$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: ymU/yqS48AVw1NKpHEN1FlUWnSkQdvIwYwsp7EpBLXQ= Subject key identifier: 86:06:24:D1:B9:2C:15:E7:5E:48:DB:3C:D9:6D:F0:61:F8:3D:2D:B3 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 3C9E0E051E24FC91256B6BFCC18B8FC2F860A1B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: EE Signing time: Sat 18 Oct 2025 10:12:23 +0000 Manifest this update: Sat 18 Oct 2025 10:07:23 +0000 Manifest next update: Tue 21 Oct 2025 21:56:23 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: 7fI/tjIwji/pAsSPfET2X8FIlNWO7AUaf/cyocbEWlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9e:0e:05:1e:24:fc:91:25:6b:6b:fc:c1:8b:8f:c2:f8:60:a1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Oct 18 10:07:23 2025 GMT Not After : Oct 21 21:56:23 2025 GMT Subject: CN=860624D1B92C15E75E48DB3CD96DF061F83D2DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:09:f2:94:52:10:2d:d8:ce:6c:65:5c:41: db:ae:8b:48:cc:3c:cf:a9:8f:25:16:80:da:ed:91: e0:0f:29:c6:6f:70:12:03:40:62:01:33:9e:7c:17: 73:ee:c3:92:8b:ca:5a:44:cf:e6:de:ec:18:30:e9: f6:79:d6:c3:fb:e2:3d:7e:79:ff:32:3f:39:9f:d8: b2:8e:be:9f:a5:be:fe:ce:c9:2f:02:f4:df:df:81: f9:99:47:2b:70:56:cb:0f:9d:5d:64:11:8e:f9:1d: db:5f:3c:53:33:cf:63:b7:50:07:6a:14:bb:53:19: f0:c4:54:51:29:a3:26:eb:7c:93:83:51:78:4f:9f: ef:a5:96:ca:34:0f:fd:a6:69:c1:13:10:47:0e:a5: f0:83:ea:5d:22:be:71:2e:11:d2:71:bc:6d:7c:71: 31:00:65:9d:09:5c:44:7a:bc:23:12:65:9e:e3:dd: 3a:89:ef:8d:e1:3e:65:8b:16:2d:e6:51:d8:87:be: 9f:b3:df:73:60:25:a4:e3:2b:bc:48:30:8a:7e:82: c0:d6:56:be:59:b2:49:55:77:99:9b:43:ba:62:d6: 12:fc:60:64:bd:35:95:62:26:72:6e:b4:88:2a:6a: b4:9c:61:cb:a2:94:80:5c:45:a2:cf:21:0f:2f:b4: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:06:24:D1:B9:2C:15:E7:5E:48:DB:3C:D9:6D:F0:61:F8:3D:2D:B3 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f0:d1:0e:67:59:de:0a:02:42:cf:b2:8c:bf:f3:03:c1:85: 69:df:2c:75:14:63:26:8f:99:02:2b:f5:0a:8e:05:9a:d6:a1: 86:c7:45:37:dc:fe:45:ec:0c:7a:fb:6b:1f:20:15:ae:ea:0c: 62:f8:c6:fa:37:83:17:34:5f:90:e9:56:5e:9c:6f:66:9a:65: 15:58:dd:e2:d3:a2:3c:79:c2:2c:06:fe:42:e0:01:86:ab:48: b9:81:4b:b6:c4:cc:e7:96:00:a9:53:74:9f:7e:fe:85:95:b6: 1a:fc:e1:e0:b8:a3:e6:16:45:ad:cd:46:15:4c:56:c4:f9:e8: 1e:6f:bc:e7:7c:88:72:30:92:f0:78:72:7a:e2:5f:07:03:7a: ff:3f:25:65:1a:c8:35:b2:20:8d:de:3e:97:81:36:61:a1:78: b1:6c:be:ae:41:17:df:be:36:02:4a:30:98:ff:60:74:e7:d0: 0a:3e:8d:68:1a:a8:b4:c8:09:a9:fc:b4:6c:e3:a1:e8:55:8d: 45:ff:96:00:99:7d:16:db:19:b0:19:e3:52:a7:17:2b:90:8b: 16:b3:47:d7:4e:10:c2:af:1d:61:64:0d:7b:e0:f8:69:cc:d6: 02:c5:91:fa:91:79:11:d6:07:a6:cd:77:4e:c3:d2:68:e9:77: 7a:31:5e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJ4OBR4k/JEla2v8wYuPwvhgobkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTEwMTgxMDA3MjNaFw0yNTEwMjEyMTU2MjNaMDMxMTAvBgNV BAMTKDg2MDYyNEQxQjkyQzE1RTc1RTQ4REIzQ0Q5NkRGMDYxRjgzRDJEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCQnylFIQLdjObGVcQduui0jM PM+pjyUWgNrtkeAPKcZvcBIDQGIBM558F3Puw5KLylpEz+be7Bgw6fZ51sP74j1+ ef8yPzmf2LKOvp+lvv7OyS8C9N/fgfmZRytwVssPnV1kEY75HdtfPFMzz2O3UAdq FLtTGfDEVFEpoybrfJODUXhPn++llso0D/2macETEEcOpfCD6l0ivnEuEdJxvG18 cTEAZZ0JXER6vCMSZZ7j3TqJ743hPmWLFi3mUdiHvp+z33NgJaTjK7xIMIp+gsDW Vr5ZsklVd5mbQ7pi1hL8YGS9NZViJnJutIgqarScYcuilIBcRaLPIQ8vtCnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgYk0bksFedeSNs82W3wYfg9LbMwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPw0Q5nWd4KAkLPsoy/8wPBhWnfLHUUYyaP mQIr9QqOBZrWoYbHRTfc/kXsDHr7ax8gFa7qDGL4xvo3gxc0X5DpVl6cb2aaZRVY 3eLTojx5wiwG/kLgAYarSLmBS7bEzOeWAKlTdJ9+/oWVthr84eC4o+YWRa3NRhVM VsT56B5vvOd8iHIwkvB4cnriXwcDev8/JWUayDWyII3ePpeBNmGheLFsvq5BF9++ NgJKMJj/YHTn0Ao+jWgaqLTICan8tGzjoehVjUX/lgCZfRbbGbAZ41KnFyuQixaz R9dOEMKvHWFkDXvg+GnM1gLFkfqReRHWB6bNd07D0mjpd3oxXls= -----END CERTIFICATE-----Generated at Mon Oct 20 22:06:24 2025 by rpki-client