$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: 13nrMSYAmQQV3ZD0u2aZLLUe2gzR11bLytzG0AUVQnY= Subject key identifier: AF:8E:79:0D:A4:9D:56:3F:D2:FD:D8:7A:09:A7:97:F6:CD:1F:4E:00 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 34F622E6D1854ADB1AE7B59998DE3AC3384C5497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0505 Signing time: Sat 18 Oct 2025 14:52:08 +0000 Manifest this update: Sat 18 Oct 2025 14:47:08 +0000 Manifest next update: Tue 21 Oct 2025 22:42:08 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: sNstioAUZIhvIxXO7Lq7+AokDJ1CWTsuRE3usvFWT+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f6:22:e6:d1:85:4a:db:1a:e7:b5:99:98:de:3a:c3:38:4c:54:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Oct 18 14:47:08 2025 GMT Not After : Oct 21 22:42:08 2025 GMT Subject: CN=AF8E790DA49D563FD2FDD87A09A797F6CD1F4E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:4e:e5:92:dd:a5:0c:fe:9b:70:79:31:4b: 66:cb:9b:8d:d9:a0:0a:2a:07:26:2c:de:ad:6c:24: b9:ce:78:3c:19:7e:38:0d:f2:c3:e0:8f:3d:51:e9: 42:f4:8f:47:bb:08:4d:ad:c1:6c:46:95:0d:e7:4a: 98:88:c5:a0:b0:13:c8:05:e9:d4:e7:e2:4a:47:db: 77:36:f7:ce:a5:86:57:77:65:16:23:4d:4c:69:a9: 1c:54:30:d6:16:66:06:10:ea:57:5c:21:38:6a:6a: 96:8b:13:63:ed:b0:e8:5a:a5:1c:c3:96:03:3d:04: 8b:fb:24:80:c2:58:6f:06:e0:59:25:fa:4f:f9:ea: 67:96:fc:19:3c:8e:e9:cc:94:ad:58:37:ef:12:cf: 62:32:29:a8:0e:42:01:07:f2:b3:38:1e:30:e4:a1: bd:21:d8:9d:00:e1:e4:df:06:27:76:4d:2d:b4:a7: 6f:8d:db:e4:df:5a:b5:07:1a:9c:cb:90:6c:24:29: 47:66:48:95:3c:58:59:8c:de:97:f7:40:8d:ba:35: df:35:69:02:8f:98:0d:3e:63:10:60:16:e4:ca:e1: 92:88:fd:be:4f:eb:ba:09:e3:19:69:3f:cd:e1:10: 45:fd:d0:bc:82:ef:19:d1:7d:69:81:59:b3:14:84: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:79:0D:A4:9D:56:3F:D2:FD:D8:7A:09:A7:97:F6:CD:1F:4E:00 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:93:2f:d2:85:eb:f1:95:b6:46:37:bf:9c:fc:25:58:92:07: a6:61:cd:50:44:5b:1c:ff:c1:90:de:7e:ef:ef:20:fa:a6:14: b1:75:67:67:9b:86:76:57:4c:74:a1:c6:28:3b:5f:9c:47:cf: a0:34:58:fd:e7:92:9b:31:6a:99:a6:24:7a:01:7f:5e:be:af: 8d:89:d4:48:dc:0f:cc:0c:22:90:f1:fd:da:b7:7a:68:00:23: 97:c1:c1:d6:43:51:66:86:e2:18:70:33:37:67:b3:24:88:14: 5a:a8:15:a1:06:59:e2:71:69:6c:55:68:60:eb:0f:49:23:da: da:42:b7:70:3d:75:db:b5:2e:e1:9e:b0:a8:b6:fe:2b:a7:11: c6:36:d3:96:f9:ef:79:07:ee:ec:4d:87:89:0d:0b:40:32:1f: 85:29:7d:1e:7a:ce:d5:a6:9a:a5:7e:6a:c6:10:d2:e9:61:be: d8:a7:74:0f:36:78:6b:59:85:94:c8:ad:a7:c6:d7:13:51:d3: 37:7d:c5:07:40:90:47:7f:79:90:10:f1:b4:b2:c9:22:3d:6a: 10:b7:17:2d:83:94:d9:c2:f1:7d:73:73:2b:63:80:d2:cd:88: db:19:0c:08:62:2d:3c:64:a0:10:31:f5:ee:2d:b7:32:46:a9: e1:c6:47:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPYi5tGFStsa57WZmN46wzhMVJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTEwMTgxNDQ3MDhaFw0yNTEwMjEyMjQyMDhaMDMxMTAvBgNV BAMTKEFGOEU3OTBEQTQ5RDU2M0ZEMkZERDg3QTA5QTc5N0Y2Q0QxRjRFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwU7lkt2lDP6bcHkxS2bLm43Z oAoqByYs3q1sJLnOeDwZfjgN8sPgjz1R6UL0j0e7CE2twWxGlQ3nSpiIxaCwE8gF 6dTn4kpH23c2986lhld3ZRYjTUxpqRxUMNYWZgYQ6ldcIThqapaLE2PtsOhapRzD lgM9BIv7JIDCWG8G4Fkl+k/56meW/Bk8junMlK1YN+8Sz2IyKagOQgEH8rM4HjDk ob0h2J0A4eTfBid2TS20p2+N2+TfWrUHGpzLkGwkKUdmSJU8WFmM3pf3QI26Nd81 aQKPmA0+YxBgFuTK4ZKI/b5P67oJ4xlpP83hEEX90LyC7xnRfWmBWbMUhAmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr455DaSdVj/S/dh6CaeX9s0fTgAwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmTL9KF6/GVtkY3v5z8JViSB6ZhzVBEWxz/ wZDefu/vIPqmFLF1Z2ebhnZXTHShxig7X5xHz6A0WP3nkpsxapmmJHoBf16+r42J 1EjcD8wMIpDx/dq3emgAI5fBwdZDUWaG4hhwMzdnsySIFFqoFaEGWeJxaWxVaGDr D0kj2tpCt3A9ddu1LuGesKi2/iunEcY205b573kH7uxNh4kNC0AyH4UpfR56ztWm mqV+asYQ0ulhvtindA82eGtZhZTIrafG1xNR0zd9xQdAkEd/eZAQ8bSyySI9ahC3 Fy2DlNnC8X1zcytjgNLNiNsZDAhiLTxkoBAx9e4ttzJGqeHGRyY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:56 2025 by rpki-client