$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: sunNbB7s+riGFjLDHvFB0Kb2Go05HCIJPlecYdcAWlA= Subject key identifier: 7B:65:A2:FB:6E:6D:48:4F:35:68:43:B1:F3:66:39:71:CC:73:23:04 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 4E83E236B42DE21D9962BC8D3C4D4DF50E780A27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 9B Signing time: Sun 19 Oct 2025 18:11:04 +0000 Manifest this update: Sun 19 Oct 2025 18:06:04 +0000 Manifest next update: Thu 23 Oct 2025 01:14:04 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: i8oF9DMM821I0TKyI2HLXpb/8LANsxJeT933Ei5G6Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:83:e2:36:b4:2d:e2:1d:99:62:bc:8d:3c:4d:4d:f5:0e:78:0a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Oct 19 18:06:04 2025 GMT Not After : Oct 23 01:14:04 2025 GMT Subject: CN=7B65A2FB6E6D484F356843B1F3663971CC732304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:72:53:ff:96:32:30:b5:2a:68:60:5b:54: 47:f7:ac:f0:86:5d:33:3b:41:0b:7f:54:a4:cf:a3: b8:0e:a8:6d:d7:18:f2:24:c8:23:4a:6b:fe:ca:f6: 3c:9c:6b:17:73:68:92:77:ff:80:e9:67:df:20:70: 4f:b9:d3:8a:f4:41:8e:5a:61:fc:9d:fb:aa:9c:e7: 30:76:b9:3d:f5:c3:e3:22:10:fc:75:0c:68:f7:ae: 38:b2:df:15:84:f0:7b:da:95:88:42:ed:03:3b:5e: 48:f6:b8:cb:e0:67:50:af:23:2a:29:fa:bf:be:56: 36:21:88:91:5f:a1:ea:5c:8a:81:06:34:66:2e:bd: a9:26:a2:a3:ff:0e:5f:80:a3:87:3b:cd:3b:b7:38: 9c:52:bb:7b:57:66:ca:8d:d3:a9:7a:f8:c9:a6:7d: aa:b1:99:23:0d:af:60:61:3f:79:a1:13:1b:9e:38: da:27:8f:85:8f:c3:29:6e:6f:34:16:f8:07:db:44: 2d:7a:e3:5d:c5:1d:7b:7e:b4:35:bc:82:0f:9b:0d: 1c:09:3c:f1:9a:fe:42:27:0e:26:e0:47:6d:19:8f: 3d:ed:d4:91:17:9d:ca:d1:08:bd:5e:3a:6d:7a:c1: ca:05:93:82:5e:93:c2:0c:e9:21:d8:fb:e6:43:45: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:65:A2:FB:6E:6D:48:4F:35:68:43:B1:F3:66:39:71:CC:73:23:04 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ed:d0:2c:67:b4:36:9b:db:dd:f1:47:76:2c:a1:22:fc:b6: e7:42:05:c8:e1:45:4f:a8:7f:4d:ad:77:37:fe:2a:f8:c0:04: de:fb:10:6a:b2:a8:cd:b4:ef:bb:cc:e4:ee:0b:e9:28:83:f9: bf:88:d3:cd:5a:83:fc:f8:87:c9:82:e6:f1:c1:42:06:75:59: 70:9d:2c:a4:89:1c:d2:74:f0:2f:dd:10:67:93:c9:3f:9f:1d: 17:0d:e2:1c:37:e6:2b:12:49:49:44:53:e1:d8:28:2c:80:6d: fc:45:98:a9:e5:76:9d:3c:d6:d4:d7:70:c4:98:01:60:3a:df: 2e:29:98:40:85:cd:df:62:18:46:90:e1:44:cc:91:1a:2b:f5: 9e:86:7b:59:f2:01:10:b9:83:3d:59:e3:bb:3b:a7:40:f6:36: 48:65:25:71:61:5a:b5:9a:f9:57:24:6b:06:7d:3a:41:ff:7c: a4:6c:13:cc:68:b1:5a:58:89:af:31:d7:a8:1f:fa:bb:12:74: 9e:e5:98:98:c0:ec:60:de:80:04:9b:8c:8d:86:66:8c:d8:ea: 21:66:4d:4d:47:38:19:08:53:23:00:92:ad:78:24:65:08:15: 67:6b:af:df:44:20:b7:d3:6f:76:b8:61:1d:55:2a:a3:cc:c8: cb:1b:c3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToPiNrQt4h2ZYryNPE1N9Q54CicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTEwMTkxODA2MDRaFw0yNTEwMjMwMTE0MDRaMDMxMTAvBgNV BAMTKDdCNjVBMkZCNkU2RDQ4NEYzNTY4NDNCMUYzNjYzOTcxQ0M3MzIzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDnJT/5YyMLUqaGBbVEf3rPCG XTM7QQt/VKTPo7gOqG3XGPIkyCNKa/7K9jycaxdzaJJ3/4DpZ98gcE+504r0QY5a Yfyd+6qc5zB2uT31w+MiEPx1DGj3rjiy3xWE8HvalYhC7QM7Xkj2uMvgZ1CvIyop +r++VjYhiJFfoepcioEGNGYuvakmoqP/Dl+Ao4c7zTu3OJxSu3tXZsqN06l6+Mmm faqxmSMNr2BhP3mhExueONonj4WPwylubzQW+AfbRC16413FHXt+tDW8gg+bDRwJ PPGa/kInDibgR20Zjz3t1JEXncrRCL1eOm16wcoFk4Jek8IM6SHY++ZDRbXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2Wi+25tSE81aEOx82Y5ccxzIwQwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrt0CxntDab293xR3YsoSL8tudCBcjhRU+o f02tdzf+KvjABN77EGqyqM2077vM5O4L6SiD+b+I081ag/z4h8mC5vHBQgZ1WXCd LKSJHNJ08C/dEGeTyT+fHRcN4hw35isSSUlEU+HYKCyAbfxFmKnldp081tTXcMSY AWA63y4pmECFzd9iGEaQ4UTMkRor9Z6Ge1nyARC5gz1Z47s7p0D2NkhlJXFhWrWa +VckawZ9OkH/fKRsE8xosVpYia8x16gf+rsSdJ7lmJjA7GDegASbjI2GZozY6iFm TU1HOBkIUyMAkq14JGUIFWdrr99EILfTb3a4YR1VKqPMyMsbwxc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:40 2025 by rpki-client