$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: cvi4giNG7U5uV6Wl32wBsS4qk8MNfXJ/yRBYPbzQ2Lc= Subject key identifier: C7:B4:8E:B5:C2:45:78:39:8C:90:33:D6:E3:22:01:DF:8C:D4:78:30 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 768B28EAF4D27C51815F94CC761A98BE0237E8CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: F1 Signing time: Sun 19 Oct 2025 15:40:57 +0000 Manifest this update: Sun 19 Oct 2025 15:35:57 +0000 Manifest next update: Wed 22 Oct 2025 17:23:57 +0000 Files and hashes: 1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: SYkFC5Wg8V3ee8Y03Zh3X7jmsH1MEKdwxWUF2G1L4Hk=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8b:28:ea:f4:d2:7c:51:81:5f:94:cc:76:1a:98:be:02:37:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Oct 19 15:35:57 2025 GMT Not After : Oct 22 17:23:57 2025 GMT Subject: CN=C7B48EB5C24578398C9033D6E32201DF8CD47830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:e1:c8:e0:e2:4e:62:44:1c:9c:5b:43:c7: 52:a2:09:db:4c:1e:9e:86:ad:42:3f:d9:bd:19:3a: a0:fc:69:f5:b4:59:69:2c:1e:94:16:07:8c:ec:e7: d3:c2:dc:f7:84:3a:da:60:15:ca:e8:7a:50:6c:e0: fe:5b:bc:b4:d9:fc:21:49:34:30:80:e4:ac:e9:f9: 64:9d:87:aa:fb:23:00:a2:ac:f2:a2:20:e2:5e:41: b9:32:49:d1:9a:0a:a1:f3:6a:88:35:33:1b:51:da: d2:37:bd:d4:9e:67:fa:c5:4f:7e:e0:99:5e:20:93: d6:f5:24:7b:da:a6:25:3f:4f:5c:c9:0e:4b:a4:b8: ce:5f:6d:1f:ec:eb:1c:84:9f:0e:b5:8c:b4:e2:c6: ae:f4:92:5a:45:a5:35:a5:07:b4:aa:77:c0:e4:ac: f5:ef:93:0e:1a:b2:5d:f4:14:c3:6c:36:65:db:65: f5:71:35:9b:5f:06:7e:4d:da:9b:11:40:90:f8:26: 03:7c:8a:8c:52:6c:e3:cd:bc:1f:b2:6a:1a:65:b1: d2:b6:ac:9e:21:56:6e:ae:18:49:b0:b8:6d:b6:de: 05:06:95:c8:fd:d6:45:22:5c:fd:5b:a0:40:38:ce: 15:67:51:39:10:59:c7:c3:bf:62:b2:b3:62:26:07: 44:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B4:8E:B5:C2:45:78:39:8C:90:33:D6:E3:22:01:DF:8C:D4:78:30 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:66:b7:80:1e:36:b3:fb:9c:41:7b:ca:79:b5:a5:71:6e: 5e:5f:85:da:b8:e6:66:91:f9:d2:67:a2:c8:2e:44:56:7f:20: 34:39:5b:6a:41:3f:46:d4:32:1a:b3:20:2d:90:d4:da:04:63: 65:b7:da:43:1b:a0:fd:33:aa:a3:fd:18:21:46:96:53:3b:91: e1:ac:5b:b4:34:ab:c8:96:db:04:e8:f9:af:7c:2d:d6:58:87: 9e:19:78:ea:5f:81:52:b7:ec:1d:b1:2a:22:ad:2b:a2:20:0c: 8a:96:0f:c3:96:6c:1c:d3:33:7d:b2:7e:a3:c0:28:94:a4:fb: 05:97:63:26:75:5c:e0:d4:64:44:3d:ca:0b:c0:d9:6a:7d:22: a5:f4:5d:78:d7:fc:6f:01:9e:a8:be:54:8d:13:ee:a5:b4:87: 92:66:75:0b:b7:2c:ed:d0:25:6c:4c:e5:e8:e6:19:1c:36:66: 59:6d:b2:c1:f9:a1:59:78:6c:7d:b6:27:d9:e2:fe:87:ed:f3: 6f:36:4a:cd:b5:53:7f:39:f6:40:73:79:5c:4b:43:b3:6c:f8: bc:a4:66:12:d5:74:7a:d2:f8:6c:75:18:37:18:cc:70:a2:f7: 52:be:22:cc:11:ac:95:a2:a0:74:53:d4:64:5c:dd:85:18:26: 90:07:a1:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoso6vTSfFGBX5TMdhqYvgI36M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTEwMTkxNTM1NTdaFw0yNTEwMjIxNzIzNTdaMDMxMTAvBgNV BAMTKEM3QjQ4RUI1QzI0NTc4Mzk4QzkwMzNENkUzMjIwMURGOENENDc4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdG+HI4OJOYkQcnFtDx1KiCdtM Hp6GrUI/2b0ZOqD8afW0WWksHpQWB4zs59PC3PeEOtpgFcroelBs4P5bvLTZ/CFJ NDCA5Kzp+WSdh6r7IwCirPKiIOJeQbkySdGaCqHzaog1MxtR2tI3vdSeZ/rFT37g mV4gk9b1JHvapiU/T1zJDkukuM5fbR/s6xyEnw61jLTixq70klpFpTWlB7Sqd8Dk rPXvkw4asl30FMNsNmXbZfVxNZtfBn5N2psRQJD4JgN8ioxSbOPNvB+yahplsdK2 rJ4hVm6uGEmwuG223gUGlcj91kUiXP1boEA4zhVnUTkQWcfDv2Kys2ImB0T1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7SOtcJFeDmMkDPW4yIB34zUeDAwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1NZreAHjaz+5xBe8p5taVxbl5fhdq45maR +dJnosguRFZ/IDQ5W2pBP0bUMhqzIC2Q1NoEY2W32kMboP0zqqP9GCFGllM7keGs W7Q0q8iW2wTo+a98LdZYh54ZeOpfgVK37B2xKiKtK6IgDIqWD8OWbBzTM32yfqPA KJSk+wWXYyZ1XODUZEQ9ygvA2Wp9IqX0XXjX/G8Bnqi+VI0T7qW0h5JmdQu3LO3Q JWxM5ejmGRw2ZlltssH5oVl4bH22J9ni/oft8282Ss21U3859kBzeVxLQ7Ns+Lyk ZhLVdHrS+Gx1GDcYzHCi91K+IswRrJWioHRT1GRc3YUYJpAHofM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:27 2025 by rpki-client