$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: yAkDcPCZkTdIENuIkO0hqFgySkEpMeoOdMMAzeI8yDw= Subject key identifier: 5B:D1:94:B0:FD:5D:69:2D:BC:40:4A:79:B8:4C:83:04:27:1B:00:FE Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 43196BBFA28BE0617A49FD4A5C9EBB8510397C93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0340 Signing time: Mon 20 Oct 2025 00:21:47 +0000 Manifest this update: Mon 20 Oct 2025 00:16:47 +0000 Manifest next update: Thu 23 Oct 2025 04:24:47 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 2: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: tVESCETAmUoHHGV5zrUs9xlgFxaLwvGQGsx5fHnaLNE=) 4: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:19:6b:bf:a2:8b:e0:61:7a:49:fd:4a:5c:9e:bb:85:10:39:7c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Oct 20 00:16:47 2025 GMT Not After : Oct 23 04:24:47 2025 GMT Subject: CN=5BD194B0FD5D692DBC404A79B84C8304271B00FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:72:2a:46:84:84:af:c3:c2:cd:35:be:c0: 60:b2:df:45:57:9b:68:82:bb:9c:9d:1d:59:29:28: 38:ba:1c:57:44:e4:33:e5:6e:ad:30:95:3b:fa:1a: 1e:69:13:0b:cd:bb:13:b4:3c:f2:b6:d9:80:2c:ab: 78:23:4f:5c:5a:ce:09:ce:bc:82:10:a4:54:dd:9d: 62:e1:b1:51:09:09:ce:e8:f4:0c:62:90:7a:11:7b: 0a:7f:ab:a6:aa:2f:e2:d5:bd:22:73:42:0b:15:16: 16:d9:83:44:cc:f1:3e:7b:0b:75:42:70:cd:73:09: ac:e6:c2:54:85:1d:e4:dc:98:bb:da:fd:d4:c5:4d: 7b:f1:07:75:d9:11:ac:81:33:f5:31:21:e1:56:e4: d7:03:be:3a:68:27:48:fd:09:69:a5:f9:90:9f:d7: f6:94:1b:97:5f:f0:50:81:8e:8d:69:64:38:c4:c0: 25:57:36:c3:a9:41:6b:f1:26:ae:06:ee:85:da:93: 2d:d7:3d:ed:76:0d:e8:83:2d:fe:55:99:60:7e:79: fa:e0:5e:a4:31:5a:4f:1e:a1:a9:bc:75:2c:27:85: cc:fa:e2:99:70:a6:5e:17:de:0a:31:c2:6c:3f:8e: 6b:75:28:fa:b3:0d:23:56:94:24:3d:2f:76:41:55: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:94:B0:FD:5D:69:2D:BC:40:4A:79:B8:4C:83:04:27:1B:00:FE X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:49:5f:3a:c0:9c:c9:6b:a7:0f:1e:e7:0d:4d:a5:f8:40:eb: 3d:9b:4a:5f:89:9b:13:9f:81:fd:04:1e:c2:7b:19:66:bf:cd: d9:ea:51:e6:bc:2d:d2:2e:6e:c4:0e:3e:88:86:11:a6:59:1c: 7e:4e:6c:72:fc:96:3a:c6:2a:f1:11:2c:6b:ad:70:11:4c:33: 3a:ec:91:fe:01:89:e6:ef:4a:52:c7:ab:50:14:52:51:29:8f: a9:dc:7a:90:de:a5:e3:62:9e:d3:db:ec:99:10:7b:fd:54:ea: cc:df:68:2c:9d:82:b5:68:23:70:81:58:ca:f0:14:62:21:0f: cb:bd:4d:a2:11:ad:24:ca:15:24:d7:ea:1e:21:40:d0:22:40: c4:08:ea:22:ee:97:5f:0c:d3:2d:e1:c3:b7:be:50:39:8e:3b: d8:4a:2d:41:cd:71:6e:50:5a:52:27:67:9d:b7:d2:b5:cd:2d: f0:5e:f9:e1:4b:39:01:7c:3f:19:5f:33:18:db:ae:92:a5:aa: 88:59:05:24:72:67:13:92:cb:19:f5:8f:8a:52:6d:c3:2e:f4: d6:7e:59:8a:a8:0a:fb:9b:d0:62:38:56:16:36:ef:79:67:e5: 29:3c:c7:e7:15:fd:25:be:62:e3:a9:46:b7:95:ae:22:1b:94: 43:ee:3f:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxlrv6KL4GF6Sf1KXJ67hRA5fJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTEwMjAwMDE2NDdaFw0yNTEwMjMwNDI0NDdaMDMxMTAvBgNV BAMTKDVCRDE5NEIwRkQ1RDY5MkRCQzQwNEE3OUI4NEM4MzA0MjcxQjAwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3nIqRoSEr8PCzTW+wGCy30VX m2iCu5ydHVkpKDi6HFdE5DPlbq0wlTv6Gh5pEwvNuxO0PPK22YAsq3gjT1xazgnO vIIQpFTdnWLhsVEJCc7o9AxikHoRewp/q6aqL+LVvSJzQgsVFhbZg0TM8T57C3VC cM1zCazmwlSFHeTcmLva/dTFTXvxB3XZEayBM/UxIeFW5NcDvjpoJ0j9CWml+ZCf 1/aUG5df8FCBjo1pZDjEwCVXNsOpQWvxJq4G7oXaky3XPe12DeiDLf5VmWB+efrg XqQxWk8eoam8dSwnhcz64plwpl4X3goxwmw/jmt1KPqzDSNWlCQ9L3ZBVbrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9GUsP1daS28QEp5uEyDBCcbAP4wHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdJXzrAnMlrpw8e5w1NpfhA6z2bSl+JmxOf gf0EHsJ7GWa/zdnqUea8LdIubsQOPoiGEaZZHH5ObHL8ljrGKvERLGutcBFMMzrs kf4BiebvSlLHq1AUUlEpj6ncepDepeNintPb7JkQe/1U6szfaCydgrVoI3CBWMrw FGIhD8u9TaIRrSTKFSTX6h4hQNAiQMQI6iLul18M0y3hw7e+UDmOO9hKLUHNcW5Q WlInZ5230rXNLfBe+eFLOQF8PxlfMxjbrpKlqohZBSRyZxOSyxn1j4pSbcMu9NZ+ WYqoCvub0GI4VhY273ln5Sk8x+cV/SW+YuOpRreVriIblEPuPxI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:45 2025 by rpki-client