$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: 4ufEWsVKKFN9smEr+2IvZDx3Cxjn8znfebcejjYPnrQ= Subject key identifier: D3:D9:3F:82:CD:2E:CD:B9:E8:D5:F0:0A:EC:B6:E1:27:4C:65:ED:18 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 40C4DC6468084E65E81E5716ED51D36008D6F8B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: C6 Signing time: Fri 14 Nov 2025 04:32:14 +0000 Manifest this update: Fri 14 Nov 2025 04:27:13 +0000 Manifest next update: Mon 17 Nov 2025 14:17:13 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: 01hFGa3I8NYTllh8SNb4DEDCWn3lPkwAgdQCPPC/TkM=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Nov 2025 14:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c4:dc:64:68:08:4e:65:e8:1e:57:16:ed:51:d3:60:08:d6:f8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Nov 14 04:27:13 2025 GMT Not After : Nov 17 14:17:13 2025 GMT Subject: CN=D3D93F82CD2ECDB9E8D5F00AECB6E1274C65ED18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:87:4f:5e:60:4d:bf:15:6d:09:c9:b7:e7: c5:bc:08:8a:09:71:15:cd:7c:44:7b:57:ed:e5:17: bb:af:78:11:5c:c8:ef:dc:79:d4:4b:53:38:bc:2a: 7e:07:03:51:79:9e:d6:3e:05:77:e5:1a:c8:fb:fd: 3e:5c:53:bc:27:e6:30:f7:c7:1a:2d:e7:29:de:51: ce:c1:0c:d4:aa:dd:77:13:48:8c:1d:27:d2:96:e8: 15:1f:5c:f5:ea:c0:b6:7a:db:90:12:f9:22:f3:8b: d3:19:f5:48:21:10:21:6a:23:23:2a:68:33:67:68: 55:db:44:fa:e0:d2:38:4b:61:58:82:98:e2:08:71: e1:c7:b4:b8:49:3b:b5:f6:7d:c7:06:d6:82:45:17: f5:0b:65:3c:08:4a:d8:53:d2:43:27:30:fa:b5:6f: 77:3a:b7:69:d4:ee:16:ad:e7:d6:fc:8a:ea:96:58: 6d:ab:88:d6:22:33:12:98:3d:f9:db:65:34:93:2e: c4:6c:ea:2f:6b:68:4f:5f:ee:86:e0:5a:b8:d9:ec: 9b:a5:da:2b:27:d7:79:bf:1d:02:2f:61:82:ae:e9: 24:c2:66:a2:89:6b:9f:1b:a0:c5:f6:a0:53:c0:c3: 03:d1:2c:8f:6b:54:53:09:88:c3:d3:dc:49:4e:7b: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D9:3F:82:CD:2E:CD:B9:E8:D5:F0:0A:EC:B6:E1:27:4C:65:ED:18 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:7b:3f:34:c2:89:50:b3:f1:d0:dc:f0:cd:07:02:e5:f3: 82:42:e9:ad:b1:c9:25:3a:6e:ae:fc:78:e2:b7:79:ae:81:fb: b1:f4:11:83:3c:33:0b:a1:dc:03:61:40:03:f5:0d:44:b5:9f: 37:ea:0d:9a:18:96:9a:3b:cd:c3:bb:e5:eb:4c:ef:34:1f:02: 73:0d:f2:65:9e:c8:41:ab:d7:c4:55:50:67:de:0b:f8:5c:af: dd:d9:d2:64:ce:d8:2e:28:b7:6e:bf:18:d4:ca:aa:40:73:3d: ce:da:91:5a:41:20:86:77:2b:38:0d:cc:8a:d6:ec:b0:ec:9c: 05:f0:6a:8a:b9:b2:24:c7:50:67:6e:42:38:8b:b6:a3:86:ab: aa:e1:f3:21:44:a2:ba:7d:1c:d9:cd:1e:68:55:e2:64:3e:39: 95:af:a9:2b:b5:ca:be:f0:d0:1e:74:df:30:45:94:e1:d9:0d: c2:8c:69:9e:bf:1e:a4:5a:e5:d5:77:32:40:b8:40:0e:8d:a8: dc:2c:90:10:7f:8e:56:ea:90:74:7a:95:8f:b6:ce:fe:74:4d: b0:88:d9:e1:03:2e:3e:95:6d:39:25:9d:a5:e3:ae:90:c2:6f: 95:82:bc:aa:42:85:03:dd:a5:9b:36:d7:cf:59:0a:17:07:6e: 8b:14:de:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMTcZGgITmXoHlcW7VHTYAjW+LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTExMTQwNDI3MTNaFw0yNTExMTcxNDE3MTNaMDMxMTAvBgNV BAMTKEQzRDkzRjgyQ0QyRUNEQjlFOEQ1RjAwQUVDQjZFMTI3NEM2NUVEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH4dPXmBNvxVtCcm358W8CIoJ cRXNfER7V+3lF7uveBFcyO/cedRLUzi8Kn4HA1F5ntY+BXflGsj7/T5cU7wn5jD3 xxot5yneUc7BDNSq3XcTSIwdJ9KW6BUfXPXqwLZ625AS+SLzi9MZ9UghECFqIyMq aDNnaFXbRPrg0jhLYViCmOIIceHHtLhJO7X2fccG1oJFF/ULZTwISthT0kMnMPq1 b3c6t2nU7hat59b8iuqWWG2riNYiMxKYPfnbZTSTLsRs6i9raE9f7obgWrjZ7Jul 2isn13m/HQIvYYKu6STCZqKJa58boMX2oFPAwwPRLI9rVFMJiMPT3ElOe9WVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09k/gs0uzbno1fAK7LbhJ0xl7RgwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwpez80wolQs/HQ3PDNBwLl84JC6a2xySU6 bq78eOK3ea6B+7H0EYM8Mwuh3ANhQAP1DUS1nzfqDZoYlpo7zcO75etM7zQfAnMN 8mWeyEGr18RVUGfeC/hcr93Z0mTO2C4ot26/GNTKqkBzPc7akVpBIIZ3KzgNzIrW 7LDsnAXwaoq5siTHUGduQjiLtqOGq6rh8yFEorp9HNnNHmhV4mQ+OZWvqSu1yr7w 0B503zBFlOHZDcKMaZ6/HqRa5dV3MkC4QA6NqNwskBB/jlbqkHR6lY+2zv50TbCI 2eEDLj6VbTklnaXjrpDCb5WCvKpChQPdpZs2189ZChcHbosU3t0= -----END CERTIFICATE-----Generated at Sun Nov 16 07:33:46 2025 by rpki-client