$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: aDJcnErnn8h40wmDQAaKc+5Uf3HjLPbbQ8yBTilSBfI= Subject key identifier: 0A:80:C2:80:85:DC:BA:BB:27:96:36:10:97:06:E7:3D:50:2A:4A:AE Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 39A7BD25742A826E9552F866FDDF67FC59135993 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 051C Signing time: Mon 20 Oct 2025 18:30:35 +0000 Manifest this update: Mon 20 Oct 2025 18:25:35 +0000 Manifest next update: Thu 23 Oct 2025 23:44:35 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: cQWipaWvnsh7xGccyaYwhdhPw1dAkAvw25fWc0UXMGc=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 23:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a7:bd:25:74:2a:82:6e:95:52:f8:66:fd:df:67:fc:59:13:59:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Oct 20 18:25:35 2025 GMT Not After : Oct 23 23:44:35 2025 GMT Subject: CN=0A80C28085DCBABB279636109706E73D502A4AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:ef:06:d1:3c:41:a8:af:8c:64:ea:19:c4: 42:1a:01:e1:27:f9:e3:51:97:5f:ce:03:5e:c1:1f: b7:d1:82:e1:b6:0c:a0:fd:6a:a7:22:22:bc:8d:42: 8d:d9:37:fd:77:db:a1:d1:72:39:4a:86:a4:14:dd: 43:87:61:f4:75:91:13:89:cd:bc:43:5c:f0:79:99: cc:12:bd:a8:cf:90:41:20:e3:dc:ff:ee:d4:41:05: a4:3f:2f:b2:4e:ee:69:20:ab:ea:c5:aa:f8:39:92: 11:96:fe:e8:89:31:73:77:7f:4b:b7:3c:30:33:b1: 27:f8:8a:77:b7:e8:d8:1e:17:bc:79:53:26:3e:62: e7:a6:fc:79:fd:3d:5e:b9:be:bf:21:e2:97:b6:0b: c0:ad:c1:85:ce:17:b4:d6:df:24:b1:60:d8:3e:a0: 58:f0:6c:9f:e4:db:b1:ec:a2:dd:20:42:95:30:e0: 72:c5:6f:14:b5:3b:98:f3:71:65:9c:c0:ed:d5:e5: f0:07:30:a7:7e:c7:ce:da:63:b6:8a:06:eb:c7:94: b7:db:28:89:02:a8:52:b1:97:1a:3e:f8:87:d9:af: e2:b0:ce:8e:a7:98:7c:4e:a4:69:64:70:55:ce:bf: 9e:04:54:a6:4d:50:38:13:df:e6:db:c4:a2:a8:48: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:80:C2:80:85:DC:BA:BB:27:96:36:10:97:06:E7:3D:50:2A:4A:AE X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6a:99:75:c7:8d:b4:2e:27:f1:cd:54:84:f2:17:51:e6:b9: 6d:8a:f0:54:49:b7:e9:50:a5:42:f4:d3:06:49:f6:03:fe:b0: 17:0a:da:94:06:87:bb:fb:1d:36:42:98:2b:5e:73:24:64:b2: 98:c7:ec:20:32:41:c0:2d:a3:72:20:04:7a:65:9a:3c:92:b2: 98:e5:08:75:db:34:e3:97:1a:6a:0a:2b:d0:f3:95:44:aa:3c: 7b:0b:f9:8a:16:22:81:31:d0:e2:95:54:6b:92:95:8f:3f:93: c9:a8:89:07:8c:40:54:b2:79:72:52:ca:be:94:29:42:7e:47: 11:e1:b6:fa:a3:84:bc:a4:c9:35:66:48:31:5a:8a:77:b2:75: d2:e3:4d:8d:67:3c:48:c9:33:01:b7:ed:22:fe:26:90:92:10: 53:01:57:a6:83:88:ba:dc:48:f4:b5:7c:0d:31:33:16:a0:b1: d6:06:57:31:e7:e0:d7:75:1a:14:37:9f:c7:38:8e:46:a3:46: e3:7c:87:af:84:51:09:84:00:97:bc:04:4a:3b:94:58:70:6b: d9:bb:fe:28:c9:6b:9b:d2:7c:39:09:e8:0f:4d:88:49:c8:ac: 88:96:4d:dd:11:0b:d9:22:53:ab:2b:22:d5:9a:c5:e9:7c:b3: a5:5f:ca:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUOae9JXQqgm6VUvhm/d9n/FkTWZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MTAyMDE4MjUzNVoX DTI1MTAyMzIzNDQzNVowMzExMC8GA1UEAxMoMEE4MEMyODA4NURDQkFCQjI3OTYz NjEwOTcwNkU3M0Q1MDJBNEFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoV7wbRPEGor4xk6hnEQhoB4Sf541GXX84DXsEft9GC4bYMoP1qpyIivI1C jdk3/XfbodFyOUqGpBTdQ4dh9HWRE4nNvENc8HmZzBK9qM+QQSDj3P/u1EEFpD8v sk7uaSCr6sWq+DmSEZb+6Ikxc3d/S7c8MDOxJ/iKd7fo2B4XvHlTJj5i56b8ef09 Xrm+vyHil7YLwK3Bhc4XtNbfJLFg2D6gWPBsn+Tbseyi3SBClTDgcsVvFLU7mPNx ZZzA7dXl8Acwp37HztpjtooG68eUt9soiQKoUrGXGj74h9mv4rDOjqeYfE6kaWRw Vc6/ngRUpk1QOBPf5tvEoqhIaOECAwEAAaOCAgkwggIFMB0GA1UdDgQWBBQKgMKA hdy6uyeWNhCXBuc9UCpKrjAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2qZdceN tC4n8c1UhPIXUea5bYrwVEm36VClQvTTBkn2A/6wFwralAaHu/sdNkKYK15zJGSy mMfsIDJBwC2jciAEemWaPJKymOUIdds045caagor0POVRKo8ewv5ihYigTHQ4pVU a5KVjz+TyaiJB4xAVLJ5clLKvpQpQn5HEeG2+qOEvKTJNWZIMVqKd7J10uNNjWc8 SMkzAbftIv4mkJIQUwFXpoOIutxI9LV8DTEzFqCx1gZXMefg13UaFDefxziORqNG 43yHr4RRCYQAl7wESjuUWHBr2bv+KMlrm9J8OQnoD02IScisiJZN3REL2SJTqysi 1ZrF6XyzpV/KNA== -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:21 2025 by rpki-client