$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: E6vMcLs7LRIcqnOkMc+VhloHU50xxjhQ+bVxqrG8yFk= Subject key identifier: C1:30:4F:A0:F2:96:C7:C7:E2:48:9E:9F:B4:59:34:AD:3D:F5:6E:09 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 21A843D40D6EDDD95F41A1CC7378B039EF7ED8B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 17:31:36 +0000 Manifest this update: Sun 19 Oct 2025 17:26:36 +0000 Manifest next update: Wed 22 Oct 2025 19:20:36 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: RQyi01q1Jm+AwOfXpoht14UIgTYE/1I8hNrJ+Mpq1k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a8:43:d4:0d:6e:dd:d9:5f:41:a1:cc:73:78:b0:39:ef:7e:d8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Oct 19 17:26:36 2025 GMT Not After : Oct 22 19:20:36 2025 GMT Subject: CN=C1304FA0F296C7C7E2489E9FB45934AD3DF56E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:62:33:3c:60:76:90:be:5d:46:6f:17:9d: 32:c7:9e:04:ab:9a:21:36:5c:8d:7b:c7:40:43:14: 67:dc:2b:25:61:c1:19:24:71:a1:21:44:cc:42:48: dc:5e:cc:14:f8:44:33:ad:1a:b5:6d:08:00:67:af: 36:64:c7:65:1e:58:a1:70:55:16:55:d4:67:ed:e7: a6:e6:de:36:d2:4c:a2:24:96:7c:1b:75:62:e7:87: fc:d1:9e:6d:9f:48:73:83:d9:a8:14:23:34:8f:a3: c8:04:75:b7:1a:d2:7c:d3:e2:8b:94:af:c0:40:e5: 92:e5:28:5d:61:06:da:78:ad:d0:6f:a3:56:60:67: 4f:bb:d3:66:4a:33:ee:72:ec:56:bb:11:65:c4:57: a5:0b:75:00:d7:9d:e0:fc:d1:5a:ed:a6:f0:1f:8b: 22:96:24:32:9f:6c:80:04:74:c8:e2:77:be:c4:e9: c9:b7:73:f6:bf:95:1e:f6:73:1b:37:4a:97:2d:da: a4:c0:1b:11:b9:da:8b:d7:02:53:a6:1c:17:53:9f: f0:3c:0b:82:3d:46:ad:9a:1a:8e:b4:18:86:e0:53: e6:c1:09:01:a5:20:6f:ea:07:69:2b:2c:ad:76:84: 3e:2f:52:e6:ae:79:65:69:68:6d:a1:0a:b4:49:ac: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:4F:A0:F2:96:C7:C7:E2:48:9E:9F:B4:59:34:AD:3D:F5:6E:09 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:75:60:89:8c:50:83:cc:6d:f5:16:22:4f:c7:b7:27:19:d0: 6f:ec:cf:62:f4:8f:d9:bc:79:df:a1:97:e3:20:66:fa:f2:5e: 94:a2:4b:9c:1a:d7:a5:ae:b6:69:45:23:6e:b2:d6:9a:22:bd: 3c:a3:23:1c:ec:55:a3:3f:f6:da:4b:d4:33:eb:ef:3b:d8:6d: e1:a4:f6:33:0c:54:57:6c:42:b7:5c:92:ae:e9:3e:4e:9a:38: 6f:bd:bc:83:39:ff:51:40:f6:38:a5:31:6b:de:81:cc:85:70: e0:3b:df:54:71:a2:ea:6d:c8:cd:39:90:b8:65:24:3d:6e:02: 71:ce:71:8b:49:a0:90:59:c7:39:d8:0d:7e:42:be:6f:3e:60: ac:95:2e:fd:dc:c2:66:43:36:81:cd:49:20:19:20:be:64:23: 4a:a9:cd:c4:66:6c:68:29:4f:1b:99:cb:ab:03:14:31:21:c8: 78:c6:a7:18:8d:2c:9a:b0:db:c5:76:0b:b2:3b:c7:29:7f:74: 6b:55:c1:d0:75:76:d9:48:2c:ae:ef:53:3c:20:58:32:31:e6: 0e:65:3f:11:f4:d5:d8:1e:b8:94:f6:33:65:45:87:20:ea:c7: 04:ca:0a:f0:cc:9f:03:24:74:8f:56:25:2e:8e:9e:d6:af:86: 17:2c:42:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIahD1A1u3dlfQaHMc3iwOe9+2LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTEwMTkxNzI2MzZaFw0yNTEwMjIxOTIwMzZaMDMxMTAvBgNV BAMTKEMxMzA0RkEwRjI5NkM3QzdFMjQ4OUU5RkI0NTkzNEFEM0RGNTZFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZWIzPGB2kL5dRm8XnTLHngSr miE2XI17x0BDFGfcKyVhwRkkcaEhRMxCSNxezBT4RDOtGrVtCABnrzZkx2UeWKFw VRZV1Gft56bm3jbSTKIklnwbdWLnh/zRnm2fSHOD2agUIzSPo8gEdbca0nzT4ouU r8BA5ZLlKF1hBtp4rdBvo1ZgZ0+702ZKM+5y7Fa7EWXEV6ULdQDXneD80VrtpvAf iyKWJDKfbIAEdMjid77E6cm3c/a/lR72cxs3Spct2qTAGxG52ovXAlOmHBdTn/A8 C4I9Rq2aGo60GIbgU+bBCQGlIG/qB2krLK12hD4vUuaueWVpaG2hCrRJrMfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTBPoPKWx8fiSJ6ftFk0rT31bgkwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx1YImMUIPMbfUWIk/HtycZ0G/sz2L0j9m8 ed+hl+MgZvryXpSiS5wa16WutmlFI26y1poivTyjIxzsVaM/9tpL1DPr7zvYbeGk 9jMMVFdsQrdckq7pPk6aOG+9vIM5/1FA9jilMWvegcyFcOA731RxouptyM05kLhl JD1uAnHOcYtJoJBZxznYDX5Cvm8+YKyVLv3cwmZDNoHNSSAZIL5kI0qpzcRmbGgp TxuZy6sDFDEhyHjGpxiNLJqw28V2C7I7xyl/dGtVwdB1dtlILK7vUzwgWDIx5g5l PxH01dgeuJT2M2VFhyDqxwTKCvDMnwMkdI9WJS6OntavhhcsQpo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:20 2025 by rpki-client