$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: XhzHh8c9R3sVBT1O81c5lvKgDpFZi5/lalsnfEUzeRY= Subject key identifier: CC:A5:28:39:E2:73:91:2A:74:E7:E7:B9:87:41:BD:1A:04:8F:01:C2 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 0BB19F0B68092F7263D84424892273E2633114CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: BB Signing time: Mon 20 Oct 2025 06:52:09 +0000 Manifest this update: Mon 20 Oct 2025 06:47:09 +0000 Manifest next update: Thu 23 Oct 2025 16:53:09 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: KM/36RMo1DzxNLRACQU8xuiWSDMSKu2EKP2d0vEcd7I=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b1:9f:0b:68:09:2f:72:63:d8:44:24:89:22:73:e2:63:31:14:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Oct 20 06:47:09 2025 GMT Not After : Oct 23 16:53:09 2025 GMT Subject: CN=CCA52839E273912A74E7E7B98741BD1A048F01C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:31:fa:97:08:13:67:9f:7f:c9:2a:db:ba: d0:9a:cd:c6:74:4d:84:73:f4:6e:16:23:8d:cd:63: 8f:a5:13:74:41:77:b3:c4:c0:81:0f:33:77:93:b3: 4e:d3:e7:cd:eb:b5:2e:04:94:89:9a:50:76:db:ea: b8:3e:e5:b3:27:35:19:a7:11:8d:4d:3b:6f:75:ec: c4:e2:65:ba:69:91:9f:76:dc:03:ec:e7:fc:df:7e: 08:11:a8:d6:20:65:5d:38:d5:a3:3a:a7:96:77:8c: b9:69:e2:05:34:1b:b0:aa:ea:9d:88:44:21:a9:e4: af:0d:ad:c4:12:e3:e9:7c:85:7f:63:3f:38:be:d3: c0:c8:b7:33:a0:e5:60:bb:b8:f9:ae:75:a7:eb:ed: 43:c6:1a:9d:79:7c:d0:16:b2:bc:09:7b:0c:25:84: b0:52:89:80:6e:1d:e5:cc:04:7e:9c:b8:86:bf:2a: 90:66:36:0d:00:31:07:48:6e:cb:a8:64:cc:8f:25: 4d:b2:52:e8:6d:eb:52:b9:57:b3:17:d9:29:98:fa: 43:c9:c4:a5:44:09:e8:13:8c:b7:fd:d9:05:72:42: 7e:c2:52:56:fc:d1:cd:65:a7:80:4d:2a:01:c6:a5: 18:52:51:03:41:27:0d:e0:34:c0:a1:9f:2f:0a:20: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A5:28:39:E2:73:91:2A:74:E7:E7:B9:87:41:BD:1A:04:8F:01:C2 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:83:f1:87:fe:98:c1:45:e4:dc:bc:65:f3:bf:4b:8d:30:9d: a5:44:ec:9b:0b:a1:d2:70:04:b2:2c:ee:94:44:2b:ce:00:c9: 2a:6f:53:ca:6c:e0:74:c4:fb:02:6a:39:b2:7a:71:92:7d:c8: 10:1d:9f:27:33:6b:a4:fb:5e:c8:c7:bc:5c:14:2f:74:d5:3d: af:31:e2:3f:2e:c5:8a:fd:c7:8c:2b:a5:58:6d:c5:a0:3a:2e: 29:da:5a:60:18:e0:f9:93:63:82:19:2c:9d:43:48:80:b0:40: 72:b3:72:a4:3c:a6:95:0b:d4:fc:5b:bd:a1:83:d0:82:ca:8e: 10:4a:98:95:2b:bf:c7:be:c9:c9:59:48:e8:08:84:19:82:5b: 81:fa:4a:78:80:29:89:94:a6:32:85:b2:6a:6b:6f:55:5a:a2: 05:df:81:65:84:dc:17:5d:b9:39:68:dc:8e:a9:ef:aa:cf:9d: cb:29:59:fe:b0:5b:ae:25:bf:74:e3:74:37:0f:bd:8c:af:d9: b2:fa:a9:91:3d:01:94:2b:95:ed:a9:cf:2d:a1:13:3e:58:d9: 5b:bb:ea:d4:82:5e:82:4b:1b:fd:b1:86:aa:09:95:5f:17:02: 47:8b:9a:44:9a:66:37:7a:11:07:27:b7:f2:6a:1d:0d:bd:fb: 77:58:9a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7GfC2gJL3Jj2EQkiSJz4mMxFM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTEwMjAwNjQ3MDlaFw0yNTEwMjMxNjUzMDlaMDMxMTAvBgNV BAMTKENDQTUyODM5RTI3MzkxMkE3NEU3RTdCOTg3NDFCRDFBMDQ4RjAxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtjH6lwgTZ59/ySrbutCazcZ0 TYRz9G4WI43NY4+lE3RBd7PEwIEPM3eTs07T583rtS4ElImaUHbb6rg+5bMnNRmn EY1NO2917MTiZbppkZ923APs5/zffggRqNYgZV041aM6p5Z3jLlp4gU0G7Cq6p2I RCGp5K8NrcQS4+l8hX9jPzi+08DItzOg5WC7uPmudafr7UPGGp15fNAWsrwJewwl hLBSiYBuHeXMBH6cuIa/KpBmNg0AMQdIbsuoZMyPJU2yUuht61K5V7MX2SmY+kPJ xKVECegTjLf92QVyQn7CUlb80c1lp4BNKgHGpRhSUQNBJw3gNMChny8KIJG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKUoOeJzkSp05+e5h0G9GgSPAcIwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6D8Yf+mMFF5Ny8ZfO/S40wnaVE7JsLodJw BLIs7pREK84AySpvU8ps4HTE+wJqObJ6cZJ9yBAdnycza6T7XsjHvFwUL3TVPa8x 4j8uxYr9x4wrpVhtxaA6LinaWmAY4PmTY4IZLJ1DSICwQHKzcqQ8ppUL1PxbvaGD 0ILKjhBKmJUrv8e+yclZSOgIhBmCW4H6SniAKYmUpjKFsmprb1VaogXfgWWE3Bdd uTlo3I6p76rPncspWf6wW64lv3TjdDcPvYyv2bL6qZE9AZQrle2pzy2hEz5Y2Vu7 6tSCXoJLG/2xhqoJlV8XAkeLmkSaZjd6EQcnt/JqHQ29+3dYmug= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:58 2025 by rpki-client