$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: Ia0Yi8/52y+c1GmNvWJMgsqEGnTTSRv+if56utyb1XI= Subject key identifier: 58:1B:80:8B:A5:69:F8:29:84:BF:A2:D4:E5:96:D3:89:02:E2:96:78 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 3615EA7A164153E26C396DD69F2D6726E8AA9949 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: D1 Signing time: Sun 19 Oct 2025 22:40:41 +0000 Manifest this update: Sun 19 Oct 2025 22:35:41 +0000 Manifest next update: Thu 23 Oct 2025 03:04:41 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: EareiVNV9nrNof65ovOWSG3ZfKmE4Ei4zq03Ptb34LU=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:15:ea:7a:16:41:53:e2:6c:39:6d:d6:9f:2d:67:26:e8:aa:99:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Oct 19 22:35:41 2025 GMT Not After : Oct 23 03:04:41 2025 GMT Subject: CN=581B808BA569F82984BFA2D4E596D38902E29678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:13:98:86:fc:e6:ee:6f:db:c8:b6:a2:a6: 99:59:e6:33:01:f5:4c:8c:76:bb:8c:ad:9f:97:55: 3e:ff:f0:4c:0c:fc:a7:6e:77:f3:2b:c3:28:56:ba: f6:7b:70:bd:03:62:9b:56:19:11:90:80:eb:ba:c9: 2f:7f:f5:66:68:78:7a:d9:e7:f8:be:b0:89:e9:1a: c3:ee:cf:2d:d3:9b:7f:b0:b6:a6:cc:5a:45:1c:53: f2:3f:38:35:a5:c0:22:0c:43:9e:aa:b2:3e:9f:71: d1:53:1d:80:6a:44:3e:02:0f:9e:d3:28:54:87:82: e7:d6:59:53:ca:e8:e6:2b:cd:6d:22:a6:8c:70:9e: 29:47:b2:4f:91:4b:75:b9:ec:39:b7:29:12:24:a3: 1d:8a:f8:d3:10:b8:61:8d:23:06:8e:40:46:14:4b: a7:42:fe:9d:33:00:0d:fc:2a:12:61:6a:98:87:b3: 5c:62:2f:e3:f2:8f:cc:67:37:34:a6:7d:2a:8a:9c: 0e:9b:98:16:c5:8a:e1:4c:e5:6e:c6:ac:ce:fb:10: f4:bb:b0:f0:11:91:de:74:00:b8:ab:01:cd:35:32: 11:67:bf:09:81:f6:a8:15:d7:08:45:53:97:42:79: 5b:82:99:66:50:98:43:b7:dc:30:66:f2:05:26:5b: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:80:8B:A5:69:F8:29:84:BF:A2:D4:E5:96:D3:89:02:E2:96:78 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:b7:b7:6d:d5:39:db:62:62:50:b7:39:e0:a7:92:0b:0d: 3d:c3:e2:74:1b:68:75:c3:bd:b4:9d:b2:7c:b2:2a:25:69:9e: 77:2b:56:bf:3d:8a:89:b2:72:fc:69:ad:02:6d:56:3e:df:46: 7b:84:7c:93:7f:b4:c9:1f:97:39:eb:05:1c:0c:92:c2:1b:c1: 66:6a:97:24:bf:f5:79:64:b6:38:fc:17:6e:fc:b1:36:6f:4f: 8e:24:17:76:c1:55:01:bb:7a:1a:c1:03:9d:92:10:fc:38:3b: b1:0b:c0:49:9a:32:b5:81:4c:46:3a:ef:7e:b1:b7:f5:b8:a2: 37:04:f6:43:b0:2b:36:86:4c:c7:44:6d:6c:6e:e0:0e:cb:81: 96:e6:4d:ce:85:07:81:9e:f7:91:e2:15:7b:c6:73:98:08:9f: d8:c1:22:07:ed:8c:51:a8:61:5d:f8:a1:8f:29:62:5b:f4:2b: 56:f2:43:ee:48:7f:3a:05:cf:49:6d:d7:42:98:94:79:d9:46: e8:be:ee:57:6c:da:d7:2c:ca:2c:70:af:4b:40:df:ed:03:1e: 34:ec:70:16:7b:cf:74:2c:1a:df:9f:35:07:5b:03:76:c7:db: ee:66:23:a5:7f:ac:0e:dc:d7:87:4d:ba:26:fe:52:13:62:a2: 7b:4d:2a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhXqehZBU+JsOW3Wny1nJuiqmUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTEwMTkyMjM1NDFaFw0yNTEwMjMwMzA0NDFaMDMxMTAvBgNV BAMTKDU4MUI4MDhCQTU2OUY4Mjk4NEJGQTJENEU1OTZEMzg5MDJFMjk2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLBOYhvzm7m/byLaipplZ5jMB 9UyMdruMrZ+XVT7/8EwM/Kdud/MrwyhWuvZ7cL0DYptWGRGQgOu6yS9/9WZoeHrZ 5/i+sInpGsPuzy3Tm3+wtqbMWkUcU/I/ODWlwCIMQ56qsj6fcdFTHYBqRD4CD57T KFSHgufWWVPK6OYrzW0ipoxwnilHsk+RS3W57Dm3KRIkox2K+NMQuGGNIwaOQEYU S6dC/p0zAA38KhJhapiHs1xiL+Pyj8xnNzSmfSqKnA6bmBbFiuFM5W7GrM77EPS7 sPARkd50ALirAc01MhFnvwmB9qgV1whFU5dCeVuCmWZQmEO33DBm8gUmW90NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBuAi6Vp+CmEv6LU5ZbTiQLilngwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGzt7dt1TnbYmJQtzngp5ILDT3D4nQbaHXD vbSdsnyyKiVpnncrVr89iomycvxprQJtVj7fRnuEfJN/tMkflznrBRwMksIbwWZq lyS/9Xlktjj8F278sTZvT44kF3bBVQG7ehrBA52SEPw4O7ELwEmaMrWBTEY6736x t/W4ojcE9kOwKzaGTMdEbWxu4A7LgZbmTc6FB4Ge95HiFXvGc5gIn9jBIgftjFGo YV34oY8pYlv0K1byQ+5IfzoFz0lt10KYlHnZRui+7lds2tcsyixwr0tA3+0DHjTs cBZ7z3QsGt+fNQdbA3bH2+5mI6V/rA7c14dNuib+UhNiontNKro= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:19 2025 by rpki-client