$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: 6MKwJ4YVD7TX/UpQmhoAcwDuEXHeVjH3SElzkf2fnb4= Subject key identifier: 50:AC:DB:F5:70:D5:D0:12:DA:D2:73:87:D8:5B:6A:E4:B7:02:B0:65 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 78255C210C8AA61DCBFDB8DC43D931DB6BFAFAE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: D3 Signing time: Sat 18 Oct 2025 13:10:56 +0000 Manifest this update: Sat 18 Oct 2025 13:05:56 +0000 Manifest next update: Tue 21 Oct 2025 21:34:56 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 5BPvGFoiqeYxfJDMnOvRo2bu5FjjJSxhBrNX+u+N7ac=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:25:5c:21:0c:8a:a6:1d:cb:fd:b8:dc:43:d9:31:db:6b:fa:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Oct 18 13:05:56 2025 GMT Not After : Oct 21 21:34:56 2025 GMT Subject: CN=50ACDBF570D5D012DAD27387D85B6AE4B702B065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:f2:b1:b1:2e:68:84:52:98:17:a8:b5:eb: bf:be:19:7d:0a:06:d3:66:ac:23:2e:b5:d4:41:15: cf:b7:bc:2e:78:0f:6e:33:04:81:4c:d7:29:ba:84: d0:e0:4e:09:40:86:1c:d6:3b:04:59:2b:ec:0a:ac: d2:be:12:b0:2e:67:fb:af:3e:82:7e:69:3a:07:62: 65:02:79:d8:95:85:eb:87:23:3e:b4:01:78:02:9e: 34:7c:24:b7:85:14:0d:82:13:2d:ce:85:0c:17:cb: a9:07:c5:2d:b8:3f:55:b3:d6:63:c1:00:f9:c9:82: ca:03:c6:73:72:88:16:85:c2:9d:4d:66:c3:a5:c9: 18:31:71:c0:ad:36:6d:01:b3:65:00:39:1e:b1:fc: 7d:37:56:0a:df:98:16:be:31:d1:6a:7d:5a:b1:30: ee:20:71:c0:8d:07:34:bb:d9:bb:61:86:64:a8:27: 96:6d:6a:64:21:4e:36:c0:86:a8:6a:c7:d0:98:a1: 1d:8c:68:ba:f5:66:52:d0:4b:00:50:2d:e7:4c:be: c9:4b:72:c4:86:56:48:61:94:9e:89:4f:2d:c3:33: 85:ee:9f:b4:ce:58:09:e5:d2:4d:9a:33:8e:74:d6: 00:21:3e:78:70:14:0c:75:2d:27:2c:c9:4f:8c:d8: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AC:DB:F5:70:D5:D0:12:DA:D2:73:87:D8:5B:6A:E4:B7:02:B0:65 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:20:0f:28:9f:48:db:4a:24:d5:44:a5:99:53:6f:6f:e1:a5: 26:61:0b:64:9d:fd:64:8f:b1:a4:4d:30:f9:55:5e:82:86:50: da:71:b8:71:d1:87:c8:a4:5c:6a:b2:6d:e5:8c:6c:9a:8c:12: 3e:bc:65:b2:a7:6d:5c:98:20:f0:90:9a:68:2f:1b:1e:bc:2b: da:2f:36:f6:4e:93:01:83:10:1a:da:b2:84:7a:30:25:c7:61: 1a:ef:5f:f8:36:f5:34:63:ac:29:62:03:9e:f5:3b:d3:d2:21: 75:a4:08:82:66:39:a9:ce:af:89:e0:04:2c:a2:e5:8d:a9:81: 7e:b1:fa:73:ef:3f:5c:7b:13:72:d4:77:16:f8:79:5a:37:ce: 14:db:47:92:52:ce:7f:1d:40:39:bc:04:7a:3b:8a:22:53:1a: b4:a5:1b:eb:95:d6:cc:b4:f7:6d:63:04:b3:b5:09:e6:de:f8: 4e:d2:0f:d1:37:59:a4:2f:44:98:ef:f2:76:33:92:be:92:08: b6:1c:c6:4d:1b:78:9a:e8:ba:22:fe:95:a7:79:a6:a7:7f:80: e3:5b:3d:63:1a:b8:28:cd:ea:8c:cf:07:72:19:61:01:68:c9: 06:f5:78:c3:19:2e:88:9b:64:7e:7f:38:c6:c7:33:39:06:39: 15:66:6e:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCVcIQyKph3L/bjcQ9kx22v6+uAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTEwMTgxMzA1NTZaFw0yNTEwMjEyMTM0NTZaMDMxMTAvBgNV BAMTKDUwQUNEQkY1NzBENUQwMTJEQUQyNzM4N0Q4NUI2QUU0QjcwMkIwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvfKxsS5ohFKYF6i167++GX0K BtNmrCMutdRBFc+3vC54D24zBIFM1ym6hNDgTglAhhzWOwRZK+wKrNK+ErAuZ/uv PoJ+aToHYmUCediVheuHIz60AXgCnjR8JLeFFA2CEy3OhQwXy6kHxS24P1Wz1mPB APnJgsoDxnNyiBaFwp1NZsOlyRgxccCtNm0Bs2UAOR6x/H03VgrfmBa+MdFqfVqx MO4gccCNBzS72bthhmSoJ5ZtamQhTjbAhqhqx9CYoR2MaLr1ZlLQSwBQLedMvslL csSGVkhhlJ6JTy3DM4Xun7TOWAnl0k2aM4501gAhPnhwFAx1LScsyU+M2FApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKzb9XDV0BLa0nOH2Ftq5LcCsGUwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMgDyifSNtKJNVEpZlTb2/hpSZhC2Sd/WSP saRNMPlVXoKGUNpxuHHRh8ikXGqybeWMbJqMEj68ZbKnbVyYIPCQmmgvGx68K9ov NvZOkwGDEBrasoR6MCXHYRrvX/g29TRjrCliA571O9PSIXWkCIJmOanOr4ngBCyi 5Y2pgX6x+nPvP1x7E3LUdxb4eVo3zhTbR5JSzn8dQDm8BHo7iiJTGrSlG+uV1sy0 921jBLO1Cebe+E7SD9E3WaQvRJjv8nYzkr6SCLYcxk0beJrouiL+lad5pqd/gONb PWMauCjN6ozPB3IZYQFoyQb1eMMZLoibZH5/OMbHMzkGORVmbus= -----END CERTIFICATE-----Generated at Mon Oct 20 16:28:01 2025 by rpki-client