$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json) Hash identifier: SjQM/9D7jq//Xy4v4alDmc/+2xJGA45kA31mUjU3lKg= Subject key identifier: 85:94:3D:BB:DF:5F:90:E5:E5:4C:01:B5:36:1D:7D:94:8E:51:4C:34 Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 24DF573DD57DAC01D97B0AF18038F9DFE64DFF9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 16:12:07 +0000 Manifest this update: Mon 20 Oct 2025 16:07:07 +0000 Manifest next update: Thu 23 Oct 2025 23:31:07 +0000 Files and hashes: 1: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: 7sDYTMpPGziNlY0wprTsbHqpXuz4YZu24Z+wdtTbFLs=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:df:57:3d:d5:7d:ac:01:d9:7b:0a:f1:80:38:f9:df:e6:4d:ff:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Oct 20 16:07:07 2025 GMT Not After : Oct 23 23:31:07 2025 GMT Subject: CN=85943DBBDF5F90E5E54C01B5361D7D948E514C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:ec:fe:71:47:be:ed:02:dc:bc:08:bb:5d: 67:fa:73:1a:7b:07:25:30:43:b8:23:cb:80:f0:46: 3b:6e:91:30:ea:43:07:90:53:62:4b:94:ad:02:ae: d1:14:ca:08:f4:2c:b8:54:f4:50:8f:58:7b:b0:7f: 65:ce:b9:ec:3e:b2:6d:89:5e:f6:67:b2:2a:1e:e4: e5:1d:0e:0d:32:88:61:52:f7:05:6d:57:41:82:95: d8:37:2f:d4:7f:14:90:74:ad:49:f6:87:b3:55:6d: c9:65:36:f7:59:40:99:8e:a0:ab:30:2f:9f:7d:15: e3:38:08:c4:11:22:2b:a0:83:bd:bc:21:3e:4a:1c: a9:8f:73:a2:db:39:3e:aa:e7:f3:40:46:e4:4d:20: d2:46:09:d3:e4:60:11:72:ef:36:5c:54:4a:14:ac: 09:ff:57:06:29:f2:17:3a:b5:02:d5:01:14:1f:fa: 48:53:00:53:55:89:7b:12:56:f1:53:83:ce:75:e6: 8c:b4:c6:78:04:86:d8:f8:d0:e7:cb:17:64:b3:02: 58:a8:59:06:63:a9:66:56:27:70:7f:00:22:a7:bd: 65:2c:75:a2:0c:75:49:b5:00:01:3e:33:26:69:b6: 4c:ad:76:a8:9d:3d:3f:bc:18:4b:d2:1d:17:9d:84: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:3D:BB:DF:5F:90:E5:E5:4C:01:B5:36:1D:7D:94:8E:51:4C:34 X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bb:28:09:c0:18:23:43:7a:e6:c6:1e:1b:e6:b9:94:80:1d: 75:b5:78:60:62:0a:c4:6f:27:78:9f:ed:55:6d:ab:1f:1a:57: d3:63:51:5f:54:63:4f:83:03:b8:fa:04:be:34:f7:35:0f:5a: 53:0b:8a:61:90:a4:3a:2f:bc:12:c5:00:e4:96:ca:09:7b:7c: db:2d:47:ac:70:9e:bf:46:7d:9a:cb:0f:54:99:23:86:ee:b8: a1:3e:78:49:bf:2f:57:f8:6f:8b:d2:76:cf:bd:7b:72:ef:1b: 28:a6:59:6a:24:ef:bd:82:8d:48:82:8d:3b:78:1f:a0:eb:52: 9b:9e:fd:ea:ef:26:87:60:1b:66:ef:2e:01:ec:f2:e9:b5:0d: 00:99:61:d4:27:51:f6:87:df:b7:99:26:63:de:66:a7:9f:0f: 71:ef:c0:a2:68:27:31:06:9a:b4:4e:ba:0f:a0:01:b7:c7:e3: 3b:e3:a9:ae:75:95:5a:7a:49:2d:d4:1f:a6:ac:6a:7f:af:ec: 72:e7:d0:17:ef:f0:4a:24:56:bc:94:38:92:c0:5a:e6:bd:03: 45:cf:09:0a:33:02:c7:1b:56:88:91:af:44:27:e0:f5:72:27: e5:e9:a5:04:b6:e3:29:c5:d0:ea:3b:42:6b:2a:12:f4:75:cc: 13:1a:48:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJN9XPdV9rAHZewrxgDj53+ZN/54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNTEwMjAxNjA3MDdaFw0yNTEwMjMyMzMxMDdaMDMxMTAvBgNV BAMTKDg1OTQzREJCREY1RjkwRTVFNTRDMDFCNTM2MUQ3RDk0OEU1MTRDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChz+z+cUe+7QLcvAi7XWf6cxp7 ByUwQ7gjy4DwRjtukTDqQweQU2JLlK0CrtEUygj0LLhU9FCPWHuwf2XOuew+sm2J XvZnsioe5OUdDg0yiGFS9wVtV0GCldg3L9R/FJB0rUn2h7NVbcllNvdZQJmOoKsw L599FeM4CMQRIiugg728IT5KHKmPc6LbOT6q5/NARuRNINJGCdPkYBFy7zZcVEoU rAn/VwYp8hc6tQLVARQf+khTAFNViXsSVvFTg8515oy0xngEhtj40OfLF2SzAlio WQZjqWZWJ3B/ACKnvWUsdaIMdUm1AAE+MyZptkytdqidPT+8GEvSHRedhALtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZQ9u99fkOXlTAG1Nh19lI5RTDQwHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQw ODA0MDkxMDAxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF67KAnAGCNDeubGHhvmuZSAHXW1eGBiCsRv J3if7VVtqx8aV9NjUV9UY0+DA7j6BL409zUPWlMLimGQpDovvBLFAOSWygl7fNst R6xwnr9GfZrLD1SZI4buuKE+eEm/L1f4b4vSds+9e3LvGyimWWok772CjUiCjTt4 H6DrUpue/ervJodgG2bvLgHs8um1DQCZYdQnUfaH37eZJmPeZqefD3HvwKJoJzEG mrROug+gAbfH4zvjqa51lVp6SS3UH6asan+v7HLn0Bfv8EokVryUOJLAWua9A0XP CQozAscbVoiRr0Qn4PVyJ+XppQS24ynF0Oo7QmsqEvR1zBMaSEM= -----END CERTIFICATE-----Generated at Mon Oct 20 23:19:12 2025 by rpki-client