$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft File: 93D212CCFA351E8E694E5AFB214D80DC8C741916.mft (raw, json) Hash identifier: H7I1VD8Hoslki+/sLUklLRAdKZb0gp5h3wt1NmGZB0c= Subject key identifier: B4:32:AB:76:33:82:67:CC:A9:0A:DB:6E:AE:3E:DE:33:22:FD:28:92 Authority key identifier: 93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 Certificate issuer: /CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Certificate serial: 49B81D85E16EFD5BA3E37FEEE4FA0517831B77C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft Manifest number: FA Signing time: Sat 18 Oct 2025 14:20:47 +0000 Manifest this update: Sat 18 Oct 2025 14:15:47 +0000 Manifest next update: Wed 22 Oct 2025 00:09:47 +0000 Files and hashes: 1: 93D212CCFA351E8E694E5AFB214D80DC8C741916.crl (hash: DkHMqwldp1TF7B+yJjsHCYRW+xuFZIdj5Gqibg6gfPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b8:1d:85:e1:6e:fd:5b:a3:e3:7f:ee:e4:fa:05:17:83:1b:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Validity Not Before: Oct 18 14:15:47 2025 GMT Not After : Oct 22 00:09:47 2025 GMT Subject: CN=B432AB76338267CCA90ADB6EAE3EDE3322FD2892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:ff:62:12:84:17:6b:29:ae:3c:40:a6:5c: e2:e2:3b:8f:03:48:59:c6:6c:6a:04:5e:70:38:c8: 94:d5:c2:b3:e4:fb:fb:f1:f8:52:12:4c:89:82:f4: 9b:66:2d:e6:b4:fe:05:9c:63:e0:90:e4:d6:ee:9c: 34:b8:42:a1:54:4c:30:df:fd:ce:90:1b:b5:6c:17: c9:74:02:19:18:23:70:37:6b:4c:e6:0a:00:33:ab: 52:5d:bb:30:22:da:aa:f4:26:f3:50:a8:fa:05:e6: e7:17:e7:dc:dc:b6:f6:25:8b:9d:73:72:a6:5c:49: f5:d0:e7:ae:b1:4b:0b:5e:25:5e:e6:69:17:df:2b: 52:3a:d6:d2:f9:14:8e:d6:a8:6b:e7:db:d3:92:16: fb:a2:e4:dd:05:6e:83:c7:13:b5:54:73:08:7d:81: a3:19:17:37:1f:34:e4:f3:ec:9b:db:68:1e:5a:cb: d7:f3:c9:de:66:f6:02:d4:4c:0a:bb:c1:39:82:1d: a2:26:dd:55:56:f3:83:28:14:7d:70:b1:51:02:7a: c1:c1:ef:df:6b:18:2c:13:b6:13:c7:14:9e:c9:30: 9d:54:61:a9:7b:6c:44:11:f6:37:20:e6:a6:e2:ba: 9b:4e:19:07:cf:66:33:49:bf:e5:34:a6:45:4e:7c: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:32:AB:76:33:82:67:CC:A9:0A:DB:6E:AE:3E:DE:33:22:FD:28:92 X509v3 Authority Key Identifier: keyid:93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:d1:36:6b:93:34:a9:8d:13:5f:d5:89:83:b0:25:72:d8: a4:04:fa:6f:6f:16:27:85:f5:9a:1c:c5:ec:d7:7f:52:8c:06: 26:78:bd:07:72:59:50:9f:51:54:ca:9f:ea:61:b3:16:ed:62: 25:c1:d1:d3:84:c8:fb:63:70:c8:4b:6a:5b:c6:41:f2:f7:c5: af:d8:a2:f1:b2:f9:f5:a0:b1:b0:12:03:ca:f0:69:50:8a:02: 82:5a:18:f5:e3:26:4b:4f:7c:51:18:bc:47:ef:32:14:37:a8: c1:61:26:b6:17:85:09:30:5d:2d:e8:d3:57:97:98:74:31:1b: 68:df:ca:14:63:28:ae:7b:04:71:c0:4d:2b:49:c1:90:54:49: c2:39:78:c8:73:6c:37:df:fd:cc:5d:9e:77:d6:a3:47:01:46: 07:18:f9:a0:16:ee:7a:78:b9:44:d4:55:39:86:76:35:0a:06: 5b:21:fc:fe:30:f8:97:38:fd:84:b3:60:a8:c7:f6:ef:96:cc: 7e:db:91:35:9d:57:26:4a:b8:ff:d6:c2:86:4a:66:dc:f9:8f: d4:a7:ab:0a:12:ad:84:0a:e5:17:6b:b5:47:a8:64:a8:4a:60: b2:fd:73:e8:b9:e9:71:34:b3:b7:fb:5b:57:47:1f:77:53:62: ac:9f:25:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbgdheFu/Vuj43/u5PoFF4Mbd8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4 Qzc0MTkxNjAeFw0yNTEwMTgxNDE1NDdaFw0yNTEwMjIwMDA5NDdaMDMxMTAvBgNV BAMTKEI0MzJBQjc2MzM4MjY3Q0NBOTBBREI2RUFFM0VERTMzMjJGRDI4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh/9iEoQXaymuPECmXOLiO48D SFnGbGoEXnA4yJTVwrPk+/vx+FISTImC9JtmLea0/gWcY+CQ5NbunDS4QqFUTDDf /c6QG7VsF8l0AhkYI3A3a0zmCgAzq1JduzAi2qr0JvNQqPoF5ucX59zctvYli51z cqZcSfXQ566xSwteJV7maRffK1I61tL5FI7WqGvn29OSFvui5N0FboPHE7VUcwh9 gaMZFzcfNOTz7JvbaB5ay9fzyd5m9gLUTAq7wTmCHaIm3VVW84MoFH1wsVECesHB 799rGCwTthPHFJ7JMJ1UYal7bEQR9jcg5qbiuptOGQfPZjNJv+U0pkVOfK59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDKrdjOCZ8ypCtturj7eMyL9KJIwHwYDVR0j BBgwFoAUk9ISzPo1Ho5pTlr7IU2A3Ix0GRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS85M0QyMTJDQ0ZB MzUxRThFNjk0RTVBRkIyMTREODBEQzhDNzQxOTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4Qzc0 MTkxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgw REM4Qzc0MTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCn0TZrkzSpjRNf1YmDsCVy2KQE+m9vFieF 9ZocxezXf1KMBiZ4vQdyWVCfUVTKn+phsxbtYiXB0dOEyPtjcMhLalvGQfL3xa/Y ovGy+fWgsbASA8rwaVCKAoJaGPXjJktPfFEYvEfvMhQ3qMFhJrYXhQkwXS3o01eX mHQxG2jfyhRjKK57BHHATStJwZBUScI5eMhzbDff/cxdnnfWo0cBRgcY+aAW7np4 uUTUVTmGdjUKBlsh/P4w+Jc4/YSzYKjH9u+WzH7bkTWdVyZKuP/WwoZKZtz5j9Sn qwoSrYQK5RdrtUeoZKhKYLL9c+i56XE0s7f7W1dHH3dTYqyfJUA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:46:06 2025 by rpki-client