$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: n36wc9EBa3nG3RCjCmU3UgPr6RBqnqI48bYJcugESuE= Subject key identifier: 62:7E:F2:15:0B:98:73:37:84:06:41:40:81:7D:BE:53:5A:C9:EA:62 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 04D789F3F769B273F9626D8BABF77DDE5B9938DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 025A Signing time: Sun 19 Oct 2025 07:00:39 +0000 Manifest this update: Sun 19 Oct 2025 06:55:39 +0000 Manifest next update: Wed 22 Oct 2025 17:02:39 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 3: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: /+PEYwW7Mm3frbRA93dCCx85tN2ovv1FOoh6LBvY1lA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d7:89:f3:f7:69:b2:73:f9:62:6d:8b:ab:f7:7d:de:5b:99:38:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Oct 19 06:55:39 2025 GMT Not After : Oct 22 17:02:39 2025 GMT Subject: CN=627EF2150B98733784064140817DBE535AC9EA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:ef:63:8f:ea:39:1f:e9:ed:dc:ac:8f:87: b2:aa:66:5d:a8:95:cd:09:a9:fe:04:73:21:48:d4: 4c:7d:43:66:29:2d:d1:4c:93:2f:5e:65:e0:e9:f0: 27:4c:73:5e:84:3f:18:1e:69:56:c3:0d:77:6b:11: 43:6e:80:33:84:76:66:13:4f:c2:d3:43:0e:02:1a: c2:ab:17:01:e1:77:30:8d:6c:3b:e4:81:fc:f4:0c: 77:8a:3f:e9:32:66:fd:9e:99:8a:8e:ca:ce:c9:e8: 6c:8b:36:91:5d:92:95:6f:cb:1b:75:f8:99:01:ea: fc:42:5a:a3:05:99:71:5e:96:71:e1:41:16:0c:2e: f7:a2:e6:6b:0a:82:7a:5b:3a:33:ce:e6:64:4f:f1: 7c:1c:51:6d:14:14:29:6e:eb:c8:66:02:77:82:38: 35:cb:a1:fe:e7:d9:16:21:b2:a8:ab:16:80:04:7f: 32:ce:49:36:db:66:c6:0e:1d:c0:02:c3:f4:3f:b7: 6c:7d:20:99:e7:dc:8d:6b:9c:53:fc:ab:2d:ac:56: 69:ab:76:76:33:b7:b8:12:cb:90:db:65:b9:79:c8: 42:84:38:cb:67:39:65:92:82:1c:fe:18:94:c4:e8: 88:f6:4b:ce:9b:e8:67:fa:39:b6:a2:aa:be:0e:58: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7E:F2:15:0B:98:73:37:84:06:41:40:81:7D:BE:53:5A:C9:EA:62 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fb:99:bc:c2:33:1e:ef:d3:7a:df:fc:d2:91:a1:1c:e5:2c: de:4a:4e:de:9a:52:0d:dc:b5:de:23:c3:5a:08:3b:a2:9e:91: 45:48:09:79:87:f9:78:87:02:48:8c:8f:e8:70:0e:5e:06:a7: 0a:c6:61:73:5e:53:d5:26:eb:0c:21:da:4d:d3:ca:83:1a:14: e2:2e:66:ff:9f:d5:6a:d9:09:51:80:7c:9f:05:17:0b:64:af: 34:79:3e:04:83:a1:54:02:b8:08:47:05:cb:de:06:09:da:cb: 4f:64:09:da:bc:ce:14:7d:60:53:c8:8b:04:d6:cd:2c:13:eb: ab:cb:ee:f0:23:45:fb:05:88:78:41:28:3a:22:2d:1b:6c:28: 3d:8d:0f:23:75:91:e2:92:10:e4:98:12:f5:18:41:7a:c6:f7: a7:7c:80:b8:40:59:1e:a7:0f:e0:dc:ff:cc:e2:a4:81:e9:16: 9e:c4:3f:32:02:53:c1:f8:7b:c7:98:3a:17:12:8a:af:ec:0f: cf:61:3b:84:29:c8:c6:f1:7c:81:0c:a1:98:2b:cf:10:85:54: 94:92:9b:f9:f0:7f:19:51:08:d0:9b:8d:34:95:56:41:31:8d: 9c:cc:f8:aa:79:b3:5a:59:39:fd:4b:3e:f1:92:15:e4:dc:86: 0e:0e:68:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNeJ8/dpsnP5Ym2Lq/d93luZONwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTEwMTkwNjU1MzlaFw0yNTEwMjIxNzAyMzlaMDMxMTAvBgNV BAMTKDYyN0VGMjE1MEI5ODczMzc4NDA2NDE0MDgxN0RCRTUzNUFDOUVBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Yu9jj+o5H+nt3KyPh7KqZl2o lc0Jqf4EcyFI1Ex9Q2YpLdFMky9eZeDp8CdMc16EPxgeaVbDDXdrEUNugDOEdmYT T8LTQw4CGsKrFwHhdzCNbDvkgfz0DHeKP+kyZv2emYqOys7J6GyLNpFdkpVvyxt1 +JkB6vxCWqMFmXFelnHhQRYMLvei5msKgnpbOjPO5mRP8XwcUW0UFClu68hmAneC ODXLof7n2RYhsqirFoAEfzLOSTbbZsYOHcACw/Q/t2x9IJnn3I1rnFP8qy2sVmmr dnYzt7gSy5DbZbl5yEKEOMtnOWWSghz+GJTE6Ij2S86b6Gf6Obaiqr4OWLn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYn7yFQuYczeEBkFAgX2+U1rJ6mIwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD7mbzCMx7v03rf/NKRoRzlLN5KTt6aUg3c td4jw1oIO6KekUVICXmH+XiHAkiMj+hwDl4GpwrGYXNeU9Um6wwh2k3TyoMaFOIu Zv+f1WrZCVGAfJ8FFwtkrzR5PgSDoVQCuAhHBcveBgnay09kCdq8zhR9YFPIiwTW zSwT66vL7vAjRfsFiHhBKDoiLRtsKD2NDyN1keKSEOSYEvUYQXrG96d8gLhAWR6n D+Dc/8zipIHpFp7EPzICU8H4e8eYOhcSiq/sD89hO4QpyMbxfIEMoZgrzxCFVJSS m/nwfxlRCNCbjTSVVkExjZzM+Kp5s1pZOf1LPvGSFeTchg4OaAQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:52 2025 by rpki-client