$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: OnPRqOwAMsUj0LwUHd4VVzvPPByLnNh/tLe+/nC+h6I= Subject key identifier: 34:DF:79:0D:15:FE:59:8A:4E:EE:C7:7A:6E:7C:87:E8:8B:7C:58:E6 Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 1082A157A1C01484A211BDBC7D8581C461CFB6D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 05 Signing time: Sun 19 Oct 2025 00:01:36 +0000 Manifest this update: Sat 18 Oct 2025 23:56:36 +0000 Manifest next update: Wed 22 Oct 2025 00:14:36 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: 2mXNpkpVsLfiwzJfi8nvjld4UmBE6Czl/VPmX+h4oUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:82:a1:57:a1:c0:14:84:a2:11:bd:bc:7d:85:81:c4:61:cf:b6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Oct 18 23:56:36 2025 GMT Not After : Oct 22 00:14:36 2025 GMT Subject: CN=34DF790D15FE598A4EEEC77A6E7C87E88B7C58E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:47:ae:74:b1:f9:35:a3:12:81:87:f2:52: ee:2a:7b:d1:59:3c:a2:44:da:a6:79:69:ff:0b:6c: 30:13:e5:1c:61:14:71:a5:ab:3a:d5:a7:6c:51:5a: c1:90:3f:00:78:cb:56:11:7c:b0:b7:f7:96:64:df: 99:ff:8c:66:9a:b7:1e:5b:f3:a9:5a:da:2c:0e:91: a0:d6:fe:00:6b:f2:d8:fd:d9:c2:e1:73:fc:b3:15: 00:1c:ff:8d:5b:44:0b:32:34:8d:07:01:c2:39:fa: 92:72:cd:c0:73:3a:e8:2d:cc:da:29:5e:a0:cc:be: 95:28:e4:6a:89:c7:94:d3:7d:cb:9a:29:f1:33:7b: e3:23:7f:28:37:2a:25:50:d4:4e:39:46:4c:52:66: 65:e7:46:92:dd:4a:dc:6f:09:69:b6:fa:fa:91:c1: 67:79:24:6a:92:9b:31:21:89:c8:c8:98:c3:14:4d: 64:7f:08:7b:00:e4:b3:2a:a1:33:6c:3f:f2:0c:fe: f6:7e:ad:80:e9:6d:80:ab:97:9f:e2:4d:5c:be:6c: 4c:2e:73:25:e7:63:26:37:11:87:51:dd:dd:a4:db: da:34:00:ca:fc:a2:f2:64:bf:03:d2:61:dc:e7:8d: ab:2d:cf:60:4a:93:23:8b:0d:0c:08:e5:95:bb:5e: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DF:79:0D:15:FE:59:8A:4E:EE:C7:7A:6E:7C:87:E8:8B:7C:58:E6 X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:f3:62:cc:be:11:8c:5e:07:6e:72:27:b0:2a:c8:ee:48: 59:dd:1a:76:c2:9a:bc:93:dd:54:7d:59:3f:28:5e:55:51:b4: 64:fc:fe:f9:a3:dc:28:e9:c1:37:3d:7f:02:43:85:46:69:2c: c4:30:e4:0f:f1:01:dc:ac:6c:f0:5b:26:71:55:12:ba:e9:39: 16:ce:75:4d:5d:0d:02:ec:55:cd:42:ed:bd:5b:6a:e3:a7:ee: 04:7c:c5:64:25:19:f2:9f:f6:2a:b3:13:62:ee:df:e7:2f:d7: 6e:cd:de:4f:8e:c4:e6:af:91:63:e5:ee:44:eb:a9:1a:97:73: e8:71:d4:49:f0:7d:ad:df:86:19:bf:68:0a:cc:e3:6e:f6:6a: ee:cc:ee:75:c4:19:23:90:64:f1:b8:8b:4b:15:7b:75:5d:17: 70:ed:14:2b:88:30:0c:9b:70:59:55:ca:69:fa:72:b8:e9:7f: dd:79:44:65:23:7b:08:ea:58:23:c6:b2:5b:ff:4d:6d:86:dc: 1a:1b:e8:16:f0:ba:a8:a5:ef:e8:5f:29:d8:1d:d7:66:24:9d: 14:4a:aa:46:45:b6:68:06:23:7e:a8:53:95:4d:bb:b7:73:1a: a4:8d:7d:8c:ed:8f:66:95:c8:02:62:fe:b4:71:6f:85:54:0b: c0:7a:43:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIKhV6HAFISiEb28fYWBxGHPttMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNTEwMTgyMzU2MzZaFw0yNTEwMjIwMDE0MzZaMDMxMTAvBgNV BAMTKDM0REY3OTBEMTVGRTU5OEE0RUVFQzc3QTZFN0M4N0U4OEI3QzU4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PkeudLH5NaMSgYfyUu4qe9FZ PKJE2qZ5af8LbDAT5RxhFHGlqzrVp2xRWsGQPwB4y1YRfLC395Zk35n/jGaatx5b 86la2iwOkaDW/gBr8tj92cLhc/yzFQAc/41bRAsyNI0HAcI5+pJyzcBzOugtzNop XqDMvpUo5GqJx5TTfcuaKfEze+Mjfyg3KiVQ1E45RkxSZmXnRpLdStxvCWm2+vqR wWd5JGqSmzEhicjImMMUTWR/CHsA5LMqoTNsP/IM/vZ+rYDpbYCrl5/iTVy+bEwu cyXnYyY3EYdR3d2k29o0AMr8ovJkvwPSYdznjastz2BKkyOLDQwI5ZW7XjeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNN95DRX+WYpO7sd6bnyH6It8WOYwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETU82LMvhGMXgduciewKsjuSFndGnbCmryT 3VR9WT8oXlVRtGT8/vmj3CjpwTc9fwJDhUZpLMQw5A/xAdysbPBbJnFVErrpORbO dU1dDQLsVc1C7b1bauOn7gR8xWQlGfKf9iqzE2Lu3+cv127N3k+OxOavkWPl7kTr qRqXc+hx1Enwfa3fhhm/aArM4272au7M7nXEGSOQZPG4i0sVe3VdF3DtFCuIMAyb cFlVymn6crjpf915RGUjewjqWCPGslv/TW2G3Bob6Bbwuqil7+hfKdgd12YknRRK qkZFtmgGI36oU5VNu7dzGqSNfYztj2aVyAJi/rRxb4VUC8B6Q80= -----END CERTIFICATE-----Generated at Sun Oct 19 17:23:16 2025 by rpki-client