$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: 630mYusSTfHXVZQV7lF7DLS7oZggn31focEq4BvoaBw= Subject key identifier: 75:DC:AB:24:E6:52:28:CE:9D:00:77:65:14:8A:80:FD:45:0E:1C:72 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 548C7F8A4AA9B484FEB111672E137D79201E6931 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 024A Signing time: Mon 03 Nov 2025 08:43:50 +0000 Manifest this update: Mon 03 Nov 2025 08:38:50 +0000 Manifest next update: Thu 06 Nov 2025 17:45:50 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: k5rlOHRKNmWPwgg1FRkJWZL5UYgzXcvxfngBYjTwgms=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8c:7f:8a:4a:a9:b4:84:fe:b1:11:67:2e:13:7d:79:20:1e:69:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Nov 3 08:38:50 2025 GMT Not After : Nov 6 17:45:50 2025 GMT Subject: CN=75DCAB24E65228CE9D007765148A80FD450E1C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:61:6a:5d:20:13:07:9b:6b:3a:2d:59:46: 4b:78:a3:4e:d7:30:89:8d:83:36:0b:47:38:33:45: 3b:57:95:8f:56:83:6e:5e:65:ec:9a:7b:22:e1:b6: 58:a8:57:86:19:85:50:2d:47:7d:c3:2f:3f:b4:01: d3:44:60:d3:3e:ea:5f:8e:75:1b:d9:28:f7:da:5d: c3:94:3a:5c:ff:3e:67:dd:7a:b9:c0:46:fa:91:2c: e4:0f:64:c8:1e:6d:99:93:ca:28:b0:69:79:d1:18: 85:b0:66:27:76:23:38:3b:8c:10:72:79:1c:f9:94: 5f:64:57:54:7e:13:5d:80:44:93:22:aa:12:be:6e: 7c:17:14:4b:85:56:f9:61:3f:ce:20:e1:09:6e:23: b2:68:fb:af:d8:d6:bf:ff:90:d4:3f:90:ad:57:2f: 8a:2e:b4:51:e5:e0:56:18:c9:e4:7a:ec:76:fa:b1: 4f:1a:34:f7:85:28:2e:63:76:6f:ef:f2:54:48:57: 71:54:7d:f3:45:e2:4c:7f:a1:17:f2:08:c7:05:24: 9f:d0:e1:f8:1c:a5:16:eb:4b:0b:59:c0:75:81:45: 8b:69:a9:5a:56:59:aa:ab:58:82:a9:23:06:29:88: 76:88:2d:21:37:db:6b:be:91:f0:62:96:75:53:93: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DC:AB:24:E6:52:28:CE:9D:00:77:65:14:8A:80:FD:45:0E:1C:72 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ac:b4:16:bc:fd:21:57:b5:cf:0f:46:0d:a3:4e:a8:4c:b5: 2c:58:e5:e7:8f:7d:54:6b:f0:83:bd:b4:1b:b0:87:d6:e8:09: 82:71:bd:04:fe:17:c5:ba:28:47:a1:4f:5f:82:9b:5e:7b:07: 5c:67:60:56:5d:fd:06:c4:0f:eb:ba:f5:5a:07:a4:15:21:8c: 08:2f:62:76:ba:b2:55:28:c4:94:fe:b8:3b:06:aa:aa:db:cd: 1b:d1:ac:eb:1d:67:12:44:81:3e:00:0f:83:5d:7d:ef:80:18: a1:88:b5:49:af:ca:1e:2b:16:fe:01:c8:e9:a7:1b:c1:b8:1c: 3a:8f:d7:ea:a3:aa:38:6a:0b:30:85:3a:d2:b1:be:73:ab:2d: 51:c1:d4:74:81:ec:d4:cf:ff:e3:08:33:8d:d1:55:c9:76:eb: 63:cf:32:fb:ae:5c:08:57:86:f0:a3:8b:c9:f6:00:0a:6b:da: 3d:18:f1:c4:b8:7c:14:ad:2e:58:e7:27:fe:93:99:bb:92:cf: e0:80:01:bc:26:af:66:70:ad:7c:eb:f1:8b:d1:38:e1:7b:97: 73:d4:df:12:71:69:dc:1e:a3:33:f8:c3:7d:1d:85:ef:c1:96: ab:52:50:b5:3d:78:ff:00:fe:0f:25:69:de:1b:85:07:8e:6c: 1c:79:e4:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIx/ikqptIT+sRFnLhN9eSAeaTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTExMDMwODM4NTBaFw0yNTExMDYxNzQ1NTBaMDMxMTAvBgNV BAMTKDc1RENBQjI0RTY1MjI4Q0U5RDAwNzc2NTE0OEE4MEZENDUwRTFDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMmFqXSATB5trOi1ZRkt4o07X MImNgzYLRzgzRTtXlY9Wg25eZeyaeyLhtlioV4YZhVAtR33DLz+0AdNEYNM+6l+O dRvZKPfaXcOUOlz/PmfdernARvqRLOQPZMgebZmTyiiwaXnRGIWwZid2Izg7jBBy eRz5lF9kV1R+E12ARJMiqhK+bnwXFEuFVvlhP84g4QluI7Jo+6/Y1r//kNQ/kK1X L4outFHl4FYYyeR67Hb6sU8aNPeFKC5jdm/v8lRIV3FUffNF4kx/oRfyCMcFJJ/Q 4fgcpRbrSwtZwHWBRYtpqVpWWaqrWIKpIwYpiHaILSE322u+kfBilnVTkyfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddyrJOZSKM6dAHdlFIqA/UUOHHIwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWstBa8/SFXtc8PRg2jTqhMtSxY5eePfVRr 8IO9tBuwh9boCYJxvQT+F8W6KEehT1+Cm157B1xnYFZd/QbED+u69VoHpBUhjAgv Yna6slUoxJT+uDsGqqrbzRvRrOsdZxJEgT4AD4Ndfe+AGKGItUmvyh4rFv4ByOmn G8G4HDqP1+qjqjhqCzCFOtKxvnOrLVHB1HSB7NTP/+MIM43RVcl262PPMvuuXAhX hvCji8n2AApr2j0Y8cS4fBStLljnJ/6TmbuSz+CAAbwmr2ZwrXzr8YvROOF7l3PU 3xJxadweozP4w30dhe/BlqtSULU9eP8A/g8lad4bhQeObBx55Fc= -----END CERTIFICATE-----Generated at Mon Nov 3 15:11:29 2025 by rpki-client