$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: awpfZrTWjeEjAN0vSYATe5BePxadCvouGj38njeRGV4= Subject key identifier: 92:E8:09:87:43:FD:54:F5:A0:3B:E5:91:96:29:F1:5A:D5:CB:E8:8C Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 18CD405CA2FAC88B1ECEC3E351A20F4F2C531C7F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 11:30:35 +0000 Manifest this update: Sat 18 Oct 2025 11:25:35 +0000 Manifest next update: Tue 21 Oct 2025 18:23:35 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: 4NY243X3eI7uWg/bR+YI4KrDWq2woBamrh5XdSrM81g=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:40:5c:a2:fa:c8:8b:1e:ce:c3:e3:51:a2:0f:4f:2c:53:1c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Oct 18 11:25:35 2025 GMT Not After : Oct 21 18:23:35 2025 GMT Subject: CN=92E8098743FD54F5A03BE5919629F15AD5CBE88C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:6b:be:7d:dc:c4:37:d4:ad:87:a3:74:b7: b0:8f:5b:11:3e:07:66:e0:25:f6:54:0f:6c:ab:9a: 13:e9:a1:17:08:f7:39:9a:d0:4f:53:80:b1:df:70: 58:71:42:4a:f4:21:b9:b4:38:a1:1b:d6:57:f0:2c: cc:2c:03:83:93:4d:21:21:d6:13:1e:94:2e:23:8d: ad:6d:a7:d9:31:b9:0a:80:48:59:d5:c8:c6:17:46: 04:af:04:44:ee:aa:d5:84:a4:7f:be:3c:c9:6d:56: 81:7e:a7:7e:72:3f:12:f4:d8:2b:ae:26:63:db:4c: 87:2a:98:dd:ac:f8:ba:af:1a:c2:de:58:1e:72:43: a6:19:1c:26:5f:29:dc:23:74:01:c8:29:e6:41:16: 14:70:87:18:c7:72:33:31:0b:97:9b:f8:10:02:fe: 4c:fc:12:96:1f:2d:a2:33:48:81:26:a9:87:23:8e: d5:6c:76:9d:4d:d2:d8:48:d9:66:cb:91:6e:53:de: df:1a:96:fe:e3:0a:a1:48:d0:f9:6d:d0:f6:55:d1: 0c:23:a6:5b:e5:f5:ef:54:f0:51:5e:d0:57:1e:df: 18:a0:90:a0:f2:2f:3e:4a:cc:a2:21:2e:49:07:cf: c1:36:94:60:d9:03:b2:e2:55:db:40:8b:f5:11:2e: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E8:09:87:43:FD:54:F5:A0:3B:E5:91:96:29:F1:5A:D5:CB:E8:8C X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:93:1a:d9:f3:52:fa:01:18:86:6b:7a:15:04:23:9d:61: 21:10:29:e0:1e:d1:02:2b:7e:38:91:54:d8:c9:2a:df:4e:fc: 86:f3:0b:9f:86:08:ed:21:19:e8:22:02:10:6f:80:ac:9f:82: b1:8f:53:0f:69:ec:95:29:da:42:de:36:c8:86:1e:76:fb:0b: c6:40:67:3c:46:a3:b5:f7:25:76:fc:3c:d6:21:be:b7:7a:97: 0c:0e:4f:59:a1:6c:0c:f2:cd:04:9b:e4:63:9e:03:18:fa:e2: aa:b4:f2:9a:bb:a6:7c:f2:52:e7:e3:d8:76:67:41:cf:d1:f2: 4f:7b:43:6f:d0:2b:ef:22:94:30:1c:06:96:d3:7d:74:03:2c: 37:2d:00:16:97:83:c4:7e:77:04:6a:eb:3c:73:1d:0b:ff:92: 0f:a9:21:ea:8d:a6:02:67:3c:36:80:c2:3b:d7:1e:87:c1:6e: 3b:7a:1d:67:2f:95:6d:c9:46:c1:f1:f4:d3:71:41:57:50:54: 7a:b8:ff:3b:a8:d9:f4:fa:ea:83:3f:d8:6e:6f:f1:ae:97:77: c2:c6:0d:be:17:cd:ef:cc:1f:83:14:59:fd:1a:e1:1d:eb:17: 91:20:84:ac:7c:8d:d7:f3:76:0b:93:ff:cc:8c:6e:d4:35:d2: 32:88:d4:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUGM1AXKL6yIsezsPjUaIPTyxTHH8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MTAxODExMjUzNVoX DTI1MTAyMTE4MjMzNVowMzExMC8GA1UEAxMoOTJFODA5ODc0M0ZENTRGNUEwM0JF NTkxOTYyOUYxNUFENUNCRTg4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUBa7593MQ31K2Ho3S3sI9bET4HZuAl9lQPbKuaE+mhFwj3OZrQT1OAsd9w WHFCSvQhubQ4oRvWV/AszCwDg5NNISHWEx6ULiONrW2n2TG5CoBIWdXIxhdGBK8E RO6q1YSkf748yW1WgX6nfnI/EvTYK64mY9tMhyqY3az4uq8awt5YHnJDphkcJl8p 3CN0Acgp5kEWFHCHGMdyMzELl5v4EAL+TPwSlh8tojNIgSaphyOO1Wx2nU3S2EjZ ZsuRblPe3xqW/uMKoUjQ+W3Q9lXRDCOmW+X171TwUV7QVx7fGKCQoPIvPkrMoiEu SQfPwTaUYNkDsuJV20CL9REurT8CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSS6AmH Q/1U9aA75ZGWKfFa1cvojDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7aTGtnz UvoBGIZrehUEI51hIRAp4B7RAit+OJFU2Mkq3078hvMLn4YI7SEZ6CICEG+ArJ+C sY9TD2nslSnaQt42yIYedvsLxkBnPEajtfcldvw81iG+t3qXDA5PWaFsDPLNBJvk Y54DGPriqrTymrumfPJS5+PYdmdBz9HyT3tDb9Ar7yKUMBwGltN9dAMsNy0AFpeD xH53BGrrPHMdC/+SD6kh6o2mAmc8NoDCO9ceh8FuO3odZy+VbclGwfH003FBV1BU erj/O6jZ9Prqgz/Ybm/xrpd3wsYNvhfN78wfgxRZ/RrhHesXkSCErHyN1/N2C5P/ zIxu1DXSMojUFg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:28 2025 by rpki-client