$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: u0MENoTjMZiJm7m6/8sLWlux0nt4YfjYgjH1llyjIcY= Subject key identifier: 6E:24:74:F3:12:70:79:CD:60:38:7B:3B:7D:E2:D0:BF:05:FC:18:14 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 194842E54AA57A8AA46564D1CA5F115F9F4045B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0498 Signing time: Thu 06 Nov 2025 21:00:47 +0000 Manifest this update: Thu 06 Nov 2025 20:55:47 +0000 Manifest next update: Mon 10 Nov 2025 02:59:47 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=) 2: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: pCTZ3YxojpHJc6Jc0uy4BB/vVtIWikYB+myLEZKmERU=) 3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=) 4: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=) 5: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:48:42:e5:4a:a5:7a:8a:a4:65:64:d1:ca:5f:11:5f:9f:40:45:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Nov 6 20:55:47 2025 GMT Not After : Nov 10 02:59:47 2025 GMT Subject: CN=6E2474F3127079CD60387B3B7DE2D0BF05FC1814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:20:97:43:fa:f8:39:69:24:a6:fd:cd:ce: 20:c7:6c:84:0f:2e:61:3b:af:df:02:c6:e0:95:82: 26:5d:21:b0:ad:7c:09:e9:8f:29:f9:e0:1c:93:f7: ae:d3:08:13:88:8d:6b:9c:a2:1c:44:58:cd:88:c1: 47:21:d2:c4:6a:85:6e:9f:5c:fa:5a:ed:bb:42:90: 0d:51:bb:1d:cd:8b:b7:8c:5f:b9:a0:1b:fc:a9:af: 00:5c:97:e2:c4:ff:71:25:7b:05:31:33:eb:3b:5f: 85:43:6f:9c:be:eb:93:8c:fe:15:c0:d4:f0:41:df: 3f:83:70:b5:f2:47:65:9e:75:36:f5:d5:3f:e8:11: 08:c9:be:9d:57:78:59:4a:5d:88:49:a1:dd:6e:47: 2a:e7:1e:c5:68:20:bf:27:9b:a7:72:1b:0b:f5:cc: d1:7c:c0:71:de:73:ec:82:6d:56:b5:fa:fa:0e:2a: ce:1f:dc:15:ae:be:7b:b8:29:3b:99:6a:11:4a:3c: 1d:6c:0f:c0:f1:7d:4b:db:65:a6:1b:79:45:33:60: ef:24:92:ce:6a:05:c9:7a:d8:ca:26:26:22:8d:05: ba:60:14:09:32:c5:41:57:0a:16:2c:53:33:90:80: 0b:9c:1d:56:6c:c0:88:bc:a5:82:cf:f1:0b:65:f8: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:74:F3:12:70:79:CD:60:38:7B:3B:7D:E2:D0:BF:05:FC:18:14 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f4:ca:cb:fb:44:21:d8:9b:df:4f:4c:72:6e:0f:18:a1:98: 63:d8:a8:17:14:dd:5f:bd:07:80:07:57:90:d6:9b:35:c4:22: eb:80:41:07:f6:20:00:87:73:c7:b4:3d:f2:b1:5d:5c:6f:cb: c0:dd:6d:09:56:51:8f:4a:1c:bb:5c:84:e4:ba:c0:4a:3e:36: 0b:28:65:3d:a2:8f:50:08:73:16:9d:87:c0:fa:d8:b8:bf:a1: 36:4c:6f:d6:40:1f:c2:ff:6a:93:39:66:4f:43:ad:32:fb:19: 7f:4a:b0:0d:4b:e9:cb:67:fe:cd:2f:06:39:37:61:80:db:36: 72:0e:cf:ba:7d:99:9a:06:65:51:05:1e:d7:52:9f:ba:61:f1: fc:ce:4a:14:bf:9a:b3:7f:87:ca:20:90:06:8f:f1:87:c0:94: de:7a:e2:dc:62:27:d0:8e:ca:11:99:c9:3c:c3:f3:6f:b3:b1: 39:be:e6:7d:82:ad:f9:73:8e:d5:84:69:50:58:87:8e:1d:d5: 7d:4d:01:7b:16:3a:79:d4:a9:22:4b:ac:95:98:e1:29:a0:9d: fe:57:47:b4:8e:be:fa:c9:59:f1:32:52:b7:b7:f2:0c:54:e9: 77:fe:88:27:67:46:bc:00:31:52:cb:46:d4:01:9a:d1:3c:db: 76:3f:5b:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUhC5UqleoqkZWTRyl8RX59ARbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTExMDYyMDU1NDdaFw0yNTExMTAwMjU5NDdaMDMxMTAvBgNV BAMTKDZFMjQ3NEYzMTI3MDc5Q0Q2MDM4N0IzQjdERTJEMEJGMDVGQzE4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxSCXQ/r4OWkkpv3NziDHbIQP LmE7r98CxuCVgiZdIbCtfAnpjyn54ByT967TCBOIjWucohxEWM2IwUch0sRqhW6f XPpa7btCkA1Rux3Ni7eMX7mgG/yprwBcl+LE/3ElewUxM+s7X4VDb5y+65OM/hXA 1PBB3z+DcLXyR2WedTb11T/oEQjJvp1XeFlKXYhJod1uRyrnHsVoIL8nm6dyGwv1 zNF8wHHec+yCbVa1+voOKs4f3BWuvnu4KTuZahFKPB1sD8DxfUvbZaYbeUUzYO8k ks5qBcl62MomJiKNBbpgFAkyxUFXChYsUzOQgAucHVZswIi8pYLP8Qtl+H3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbiR08xJwec1gOHs7feLQvwX8GBQwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP0ysv7RCHYm99PTHJuDxihmGPYqBcU3V+9 B4AHV5DWmzXEIuuAQQf2IACHc8e0PfKxXVxvy8DdbQlWUY9KHLtchOS6wEo+Ngso ZT2ij1AIcxadh8D62Li/oTZMb9ZAH8L/apM5Zk9DrTL7GX9KsA1L6ctn/s0vBjk3 YYDbNnIOz7p9mZoGZVEFHtdSn7ph8fzOShS/mrN/h8ogkAaP8YfAlN564txiJ9CO yhGZyTzD82+zsTm+5n2CrflzjtWEaVBYh44d1X1NAXsWOnnUqSJLrJWY4Smgnf5X R7SOvvrJWfEyUre38gxU6Xf+iCdnRrwAMVLLRtQBmtE823Y/W+I= -----END CERTIFICATE-----Generated at Sat Nov 8 19:19:38 2025 by rpki-client