$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: 2VDhHSqZdD5ITBplD+ByrgV1v0HTdG84CC9e0NlbnsQ= Subject key identifier: FB:CE:BC:3D:45:5B:7A:75:BA:D0:AE:9A:14:55:AF:98:6F:90:9C:E6 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 1D65B07744D0258BF40EFA66351B456FCBE342A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 89 Signing time: Mon 20 Oct 2025 11:42:22 +0000 Manifest this update: Mon 20 Oct 2025 11:37:22 +0000 Manifest next update: Thu 23 Oct 2025 12:53:22 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=) 3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: lk94Lv2tMJ8yzMH6bDsj6429xRMkTXczDBQ+ZNiXsMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:65:b0:77:44:d0:25:8b:f4:0e:fa:66:35:1b:45:6f:cb:e3:42:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Oct 20 11:37:22 2025 GMT Not After : Oct 23 12:53:22 2025 GMT Subject: CN=FBCEBC3D455B7A75BAD0AE9A1455AF986F909CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:1b:cf:3a:71:21:53:0f:13:9e:80:73:08: 41:22:f9:06:eb:38:37:8e:86:a6:79:72:29:fd:55: 6c:af:ed:a5:3c:a4:96:93:a7:e2:5a:f3:e0:9c:da: 34:8c:e8:e4:b8:cf:67:be:25:87:b3:94:63:20:19: ed:b4:62:b3:7f:c5:d5:7d:bd:d2:41:0e:84:0e:33: 79:b9:9d:98:9c:de:e1:c4:c0:93:d9:db:b9:00:5b: fd:2d:05:87:bf:9d:74:7e:b7:01:8d:a0:57:c5:2e: 5b:b4:61:89:6e:d8:cf:20:f9:e3:e1:6e:5f:b8:f8: 9c:c6:e0:fc:40:a4:b6:eb:f9:ff:16:a8:de:85:6f: 25:5d:be:4f:15:b0:fa:dc:33:b3:3c:51:9d:41:69: 56:9b:24:25:4f:03:3a:21:7d:86:71:e8:81:ed:4a: a1:2a:70:ff:54:d4:51:cc:83:7e:c0:e2:53:6c:83: 80:d7:0d:f9:4b:57:ff:c9:8b:7e:b1:c2:1c:5f:97: 75:67:a5:e6:9f:4a:84:27:7f:88:63:00:9c:8b:64: 7d:cf:21:17:49:23:eb:07:fc:66:3b:b0:dd:da:25: f0:3e:8a:a7:a6:6f:fb:98:69:90:56:9d:0e:64:cd: a9:02:dd:b3:db:79:64:ca:92:6d:0b:d0:a4:21:0a: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:BC:3D:45:5B:7A:75:BA:D0:AE:9A:14:55:AF:98:6F:90:9C:E6 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:5f:2f:dc:12:d0:22:69:99:b5:d1:e6:f1:5c:f3:08:80:d3: c5:96:13:11:a9:79:a0:86:bf:a0:2b:12:09:80:3f:88:a8:91: 5d:75:4f:1f:dd:de:6a:ce:d8:60:37:d0:05:0a:d1:4c:16:49: 18:90:3d:65:6f:50:0c:4e:ea:e9:34:a9:a5:43:90:a3:2e:38: cb:fc:f2:2e:19:a6:7f:8d:97:c9:ee:5a:2f:94:1b:74:93:2d: 3b:d1:f0:3a:4a:3f:94:99:88:c9:84:9c:9a:d7:cb:af:14:14: 61:58:2e:d7:ae:4b:6c:5a:91:38:97:87:a8:ff:83:ee:06:34: 7e:6e:70:55:b4:39:c2:ea:8d:c6:7a:99:e4:44:2e:fb:34:8f: f8:1e:20:85:b7:4f:cb:64:b3:b6:23:e8:47:6e:53:e9:15:cb: b2:f5:af:f1:55:44:eb:87:89:a6:4a:4c:75:bb:ab:9f:62:6a: 4a:08:50:90:f9:d7:cf:bf:96:f1:c4:34:66:8d:74:cb:dd:0a: ea:5c:aa:48:e6:74:03:10:1d:9e:a1:8c:8a:dd:a5:db:07:ba: 2c:06:77:22:90:f6:aa:df:9b:24:e8:f3:e1:04:58:7c:c1:9a: 1e:60:55:f7:d0:0e:6f:9e:bd:33:d9:58:36:5d:b5:61:dc:54: 31:63:3d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWWwd0TQJYv0DvpmNRtFb8vjQqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTEwMjAxMTM3MjJaFw0yNTEwMjMxMjUzMjJaMDMxMTAvBgNV BAMTKEZCQ0VCQzNENDU1QjdBNzVCQUQwQUU5QTE0NTVBRjk4NkY5MDlDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5xvPOnEhUw8TnoBzCEEi+Qbr ODeOhqZ5cin9VWyv7aU8pJaTp+Ja8+Cc2jSM6OS4z2e+JYezlGMgGe20YrN/xdV9 vdJBDoQOM3m5nZic3uHEwJPZ27kAW/0tBYe/nXR+twGNoFfFLlu0YYlu2M8g+ePh bl+4+JzG4PxApLbr+f8WqN6FbyVdvk8VsPrcM7M8UZ1BaVabJCVPAzohfYZx6IHt SqEqcP9U1FHMg37A4lNsg4DXDflLV//Ji36xwhxfl3VnpeafSoQnf4hjAJyLZH3P IRdJI+sH/GY7sN3aJfA+iqemb/uYaZBWnQ5kzakC3bPbeWTKkm0L0KQhClHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+868PUVbenW60K6aFFWvmG+QnOYwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxfL9wS0CJpmbXR5vFc8wiA08WWExGpeaCG v6ArEgmAP4iokV11Tx/d3mrO2GA30AUK0UwWSRiQPWVvUAxO6uk0qaVDkKMuOMv8 8i4Zpn+Nl8nuWi+UG3STLTvR8DpKP5SZiMmEnJrXy68UFGFYLteuS2xakTiXh6j/ g+4GNH5ucFW0OcLqjcZ6meRELvs0j/geIIW3T8tks7Yj6EduU+kVy7L1r/FVROuH iaZKTHW7q59iakoIUJD518+/lvHENGaNdMvdCupcqkjmdAMQHZ6hjIrdpdsHuiwG dyKQ9qrfmyTo8+EEWHzBmh5gVffQDm+evTPZWDZdtWHcVDFjPVA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:36 2025 by rpki-client