$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: ig1qI9U3T2hsYRzNQjqxqM0iyJLwpgxLcmtqSiCZfeE= Subject key identifier: 5A:1E:48:28:C1:F3:1D:1A:5C:DB:85:42:AB:91:8C:32:74:C2:80:3C Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 4849218BC9C2C91BEBB7C83E21D8F80B1426CD34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: 010B Signing time: Sun 19 Oct 2025 01:22:18 +0000 Manifest this update: Sun 19 Oct 2025 01:17:18 +0000 Manifest next update: Wed 22 Oct 2025 06:26:18 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: yy7R1D3pDsraFTUMG4AVg1n0EEunvS4IRWZyxduf8Tw=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:21:8b:c9:c2:c9:1b:eb:b7:c8:3e:21:d8:f8:0b:14:26:cd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Oct 19 01:17:18 2025 GMT Not After : Oct 22 06:26:18 2025 GMT Subject: CN=5A1E4828C1F31D1A5CDB8542AB918C3274C2803C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:76:20:9e:86:5a:88:a3:1d:71:5f:ef:a7: 01:10:ba:4f:8d:9a:fa:d7:33:0d:e9:57:7c:56:96: d5:53:31:e1:54:ba:8d:b2:0a:d5:8f:5c:87:13:1b: 37:c3:2a:a9:dd:8f:e2:55:f7:14:e4:cb:cd:cb:6a: 83:ad:9b:6e:99:c3:94:86:bc:0d:fd:1b:3c:aa:7d: 2b:6f:44:df:43:35:a4:8e:a0:c5:91:29:e6:00:26: e0:e4:ac:24:a5:47:1e:75:24:d2:a8:13:cb:76:71: a6:55:90:bf:60:6d:e1:be:80:35:0e:60:09:08:60: 1f:f9:91:bc:3b:3c:b6:22:78:07:bd:5f:d3:85:4c: ad:32:84:c6:21:1b:b5:31:a6:8f:87:45:7d:2f:98: f8:60:5a:68:b1:04:17:67:af:78:a6:36:75:b8:7a: e0:24:5a:1e:3f:30:a6:8a:fe:52:1a:bf:f3:df:d6: 6d:39:e9:39:ae:af:a6:5b:eb:a7:2f:b0:0a:01:48: ed:6f:75:04:b6:59:a2:50:22:fb:27:14:ba:da:b4: 5f:8b:f6:85:e4:16:33:82:93:34:dd:86:30:d8:67: 98:4b:65:8d:97:2f:32:f1:0c:58:dc:fc:ba:35:04: a1:31:3b:73:05:bb:d6:fd:2b:32:88:0b:3a:d0:af: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:48:28:C1:F3:1D:1A:5C:DB:85:42:AB:91:8C:32:74:C2:80:3C X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f2:3b:a9:5e:b5:b5:36:36:04:16:54:9e:ad:fb:8f:b0:16: 88:ae:36:5d:f5:59:ad:a8:6c:77:b3:9f:75:60:4f:c3:2d:02: f6:6b:f9:40:71:78:34:a2:a8:7c:a7:95:ee:10:07:ed:2c:21: ad:66:91:e0:db:d5:bb:10:75:16:c7:73:55:9e:0c:36:93:64: cb:61:30:05:bb:3e:82:0c:28:dd:4d:c4:c3:ee:49:c2:c6:ae: 27:3c:40:d6:79:96:17:ab:a2:59:0a:e3:17:69:81:5e:58:16: f9:c6:04:4f:e9:09:a5:50:92:0a:b8:37:7f:fa:b3:69:6e:ac: 74:b8:93:c2:a0:30:99:97:20:24:09:32:12:1a:cf:81:d8:a4: cb:b6:1d:a8:c8:6d:ab:08:a5:83:97:f1:6a:dd:82:20:28:1a: fa:bc:8d:8d:f3:c7:6d:3d:96:82:c2:14:93:5c:70:9c:72:b5: c0:ca:09:3f:4a:9f:62:d8:a7:84:74:9b:dc:bd:3b:2b:2c:ca: ed:e3:50:3f:c0:d8:30:ab:55:8b:1e:4b:64:ff:e1:a0:02:48: 93:7e:1e:8f:c1:1a:94:45:fc:23:d1:0b:01:d0:a6:dd:67:ad: b4:fd:06:64:29:ef:b8:dd:2c:66:97:86:fd:f8:8f:11:ea:d1: c8:44:8b:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEkhi8nCyRvrt8g+Idj4CxQmzTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTEwMTkwMTE3MThaFw0yNTEwMjIwNjI2MThaMDMxMTAvBgNV BAMTKDVBMUU0ODI4QzFGMzFEMUE1Q0RCODU0MkFCOTE4QzMyNzRDMjgwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2XYgnoZaiKMdcV/vpwEQuk+N mvrXMw3pV3xWltVTMeFUuo2yCtWPXIcTGzfDKqndj+JV9xTky83LaoOtm26Zw5SG vA39GzyqfStvRN9DNaSOoMWRKeYAJuDkrCSlRx51JNKoE8t2caZVkL9gbeG+gDUO YAkIYB/5kbw7PLYieAe9X9OFTK0yhMYhG7Uxpo+HRX0vmPhgWmixBBdnr3imNnW4 euAkWh4/MKaK/lIav/Pf1m056Tmur6Zb66cvsAoBSO1vdQS2WaJQIvsnFLratF+L 9oXkFjOCkzTdhjDYZ5hLZY2XLzLxDFjc/Lo1BKExO3MFu9b9KzKICzrQr+qxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWh5IKMHzHRpc24VCq5GMMnTCgDwwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXyO6letbU2NgQWVJ6t+4+wFoiuNl31Wa2o bHezn3VgT8MtAvZr+UBxeDSiqHynle4QB+0sIa1mkeDb1bsQdRbHc1WeDDaTZMth MAW7PoIMKN1NxMPuScLGric8QNZ5lherolkK4xdpgV5YFvnGBE/pCaVQkgq4N3/6 s2lurHS4k8KgMJmXICQJMhIaz4HYpMu2HajIbasIpYOX8WrdgiAoGvq8jY3zx209 loLCFJNccJxytcDKCT9Kn2LYp4R0m9y9Oyssyu3jUD/A2DCrVYseS2T/4aACSJN+ Ho/BGpRF/CPRCwHQpt1nrbT9BmQp77jdLGaXhv34jxHq0chEi2U= -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:46 2025 by rpki-client