$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: OlAubSu60/Pht0YUMQXMCEEQG/Cl0cOqMmXfnEKJs34= Subject key identifier: 23:31:7D:F4:D4:45:43:C7:03:37:15:73:57:FA:3C:C9:4C:A7:F1:E5 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 0984389350BBEC6325F10334A5B8AE3ACC5AD0F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: D6 Signing time: Mon 20 Oct 2025 03:41:35 +0000 Manifest this update: Mon 20 Oct 2025 03:36:35 +0000 Manifest next update: Thu 23 Oct 2025 07:26:35 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: Kj/NklpAMWh/XInozQA5DXGhSZusFe9q+gA5gh8PqI4=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:84:38:93:50:bb:ec:63:25:f1:03:34:a5:b8:ae:3a:cc:5a:d0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Oct 20 03:36:35 2025 GMT Not After : Oct 23 07:26:35 2025 GMT Subject: CN=23317DF4D44543C70337157357FA3CC94CA7F1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:91:c9:75:5d:5e:b6:eb:86:64:d8:ff:4a: 0d:8f:30:5d:eb:14:f9:e1:ff:ec:33:93:a7:36:64: fd:aa:dc:39:3c:6c:09:da:e4:f8:ac:51:d0:cc:6d: 1e:0e:ae:a6:60:10:19:1c:89:87:92:db:57:0b:0b: 7f:a4:23:96:1e:49:61:44:40:4f:92:7c:60:db:5e: 7e:19:a8:1e:8d:12:7f:c8:dd:ac:ea:59:3f:72:94: 18:5b:aa:cd:1c:b0:62:27:bc:db:55:82:92:1f:d5: 3d:e4:5a:f5:5e:f3:75:db:0d:c2:05:ac:40:1b:64: d5:2f:ad:a2:0b:e3:fd:33:82:54:01:03:6d:a1:31: 24:f5:1c:d9:1e:45:a0:22:85:60:40:31:c1:44:27: 80:ab:e6:45:70:41:f9:2b:3f:96:28:5a:80:0b:8d: 0c:34:fb:b0:86:33:93:f1:04:54:f0:bf:9d:30:95: d4:0b:d4:04:8f:91:8e:47:47:21:28:a1:79:24:86: e2:11:9a:3d:9a:c4:1d:7d:1c:79:0b:fd:4a:c1:92: b5:19:c2:73:51:19:69:a5:ea:cb:80:2b:6a:8f:b8: 20:e4:a4:1e:1a:77:db:dd:9b:97:3b:8a:ca:fc:a4: 5e:2c:bd:b2:61:3c:4c:7c:4a:b5:19:f0:d5:38:dc: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:31:7D:F4:D4:45:43:C7:03:37:15:73:57:FA:3C:C9:4C:A7:F1:E5 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ab:98:18:b6:0a:22:3b:84:5c:f6:9a:84:03:63:3d:9e:67: 44:b0:f0:3b:eb:21:cd:f3:dc:13:5e:2c:40:4b:79:08:bd:07: d7:3b:ae:9d:7b:fb:8e:c1:80:3d:56:1c:04:da:37:ec:3d:9d: 3c:75:9f:68:40:33:ce:0d:7a:6a:09:33:db:d4:27:78:35:68: 10:c7:ef:ec:e7:0a:1d:97:1a:25:7e:6f:2e:04:2a:ae:38:a7: 46:47:bb:0a:5e:f2:91:85:7c:d0:fc:79:5b:ae:f8:29:c7:7d: 6c:1a:53:76:b6:4f:c5:42:63:b9:a9:ec:7c:9e:05:2f:c4:e7: 46:e1:4a:ee:ae:bd:1f:fc:59:4a:43:4e:69:bc:e3:d5:39:3a: f1:09:8a:f4:84:a2:d0:c9:f1:0b:11:39:cc:36:93:38:4c:61: 63:ba:d3:35:f5:94:07:69:9c:f1:85:d1:8a:be:ae:15:a5:09: 68:10:6b:13:bb:82:7a:cf:2b:a4:d6:72:4a:5d:8b:5d:2e:f3: 69:6b:ce:50:f5:c8:a8:e0:3e:61:01:bf:92:f3:d0:dd:d2:6d: ac:47:ba:3d:7a:1c:bc:da:f9:86:e8:f5:15:a6:bd:df:ce:10: d1:db:9f:ea:6b:ab:d6:ca:e6:29:4a:d6:cb:b6:2f:6d:91:98: 3e:f7:38:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYQ4k1C77GMl8QM0pbiuOsxa0PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTEwMjAwMzM2MzVaFw0yNTEwMjMwNzI2MzVaMDMxMTAvBgNV BAMTKDIzMzE3REY0RDQ0NTQzQzcwMzM3MTU3MzU3RkEzQ0M5NENBN0YxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEpHJdV1etuuGZNj/Sg2PMF3r FPnh/+wzk6c2ZP2q3Dk8bAna5PisUdDMbR4OrqZgEBkciYeS21cLC3+kI5YeSWFE QE+SfGDbXn4ZqB6NEn/I3azqWT9ylBhbqs0csGInvNtVgpIf1T3kWvVe83XbDcIF rEAbZNUvraIL4/0zglQBA22hMST1HNkeRaAihWBAMcFEJ4Cr5kVwQfkrP5YoWoAL jQw0+7CGM5PxBFTwv50wldQL1ASPkY5HRyEooXkkhuIRmj2axB19HHkL/UrBkrUZ wnNRGWml6suAK2qPuCDkpB4ad9vdm5c7isr8pF4svbJhPEx8SrUZ8NU43FUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIzF99NRFQ8cDNxVzV/o8yUyn8eUwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmrmBi2CiI7hFz2moQDYz2eZ0Sw8DvrIc3z 3BNeLEBLeQi9B9c7rp17+47BgD1WHATaN+w9nTx1n2hAM84NemoJM9vUJ3g1aBDH 7+znCh2XGiV+by4EKq44p0ZHuwpe8pGFfND8eVuu+CnHfWwaU3a2T8VCY7mp7Hye BS/E50bhSu6uvR/8WUpDTmm849U5OvEJivSEotDJ8QsROcw2kzhMYWO60zX1lAdp nPGF0Yq+rhWlCWgQaxO7gnrPK6TWckpdi10u82lrzlD1yKjgPmEBv5Lz0N3SbaxH uj16HLza+Ybo9RWmvd/OENHbn+prq9bK5ilK1su2L22RmD73OG8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:00 2025 by rpki-client