$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: My0QNZFALxSEey7pda+iK4ssL7oSBGv0cetkE1mTZhM= Subject key identifier: E3:BA:F9:3B:C2:AF:15:A8:41:B6:DF:F1:62:7B:0E:20:03:F7:A2:F6 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 3F965A8F63614D58B1AE14708488B786414AB0EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01CA Signing time: Mon 03 Nov 2025 02:21:29 +0000 Manifest this update: Mon 03 Nov 2025 02:16:29 +0000 Manifest next update: Thu 06 Nov 2025 03:20:29 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: 0HpniN93MoN64jF7Qk0BKMS0oW+QYQ+OMdb+KFAsK0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:96:5a:8f:63:61:4d:58:b1:ae:14:70:84:88:b7:86:41:4a:b0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Nov 3 02:16:29 2025 GMT Not After : Nov 6 03:20:29 2025 GMT Subject: CN=E3BAF93BC2AF15A841B6DFF1627B0E2003F7A2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:41:9d:06:aa:a3:af:7b:16:0b:5c:ab:ff: dc:71:c3:a3:f5:be:5c:5b:17:db:53:13:20:e6:7e: 25:0c:db:59:1e:b2:7f:25:5d:5b:5d:87:e1:59:77: bc:87:8d:15:7d:ae:bd:43:9c:e0:c2:91:92:88:ee: 2f:b3:a7:a5:36:3a:45:75:a7:4f:6a:d5:9b:49:a9: c5:4b:51:d2:56:b3:54:f7:70:51:79:01:20:9b:be: 27:5b:56:00:f2:d7:7d:f6:f5:75:70:38:28:31:bf: cc:e4:73:37:c2:97:39:f5:52:ff:90:e3:59:fb:fb: 2c:12:28:ac:8f:a4:a7:7f:3d:bd:3b:4c:8f:a2:56: 80:e5:61:a7:e8:c7:87:6c:f1:8c:33:c7:2d:d5:1b: 99:7b:c4:e4:5d:22:60:98:d9:6f:02:f8:6f:a4:b9: 45:47:d8:e5:90:ff:a7:80:e4:24:13:4a:be:8a:90: ec:27:da:a5:f4:9d:52:26:a1:28:e9:55:a8:25:a7: b2:00:7f:25:02:64:4d:4b:78:91:95:65:01:b3:3c: 7f:cb:e9:a9:b0:19:c7:f2:4a:20:20:d3:45:48:2e: aa:f7:47:dd:0f:62:15:e0:4f:cb:7c:f9:be:f7:0f: 69:4f:66:70:73:a1:33:89:c6:e1:40:5f:b2:53:75: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BA:F9:3B:C2:AF:15:A8:41:B6:DF:F1:62:7B:0E:20:03:F7:A2:F6 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:5a:22:c4:5e:17:fc:8e:d5:33:cd:f0:5e:36:2d:44:7d: 72:ee:9a:df:ec:98:a0:79:4f:49:e4:35:77:cd:fe:9b:0a:23: ae:a1:61:f6:be:5a:c0:c8:d1:f0:55:21:4e:81:4f:70:6a:34: b7:c5:5a:bd:1c:c2:3b:1d:ee:07:af:23:62:5c:59:62:ae:6d: 0b:f6:a3:6d:8f:02:50:9f:32:aa:71:07:4a:82:05:12:05:7a: 7b:6f:c2:d7:25:4a:4b:32:19:9f:a7:78:47:89:b8:be:a1:45: 78:97:06:16:27:e5:8b:f9:e5:0f:12:70:74:58:47:2b:a1:14: 9c:fb:f1:28:d7:b7:64:66:26:93:5a:ac:46:21:b6:3f:dc:24: 0b:c5:8b:75:b9:07:f2:2e:68:d0:4f:06:14:bf:54:15:aa:e8: 91:46:8c:df:38:98:15:ff:3a:c1:99:b4:c5:50:be:dd:8e:72: 54:4c:53:65:3b:59:e0:81:93:69:1d:d9:2c:57:f9:1d:e1:20: 92:ed:a5:83:df:dc:2e:a1:87:af:26:b6:79:5f:4e:9c:5d:5a: f8:fc:71:d2:46:a4:3f:ca:cc:3e:9f:49:68:df:7c:dc:32:e0: bc:66:b5:3a:a7:f1:1e:19:8e:6b:a1:bf:ef:1e:ed:07:f4:79: b9:a9:2b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5Zaj2NhTVixrhRwhIi3hkFKsOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTExMDMwMjE2MjlaFw0yNTExMDYwMzIwMjlaMDMxMTAvBgNV BAMTKEUzQkFGOTNCQzJBRjE1QTg0MUI2REZGMTYyN0IwRTIwMDNGN0EyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgMkGdBqqjr3sWC1yr/9xxw6P1 vlxbF9tTEyDmfiUM21kesn8lXVtdh+FZd7yHjRV9rr1DnODCkZKI7i+zp6U2OkV1 p09q1ZtJqcVLUdJWs1T3cFF5ASCbvidbVgDy13329XVwOCgxv8zkczfClzn1Uv+Q 41n7+ywSKKyPpKd/Pb07TI+iVoDlYafox4ds8Ywzxy3VG5l7xORdImCY2W8C+G+k uUVH2OWQ/6eA5CQTSr6KkOwn2qX0nVImoSjpVaglp7IAfyUCZE1LeJGVZQGzPH/L 6amwGcfySiAg00VILqr3R90PYhXgT8t8+b73D2lPZnBzoTOJxuFAX7JTdWcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47r5O8KvFahBtt/xYnsOIAP3ovYwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfGWiLEXhf8jtUzzfBeNi1EfXLumt/smKB5 T0nkNXfN/psKI66hYfa+WsDI0fBVIU6BT3BqNLfFWr0cwjsd7gevI2JcWWKubQv2 o22PAlCfMqpxB0qCBRIFentvwtclSksyGZ+neEeJuL6hRXiXBhYn5Yv55Q8ScHRY RyuhFJz78SjXt2RmJpNarEYhtj/cJAvFi3W5B/IuaNBPBhS/VBWq6JFGjN84mBX/ OsGZtMVQvt2OclRMU2U7WeCBk2kd2SxX+R3hIJLtpYPf3C6hh68mtnlfTpxdWvj8 cdJGpD/KzD6fSWjffNwy4LxmtTqn8R4Zjmuhv+8e7Qf0ebmpK74= -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:32 2025 by rpki-client