$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: SLdriUNYusnU3NDhRC1sRWTzkyOFjCIhgxvlcd+lzGc= Subject key identifier: 30:02:35:4D:07:65:0C:A9:39:64:C7:86:33:FE:ED:E7:92:F8:A7:50 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 2AA69539AE2B1DE5E5545435AB40B8A75A6E8668 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 038A Signing time: Tue 21 Oct 2025 09:02:24 +0000 Manifest this update: Tue 21 Oct 2025 08:57:24 +0000 Manifest next update: Fri 24 Oct 2025 20:05:24 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: 7qpoHFXhNcakxuDOX3+ndlWi4w6yXjP65nAewsEiQLI=) 2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 20:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a6:95:39:ae:2b:1d:e5:e5:54:54:35:ab:40:b8:a7:5a:6e:86:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Oct 21 08:57:24 2025 GMT Not After : Oct 24 20:05:24 2025 GMT Subject: CN=3002354D07650CA93964C78633FEEDE792F8A750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:5b:37:9a:36:a1:e7:e7:62:b1:31:12:5a: 08:bd:a5:7c:7c:08:4e:ef:43:4a:ae:c3:39:2e:88: 3d:d0:c5:91:dd:b8:30:57:6d:20:7b:ed:0c:3d:4a: 2f:ce:e0:5c:b0:86:cc:35:e2:d4:3a:33:38:17:9f: 0b:62:3b:11:b4:a4:d0:c3:5f:df:e9:b9:c9:b9:9d: 05:0d:24:d1:51:ac:7d:26:a3:0e:50:4f:0d:1b:c1: be:41:76:11:ee:c0:c7:ba:0a:a7:ff:1c:0a:bc:72: aa:4f:35:1c:58:55:14:1b:db:45:89:79:6a:9e:b9: 7a:4f:e8:f5:83:4b:e2:1d:ce:b1:81:ab:02:d4:15: c1:a0:f8:27:8b:4d:46:65:1a:8f:bb:dd:2b:82:09: 0b:06:8f:c6:8f:33:23:bc:a5:6b:64:e9:ad:c1:06: 8a:41:53:90:3e:6c:2a:ef:e1:66:15:3e:e0:8c:dd: 9e:ad:9f:88:47:7b:45:c9:56:97:00:ad:cc:7f:5b: c9:85:03:35:1a:6d:ab:5d:87:12:83:e7:d7:f1:0f: 2c:74:9f:89:11:c8:aa:bb:75:c7:e1:e7:6f:63:72: cb:fc:96:2e:ce:a4:1b:dd:90:da:7e:58:5b:37:22: 3c:77:3e:10:31:1c:e1:df:e8:0f:01:a2:44:16:3d: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:02:35:4D:07:65:0C:A9:39:64:C7:86:33:FE:ED:E7:92:F8:A7:50 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:0c:7d:82:01:80:7e:b6:ef:82:76:17:b3:c7:f5:09:7d: b8:f3:4d:bd:c9:02:ed:68:fc:75:fd:9c:9e:d9:9f:29:91:17: d4:2f:d3:37:ee:db:6c:98:39:d1:df:8a:3f:89:d7:57:04:bd: 43:a3:91:a9:52:4f:db:5d:2f:38:f3:05:42:00:22:cc:a8:33: 47:d1:77:a7:36:e8:6f:2f:da:49:c2:e1:b1:a2:e0:78:a4:71: e0:0e:72:d6:49:35:f5:46:e3:c5:4a:ed:8a:4b:85:37:0e:5a: 52:de:56:a4:35:ba:7c:65:8b:08:e3:77:f8:2a:73:8a:a3:ac: 25:01:a7:d5:15:64:6c:b2:01:f4:b6:85:08:4b:85:c6:40:b5: 77:37:21:88:fb:92:b1:bc:75:71:51:26:69:da:62:49:cc:2c: c5:6e:3e:f0:7f:58:0b:0f:14:a8:d3:d3:01:af:b6:90:2f:f6: 2e:87:64:15:02:a2:bf:95:ef:e1:69:28:10:9e:b8:ab:d7:75: 2d:97:7b:07:4c:d5:76:9b:d1:d6:06:bb:89:9a:3f:8f:c2:20: 1b:61:b1:ec:50:f2:8b:e9:8d:72:b3:39:9a:f1:2e:dc:14:e7: c5:ee:26:c1:b8:52:07:5f:42:ff:b1:68:f5:f4:34:66:d7:65: c8:74:99:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqaVOa4rHeXlVFQ1q0C4p1puhmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTEwMjEwODU3MjRaFw0yNTEwMjQyMDA1MjRaMDMxMTAvBgNV BAMTKDMwMDIzNTREMDc2NTBDQTkzOTY0Qzc4NjMzRkVFREU3OTJGOEE3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPls3mjah5+disTESWgi9pXx8 CE7vQ0quwzkuiD3QxZHduDBXbSB77Qw9Si/O4Fywhsw14tQ6MzgXnwtiOxG0pNDD X9/pucm5nQUNJNFRrH0mow5QTw0bwb5BdhHuwMe6Cqf/HAq8cqpPNRxYVRQb20WJ eWqeuXpP6PWDS+IdzrGBqwLUFcGg+CeLTUZlGo+73SuCCQsGj8aPMyO8pWtk6a3B BopBU5A+bCrv4WYVPuCM3Z6tn4hHe0XJVpcArcx/W8mFAzUabatdhxKD59fxDyx0 n4kRyKq7dcfh529jcsv8li7OpBvdkNp+WFs3Ijx3PhAxHOHf6A8BokQWPbNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMAI1TQdlDKk5ZMeGM/7t55L4p1AwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBjDH2CAYB+tu+Cdhezx/UJfbjzTb3JAu1o /HX9nJ7ZnymRF9Qv0zfu22yYOdHfij+J11cEvUOjkalST9tdLzjzBUIAIsyoM0fR d6c26G8v2knC4bGi4HikceAOctZJNfVG48VK7YpLhTcOWlLeVqQ1unxliwjjd/gq c4qjrCUBp9UVZGyyAfS2hQhLhcZAtXc3IYj7krG8dXFRJmnaYknMLMVuPvB/WAsP FKjT0wGvtpAv9i6HZBUCor+V7+FpKBCeuKvXdS2XewdM1Xab0dYGu4maP4/CIBth sexQ8ovpjXKzOZrxLtwU58XuJsG4UgdfQv+xaPX0NGbXZch0meQ= -----END CERTIFICATE-----Generated at Thu Oct 23 05:08:01 2025 by rpki-client