$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: NSDvymoolGewDAnscYnHFCTXEHEGBCNEhjn5TQoLasM= Subject key identifier: 49:AC:DA:03:99:A0:56:7D:93:15:34:2A:99:FA:E1:F9:5E:60:09:F9 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 3A9BC1CED08375339B11059574BB697313E23535 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: BD Signing time: Sat 18 Oct 2025 21:41:09 +0000 Manifest this update: Sat 18 Oct 2025 21:36:09 +0000 Manifest next update: Wed 22 Oct 2025 07:19:09 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: eCUllVxtP3DvebhUYsxzMtm07FwU1fs2pdoQB2HDjvw=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9b:c1:ce:d0:83:75:33:9b:11:05:95:74:bb:69:73:13:e2:35:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Oct 18 21:36:09 2025 GMT Not After : Oct 22 07:19:09 2025 GMT Subject: CN=49ACDA0399A0567D9315342A99FAE1F95E6009F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:59:14:69:85:12:90:db:db:9d:3d:1f:76: e4:2c:72:77:41:f4:8a:a1:51:f8:8d:f2:04:03:7f: 95:15:47:dd:e3:6b:a1:be:1c:38:82:dc:dc:b0:c4: c2:b2:8b:0e:7f:97:a3:c4:d3:a8:2e:98:16:30:53: aa:28:ed:5b:7a:04:14:03:95:6f:26:e7:01:a0:87: 2b:59:f3:d8:80:f0:81:d8:a1:cd:87:73:32:38:92: d8:39:21:8d:7b:99:1d:5d:f6:7a:8d:07:99:2f:e0: 13:88:54:29:33:0a:08:47:9f:8b:65:36:07:3e:10: 81:7f:20:33:c1:b8:31:54:98:af:11:bf:bc:0c:d5: 93:08:0c:dd:9c:27:66:64:5b:68:be:6f:ac:42:65: 9b:29:97:5b:0a:ae:af:55:38:f1:88:b1:62:f3:8a: 75:a7:4d:7e:17:23:48:e4:59:81:90:48:36:d7:3d: 06:1b:f4:9f:46:07:f0:c7:9a:10:c9:93:6c:67:e5: 3e:fb:6a:37:eb:86:f1:c6:76:26:bc:d8:26:17:40: ec:a3:26:d5:97:c6:70:7c:2d:47:d0:f3:36:52:67: de:f9:7b:ac:1a:6e:3f:e0:97:ad:84:27:5f:e4:b7: 48:0e:6f:c3:e1:06:57:54:cd:25:75:6c:f7:0f:30: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AC:DA:03:99:A0:56:7D:93:15:34:2A:99:FA:E1:F9:5E:60:09:F9 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e6:bb:a1:b8:12:46:69:09:83:99:b1:23:d4:4f:b8:ec:09: 8c:36:c5:cf:6a:38:24:50:7a:f2:97:9f:d0:67:96:09:75:30: 2c:ee:74:22:67:3d:27:19:df:36:15:59:ee:cd:38:15:cc:52: 96:c9:29:32:46:b9:f4:44:89:9b:5d:77:2e:e9:69:47:3f:ee: 45:92:12:18:07:05:f1:db:43:45:3b:e8:fa:80:8b:89:e7:f6: 64:bc:c6:61:0b:1b:9a:9e:7b:3a:fc:c8:a6:10:26:cf:89:da: fb:a8:a1:7e:d7:fb:14:54:63:b9:77:1f:45:29:67:01:32:c2: 4a:cf:12:a0:6b:85:22:1b:a7:44:ce:d8:ff:9d:0d:cb:55:3a: 62:cf:25:bf:0a:a6:9f:68:3b:a5:0d:a2:88:d7:c8:58:9e:0c: 6c:0f:38:07:13:ea:1d:d2:68:50:3e:90:f0:39:01:73:9e:72: e4:8d:31:8b:ac:19:6e:c5:18:ec:a5:2e:a5:59:28:02:34:c9: 52:fd:14:33:a7:44:f1:c6:d2:03:b0:65:8e:e5:8b:4a:82:74: 75:b9:20:74:bf:7c:81:ac:bf:83:84:8c:e3:3a:7b:2f:30:b5: 6a:74:09:d5:c0:61:2f:13:9d:a5:61:fd:92:55:17:2f:b1:50: 20:61:38:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpvBztCDdTObEQWVdLtpcxPiNTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTEwMTgyMTM2MDlaFw0yNTEwMjIwNzE5MDlaMDMxMTAvBgNV BAMTKDQ5QUNEQTAzOTlBMDU2N0Q5MzE1MzQyQTk5RkFFMUY5NUU2MDA5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWlkUaYUSkNvbnT0fduQscndB 9IqhUfiN8gQDf5UVR93ja6G+HDiC3NywxMKyiw5/l6PE06gumBYwU6oo7Vt6BBQD lW8m5wGghytZ89iA8IHYoc2HczI4ktg5IY17mR1d9nqNB5kv4BOIVCkzCghHn4tl Ngc+EIF/IDPBuDFUmK8Rv7wM1ZMIDN2cJ2ZkW2i+b6xCZZspl1sKrq9VOPGIsWLz inWnTX4XI0jkWYGQSDbXPQYb9J9GB/DHmhDJk2xn5T77ajfrhvHGdia82CYXQOyj JtWXxnB8LUfQ8zZSZ975e6wabj/gl62EJ1/kt0gOb8PhBldUzSV1bPcPMFSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSazaA5mgVn2TFTQqmfrh+V5gCfkwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDmu6G4EkZpCYOZsSPUT7jsCYw2xc9qOCRQ evKXn9Bnlgl1MCzudCJnPScZ3zYVWe7NOBXMUpbJKTJGufREiZtddy7paUc/7kWS EhgHBfHbQ0U76PqAi4nn9mS8xmELG5qeezr8yKYQJs+J2vuooX7X+xRUY7l3H0Up ZwEywkrPEqBrhSIbp0TO2P+dDctVOmLPJb8Kpp9oO6UNoojXyFieDGwPOAcT6h3S aFA+kPA5AXOecuSNMYusGW7FGOylLqVZKAI0yVL9FDOnRPHG0gOwZY7li0qCdHW5 IHS/fIGsv4OEjOM6ey8wtWp0CdXAYS8TnaVh/ZJVFy+xUCBhODw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:03 2025 by rpki-client