$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: beTUSuEL0PyJueJyPaISPF0RpY5VeksY7ePsHdVdJ1I= Subject key identifier: D9:11:6B:FD:26:56:94:2E:72:DD:86:84:B6:5A:A3:BC:3C:82:45:2D Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 494B74D22E1C25983CD341F9CF6AF3BCC1FBFFC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: CD Signing time: Sat 18 Oct 2025 13:50:50 +0000 Manifest this update: Sat 18 Oct 2025 13:45:50 +0000 Manifest next update: Tue 21 Oct 2025 21:39:50 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: rd3XbxJ5PRMWHuyl+EvdqClQo5PBi+S/qOJgJY/+myY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4b:74:d2:2e:1c:25:98:3c:d3:41:f9:cf:6a:f3:bc:c1:fb:ff:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Oct 18 13:45:50 2025 GMT Not After : Oct 21 21:39:50 2025 GMT Subject: CN=D9116BFD2656942E72DD8684B65AA3BC3C82452D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:9d:38:29:ee:86:56:20:f2:f0:90:56:aa: ba:f5:7b:69:72:e1:da:20:5b:bf:35:44:b4:27:71: 97:0d:11:4d:e4:5f:8b:23:27:d6:15:54:0d:d5:89: 7e:37:04:20:45:55:28:d0:a6:78:8d:d3:0b:04:6c: 4f:c9:da:3c:0d:3e:39:c8:fb:a5:fb:fc:9c:97:b5: fb:e1:00:72:92:10:93:b6:44:d2:d1:9c:a0:95:71: da:b4:29:c3:81:24:f0:77:69:91:09:d9:46:e1:fd: b7:b0:dc:5f:f0:62:13:b1:2c:8c:10:3e:39:b8:dc: 6a:e9:20:fd:51:b7:df:f3:f6:d6:c0:86:c1:c4:73: c9:15:25:14:44:0b:aa:ad:d2:d3:21:9a:16:c4:06: b4:4c:2d:b4:b9:ba:84:e1:a0:17:51:c7:c3:41:82: f8:04:10:45:9b:3e:99:99:02:85:ba:29:5f:a1:08: b5:54:0e:5f:a3:1f:df:e8:26:e0:ec:e5:4f:cf:e2: 4c:42:fd:39:2f:b5:8c:17:29:06:56:4e:69:6f:2e: d9:cb:54:e5:0e:80:18:f4:3b:f0:39:af:84:b6:da: 07:2d:72:2e:6b:7e:04:a7:2f:69:94:cb:5c:77:2c: d0:25:1d:a0:c1:b8:a1:47:e9:bb:c6:a7:65:96:08: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:6B:FD:26:56:94:2E:72:DD:86:84:B6:5A:A3:BC:3C:82:45:2D X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:56:ae:04:f1:6e:dd:e4:da:ea:e7:1f:fa:92:f9:84:8a:9e: 64:22:30:37:f6:13:7c:fc:84:ed:3c:0d:7a:4f:94:16:8b:e3: 0a:a0:81:06:67:2a:cb:4c:e3:c2:94:b5:6c:dd:29:d1:8b:40: 3a:e2:7b:2e:0b:02:03:d1:0b:57:e8:01:db:9b:70:30:41:05: 47:f7:41:39:39:e2:32:c3:8b:6b:e5:29:d2:d8:96:21:e0:c4: 52:1b:b3:6a:75:e3:76:42:3d:a5:9d:bc:e9:29:82:51:e7:32: ee:26:cf:66:c2:f2:e1:b4:2c:83:46:17:d7:19:9f:2c:0b:1a: 0c:0e:d1:a1:ce:5b:52:85:ec:e9:27:c8:75:6a:25:ea:8b:c7: db:3c:7a:be:f0:64:9c:98:18:4c:da:f3:44:9c:da:d7:21:50: 76:c5:69:29:04:c8:89:9c:59:be:a9:f8:b5:07:2b:51:04:60: 47:a2:20:f9:9c:3b:52:0e:30:23:ca:4b:2e:f5:fa:d9:e2:b9: 9f:03:b1:0f:54:ab:b9:99:84:2f:7f:ae:1e:d6:3d:f1:4f:9f: d4:92:10:5a:77:52:72:69:41:25:5a:c9:f2:fa:9d:e6:6f:27: 4d:e1:59:8e:b2:ca:3c:a9:21:71:e5:4d:06:64:15:48:66:61: 6a:d9:05:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUt00i4cJZg800H5z2rzvMH7/8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTEwMTgxMzQ1NTBaFw0yNTEwMjEyMTM5NTBaMDMxMTAvBgNV BAMTKEQ5MTE2QkZEMjY1Njk0MkU3MkREODY4NEI2NUFBM0JDM0M4MjQ1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmZ04Ke6GViDy8JBWqrr1e2ly 4dogW781RLQncZcNEU3kX4sjJ9YVVA3ViX43BCBFVSjQpniN0wsEbE/J2jwNPjnI +6X7/JyXtfvhAHKSEJO2RNLRnKCVcdq0KcOBJPB3aZEJ2Ubh/bew3F/wYhOxLIwQ Pjm43GrpIP1Rt9/z9tbAhsHEc8kVJRREC6qt0tMhmhbEBrRMLbS5uoThoBdRx8NB gvgEEEWbPpmZAoW6KV+hCLVUDl+jH9/oJuDs5U/P4kxC/TkvtYwXKQZWTmlvLtnL VOUOgBj0O/A5r4S22gctci5rfgSnL2mUy1x3LNAlHaDBuKFH6bvGp2WWCFNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RFr/SZWlC5y3YaEtlqjvDyCRS0wHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBWrgTxbt3k2urnH/qS+YSKnmQiMDf2E3z8 hO08DXpPlBaL4wqggQZnKstM48KUtWzdKdGLQDriey4LAgPRC1foAdubcDBBBUf3 QTk54jLDi2vlKdLYliHgxFIbs2p143ZCPaWdvOkpglHnMu4mz2bC8uG0LINGF9cZ nywLGgwO0aHOW1KF7OknyHVqJeqLx9s8er7wZJyYGEza80Sc2tchUHbFaSkEyImc Wb6p+LUHK1EEYEeiIPmcO1IOMCPKSy71+tniuZ8DsQ9Uq7mZhC9/rh7WPfFPn9SS EFp3UnJpQSVayfL6neZvJ03hWY6yyjypIXHlTQZkFUhmYWrZBXY= -----END CERTIFICATE-----Generated at Sun Oct 19 18:02:51 2025 by rpki-client