$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: dmWvfj2FaUhBoTuJV5i3z58HiVPEIzYVSTNXMEV26Xg= Subject key identifier: B8:49:67:FC:0B:38:9E:3E:6F:42:C7:EB:43:A2:EF:2F:9C:54:7D:4A Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 43BD5E19E679D2EFD4E61F0E6936AC51ACA3940B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: C4 Signing time: Mon 20 Oct 2025 19:30:40 +0000 Manifest this update: Mon 20 Oct 2025 19:25:40 +0000 Manifest next update: Fri 24 Oct 2025 04:37:40 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: Cehjo8xoMzGYkfoI1XdKQGOFDjZyJgZGgWFSu6J5ISQ=) 2: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) 3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bd:5e:19:e6:79:d2:ef:d4:e6:1f:0e:69:36:ac:51:ac:a3:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Oct 20 19:25:40 2025 GMT Not After : Oct 24 04:37:40 2025 GMT Subject: CN=B84967FC0B389E3E6F42C7EB43A2EF2F9C547D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:93:72:a6:fe:66:55:49:5a:65:cb:26:b1: ca:b8:04:e2:66:31:0b:61:31:53:92:53:b5:7e:09: 95:fd:55:16:d0:c8:3f:e6:33:18:1e:36:a1:b4:0a: b3:c9:bd:db:aa:5c:87:36:f2:60:f7:2b:40:16:4b: d9:93:82:e0:18:b1:0c:ac:01:59:ea:07:f1:83:d0: 29:d5:c5:dc:8c:a3:23:74:40:df:27:75:15:14:66: 15:12:0e:16:62:40:a5:64:82:0c:2f:68:12:9e:87: 63:7e:15:1f:b3:61:ca:0f:0a:a8:74:9f:5d:5d:5b: 99:88:cb:fe:20:83:8b:46:84:39:dc:7c:15:01:24: f7:86:9d:47:65:a1:27:e0:3e:f3:f9:66:16:19:3e: 50:ea:89:1f:40:0a:d7:9c:98:87:2c:16:8f:d9:cf: 99:96:26:62:c6:78:c3:e1:f5:15:19:2a:b7:d7:98: 16:40:1c:83:8a:ad:06:67:c5:ef:94:17:5f:d4:df: 07:82:bc:37:b1:a1:7e:81:fc:15:6f:b7:c4:6f:50: 65:c7:85:41:c9:52:74:6a:bc:44:57:0c:30:36:52: 80:36:9c:c1:e4:76:71:cd:82:7b:bd:be:0f:28:c7: ea:61:92:60:1c:eb:e3:8f:15:99:10:f0:53:69:67: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:67:FC:0B:38:9E:3E:6F:42:C7:EB:43:A2:EF:2F:9C:54:7D:4A X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:39:0c:f6:f6:ef:a7:9e:0a:62:32:32:a5:c7:0b:be:f1:d4: 63:eb:c7:94:41:30:c0:32:80:c0:c4:50:38:7a:16:5c:de:a6: 56:03:cc:df:44:38:17:79:96:8e:43:bd:6d:47:1c:70:c4:67: d7:ed:7b:c5:6e:81:3d:3b:67:40:d4:68:65:3a:d0:52:e4:fc: 1c:e9:64:22:cb:c7:eb:1f:d0:5b:f7:62:20:73:9d:ff:e3:5a: 02:81:cb:6e:07:51:a3:9a:f5:e0:7a:a2:75:60:a4:27:3a:04: d6:c9:8e:84:58:3a:a9:b0:ea:a3:5d:b4:46:02:7f:93:13:f6: fd:81:ff:e1:71:ae:28:d8:ad:ce:04:dd:ba:ba:94:86:64:0d: e0:f6:f9:e8:4e:1d:15:84:d8:18:54:89:6b:46:3c:e8:30:92: 2c:f5:3a:aa:39:09:a3:77:88:c0:77:ab:30:07:df:1f:cb:e1: cb:6a:f3:6b:11:37:89:86:2f:49:84:a9:54:df:0e:a0:82:6a: 84:62:87:a9:6a:d6:22:bb:cb:3e:fb:22:8a:ac:8b:b8:b2:b9: ee:bb:39:08:ea:8c:65:25:65:37:06:92:4f:0d:6d:d0:cd:c7: e6:74:0d:88:19:97:b8:89:34:1e:dc:cc:a2:24:f5:4d:4b:29: 4d:ee:a9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ71eGeZ50u/U5h8OaTasUayjlAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTEwMjAxOTI1NDBaFw0yNTEwMjQwNDM3NDBaMDMxMTAvBgNV BAMTKEI4NDk2N0ZDMEIzODlFM0U2RjQyQzdFQjQzQTJFRjJGOUM1NDdENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDocJNypv5mVUlaZcsmscq4BOJm MQthMVOSU7V+CZX9VRbQyD/mMxgeNqG0CrPJvduqXIc28mD3K0AWS9mTguAYsQys AVnqB/GD0CnVxdyMoyN0QN8ndRUUZhUSDhZiQKVkggwvaBKeh2N+FR+zYcoPCqh0 n11dW5mIy/4gg4tGhDncfBUBJPeGnUdloSfgPvP5ZhYZPlDqiR9ACtecmIcsFo/Z z5mWJmLGeMPh9RUZKrfXmBZAHIOKrQZnxe+UF1/U3weCvDexoX6B/BVvt8RvUGXH hUHJUnRqvERXDDA2UoA2nMHkdnHNgnu9vg8ox+phkmAc6+OPFZkQ8FNpZ6npAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEln/As4nj5vQsfrQ6LvL5xUfUowHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo5DPb276eeCmIyMqXHC77x1GPrx5RBMMAy gMDEUDh6FlzeplYDzN9EOBd5lo5DvW1HHHDEZ9fte8VugT07Z0DUaGU60FLk/Bzp ZCLLx+sf0Fv3YiBznf/jWgKBy24HUaOa9eB6onVgpCc6BNbJjoRYOqmw6qNdtEYC f5MT9v2B/+FxrijYrc4E3bq6lIZkDeD2+ehOHRWE2BhUiWtGPOgwkiz1Oqo5CaN3 iMB3qzAH3x/L4ctq82sRN4mGL0mEqVTfDqCCaoRih6lq1iK7yz77Ioqsi7iyue67 OQjqjGUlZTcGkk8NbdDNx+Z0DYgZl7iJNB7czKIk9U1LKU3uqXQ= -----END CERTIFICATE-----Generated at Tue Oct 21 02:10:36 2025 by rpki-client