$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: JN8n0erboWa88nc3v+UClP3d7rd5xfpiOSLhvodX+iE= Subject key identifier: 4B:9D:14:FC:A9:13:99:DA:AC:B5:AF:C7:44:4A:72:49:4B:B5:ED:5A Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 62138C7559CFA3F24A9C501ED25EED149D7E598E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 0214 Signing time: Sat 18 Oct 2025 14:11:13 +0000 Manifest this update: Sat 18 Oct 2025 14:06:13 +0000 Manifest next update: Tue 21 Oct 2025 23:47:13 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: QXEOATbSNfF71v8Qc/KSyrr6lFMsGZSlvH+/1QlFUdc=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:13:8c:75:59:cf:a3:f2:4a:9c:50:1e:d2:5e:ed:14:9d:7e:59:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Oct 18 14:06:13 2025 GMT Not After : Oct 21 23:47:13 2025 GMT Subject: CN=4B9D14FCA91399DAACB5AFC7444A72494BB5ED5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:86:60:8c:8a:d7:c3:33:21:ca:33:d5:9d: 14:d8:b3:1b:a4:c9:03:ce:6b:52:1e:f8:74:c1:55: ca:4c:a7:1c:ac:45:d9:44:f1:cb:ff:cf:15:fd:4e: f1:b5:e2:82:b8:ba:93:14:cc:66:3c:ab:0b:a2:96: 69:93:f6:92:df:22:ad:9d:4d:87:71:f1:af:b9:d0: de:ea:f6:f5:11:25:e0:65:17:35:18:82:67:63:be: f3:fd:89:8f:15:be:ac:87:11:c5:46:e6:a7:e7:5a: d5:d4:1f:a0:4a:92:a6:6f:60:bf:4c:1e:52:30:6f: 09:2c:0f:11:00:c5:64:ca:3f:18:ab:dc:50:01:bf: 48:76:94:ea:45:b4:ec:80:ef:b9:59:3c:0c:7a:dc: 0f:59:3b:fe:9a:aa:de:ac:a0:80:ce:7a:9c:58:ba: 99:61:b8:1b:14:0e:9b:92:b4:c4:d8:72:e0:98:de: 2a:14:fc:cb:d3:a9:ab:c3:05:1a:28:3a:51:12:c7: 7f:d6:e5:ce:33:2b:9f:02:8d:1a:b9:22:e0:9f:68: 41:bb:ac:79:d7:a5:0e:c6:a1:f1:35:e9:9f:eb:14: 25:19:4d:1c:02:8d:b7:0a:a6:cf:38:28:e8:64:ab: 92:c8:40:28:52:85:15:26:7f:7d:1e:3e:2b:33:92: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9D:14:FC:A9:13:99:DA:AC:B5:AF:C7:44:4A:72:49:4B:B5:ED:5A X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:35:f6:e1:48:2e:cd:0b:6b:bc:5b:72:db:df:b4:1b:15:2d: 19:9e:51:4d:d9:40:f5:28:95:2a:dc:17:45:97:7b:5c:32:72: a1:42:b0:95:92:37:00:22:09:30:75:69:87:2a:9c:10:ac:b4: a1:33:21:8a:79:07:7c:24:1e:88:1e:43:83:b3:98:55:7e:dd: 2a:77:92:c6:d4:6f:37:5d:74:4f:86:fc:05:0b:c6:ed:18:ae: ac:08:38:6d:ec:5a:30:9b:cb:13:c4:3d:8c:f9:bf:0f:24:98: c3:9b:b6:f1:c0:3d:16:11:fd:aa:b6:cf:7d:73:ae:99:f3:ea: 56:9e:c4:8a:38:84:53:b1:78:ad:b7:19:0a:bf:30:1a:45:a2: 9b:d6:f8:0b:d8:f3:66:49:81:55:7a:76:05:b8:60:3e:ab:92: 7a:91:3e:1a:c3:cc:31:f6:71:04:14:d3:42:cb:02:d1:87:d1: 7a:17:ba:63:0e:b5:9f:19:33:23:c6:3e:7f:e5:85:00:78:6b: 30:3e:80:9b:6d:82:7e:98:41:ad:ef:27:cc:29:10:27:d5:38: a2:83:89:97:22:f6:57:97:8e:34:b7:a7:a7:eb:30:e7:4c:e8: 76:b6:f6:f5:fb:d1:de:7c:99:57:30:6f:8b:bf:98:f2:9e:85: f2:76:f8:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhOMdVnPo/JKnFAe0l7tFJ1+WY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTEwMTgxNDA2MTNaFw0yNTEwMjEyMzQ3MTNaMDMxMTAvBgNV BAMTKDRCOUQxNEZDQTkxMzk5REFBQ0I1QUZDNzQ0NEE3MjQ5NEJCNUVENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4oZgjIrXwzMhyjPVnRTYsxuk yQPOa1Ie+HTBVcpMpxysRdlE8cv/zxX9TvG14oK4upMUzGY8qwuilmmT9pLfIq2d TYdx8a+50N7q9vURJeBlFzUYgmdjvvP9iY8VvqyHEcVG5qfnWtXUH6BKkqZvYL9M HlIwbwksDxEAxWTKPxir3FABv0h2lOpFtOyA77lZPAx63A9ZO/6aqt6soIDOepxY uplhuBsUDpuStMTYcuCY3ioU/MvTqavDBRooOlESx3/W5c4zK58CjRq5IuCfaEG7 rHnXpQ7GofE16Z/rFCUZTRwCjbcKps84KOhkq5LIQChShRUmf30ePiszkjQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS50U/KkTmdqsta/HREpySUu17VowHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw19uFILs0La7xbctvftBsVLRmeUU3ZQPUo lSrcF0WXe1wycqFCsJWSNwAiCTB1aYcqnBCstKEzIYp5B3wkHogeQ4OzmFV+3Sp3 ksbUbzdddE+G/AULxu0YrqwIOG3sWjCbyxPEPYz5vw8kmMObtvHAPRYR/aq2z31z rpnz6laexIo4hFOxeK23GQq/MBpFopvW+AvY82ZJgVV6dgW4YD6rknqRPhrDzDH2 cQQU00LLAtGH0XoXumMOtZ8ZMyPGPn/lhQB4azA+gJttgn6YQa3vJ8wpECfVOKKD iZci9leXjjS3p6frMOdM6Ha29vX70d58mVcwb4u/mPKehfJ2+JY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:30 2025 by rpki-client