$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: DDZGVT0tATigOIGxtKgJYTn5avqG7XXqZxncC6ILvpk= Subject key identifier: 7F:E7:8A:D9:89:42:BD:BE:DE:0D:39:9A:68:D0:C1:2B:A8:C6:EF:F6 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 0E1E7DEDD62D181B7ED69CB9C704D0C459879157 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 0388 Signing time: Sun 19 Oct 2025 05:01:43 +0000 Manifest this update: Sun 19 Oct 2025 04:56:43 +0000 Manifest next update: Wed 22 Oct 2025 13:52:43 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: f/6Q7nF5xzK0nRcMQe5vn9Z0tgMMZ68/jACmwq2uqnY=) 2: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1e:7d:ed:d6:2d:18:1b:7e:d6:9c:b9:c7:04:d0:c4:59:87:91:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Oct 19 04:56:43 2025 GMT Not After : Oct 22 13:52:43 2025 GMT Subject: CN=7FE78AD98942BDBEDE0D399A68D0C12BA8C6EFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:8a:29:b5:25:89:2f:a5:d0:a7:81:30:42: 44:a1:ee:55:0b:18:c7:5d:09:4d:9f:ac:38:56:54: 19:58:34:ea:99:90:20:e5:90:8f:84:66:87:ae:3f: 21:d0:e4:0c:ab:30:f4:2c:09:ef:ee:b2:05:3b:32: b0:b5:76:1e:fe:ee:42:ec:47:59:8c:85:41:4e:5c: 34:90:f3:12:dd:a8:28:66:df:5e:78:b5:52:4a:c9: 6e:d8:9c:e7:5e:d1:00:23:c0:3e:7e:0d:c0:88:15: 06:95:f3:fb:ef:e0:99:e2:b2:f7:3c:df:24:66:a9: 0f:eb:7d:2d:fb:2f:97:04:f8:93:b8:d5:be:90:1a: 95:34:3a:65:24:2e:59:c1:c5:ee:5c:38:3c:11:d0: fd:23:0c:45:04:db:e8:57:7c:2c:f7:27:f5:6f:b6: 1f:8f:6b:46:56:0c:0e:65:7e:29:3d:30:de:22:19: 7d:ca:5f:37:f0:52:db:ec:49:5c:60:4e:93:95:d9: 5a:64:9f:c6:c3:1e:ff:fe:0c:80:40:0c:0d:25:5c: 60:62:56:a9:f6:96:32:06:ce:b6:cc:96:84:a8:38: 96:e7:49:c2:84:06:5e:23:bd:bd:90:ec:33:b9:9f: d3:51:1b:51:aa:0a:f2:5b:4a:44:59:66:95:ca:82: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E7:8A:D9:89:42:BD:BE:DE:0D:39:9A:68:D0:C1:2B:A8:C6:EF:F6 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e5:f2:fd:b2:f3:06:b3:7e:69:2e:16:18:48:b4:5f:3e:03: 9e:db:ce:b4:9b:7f:ab:15:31:92:ba:6a:53:8b:85:15:f0:e8: d5:da:90:e8:2a:f2:d1:2a:24:be:a7:43:4e:45:62:36:70:90: 9c:22:fc:fe:da:67:ea:43:7f:89:3d:15:87:04:71:d1:44:6e: cd:62:ad:b8:bb:75:c5:79:ee:ad:9d:25:3e:a6:18:ca:4c:73: 18:1f:14:49:56:21:26:44:9d:d9:24:b2:eb:8c:ae:5c:51:15: e3:35:2e:39:7a:22:f2:17:9c:be:7d:7a:20:e4:19:42:50:a2: 55:cb:4c:52:19:96:14:ed:5a:e0:4d:b8:8a:6b:34:6b:53:74: fe:55:39:6d:33:b3:55:61:7e:d5:a0:6a:da:59:5b:57:bf:e3: f3:31:2d:fd:d7:28:17:71:24:55:59:a3:4f:65:f2:20:30:6c: 6d:14:91:6b:19:10:21:58:92:44:d6:4c:21:08:5c:a9:2b:14: 2f:b9:b6:16:da:90:e4:8b:63:d7:bc:16:7c:52:0c:08:ef:94: a4:bd:00:1b:e8:1b:45:e8:13:9b:91:19:e4:87:f9:7a:38:d9: ce:8f:4d:dd:56:bb:71:df:ce:8c:05:f3:6f:29:9c:27:ee:e1: 3c:97:cf:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDh597dYtGBt+1py5xwTQxFmHkVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTEwMTkwNDU2NDNaFw0yNTEwMjIxMzUyNDNaMDMxMTAvBgNV BAMTKDdGRTc4QUQ5ODk0MkJEQkVERTBEMzk5QTY4RDBDMTJCQThDNkVGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrIoptSWJL6XQp4EwQkSh7lUL GMddCU2frDhWVBlYNOqZkCDlkI+EZoeuPyHQ5AyrMPQsCe/usgU7MrC1dh7+7kLs R1mMhUFOXDSQ8xLdqChm3154tVJKyW7YnOde0QAjwD5+DcCIFQaV8/vv4Jnisvc8 3yRmqQ/rfS37L5cE+JO41b6QGpU0OmUkLlnBxe5cODwR0P0jDEUE2+hXfCz3J/Vv th+Pa0ZWDA5lfik9MN4iGX3KXzfwUtvsSVxgTpOV2Vpkn8bDHv/+DIBADA0lXGBi Vqn2ljIGzrbMloSoOJbnScKEBl4jvb2Q7DO5n9NRG1GqCvJbSkRZZpXKgoq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+eK2YlCvb7eDTmaaNDBK6jG7/YwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnl8v2y8wazfmkuFhhItF8+A57bzrSbf6sV MZK6alOLhRXw6NXakOgq8tEqJL6nQ05FYjZwkJwi/P7aZ+pDf4k9FYcEcdFEbs1i rbi7dcV57q2dJT6mGMpMcxgfFElWISZEndkksuuMrlxRFeM1Ljl6IvIXnL59eiDk GUJQolXLTFIZlhTtWuBNuIprNGtTdP5VOW0zs1VhftWgatpZW1e/4/MxLf3XKBdx JFVZo09l8iAwbG0UkWsZECFYkkTWTCEIXKkrFC+5thbakOSLY9e8FnxSDAjvlKS9 ABvoG0XoE5uRGeSH+Xo42c6PTd1Wu3HfzowF828pnCfu4TyXz5A= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:27 2025 by rpki-client