$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: zRYEZaHVJAL01RjVGbCeqR7SfXWzZvaKOvetZJ+KTpw= Subject key identifier: 27:89:20:03:B4:D1:EA:DC:C4:59:41:89:AA:A8:00:A8:2A:EC:BC:EA Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 36370E032DD54C83A04E74B3A6DE27485A03AB98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02F8 Signing time: Mon 03 Nov 2025 05:21:10 +0000 Manifest this update: Mon 03 Nov 2025 05:16:10 +0000 Manifest next update: Thu 06 Nov 2025 17:07:10 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: o2abquWF0lRpFuppHRUcSyOPDefftxmVXsFrwDQpAw4=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:0e:03:2d:d5:4c:83:a0:4e:74:b3:a6:de:27:48:5a:03:ab:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Nov 3 05:16:10 2025 GMT Not After : Nov 6 17:07:10 2025 GMT Subject: CN=27892003B4D1EADCC4594189AAA800A82AECBCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:8e:5b:de:a0:a9:d6:ba:f5:64:0a:e1:9c: 88:3d:6e:5f:e8:ce:96:dc:c3:63:24:b3:6a:ae:f0: ad:26:dd:d0:e1:58:dc:56:4c:ea:2a:67:13:c1:57: 4c:53:10:63:ca:32:a9:60:4b:d0:dd:a7:11:2c:bc: be:eb:7f:fe:17:19:6c:3c:2b:53:e9:5d:36:f0:4b: 24:d9:5a:63:52:3c:1f:39:4a:f5:c8:5b:ac:d9:c4: d9:53:83:42:73:42:c4:ff:1d:c0:0d:09:df:f2:19: f4:9d:57:25:32:01:8c:76:38:f4:63:72:c6:bd:9c: ad:da:87:2b:e5:fd:9a:c2:e4:a2:88:30:1b:34:cc: b1:ab:e2:0c:b9:e3:43:67:1e:f7:fa:d8:a5:47:39: f5:0f:2c:85:2b:51:b0:fd:05:e9:34:b1:88:33:c6: ae:de:05:72:39:68:d2:c2:46:87:fe:a9:41:cd:c4: f0:bf:39:55:ee:0b:a1:13:08:0a:30:63:69:98:80: 2f:22:52:80:17:fa:6a:48:c4:f5:fa:d6:b8:db:ef: 52:5d:c9:ef:26:04:1b:fc:91:43:c5:e8:84:6f:75: 45:19:71:6a:18:17:a1:bb:06:b8:ab:a9:44:ba:bf: e3:71:69:7c:86:fb:a0:88:98:88:e8:05:2a:ee:1e: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:89:20:03:B4:D1:EA:DC:C4:59:41:89:AA:A8:00:A8:2A:EC:BC:EA X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:af:9f:c6:b4:64:4f:cd:b7:eb:51:a1:14:8f:e8:6d:48:2a: 79:d3:13:4d:f8:f3:39:ab:84:bd:0e:70:10:79:8d:2b:7f:52: 48:07:c3:58:58:a2:29:8c:67:1b:d9:d4:21:0d:e0:d7:34:db: d3:2a:77:98:55:ba:b6:1e:5e:c8:0e:8a:10:81:37:ae:57:fe: ce:89:80:72:3e:e4:5f:48:c7:d0:18:5b:a3:57:f5:f5:08:9b: a2:4b:bd:ca:1f:85:38:ab:92:b9:43:c2:ed:a9:cf:1c:f2:7a: 3b:14:95:ce:3a:37:43:32:32:77:60:11:3f:83:f0:b4:6b:91: 44:13:17:ea:8a:94:7d:c4:cc:c8:12:c6:bd:91:9e:bb:50:a6: 69:21:47:1b:b6:b0:ee:92:08:d3:e6:36:b0:df:27:22:30:bb: e7:05:51:af:59:fb:07:8f:1c:8f:5e:9e:79:3e:b0:a6:3b:c9: 15:e7:b3:da:76:d1:85:37:bd:9d:35:fd:39:f3:11:07:50:4c: b0:7b:cc:59:09:51:20:33:38:6a:96:b2:2e:cf:e5:0d:ec:98: b6:73:7d:ed:a7:2b:b8:24:2d:90:1d:b9:35:e9:ae:96:f3:ee: e1:c0:71:79:f7:1d:67:c8:ff:be:50:c6:ae:a4:8e:99:1a:c3: 7c:f3:e2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjcOAy3VTIOgTnSzpt4nSFoDq5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTExMDMwNTE2MTBaFw0yNTExMDYxNzA3MTBaMDMxMTAvBgNV BAMTKDI3ODkyMDAzQjREMUVBRENDNDU5NDE4OUFBQTgwMEE4MkFFQ0JDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2o5b3qCp1rr1ZArhnIg9bl/o zpbcw2Mks2qu8K0m3dDhWNxWTOoqZxPBV0xTEGPKMqlgS9DdpxEsvL7rf/4XGWw8 K1PpXTbwSyTZWmNSPB85SvXIW6zZxNlTg0JzQsT/HcANCd/yGfSdVyUyAYx2OPRj csa9nK3ahyvl/ZrC5KKIMBs0zLGr4gy540NnHvf62KVHOfUPLIUrUbD9Bek0sYgz xq7eBXI5aNLCRof+qUHNxPC/OVXuC6ETCAowY2mYgC8iUoAX+mpIxPX61rjb71Jd ye8mBBv8kUPF6IRvdUUZcWoYF6G7BrirqUS6v+NxaXyG+6CImIjoBSruHktzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4kgA7TR6tzEWUGJqqgAqCrsvOowHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+vn8a0ZE/Nt+tRoRSP6G1IKnnTE0348zmr hL0OcBB5jSt/UkgHw1hYoimMZxvZ1CEN4Nc029Mqd5hVurYeXsgOihCBN65X/s6J gHI+5F9Ix9AYW6NX9fUIm6JLvcofhTirkrlDwu2pzxzyejsUlc46N0MyMndgET+D 8LRrkUQTF+qKlH3EzMgSxr2RnrtQpmkhRxu2sO6SCNPmNrDfJyIwu+cFUa9Z+weP HI9ennk+sKY7yRXns9p20YU3vZ01/TnzEQdQTLB7zFkJUSAzOGqWsi7P5Q3smLZz fe2nK7gkLZAduTXprpbz7uHAcXn3HWfI/75Qxq6kjpkaw3zz4uE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:35 2025 by rpki-client