:e7:62:a5:75:14:a9:db:cc:25:8c:d5:f1: ab:cd:51:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGEg6hKHJPA/WL6+WzSuX2Ep1X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTEwMjAwODQ3MjNaFw0yNTEwMjMxNTQzMjNaMDMxMTAvBgNV BAMTKDEzNDlFQjg1OTQyQTcyNUMzRUM0N0QxODcxODg1NkFFNjdFRDRBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/5eiDhxH2GvC/0pK2c0os+1w 1Alth9N2RPvQ+wMlSF0aSNOiKE8N+i5c7gsS2964wgxXGjr/TJQYAH1i14eZ4BXZ FXHmnJtaGxZxTdon4JPZ+UK7TpArkKtaBjoZiJKKRM53QxXfiIZ5QGHSc+e8UTab 4dYMzxB2u9qsiqO/b+jmvIezfdc7eJhrvob+rph1HdEyogoDBAFxOIsIDNAd5ZXg ZgjNaXLRmOdJVGpEHR/p+fFjnwnCxlRY9P0QjIEcIvNMlttHPWFZkqCpG8mZ0PmP zMm4jNEZz+38yPL7iyYKffPQk1RafOwbABZC1DiFCycGLYduPN/DW0on80gtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0nrhZQqclw+xH0YcYhWrmftStswHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmH2LAYFW54CK+DQ2sa7h0z8YBFn+j6BCf6 ZNPSBxqtn7R13jJ48dmUl4/qxS6in6B+EGNu0kmW7qhEYLe2jQ//ClWQYhdcSSph tAhDyRye7Cl6j93y08qE7ndK7Wue5auAJXz8YQkIec7lcFSC+bg7nQQL9zpdP6QR S2JMocgQP1X0h5rDjljYyWYypwyUgbd+P4ac5hnMDcq1IDXzf9HnvbWsgIHF8ve5 061cBzDCJtpbO4uDwd/b4gH9sBoLoLH0IsOF9+uL82I6A6FWHTeK7a5BQJmN82jk bzWfmOu6ih1bTSYDeO85mSEuXQMxiOdipXUUqdvMJYzV8avNUQQ= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:14 2025 by rpki-client