$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: Ds4rqEv9jHmmcstkUf7pk5aTEcoDHeE3Pz38Uj/LJSo= Subject key identifier: B9:05:97:BE:48:BA:25:10:6B:B1:95:68:28:62:AD:CB:0C:E1:C6:1A Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 47BB3C86B972C35A8B7F4AB94B2173B654B97B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0490 Signing time: Sun 19 Oct 2025 10:50:47 +0000 Manifest this update: Sun 19 Oct 2025 10:45:47 +0000 Manifest next update: Wed 22 Oct 2025 12:51:47 +0000 Files and hashes: 1: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=) 2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=) 3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=) 4: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: aKPQKeiFFGPO+d6AfAVzIcKRNKXXrbOECXn4UW/TVjM=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bb:3c:86:b9:72:c3:5a:8b:7f:4a:b9:4b:21:73:b6:54:b9:7b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Oct 19 10:45:47 2025 GMT Not After : Oct 22 12:51:47 2025 GMT Subject: CN=B90597BE48BA25106BB195682862ADCB0CE1C61A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:d8:77:2f:2f:d6:94:81:95:5e:cb:fe:10: aa:7b:80:44:52:9d:1d:63:b2:14:24:d7:ad:3c:a9: 24:07:54:b9:ae:37:43:bf:75:03:ff:6f:51:1f:0c: fa:ac:b5:fa:0c:0f:d7:80:2c:bf:03:4f:90:42:b6: 8d:d7:62:2f:f5:43:7f:73:5d:89:69:14:26:a4:6b: 6a:36:65:fc:6f:d3:ca:b5:98:f1:d2:70:d5:19:8e: 7a:47:e4:ea:ef:80:08:52:9b:65:5e:c6:0b:be:63: 97:76:a5:9f:2a:6a:9e:24:01:d6:48:f4:6a:ec:97: 94:5a:15:06:db:c5:8d:ee:44:39:a4:6b:6b:7c:a1: 3e:14:d6:6c:32:28:cb:99:ad:61:7a:b9:8a:11:07: 85:ae:40:3b:ab:17:cd:f6:61:df:b0:da:8b:8e:a9: 27:26:75:98:dd:e4:05:7d:3b:18:1b:f5:9f:fc:c5: eb:3a:0a:f7:62:cd:c0:a8:8e:79:8d:4e:30:7d:eb: 3c:a1:ba:85:77:28:15:d6:e7:fe:61:2e:9d:b5:8f: 55:d9:d8:3a:b8:19:ed:b6:20:23:41:de:5b:28:29: 09:ed:46:19:7a:e6:6f:62:d1:91:6d:08:46:ae:53: e5:a7:f9:55:89:74:76:b2:6f:eb:29:6a:16:97:e4: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:97:BE:48:BA:25:10:6B:B1:95:68:28:62:AD:CB:0C:E1:C6:1A X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bc:0c:c3:17:12:3f:1c:7d:64:a0:ff:a5:85:80:2f:ea:9b: d6:9d:f0:94:ae:af:c9:69:89:9e:89:0c:8a:89:98:96:04:88: 4c:25:8f:af:44:72:d8:26:00:8f:1a:cd:62:81:de:09:48:b5: 8c:1a:32:1a:58:14:c2:9f:b2:8e:af:12:99:5f:c1:f0:89:e9: 96:fc:47:32:83:e2:e2:43:9d:1e:cf:a3:b6:25:11:f1:0b:96: 61:62:15:44:3a:70:23:d8:68:b3:e7:da:79:34:ca:cb:ea:0e: fe:56:e2:84:b9:90:97:eb:58:32:e7:c0:e7:17:a4:cd:13:31: ca:d7:ef:dc:4d:98:81:37:87:d2:94:c7:4f:bf:0f:cb:1c:0c: 5d:67:0e:26:56:85:3b:4f:f2:1d:a5:41:a4:d8:b5:c1:67:71: 58:7a:33:23:4e:25:04:5c:67:7c:55:e8:e3:df:4c:38:b8:d5: 3c:38:8e:6c:c4:94:92:1a:d9:b6:97:a8:41:8e:d8:c9:f5:4e: 8b:ba:ed:1b:02:9c:2a:d0:51:ad:ae:a4:d1:40:75:bf:6d:f1: 6a:a4:0f:a3:bf:91:34:b9:fe:73:a4:b1:cd:0b:f2:52:82:18: c5:42:77:83:57:5c:3e:96:2f:16:23:68:d9:8c:d9:5d:14:32: ec:07:03:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7s8hrlyw1qLf0q5SyFztlS5ey4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTEwMTkxMDQ1NDdaFw0yNTEwMjIxMjUxNDdaMDMxMTAvBgNV BAMTKEI5MDU5N0JFNDhCQTI1MTA2QkIxOTU2ODI4NjJBRENCMENFMUM2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoth3Ly/WlIGVXsv+EKp7gERS nR1jshQk1608qSQHVLmuN0O/dQP/b1EfDPqstfoMD9eALL8DT5BCto3XYi/1Q39z XYlpFCaka2o2Zfxv08q1mPHScNUZjnpH5OrvgAhSm2Vexgu+Y5d2pZ8qap4kAdZI 9Grsl5RaFQbbxY3uRDmka2t8oT4U1mwyKMuZrWF6uYoRB4WuQDurF832Yd+w2ouO qScmdZjd5AV9Oxgb9Z/8xes6CvdizcCojnmNTjB96zyhuoV3KBXW5/5hLp21j1XZ 2Dq4Ge22ICNB3lsoKQntRhl65m9i0ZFtCEauU+Wn+VWJdHayb+spahaX5CYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQWXvki6JRBrsZVoKGKtywzhxhowHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS8DMMXEj8cfWSg/6WFgC/qm9ad8JSur8lp iZ6JDIqJmJYEiEwlj69EctgmAI8azWKB3glItYwaMhpYFMKfso6vEplfwfCJ6Zb8 RzKD4uJDnR7Po7YlEfELlmFiFUQ6cCPYaLPn2nk0ysvqDv5W4oS5kJfrWDLnwOcX pM0TMcrX79xNmIE3h9KUx0+/D8scDF1nDiZWhTtP8h2lQaTYtcFncVh6MyNOJQRc Z3xV6OPfTDi41Tw4jmzElJIa2baXqEGO2Mn1Tou67RsCnCrQUa2upNFAdb9t8Wqk D6O/kTS5/nOksc0L8lKCGMVCd4NXXD6WLxYjaNmM2V0UMuwHA0c= -----END CERTIFICATE-----Generated at Tue Oct 21 08:59:59 2025 by rpki-client