$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: CaCCENSDrFm9CltJkOVdKP4FYz7W2z+x9FR6vWknOaE= Subject key identifier: 09:B0:37:B0:53:F1:97:85:2A:26:7B:2E:86:7A:7C:C3:A0:AD:68:43 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 1CC86029F4257EDA4062E82E0A353E0F8A820A30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 016C Signing time: Tue 21 Oct 2025 05:22:20 +0000 Manifest this update: Tue 21 Oct 2025 05:17:20 +0000 Manifest next update: Fri 24 Oct 2025 05:57:20 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: Z47BuH6BlgshsMuQfmfjoEpnN1UPO/1aMtw5e79rLMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c8:60:29:f4:25:7e:da:40:62:e8:2e:0a:35:3e:0f:8a:82:0a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Oct 21 05:17:20 2025 GMT Not After : Oct 24 05:57:20 2025 GMT Subject: CN=09B037B053F197852A267B2E867A7CC3A0AD6843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:19:c5:52:ba:34:f0:fd:12:72:6b:7c:7d: ec:db:21:57:4a:ef:ca:4a:96:b1:d9:3c:08:29:d9: a3:1f:42:f6:10:ec:f1:f1:0a:3e:d0:93:a5:7e:c3: 4c:39:f3:f9:31:6d:11:01:c4:f4:06:88:77:c3:3a: 9b:0d:1e:68:3d:59:ad:d5:d5:eb:a6:50:52:eb:16: 51:b3:dd:4e:c4:91:de:2f:99:22:77:e4:ac:55:c0: 26:88:28:18:83:ce:b9:6d:ff:92:19:37:f4:95:99: 39:c1:76:69:85:30:37:11:80:87:90:0d:e4:ea:c1: 87:b7:3e:0c:5e:d0:5e:4f:93:f2:c8:c9:4b:df:c2: db:53:fd:c7:6c:a9:5d:55:b6:35:20:f6:c2:16:42: 10:66:7c:36:eb:cf:8f:99:e0:43:af:58:aa:21:66: fc:ec:bc:13:b9:0b:ef:8e:2a:f8:49:71:fb:0a:df: e8:1d:a8:7d:f8:6f:35:58:8e:23:ae:ce:32:79:b9: 3b:d7:2a:42:58:8f:7f:ab:9d:32:9f:8d:b4:ee:13: ca:ea:89:76:c1:27:b3:8f:5f:55:8b:dd:04:77:94: 90:8a:8f:ea:1e:bd:e5:99:c7:3d:ba:9e:8f:35:de: 3c:1b:1c:6a:f1:61:2f:38:ee:78:25:4d:56:c1:1d: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:37:B0:53:F1:97:85:2A:26:7B:2E:86:7A:7C:C3:A0:AD:68:43 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:96:c4:a5:1e:6f:e2:a5:3e:ae:f5:2e:93:be:2c:b1:d6: e1:fb:09:82:08:7f:2d:39:5e:ed:0d:68:2c:c9:f5:76:68:b8: 3b:8f:8f:4e:41:09:b0:ca:80:18:0d:03:8e:e9:5a:65:c3:6c: 43:19:e2:2c:99:63:79:cc:ff:53:05:4d:33:df:ff:e3:6a:f7: f9:fa:e8:29:5e:9f:74:bd:55:7d:82:f2:39:00:ef:e6:6f:71: ae:d5:ac:43:cd:f1:74:69:bd:18:ba:0c:3f:99:24:82:10:2f: d4:b4:ac:f7:4b:65:54:1f:62:3b:f8:55:e7:19:fc:74:54:22: 78:e1:43:19:55:08:43:1b:09:03:06:80:0c:5d:2d:44:b0:3b: de:da:ff:75:00:42:c0:1e:d5:da:e5:2c:80:41:80:d7:81:1b: 9c:45:93:a5:85:b9:1d:dd:60:48:6f:0d:56:12:f8:72:a9:38: 6a:9a:51:29:45:dc:dc:ac:d9:e8:8c:dd:1b:eb:bc:31:28:a6: d5:f5:98:d9:13:03:68:24:10:e4:22:40:57:33:e3:25:f1:4f: da:32:be:7b:70:8f:4f:96:24:0a:13:0d:1c:ad:d6:3c:2e:99: f2:9b:0b:22:8d:9a:7d:87:8a:1b:01:62:9a:e2:96:3c:0c:58: a3:88:50:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMhgKfQlftpAYuguCjU+D4qCCjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTEwMjEwNTE3MjBaFw0yNTEwMjQwNTU3MjBaMDMxMTAvBgNV BAMTKDA5QjAzN0IwNTNGMTk3ODUyQTI2N0IyRTg2N0E3Q0MzQTBBRDY4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxRnFUro08P0Scmt8fezbIVdK 78pKlrHZPAgp2aMfQvYQ7PHxCj7Qk6V+w0w58/kxbREBxPQGiHfDOpsNHmg9Wa3V 1eumUFLrFlGz3U7Ekd4vmSJ35KxVwCaIKBiDzrlt/5IZN/SVmTnBdmmFMDcRgIeQ DeTqwYe3Pgxe0F5Pk/LIyUvfwttT/cdsqV1VtjUg9sIWQhBmfDbrz4+Z4EOvWKoh ZvzsvBO5C++OKvhJcfsK3+gdqH34bzVYjiOuzjJ5uTvXKkJYj3+rnTKfjbTuE8rq iXbBJ7OPX1WL3QR3lJCKj+oeveWZxz26no813jwbHGrxYS847nglTVbBHX5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbA3sFPxl4UqJnsuhnp8w6CtaEMwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr2lsSlHm/ipT6u9S6Tviyx1uH7CYIIfy05 Xu0NaCzJ9XZouDuPj05BCbDKgBgNA47pWmXDbEMZ4iyZY3nM/1MFTTPf/+Nq9/n6 6Clen3S9VX2C8jkA7+Zvca7VrEPN8XRpvRi6DD+ZJIIQL9S0rPdLZVQfYjv4VecZ /HRUInjhQxlVCEMbCQMGgAxdLUSwO97a/3UAQsAe1drlLIBBgNeBG5xFk6WFuR3d YEhvDVYS+HKpOGqaUSlF3Nys2eiM3RvrvDEoptX1mNkTA2gkEOQiQFcz4yXxT9oy vntwj0+WJAoTDRyt1jwumfKbCyKNmn2HihsBYpriljwMWKOIUG8= -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:43 2025 by rpki-client