$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: Tn+6VnZOqqB4JbpmvfSEQGKKkcgxO65FUJN25Adeq9Y= Subject key identifier: 91:A4:49:4D:B8:B2:6F:33:9C:B5:4E:BA:E0:8D:13:20:B2:0B:25:BA Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 40A0CC0F4ADB795020848417F6AC1FB441049F23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0362 Signing time: Sat 18 Oct 2025 05:50:36 +0000 Manifest this update: Sat 18 Oct 2025 05:45:36 +0000 Manifest next update: Tue 21 Oct 2025 15:49:36 +0000 Files and hashes: 1: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: lYK12PrNcbNhBYba8uVmNjHTcmq8VUQK2r6XrunbmoM=) 2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a0:cc:0f:4a:db:79:50:20:84:84:17:f6:ac:1f:b4:41:04:9f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Oct 18 05:45:36 2025 GMT Not After : Oct 21 15:49:36 2025 GMT Subject: CN=91A4494DB8B26F339CB54EBAE08D1320B20B25BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:ce:27:91:98:cc:93:0a:03:45:f0:05:43: 01:7c:7e:06:fc:8c:66:51:37:1a:8c:27:ec:a3:1d: c8:ba:7f:46:fb:c7:df:f4:ac:a0:e9:08:1a:58:00: 34:38:e4:4c:0b:22:8c:e2:2d:dd:44:c5:3d:63:0f: ca:65:a3:29:64:f3:45:17:15:ac:d0:f8:bb:f3:56: 98:ca:db:99:51:66:bc:01:e2:11:7e:1b:5e:00:29: b1:47:cc:97:c0:d0:30:17:21:ec:ea:c5:0b:a4:ab: 61:be:73:96:7f:a9:18:64:43:f3:98:3c:6d:70:1b: 18:55:ca:88:0c:4c:f1:c2:5c:44:1e:3a:b0:d2:ee: 0d:c8:8a:22:c2:b7:77:29:6c:2b:0d:74:89:ca:54: f1:a5:3d:1b:a8:cc:2f:1d:c6:92:1e:a1:5c:38:bb: 23:6d:22:c2:5a:ad:43:bc:0f:d3:fd:a3:73:ca:c1: 87:1e:e2:61:d0:e6:12:c1:70:2e:e3:26:35:aa:0a: 6d:4e:31:37:e4:7f:be:67:b1:ef:7d:ab:a7:bb:54: 08:79:ba:35:e7:55:50:c6:3c:4a:fc:78:aa:84:b8: ac:43:d2:b8:af:da:c3:64:5d:f0:57:c6:2e:5e:89: be:ef:59:c9:37:44:c5:d4:fc:12:61:44:1e:47:b9: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:49:4D:B8:B2:6F:33:9C:B5:4E:BA:E0:8D:13:20:B2:0B:25:BA X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8c:19:49:c7:da:bb:27:97:61:ee:88:45:a8:94:37:a8:18: 60:95:2b:ce:52:cd:b6:90:fc:73:db:09:21:ad:eb:15:39:39: b4:4c:21:ab:74:14:b9:cf:f6:90:81:14:75:69:e1:51:31:a8: 40:12:b3:99:0d:4f:18:75:fd:34:0d:34:01:a7:be:51:9c:70: 73:37:f2:b8:31:e9:8a:cc:85:8d:a3:1e:48:56:95:01:8f:3a: 3a:05:42:3d:96:7f:40:9e:21:fd:d1:bb:b9:cb:05:87:56:14: 13:63:0b:c3:9f:4e:47:03:e1:59:9c:cd:47:3c:1f:fe:aa:bd: ad:f3:77:dd:73:ba:0e:db:35:2f:a3:b6:25:d6:e3:37:83:42: 38:85:7d:8f:85:66:75:bc:63:65:e8:80:29:98:12:8c:df:f6: a1:f6:c2:81:12:ba:35:e4:d2:24:52:32:53:2e:ae:c3:b1:e0: 59:6c:ca:c8:15:b1:dc:83:e1:11:c6:bd:a8:19:58:90:03:87: 6f:cb:12:f4:9a:22:cf:69:04:8d:60:04:68:b9:86:94:67:bf: 31:ee:70:f0:ac:27:66:1b:70:2c:cf:43:40:05:aa:bf:8e:18: 9c:c8:2d:ac:ba:73:53:ce:d6:62:96:c3:38:78:9b:df:5f:33: 9e:c8:26:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKDMD0rbeVAghIQX9qwftEEEnyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTEwMTgwNTQ1MzZaFw0yNTEwMjExNTQ5MzZaMDMxMTAvBgNV BAMTKDkxQTQ0OTREQjhCMjZGMzM5Q0I1NEVCQUUwOEQxMzIwQjIwQjI1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMm84nkZjMkwoDRfAFQwF8fgb8 jGZRNxqMJ+yjHci6f0b7x9/0rKDpCBpYADQ45EwLIoziLd1ExT1jD8ploylk80UX FazQ+LvzVpjK25lRZrwB4hF+G14AKbFHzJfA0DAXIezqxQukq2G+c5Z/qRhkQ/OY PG1wGxhVyogMTPHCXEQeOrDS7g3IiiLCt3cpbCsNdInKVPGlPRuozC8dxpIeoVw4 uyNtIsJarUO8D9P9o3PKwYce4mHQ5hLBcC7jJjWqCm1OMTfkf75nse99q6e7VAh5 ujXnVVDGPEr8eKqEuKxD0riv2sNkXfBXxi5eib7vWck3RMXU/BJhRB5HuXt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaRJTbiybzOctU664I0TILILJbowHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyMGUnH2rsnl2HuiEWolDeoGGCVK85SzbaQ /HPbCSGt6xU5ObRMIat0FLnP9pCBFHVp4VExqEASs5kNTxh1/TQNNAGnvlGccHM3 8rgx6YrMhY2jHkhWlQGPOjoFQj2Wf0CeIf3Ru7nLBYdWFBNjC8OfTkcD4VmczUc8 H/6qva3zd91zug7bNS+jtiXW4zeDQjiFfY+FZnW8Y2XogCmYEozf9qH2woESujXk 0iRSMlMursOx4FlsysgVsdyD4RHGvagZWJADh2/LEvSaIs9pBI1gBGi5hpRnvzHu cPCsJ2YbcCzPQ0AFqr+OGJzILay6c1PO1mKWwzh4m99fM57IJvA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:54 2025 by rpki-client