$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: wdpsjqI4lurQ9IPg2OulqUd2WgIRbvoo81dH2WsjIxo= Subject key identifier: AC:9E:B8:76:0F:CF:11:CF:F4:68:01:C4:05:E5:81:EA:30:29:24:F1 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 62CF4C5ABE5CCA32A276F2433EFF6F932AC09BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: E5 Signing time: Mon 20 Oct 2025 05:20:36 +0000 Manifest this update: Mon 20 Oct 2025 05:15:36 +0000 Manifest next update: Thu 23 Oct 2025 15:30:36 +0000 Files and hashes: 1: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: uBOS1WAT3DQSFWMe/219v5i9nx/NFWE0JWvA+zSxBHU=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cf:4c:5a:be:5c:ca:32:a2:76:f2:43:3e:ff:6f:93:2a:c0:9b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Oct 20 05:15:36 2025 GMT Not After : Oct 23 15:30:36 2025 GMT Subject: CN=AC9EB8760FCF11CFF46801C405E581EA302924F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:f8:dc:11:2d:0e:31:37:ea:7f:d2:e3:b0: 12:8a:0b:f7:2b:bd:40:cc:f9:b2:d7:44:1a:95:b2: 9b:aa:7c:8c:9e:0d:fc:6d:3b:cb:a6:c8:91:87:53: c3:96:37:3f:a8:a8:4e:6e:19:0b:18:c1:47:d5:5e: e1:a8:bc:c7:2d:17:74:dc:6b:b2:b8:21:3a:87:c9: 28:28:82:c3:91:36:f2:1c:fd:d1:9b:97:22:66:2f: f0:d8:34:46:48:ca:6e:34:34:c9:23:23:85:01:f5: c6:1a:ad:8f:d2:34:db:49:10:73:6d:cc:7d:57:27: dc:71:a5:13:b0:e3:6a:06:d2:ae:90:4d:88:dc:3e: c3:42:9a:18:58:7a:57:d5:7c:f7:7f:d7:c2:70:db: 26:b5:f6:18:1e:96:d0:a4:df:2c:64:4a:0c:01:8f: ec:a5:88:89:f8:ca:7b:15:63:54:7c:15:ca:fc:fe: 8b:b8:25:53:1d:1c:4c:6b:60:01:1c:6e:bb:fc:6f: e7:ea:96:cf:35:1a:7b:db:94:3e:77:aa:9e:09:4e: 75:5e:21:1e:ad:f0:5f:21:0b:b0:ec:21:22:30:25: 7b:11:bd:ff:f5:bd:eb:e0:3f:02:a7:98:6b:9f:65: 92:e8:bb:8b:9d:a6:9b:40:4f:41:87:b7:93:6a:0e: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:B8:76:0F:CF:11:CF:F4:68:01:C4:05:E5:81:EA:30:29:24:F1 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:da:c7:28:fd:c6:35:c5:d6:5e:ef:d9:69:78:7a:1e:2a: e5:00:51:ba:65:89:2c:33:89:11:d1:f9:67:d2:17:d3:95:72: ea:af:9c:6e:f3:d4:2f:0c:a8:dd:06:ca:fa:34:d6:8e:6d:05: 42:1d:4b:75:5c:50:7a:97:ed:a1:48:ad:85:79:27:97:e9:aa: 1f:60:cf:de:07:03:0d:3d:bb:35:9c:39:84:29:2c:bb:5d:b1: 83:ba:fc:4f:12:71:d2:24:61:2d:8f:f2:68:20:90:30:2e:bd: ba:ff:af:cc:ba:cd:3b:0a:3b:86:d8:ff:35:d2:96:fe:ef:47: 41:c5:b5:39:c8:7b:fd:c5:e3:16:a9:40:ff:2c:5e:c6:10:13: 91:00:5c:fb:5b:1c:60:d7:81:69:16:0e:d1:b5:1c:30:76:e5: 22:b4:28:fe:c3:d1:85:3b:bc:5d:ff:03:9e:38:ae:2e:15:9c: 2b:c5:5d:a4:a8:bc:83:ed:4d:a1:6b:4c:8d:f9:79:40:e9:9f: 47:d3:e4:02:6d:7e:e2:db:56:7e:89:2e:a9:6b:16:8b:cb:31: 16:a3:5e:2a:36:3d:94:9c:2e:21:8e:ad:b0:92:33:7d:3f:c5: 3d:79:3d:28:7c:65:d3:36:b0:c3:b2:34:8f:fa:c8:bc:9d:61: 89:24:cd:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYs9MWr5cyjKidvJDPv9vkyrAm9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTEwMjAwNTE1MzZaFw0yNTEwMjMxNTMwMzZaMDMxMTAvBgNV BAMTKEFDOUVCODc2MEZDRjExQ0ZGNDY4MDFDNDA1RTU4MUVBMzAyOTI0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6fjcES0OMTfqf9LjsBKKC/cr vUDM+bLXRBqVspuqfIyeDfxtO8umyJGHU8OWNz+oqE5uGQsYwUfVXuGovMctF3Tc a7K4ITqHySgogsORNvIc/dGblyJmL/DYNEZIym40NMkjI4UB9cYarY/SNNtJEHNt zH1XJ9xxpROw42oG0q6QTYjcPsNCmhhYelfVfPd/18Jw2ya19hgeltCk3yxkSgwB j+yliIn4ynsVY1R8Fcr8/ou4JVMdHExrYAEcbrv8b+fqls81GnvblD53qp4JTnVe IR6t8F8hC7DsISIwJXsRvf/1vevgPwKnmGufZZLou4udpptAT0GHt5NqDtjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJ64dg/PEc/0aAHEBeWB6jApJPEwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrP2sco/cY1xdZe79lpeHoeKuUAUbpliSwz iRHR+WfSF9OVcuqvnG7z1C8MqN0Gyvo01o5tBUIdS3VcUHqX7aFIrYV5J5fpqh9g z94HAw09uzWcOYQpLLtdsYO6/E8ScdIkYS2P8mggkDAuvbr/r8y6zTsKO4bY/zXS lv7vR0HFtTnIe/3F4xapQP8sXsYQE5EAXPtbHGDXgWkWDtG1HDB25SK0KP7D0YU7 vF3/A544ri4VnCvFXaSovIPtTaFrTI35eUDpn0fT5AJtfuLbVn6JLqlrFovLMRaj Xio2PZScLiGOrbCSM30/xT15PSh8ZdM2sMOyNI/6yLydYYkkzUY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:52 2025 by rpki-client