$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: HJGIyYy6LnIFP0VLsviCJxe9Lc62zAR0JVBr19lXRGY= Subject key identifier: 8D:C0:EB:4F:52:02:23:49:2B:88:F5:41:1D:C9:7D:B6:07:DD:55:E0 Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 53C96FD991C0389E0E7467E51F2041ED9A99A406 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 06:32:10 +0000 Manifest this update: Sun 19 Oct 2025 06:27:10 +0000 Manifest next update: Wed 22 Oct 2025 18:21:10 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) 2: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: O/dOVXI8gh84iuVCkjfRORsc6xfuhdy4Sh0Vjbh2ilQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c9:6f:d9:91:c0:38:9e:0e:74:67:e5:1f:20:41:ed:9a:99:a4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Oct 19 06:27:10 2025 GMT Not After : Oct 22 18:21:10 2025 GMT Subject: CN=8DC0EB4F520223492B88F5411DC97DB607DD55E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1c:29:6b:33:30:44:bf:b2:0c:58:97:60:19: 8e:d0:f7:fc:17:f9:08:de:46:e1:a4:26:b6:2c:e2: 78:48:7e:85:0b:e9:24:40:c0:45:78:aa:27:37:dd: 08:08:5b:60:2a:d7:be:a8:d8:dd:fc:8d:40:7b:f7: b4:dc:c3:1a:96:23:0d:24:a7:f9:48:38:89:b7:27: 7c:2c:19:e5:4f:e7:1d:64:27:89:45:5a:ca:37:2c: 59:52:14:7d:cf:5d:b2:a5:d3:ed:aa:e6:92:2b:41: 8c:30:2f:4b:00:8e:3c:a5:2e:1b:27:b9:09:ba:aa: 17:d5:f3:64:39:8a:00:eb:87:27:4f:91:3b:57:78: d1:32:6d:a8:53:86:f9:ba:49:cf:0f:a0:7a:1e:9b: 6e:38:00:26:05:39:86:60:e2:85:24:18:de:fc:28: fc:43:d9:68:b4:60:51:8c:79:dc:46:52:23:63:60: c0:ec:52:6b:58:6b:6f:a7:84:6a:5e:a1:ce:5d:80: f3:2e:46:5b:ce:92:c0:9d:59:3a:f8:d9:fc:03:03: da:8a:45:fc:84:b4:b4:b6:be:55:22:b8:38:b3:58: 30:21:2b:20:99:14:62:4b:74:c6:2b:2b:91:77:7a: 92:78:5e:84:e0:25:2b:f2:8e:3d:9e:62:b4:f2:8f: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C0:EB:4F:52:02:23:49:2B:88:F5:41:1D:C9:7D:B6:07:DD:55:E0 X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:66:dc:c8:f2:c8:3a:3d:3f:d8:82:b0:e4:6b:11:2e:71:fb: 10:84:70:40:e0:dc:1a:5c:44:da:38:6a:69:ec:56:dd:0d:97: 69:9b:f5:b4:49:17:31:d8:88:aa:eb:f0:aa:a2:75:8a:0f:58: 81:bd:0d:a4:7c:c2:b2:8a:f8:c0:f9:5f:d5:bf:c3:ea:5d:01: 78:75:bb:a1:47:45:26:b7:cc:7d:c9:b8:4f:cc:ac:41:f5:ba: 61:a3:8f:d3:53:62:33:1e:72:75:93:26:6b:8b:60:db:d5:ae: c6:d5:02:2d:80:56:97:60:de:9f:04:b0:6a:78:9f:ce:a4:41: 10:d6:af:77:19:45:f1:83:34:c0:35:5b:f5:9a:2d:90:90:6d: 70:95:de:50:f3:64:29:ad:f9:25:d4:fc:bb:c3:46:ba:74:f7: 8a:01:65:0c:b5:26:da:fa:c1:17:88:a9:f4:49:4e:51:26:bf: 5a:81:06:fd:bc:17:d1:c7:a4:0e:1f:1f:fd:41:8c:f0:aa:d2: df:6c:e7:54:53:11:51:82:b4:50:48:fe:0f:e2:8d:98:4f:59: 26:ca:8b:f9:36:60:3b:32:80:ff:55:ef:70:87:cc:df:ee:b6: 80:18:5e:21:80:3c:77:bf:de:21:e7:da:c7:47:45:06:5e:6f: 55:de:31:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8lv2ZHAOJ4OdGflHyBB7ZqZpAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNTEwMTkwNjI3MTBaFw0yNTEwMjIxODIxMTBaMDMxMTAvBgNV BAMTKDhEQzBFQjRGNTIwMjIzNDkyQjg4RjU0MTFEQzk3REI2MDdERDU1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzHClrMzBEv7IMWJdgGY7Q9/wX +QjeRuGkJrYs4nhIfoUL6SRAwEV4qic33QgIW2Aq176o2N38jUB797TcwxqWIw0k p/lIOIm3J3wsGeVP5x1kJ4lFWso3LFlSFH3PXbKl0+2q5pIrQYwwL0sAjjylLhsn uQm6qhfV82Q5igDrhydPkTtXeNEybahThvm6Sc8PoHoem244ACYFOYZg4oUkGN78 KPxD2Wi0YFGMedxGUiNjYMDsUmtYa2+nhGpeoc5dgPMuRlvOksCdWTr42fwDA9qK RfyEtLS2vlUiuDizWDAhKyCZFGJLdMYrK5F3epJ4XoTgJSvyjj2eYrTyjzu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjcDrT1ICI0kriPVBHcl9tgfdVeAwHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBm3MjyyDo9P9iCsORrES5x+xCEcEDg3Bpc RNo4amnsVt0Nl2mb9bRJFzHYiKrr8KqidYoPWIG9DaR8wrKK+MD5X9W/w+pdAXh1 u6FHRSa3zH3JuE/MrEH1umGjj9NTYjMecnWTJmuLYNvVrsbVAi2AVpdg3p8EsGp4 n86kQRDWr3cZRfGDNMA1W/WaLZCQbXCV3lDzZCmt+SXU/LvDRrp094oBZQy1Jtr6 wReIqfRJTlEmv1qBBv28F9HHpA4fH/1BjPCq0t9s51RTEVGCtFBI/g/ijZhPWSbK i/k2YDsygP9V73CHzN/utoAYXiGAPHe/3iHn2sdHRQZeb1XeMXw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:17:00 2025 by rpki-client