$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: 52swzKPZcrD4ArdJx+iT7DGmghmPD/gu5I0nfHQEkr8= Subject key identifier: EC:ED:95:F7:62:D9:4B:3A:02:2D:DD:2B:46:10:12:CC:4E:75:3E:DF Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 558696790B1485234EFEAD7CD118D12F233E8CF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: E9 Signing time: Mon 17 Nov 2025 12:31:27 +0000 Manifest this update: Mon 17 Nov 2025 12:26:27 +0000 Manifest next update: Thu 20 Nov 2025 13:02:27 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: N1Z2ehfbiRUT1pS+jvusQ4eRfVtkikzGBVWy5YGpnrw=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Nov 2025 13:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:86:96:79:0b:14:85:23:4e:fe:ad:7c:d1:18:d1:2f:23:3e:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Nov 17 12:26:27 2025 GMT Not After : Nov 20 13:02:27 2025 GMT Subject: CN=ECED95F762D94B3A022DDD2B461012CC4E753EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7c:bc:3e:2a:22:58:72:0e:16:43:cb:78:66: a7:0c:cf:99:43:ba:e7:f1:a1:0c:9b:e2:9f:41:ae: 13:da:90:9a:1e:36:b2:b9:1a:91:42:d8:80:a1:ab: bd:b4:cc:92:54:22:d0:f3:da:49:59:5e:4b:f8:fd: aa:31:7a:a2:76:2e:cf:a1:c7:d4:09:3a:b4:b8:b9: 26:36:53:31:88:84:0f:a7:fc:14:15:58:90:94:f5: 5e:f7:df:99:f2:82:ab:b6:c9:52:5e:8c:5e:db:9d: d9:2d:66:4d:af:07:19:61:8a:f3:0a:5b:b3:53:ba: 4f:35:83:6a:df:94:ba:da:5f:79:f8:f0:2a:7f:f7: e2:b9:da:78:06:69:92:61:8f:73:22:67:91:9d:30: 2b:6a:0c:74:9f:a0:83:c7:22:1d:e0:61:0d:a4:d6: bd:c2:99:50:2c:c1:28:d1:e8:43:f4:c9:dd:13:f1: e2:de:f8:17:02:77:66:51:cc:c6:0b:f7:96:40:6b: 3e:58:8a:df:e8:94:2d:f8:07:27:1b:5b:d3:14:7f: fd:b1:d4:e2:7c:04:af:3f:9e:d9:e7:12:ef:b2:ea: b3:74:0f:da:0d:da:73:9a:de:03:34:f9:99:b3:f9: c9:a3:0c:73:9b:d9:3e:b9:33:3f:ed:88:32:bf:01: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:ED:95:F7:62:D9:4B:3A:02:2D:DD:2B:46:10:12:CC:4E:75:3E:DF X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1c:84:78:4b:32:bf:0c:fb:6c:1f:95:b7:9c:8a:e4:79:63: 92:63:60:de:25:6f:75:a8:57:ae:6d:94:96:c9:3d:8c:92:11: bf:ce:1a:7c:92:8e:44:75:97:94:09:b3:d3:05:b0:5d:6e:ce: 0d:80:9e:a4:75:50:16:b3:21:e9:e6:c2:49:13:cd:77:ac:f6: 98:d3:d2:b7:c2:53:9e:32:1c:9a:e7:e0:fc:68:d3:de:d7:f0: ab:1e:07:6c:1c:53:d0:c3:4f:05:3c:f5:71:38:f2:a2:db:5c: ec:08:8f:d4:74:1c:e4:b9:22:88:ef:ee:db:ce:6f:8d:bf:89: 7e:ff:6e:24:04:ce:8b:14:10:ca:5d:43:97:bd:21:7d:84:6e: d7:d5:d3:9b:cb:33:bf:5b:34:69:6b:65:a3:0d:25:92:81:b7: 80:c2:21:3f:6a:a4:f5:41:6c:2b:9a:6a:70:6e:a0:f9:61:2b: 08:9d:93:4d:ec:04:69:56:8f:99:67:a8:2e:d3:a3:2a:82:ca: 66:d0:91:f6:c8:95:ee:1a:1a:c4:f3:7b:4f:b7:a1:f0:73:bb: c4:f7:79:23:d2:ae:20:8f:11:c6:c0:69:9d:d4:e8:d0:13:46: af:e5:08:89:87:f6:f0:65:84:2d:27:04:81:25:9e:92:e0:8d: bc:27:38:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYaWeQsUhSNO/q180RjRLyM+jPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTExMTcxMjI2MjdaFw0yNTExMjAxMzAyMjdaMDMxMTAvBgNV BAMTKEVDRUQ5NUY3NjJEOTRCM0EwMjJEREQyQjQ2MTAxMkNDNEU3NTNFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDufLw+KiJYcg4WQ8t4ZqcMz5lD uufxoQyb4p9BrhPakJoeNrK5GpFC2IChq720zJJUItDz2klZXkv4/aoxeqJ2Ls+h x9QJOrS4uSY2UzGIhA+n/BQVWJCU9V7335nygqu2yVJejF7bndktZk2vBxlhivMK W7NTuk81g2rflLraX3n48Cp/9+K52ngGaZJhj3MiZ5GdMCtqDHSfoIPHIh3gYQ2k 1r3CmVAswSjR6EP0yd0T8eLe+BcCd2ZRzMYL95ZAaz5Yit/olC34BycbW9MUf/2x 1OJ8BK8/ntnnEu+y6rN0D9oN2nOa3gM0+Zmz+cmjDHOb2T65Mz/tiDK/ARObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7O2V92LZSzoCLd0rRhASzE51Pt8wHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4chHhLMr8M+2wflbeciuR5Y5JjYN4lb3Wo V65tlJbJPYySEb/OGnySjkR1l5QJs9MFsF1uzg2AnqR1UBazIenmwkkTzXes9pjT 0rfCU54yHJrn4Pxo097X8KseB2wcU9DDTwU89XE48qLbXOwIj9R0HOS5Iojv7tvO b42/iX7/biQEzosUEMpdQ5e9IX2EbtfV05vLM79bNGlrZaMNJZKBt4DCIT9qpPVB bCuaanBuoPlhKwidk03sBGlWj5lnqC7ToyqCymbQkfbIle4aGsTze0+3ofBzu8T3 eSPSriCPEcbAaZ3U6NATRq/lCImH9vBlhC0nBIElnpLgjbwnOCA= -----END CERTIFICATE-----Generated at Mon Nov 17 19:24:37 2025 by rpki-client