$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: w9RhYn6/Z+/6dNflEgCkzWnJwDIpeyEtOvBg/XpHt1U= Subject key identifier: 4F:53:8D:F0:10:AE:C5:F6:D1:31:65:4C:0C:93:1B:C2:35:DF:32:02 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 0F537C894BCEB2FFE3E98E8F5470DC79B4EAADFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: AC Signing time: Sun 19 Oct 2025 16:11:51 +0000 Manifest this update: Sun 19 Oct 2025 16:06:51 +0000 Manifest next update: Wed 22 Oct 2025 22:44:51 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: TGun3UkcNJwTquDAGEBdSP93EJVEHA/89TnONpHG6C8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:53:7c:89:4b:ce:b2:ff:e3:e9:8e:8f:54:70:dc:79:b4:ea:ad:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Oct 19 16:06:51 2025 GMT Not After : Oct 22 22:44:51 2025 GMT Subject: CN=4F538DF010AEC5F6D131654C0C931BC235DF3202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:ac:5c:0d:fb:78:d5:2e:74:dc:67:35:0e: f4:1a:69:19:34:38:b3:4b:d4:81:ae:45:9a:40:13: af:08:74:e6:e7:65:c2:17:1d:b5:ba:ac:62:c2:52: 9b:d3:b3:ff:e2:3f:7c:60:c8:d8:9b:40:b8:bb:b5: c5:eb:9d:b8:b1:e1:d7:40:94:a3:bb:1a:2b:ee:da: 94:7f:96:07:52:9d:72:40:d0:95:18:9b:a0:4a:9b: d5:aa:de:fc:26:08:d1:1b:f7:c6:75:f2:7c:13:13: c4:3a:1b:8d:1d:76:e4:80:7c:3b:38:7b:f5:00:cc: d6:4f:20:b8:b6:9e:f5:9b:35:83:5b:0b:2a:92:44: d7:3b:4c:79:2f:51:63:65:0a:5e:ff:c5:98:2c:6d: 89:d7:ce:48:23:6c:66:58:d9:03:d7:fe:dd:4e:6b: d1:45:cd:97:e4:42:c9:b1:1c:9d:69:97:e1:ea:04: 78:4c:71:df:d6:a9:48:19:7b:66:1e:7c:50:3c:11: 12:fd:ac:46:d9:91:fd:08:8e:a4:7f:db:71:ff:1e: d5:a9:38:7d:b8:8a:ca:c5:ab:59:9a:63:34:3c:55: cf:e9:09:52:20:f0:a9:30:4e:9c:39:e3:8b:46:ac: d3:9e:8d:9d:32:19:a9:b4:67:16:46:66:88:4a:25: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:8D:F0:10:AE:C5:F6:D1:31:65:4C:0C:93:1B:C2:35:DF:32:02 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:94:a7:6d:19:40:b3:e8:de:cb:23:f0:d3:e6:4d:73:bc:e8: d2:62:71:01:36:7b:94:a3:bd:be:85:e2:12:b8:bb:da:ff:60: 7e:f0:1b:76:11:7b:27:56:d1:ac:cd:0c:4a:f8:76:cd:fe:e2: 9a:39:07:cf:76:fc:b2:4c:2f:b7:7f:eb:f8:01:2b:76:38:1f: c9:cf:07:05:5a:c8:cf:1b:16:c8:0b:e4:f1:d7:b0:25:f4:8a: 04:32:db:d8:90:46:a6:61:2a:7d:82:16:30:65:21:cf:1d:6d: b2:73:73:b3:7f:26:5b:72:09:01:c6:92:39:80:50:d7:2b:68: a0:1c:83:0d:50:56:c8:28:0a:38:67:d6:d2:35:19:4f:6c:a2: cf:a1:89:ab:e6:1e:8f:2e:8d:f8:41:b1:1f:06:2d:54:e4:cd: 94:e2:c5:1c:b8:02:26:7b:16:b3:36:10:93:f2:9f:02:4f:19: 03:21:f6:e1:52:29:36:0a:d2:f0:b0:a4:99:ef:d7:a0:57:60: 92:1e:90:e1:d2:40:df:1c:c2:08:7f:9e:c7:4a:5f:b1:73:30: 9e:fe:10:c1:cd:d9:5b:58:17:4c:21:8e:d2:a7:df:94:34:0e: 97:86:92:eb:d1:f1:b5:56:8d:e7:56:96:4b:80:32:28:7b:12: 9f:a9:25:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1N8iUvOsv/j6Y6PVHDcebTqrf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTEwMTkxNjA2NTFaFw0yNTEwMjIyMjQ0NTFaMDMxMTAvBgNV BAMTKDRGNTM4REYwMTBBRUM1RjZEMTMxNjU0QzBDOTMxQkMyMzVERjMyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDKxcDft41S503Gc1DvQaaRk0 OLNL1IGuRZpAE68IdObnZcIXHbW6rGLCUpvTs//iP3xgyNibQLi7tcXrnbix4ddA lKO7Givu2pR/lgdSnXJA0JUYm6BKm9Wq3vwmCNEb98Z18nwTE8Q6G40dduSAfDs4 e/UAzNZPILi2nvWbNYNbCyqSRNc7THkvUWNlCl7/xZgsbYnXzkgjbGZY2QPX/t1O a9FFzZfkQsmxHJ1pl+HqBHhMcd/WqUgZe2YefFA8ERL9rEbZkf0IjqR/23H/HtWp OH24isrFq1maYzQ8Vc/pCVIg8KkwTpw544tGrNOejZ0yGam0ZxZGZohKJTR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1ON8BCuxfbRMWVMDJMbwjXfMgIwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiUp20ZQLPo3ssj8NPmTXO86NJicQE2e5Sj vb6F4hK4u9r/YH7wG3YReydW0azNDEr4ds3+4po5B892/LJML7d/6/gBK3Y4H8nP BwVayM8bFsgL5PHXsCX0igQy29iQRqZhKn2CFjBlIc8dbbJzc7N/JltyCQHGkjmA UNcraKAcgw1QVsgoCjhn1tI1GU9sos+hiavmHo8ujfhBsR8GLVTkzZTixRy4AiZ7 FrM2EJPynwJPGQMh9uFSKTYK0vCwpJnv16BXYJIekOHSQN8cwgh/nsdKX7FzMJ7+ EMHN2VtYF0whjtKn35Q0DpeGkuvR8bVWjedWlkuAMih7Ep+pJXs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:58 2025 by rpki-client