$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: oWleq32k0M3DtvJGnSgd1AqGu+s6zf6NZZU2reMYGv4= Subject key identifier: F1:4F:AD:7F:C7:4E:F9:E1:45:B5:B7:91:A0:2C:78:7C:F3:33:40:6E Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 48A663F4F959D6491F04DA0898DE158F4873E8E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02B2 Signing time: Sun 19 Oct 2025 05:52:13 +0000 Manifest this update: Sun 19 Oct 2025 05:47:13 +0000 Manifest next update: Wed 22 Oct 2025 13:20:13 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) 2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: GUqpfwE90/TKgjwELN3rkKbAS73egUKrE3+pPScEu7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a6:63:f4:f9:59:d6:49:1f:04:da:08:98:de:15:8f:48:73:e8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Oct 19 05:47:13 2025 GMT Not After : Oct 22 13:20:13 2025 GMT Subject: CN=F14FAD7FC74EF9E145B5B791A02C787CF333406E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:fa:96:03:a9:c5:8c:8f:94:e5:7f:12:87: 21:0a:4f:49:48:9f:26:6b:87:e0:00:c2:70:d9:8a: da:f0:2a:88:4d:55:56:63:26:c3:04:0e:c4:3d:0f: d2:ab:13:20:da:b8:56:26:e9:cc:de:3e:3d:df:55: ad:19:25:e8:2a:ae:49:21:96:70:ea:4d:69:f3:e9: ed:62:62:69:c0:de:5c:e7:6b:4d:56:f2:c7:be:85: f1:8e:9b:c3:35:08:31:28:1f:58:46:59:45:fa:55: c9:3e:cc:4f:e6:dc:f6:c4:65:ce:e0:4b:eb:28:11: f8:dd:10:34:5a:5f:9b:30:18:ca:8a:c6:93:2d:4a: bd:64:3f:eb:bc:95:96:08:85:ee:16:79:63:42:fc: ad:54:c2:84:25:00:21:67:49:e8:1a:22:dd:51:53: 6c:c1:e7:5f:13:d8:ed:5f:9e:91:e8:76:ae:4d:a2: 7f:26:1b:34:b6:d7:7f:e2:52:f8:f1:bd:2c:f9:88: 77:70:5a:92:9c:75:61:6e:64:5b:61:46:ff:63:8d: 2f:e4:fd:5e:d9:e0:22:43:66:78:92:21:71:08:7b: 98:ed:92:68:09:5c:61:93:b7:a6:6c:ec:ff:3e:fe: 48:0e:c9:62:c4:4e:f2:b1:f1:82:71:d7:fd:2b:38: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:AD:7F:C7:4E:F9:E1:45:B5:B7:91:A0:2C:78:7C:F3:33:40:6E X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:70:7a:8a:b6:d6:65:9f:f3:37:53:98:c8:c3:e0:f8:21: 4d:06:7e:f9:5a:30:7e:77:b8:11:74:72:16:50:ea:f3:b4:62: 01:0e:e2:33:18:4e:e0:cb:08:a8:84:3d:62:8b:71:08:b5:84: 93:c2:f7:15:3c:90:ac:59:37:61:f0:0a:68:e4:f7:51:c2:f2: ef:4b:59:e1:d2:7d:43:32:57:18:8a:93:36:a1:ae:99:ce:15: 0e:09:14:4c:b2:4c:e2:08:bc:4b:e8:9f:03:51:e5:7e:9d:d7: ac:61:fd:ee:f0:fe:63:48:7d:14:90:06:be:c0:0c:ba:cb:60: 79:6d:62:e9:7c:86:d0:7d:97:06:a9:bc:f7:0b:df:04:0f:66: 09:0e:f2:15:3f:20:cf:f7:d6:56:5d:e4:c6:ea:06:59:53:85: 45:a2:06:1c:48:c3:6a:f5:e5:f6:75:3f:97:92:8b:f5:79:84: 69:24:0f:cc:8c:6c:2f:95:aa:de:5e:86:b0:c7:21:63:8d:53: f9:ee:ed:38:11:a0:52:47:be:71:88:99:82:65:3d:4a:e8:d7: 62:e4:ba:9b:f2:e3:8f:99:fe:c8:dc:67:68:2d:89:77:77:65: c0:0c:9f:81:5c:62:79:3f:53:b3:9f:14:a8:4b:2c:cb:fc:c7: 2b:d0:2d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKZj9PlZ1kkfBNoImN4Vj0hz6OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTEwMTkwNTQ3MTNaFw0yNTEwMjIxMzIwMTNaMDMxMTAvBgNV BAMTKEYxNEZBRDdGQzc0RUY5RTE0NUI1Qjc5MUEwMkM3ODdDRjMzMzQwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W/qWA6nFjI+U5X8ShyEKT0lI nyZrh+AAwnDZitrwKohNVVZjJsMEDsQ9D9KrEyDauFYm6czePj3fVa0ZJegqrkkh lnDqTWnz6e1iYmnA3lzna01W8se+hfGOm8M1CDEoH1hGWUX6Vck+zE/m3PbEZc7g S+soEfjdEDRaX5swGMqKxpMtSr1kP+u8lZYIhe4WeWNC/K1UwoQlACFnSegaIt1R U2zB518T2O1fnpHodq5Non8mGzS213/iUvjxvSz5iHdwWpKcdWFuZFthRv9jjS/k /V7Z4CJDZniSIXEIe5jtkmgJXGGTt6Zs7P8+/kgOyWLETvKx8YJx1/0rOCy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8U+tf8dO+eFFtbeRoCx4fPMzQG4wHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJTcHqKttZln/M3U5jIw+D4IU0GfvlaMH53 uBF0chZQ6vO0YgEO4jMYTuDLCKiEPWKLcQi1hJPC9xU8kKxZN2HwCmjk91HC8u9L WeHSfUMyVxiKkzahrpnOFQ4JFEyyTOIIvEvonwNR5X6d16xh/e7w/mNIfRSQBr7A DLrLYHltYul8htB9lwapvPcL3wQPZgkO8hU/IM/31lZd5MbqBllThUWiBhxIw2r1 5fZ1P5eSi/V5hGkkD8yMbC+Vqt5ehrDHIWONU/nu7TgRoFJHvnGImYJlPUro12Lk upvy44+Z/sjcZ2gtiXd3ZcAMn4FcYnk/U7OfFKhLLMv8xyvQLWk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:54 2025 by rpki-client