$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: 6l5h5UgamWWxutGYk55MYZ6KpsnkcQ1HZAh00neLTbY= Subject key identifier: C1:A8:5C:A7:CB:CB:4F:B2:05:28:92:53:14:B6:27:C7:5D:0D:94:A1 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 5588B9FDD98C2C1ED549CB9B951B644DC825444D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 019C Signing time: Sun 19 Oct 2025 16:51:48 +0000 Manifest this update: Sun 19 Oct 2025 16:46:48 +0000 Manifest next update: Wed 22 Oct 2025 21:32:48 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: eJMahs5nyu37le9hS6DVclGIOLndhxUSc+ljec7W0SI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:b9:fd:d9:8c:2c:1e:d5:49:cb:9b:95:1b:64:4d:c8:25:44:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Oct 19 16:46:48 2025 GMT Not After : Oct 22 21:32:48 2025 GMT Subject: CN=C1A85CA7CBCB4FB20528925314B627C75D0D94A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:34:d2:f9:50:70:87:26:d1:45:a8:0c:d3: 76:8b:1e:23:30:e4:f7:d3:9b:ae:a8:c2:0f:24:02: 21:b4:85:b9:97:01:32:48:9d:53:8e:f2:92:c7:47: b1:77:46:25:c5:cc:43:ef:06:ad:f1:d9:58:c1:5b: 17:da:03:f6:1d:f8:f7:7d:62:b2:f4:c6:82:90:d5: ac:a7:6c:04:8a:b9:f7:c6:64:52:34:31:b8:91:23: f4:ce:99:9b:c1:de:96:03:d0:8d:2d:a8:9d:e1:15: d4:c5:72:94:9e:90:a9:45:bc:99:86:8b:36:98:29: f1:10:12:54:4e:39:d4:d5:34:6b:d5:6a:3b:22:e8: 31:38:19:4d:44:a7:30:14:fa:87:ad:68:1e:bf:99: e1:9c:b8:4f:08:d8:59:d3:94:ca:a7:13:fb:d6:91: ed:91:73:51:a4:62:2e:79:7a:59:35:85:06:3f:5d: 16:19:12:01:69:dd:6c:e4:f1:3a:6f:c5:42:fd:f7: d4:b2:ab:1a:18:c3:f3:48:25:af:5d:27:11:d5:fa: 1f:e8:ca:84:aa:9c:12:0c:17:81:ed:85:8a:98:cc: 0c:04:de:88:17:90:05:fd:ee:44:ca:92:2b:50:b1: e0:fd:fb:16:d7:28:31:9a:31:75:dc:3d:e8:ef:00: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:5C:A7:CB:CB:4F:B2:05:28:92:53:14:B6:27:C7:5D:0D:94:A1 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:36:24:8f:25:33:b1:08:3c:7b:ee:c2:db:a7:b9:8c:71:b4: e7:f1:14:bf:c5:fa:50:06:a9:41:c0:7c:b0:b6:56:28:e1:cf: 26:83:ee:6c:cd:0b:85:37:c8:61:f0:1d:0f:61:f9:df:6e:e3: 00:9c:e1:7e:62:ce:56:52:6b:8a:40:87:6b:c1:d7:d1:0f:36: 25:9a:b6:c8:af:93:51:03:86:8d:d0:a2:1d:06:6f:4e:5b:7e: 17:88:78:f5:80:cb:de:8f:fb:98:02:ab:03:c4:e0:b3:fe:78: 2d:13:c0:a4:f9:b5:7a:b7:0a:0d:3e:d3:84:3e:43:40:f8:94: 41:fb:89:5d:ff:9a:81:1c:34:5e:5e:48:67:c9:84:af:ca:60: 8e:fc:67:90:cd:c5:b0:c4:9f:55:b4:1b:d0:f6:81:77:b8:4e: 1c:92:65:1c:f4:13:a2:28:f6:7a:05:01:79:3e:55:0b:ff:19: 5c:cd:21:c4:a3:28:70:b5:92:49:aa:41:c6:73:4a:1b:34:f4: 4e:16:37:65:fc:f8:9a:31:80:13:9f:f4:7c:b8:25:65:06:6b: 91:b1:a8:c4:47:32:29:67:ed:ae:e0:88:8c:63:eb:bc:cf:4a: db:71:1a:48:db:f1:a5:db:3b:45:ad:77:ba:62:05:1c:fa:2f: ba:c6:59:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYi5/dmMLB7VScublRtkTcglRE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTEwMTkxNjQ2NDhaFw0yNTEwMjIyMTMyNDhaMDMxMTAvBgNV BAMTKEMxQTg1Q0E3Q0JDQjRGQjIwNTI4OTI1MzE0QjYyN0M3NUQwRDk0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZDTS+VBwhybRRagM03aLHiMw 5PfTm66owg8kAiG0hbmXATJInVOO8pLHR7F3RiXFzEPvBq3x2VjBWxfaA/Yd+Pd9 YrL0xoKQ1aynbASKuffGZFI0MbiRI/TOmZvB3pYD0I0tqJ3hFdTFcpSekKlFvJmG izaYKfEQElROOdTVNGvVajsi6DE4GU1EpzAU+oetaB6/meGcuE8I2FnTlMqnE/vW ke2Rc1GkYi55elk1hQY/XRYZEgFp3Wzk8TpvxUL999SyqxoYw/NIJa9dJxHV+h/o yoSqnBIMF4HthYqYzAwE3ogXkAX97kTKkitQseD9+xbXKDGaMXXcPejvAFixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwahcp8vLT7IFKJJTFLYnx10NlKEwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF42JI8lM7EIPHvuwtunuYxxtOfxFL/F+lAG qUHAfLC2VijhzyaD7mzNC4U3yGHwHQ9h+d9u4wCc4X5izlZSa4pAh2vB19EPNiWa tsivk1EDho3Qoh0Gb05bfheIePWAy96P+5gCqwPE4LP+eC0TwKT5tXq3Cg0+04Q+ Q0D4lEH7iV3/moEcNF5eSGfJhK/KYI78Z5DNxbDEn1W0G9D2gXe4ThySZRz0E6Io 9noFAXk+VQv/GVzNIcSjKHC1kkmqQcZzShs09E4WN2X8+JoxgBOf9Hy4JWUGa5Gx qMRHMiln7a7giIxj67zPSttxGkjb8aXbO0Wtd7piBRz6L7rGWUE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:13 2025 by rpki-client