$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: IItGp3tBQnmF2F5WB4epsqHxIuug5uMA98JmEG3URrI= Subject key identifier: C6:E5:C7:F6:14:A7:12:A3:5D:CE:17:83:5E:A7:0A:14:03:69:38:4A Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 1C4D22A57B89C0A7CC3E1EC11F9129389A3B9642 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02B6 Signing time: Sun 19 Oct 2025 05:12:23 +0000 Manifest this update: Sun 19 Oct 2025 05:07:23 +0000 Manifest next update: Wed 22 Oct 2025 16:45:23 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: +sPA/anZHPeZom/YeoCHv4PPt2bXIhFk1o9xfVLm0oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:22:a5:7b:89:c0:a7:cc:3e:1e:c1:1f:91:29:38:9a:3b:96:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Oct 19 05:07:23 2025 GMT Not After : Oct 22 16:45:23 2025 GMT Subject: CN=C6E5C7F614A712A35DCE17835EA70A140369384A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:83:cf:54:13:9d:91:6f:09:df:18:7e:2e: 41:2e:51:01:94:cd:93:72:fc:62:66:cc:c8:f2:0e: 71:91:6a:4f:d1:ff:11:94:1f:14:84:28:24:9d:f1: 23:53:b7:8a:6d:87:34:33:b9:f6:2b:8c:c9:ab:c2: 31:25:17:87:10:ce:89:8b:b2:ed:7f:3e:99:13:64: 89:1d:d9:40:09:cc:5a:14:57:3b:2b:9d:7b:4a:55: 1a:ff:38:06:17:11:d0:6e:3d:91:a4:40:78:8a:fc: 88:83:c7:d0:80:48:3b:de:fe:fd:60:3f:ac:c4:eb: 25:15:83:6b:73:92:9f:0b:d1:8f:64:a6:3b:20:36: 87:b5:74:e8:d1:6c:75:dd:62:2b:32:62:70:7f:fb: 03:92:1e:a7:3c:e3:fe:10:25:41:3a:7f:79:12:9e: 3a:b1:31:b0:5a:86:05:21:35:54:cb:14:7d:08:f5: 71:c4:09:48:79:03:65:5b:7e:5c:5f:00:cb:20:d7: 53:f9:5c:51:9e:0b:25:12:ec:e7:34:6d:9f:9c:c4: b8:0f:e5:24:95:a8:19:eb:08:00:5c:66:08:21:f9: 6e:2a:eb:0e:9f:f0:ca:83:64:29:0f:d6:ae:09:5c: 07:98:a7:21:58:16:ac:46:e2:48:4f:b5:37:34:f4: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:C7:F6:14:A7:12:A3:5D:CE:17:83:5E:A7:0A:14:03:69:38:4A X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1a:2c:68:5d:dd:37:f3:9c:60:fe:ab:7e:b4:8c:76:1b:45: b8:cc:c0:39:49:9b:e0:5d:f2:cf:ee:e8:cd:9f:a4:e3:3e:15: 31:58:21:2b:d7:04:e7:9a:d4:40:aa:71:f2:50:66:36:14:f7: 8a:92:1a:21:1c:3b:87:1e:3e:35:d0:87:ef:51:3e:aa:01:29: 5b:27:07:4c:af:84:0c:f8:2e:10:05:28:97:82:9f:e4:84:bd: 24:0d:54:c5:6f:81:70:f6:29:05:52:ee:94:52:44:6b:eb:ed: 10:07:d8:86:0f:6f:cb:9e:21:ed:3d:cf:17:2a:05:61:f8:a8: 91:04:45:73:20:64:ad:ea:88:10:15:03:28:df:d9:05:af:46: d1:10:38:11:c9:52:68:5a:e0:0c:f2:b3:56:44:8e:4e:3b:e2: a4:70:97:50:12:bd:d3:e9:d3:2e:bd:15:99:48:0b:39:44:5a: da:90:ba:68:52:61:1d:cc:62:68:35:37:f9:65:19:02:71:13: 3c:a6:05:73:60:bb:a9:07:ec:bf:04:32:cc:95:70:23:24:73: 09:23:1c:aa:cb:6a:65:da:f5:54:55:c1:59:19:92:b9:b0:4c: aa:27:2f:8f:ac:7d:bc:0d:f4:8d:76:f4:35:e9:c2:69:a5:37: 7d:14:85:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHE0ipXuJwKfMPh7BH5EpOJo7lkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTEwMTkwNTA3MjNaFw0yNTEwMjIxNjQ1MjNaMDMxMTAvBgNV BAMTKEM2RTVDN0Y2MTRBNzEyQTM1RENFMTc4MzVFQTcwQTE0MDM2OTM4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFoPPVBOdkW8J3xh+LkEuUQGU zZNy/GJmzMjyDnGRak/R/xGUHxSEKCSd8SNTt4pthzQzufYrjMmrwjElF4cQzomL su1/PpkTZIkd2UAJzFoUVzsrnXtKVRr/OAYXEdBuPZGkQHiK/IiDx9CASDve/v1g P6zE6yUVg2tzkp8L0Y9kpjsgNoe1dOjRbHXdYisyYnB/+wOSHqc84/4QJUE6f3kS njqxMbBahgUhNVTLFH0I9XHECUh5A2VbflxfAMsg11P5XFGeCyUS7Oc0bZ+cxLgP 5SSVqBnrCABcZggh+W4q6w6f8MqDZCkP1q4JXAeYpyFYFqxG4khPtTc09NOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuXH9hSnEqNdzheDXqcKFANpOEowHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUaLGhd3TfznGD+q360jHYbRbjMwDlJm+Bd 8s/u6M2fpOM+FTFYISvXBOea1ECqcfJQZjYU94qSGiEcO4cePjXQh+9RPqoBKVsn B0yvhAz4LhAFKJeCn+SEvSQNVMVvgXD2KQVS7pRSRGvr7RAH2IYPb8ueIe09zxcq BWH4qJEERXMgZK3qiBAVAyjf2QWvRtEQOBHJUmha4Azys1ZEjk474qRwl1ASvdPp 0y69FZlICzlEWtqQumhSYR3MYmg1N/llGQJxEzymBXNgu6kH7L8EMsyVcCMkcwkj HKrLamXa9VRVwVkZkrmwTKonL4+sfbwN9I129DXpwmmlN30Uhcw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:35 2025 by rpki-client