$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft (raw, json) Hash identifier: qd+XQIMZKeq9SmW+W/xW2IbYcRX7aWWyPYJVrNfDM10= Subject key identifier: 8F:E1:C6:E6:9E:B4:2A:F0:3F:90:E4:BC:28:13:FE:C8:F2:44:6E:99 Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Certificate serial: 6C7CA49697DAD17AD45CE88637526A4E8B82DF74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft Manifest number: 01A2 Signing time: Sun 19 Oct 2025 05:51:47 +0000 Manifest this update: Sun 19 Oct 2025 05:46:47 +0000 Manifest next update: Wed 22 Oct 2025 08:17:47 +0000 Files and hashes: 1: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl (hash: EROhItkI+UKISvwDbLGMYFeeOhTHqxZ0B3ngDDuNl/I=) 2: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: 50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7c:a4:96:97:da:d1:7a:d4:5c:e8:86:37:52:6a:4e:8b:82:df:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Validity Not Before: Oct 19 05:46:47 2025 GMT Not After : Oct 22 08:17:47 2025 GMT Subject: CN=8FE1C6E69EB42AF03F90E4BC2813FEC8F2446E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:e9:f1:01:18:0f:c4:19:79:ad:73:68:f8: 5c:98:65:44:aa:10:6e:5d:7e:90:ff:c9:0a:35:54: 88:44:ed:45:c9:fb:f9:2a:e4:4a:61:6e:04:3d:bf: 8a:c9:89:7a:b8:50:56:7f:07:25:e6:88:f2:c5:4f: bd:2b:d9:84:6a:eb:9b:f9:37:9e:40:14:5f:b6:11: 92:df:db:bb:90:d6:da:4e:34:3c:54:4f:52:52:5d: ad:1b:2a:a1:bb:6d:76:6a:d5:3d:26:6b:a6:f0:08: ef:63:88:35:b7:33:b9:00:0c:10:dc:40:ee:f6:ab: 7c:20:2b:50:0e:29:d3:ef:4e:5f:b8:6f:1a:41:00: 14:94:4a:8c:ba:4b:a4:6a:cc:43:90:2e:37:23:f4: 47:20:b0:ef:cc:cf:94:eb:8c:f8:b7:0a:1d:5c:c3: bd:a0:a4:e5:ef:5b:47:a2:ef:1e:d6:00:53:72:a8: b6:87:3d:31:f2:c7:14:40:43:e8:b1:7a:74:31:3d: 84:66:b8:70:0a:87:92:b2:ab:64:4b:48:2b:08:3c: 33:85:59:3e:09:69:40:c8:a6:fc:a5:25:c9:35:d2: 6d:1e:d4:18:01:d5:e6:7e:92:03:6c:37:af:3b:e6: 08:00:e2:3a:ba:8e:e3:12:75:d5:e6:dc:05:4d:e1: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:C6:E6:9E:B4:2A:F0:3F:90:E4:BC:28:13:FE:C8:F2:44:6E:99 X509v3 Authority Key Identifier: keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:59:0a:41:d6:b6:d4:c4:85:24:69:9f:0c:a5:96:6f:ea:92: ec:b7:84:b4:02:69:52:3f:92:bd:01:a0:63:4e:b8:2a:4d:f4: 7a:4a:e6:39:ce:07:5b:45:50:3b:aa:d6:f0:5c:73:03:4a:ed: f6:aa:84:91:4e:e9:c6:5a:08:16:06:07:7a:3b:e6:de:6b:b4: 14:28:36:f3:02:4b:ea:2a:e5:6c:78:1e:c9:11:eb:36:5d:ad: e4:69:d0:47:d1:65:6d:7a:6f:66:64:b0:af:b5:56:d1:8c:f4: 0e:80:72:ab:67:f8:8e:23:d0:3b:46:93:61:e2:a6:1e:82:31: d3:56:c6:88:8c:86:b6:dc:d5:8f:e9:ca:7b:81:df:9a:a8:11: d4:6a:66:4b:79:c0:13:35:53:6e:a9:1f:c6:f5:ce:ed:2b:9f: 93:f7:7f:72:88:56:88:a8:53:c8:3f:a7:02:ab:4b:0d:71:76: 1f:4c:62:5a:c3:df:39:7a:8f:95:e4:ec:23:b2:1a:31:9e:29: 40:20:33:9a:24:91:a1:78:47:8f:61:5e:5f:25:1d:5d:03:1a: 5c:d8:fd:e8:12:d9:33:fa:52:02:89:de:5e:4a:bf:b3:a2:bb: 55:18:34:bd:8d:99:17:84:e0:2b:cf:52:d4:53:e2:98:c4:dc: 20:a3:bd:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHyklpfa0XrUXOiGN1JqTouC33QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG NDZDOEE4NTAeFw0yNTEwMTkwNTQ2NDdaFw0yNTEwMjIwODE3NDdaMDMxMTAvBgNV BAMTKDhGRTFDNkU2OUVCNDJBRjAzRjkwRTRCQzI4MTNGRUM4RjI0NDZFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+OnxARgPxBl5rXNo+FyYZUSq EG5dfpD/yQo1VIhE7UXJ+/kq5EphbgQ9v4rJiXq4UFZ/ByXmiPLFT70r2YRq65v5 N55AFF+2EZLf27uQ1tpONDxUT1JSXa0bKqG7bXZq1T0ma6bwCO9jiDW3M7kADBDc QO72q3wgK1AOKdPvTl+4bxpBABSUSoy6S6RqzEOQLjcj9EcgsO/Mz5TrjPi3Ch1c w72gpOXvW0ei7x7WAFNyqLaHPTHyxxRAQ+ixenQxPYRmuHAKh5Kyq2RLSCsIPDOF WT4JaUDIpvylJck10m0e1BgB1eZ+kgNsN6875ggA4jq6juMSddXm3AVN4Z+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+HG5p60KvA/kOS8KBP+yPJEbpkwHwYDVR0j BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD OEE4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTkwMjM0ZmUtYTcxNS00M2U1LThh YTQtZDk3OWNkMzU3ZDM5LzAvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4 QUZGNDZDOEE4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtZCkHWttTEhSRpnwyllm/qkuy3hLQCaVI/ kr0BoGNOuCpN9HpK5jnOB1tFUDuq1vBccwNK7faqhJFO6cZaCBYGB3o75t5rtBQo NvMCS+oq5Wx4HskR6zZdreRp0EfRZW16b2ZksK+1VtGM9A6Acqtn+I4j0DtGk2Hi ph6CMdNWxoiMhrbc1Y/pynuB35qoEdRqZkt5wBM1U26pH8b1zu0rn5P3f3KIVoio U8g/pwKrSw1xdh9MYlrD3zl6j5Xk7COyGjGeKUAgM5okkaF4R49hXl8lHV0DGlzY /egS2TP6UgKJ3l5Kv7Oiu1UYNL2NmReE4CvPUtRT4pjE3CCjvcM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:20 2025 by rpki-client