$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: cMWx17X74hI8lG4MykmzPRvTrsVySK3DWX0SGGTF1Zs= Subject key identifier: 6F:3F:20:15:02:CD:97:A9:8E:CE:6D:E2:21:6A:E8:F4:F1:A0:DB:7E Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 78FE0A502E0165684AF56292EC0C2D2EB3F0201C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: AD Signing time: Mon 03 Nov 2025 19:30:05 +0000 Manifest this update: Mon 03 Nov 2025 19:25:05 +0000 Manifest next update: Fri 07 Nov 2025 06:33:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 2: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: E5l7wvm/ZxrzncWrTJXbovA/cxvSlCzbL5+gty4sHxU=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fe:0a:50:2e:01:65:68:4a:f5:62:92:ec:0c:2d:2e:b3:f0:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Nov 3 19:25:05 2025 GMT Not After : Nov 7 06:33:05 2025 GMT Subject: CN=6F3F201502CD97A98ECE6DE2216AE8F4F1A0DB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:db:5e:51:58:18:14:55:18:10:9c:0e:d3: d5:5d:42:33:81:12:5b:4b:b2:50:3e:7d:d5:b0:45: 6a:8f:20:dc:7c:ab:eb:28:fd:6d:bc:88:24:08:8c: 58:0f:3f:a6:b8:7e:5e:d6:fe:02:f6:9f:2d:1b:88: f2:ac:ec:b0:1f:fc:76:b1:fa:1a:70:6f:dd:f3:aa: 49:dc:e2:55:0c:11:41:da:ee:1c:d8:56:6c:ee:67: e4:a4:69:51:1b:43:29:c6:17:d7:aa:f7:9e:c5:c3: a7:b7:ab:28:79:07:6c:6d:37:33:66:97:17:f9:22: f2:4e:a2:a7:76:83:66:1d:18:57:7c:e4:ee:c0:dc: ba:6c:4c:72:e9:7e:bf:a3:be:4e:6d:43:9e:9e:c2: 58:8c:d6:ab:01:03:d8:38:36:35:b2:7c:09:6a:44: 30:10:ae:31:4d:cb:85:df:60:e7:a8:25:99:aa:78: ba:0c:38:d3:2b:00:7c:4f:f5:fc:5a:8e:ac:de:25: cb:5b:16:14:2c:5d:c4:2c:7f:34:22:b3:43:b4:6a: d7:7e:97:60:9c:57:a7:6c:4b:d5:e6:52:3e:8b:95: f1:71:1d:8f:b1:46:c4:6b:33:05:1d:e5:11:7e:ba: bd:0c:24:55:07:6c:10:70:48:84:5e:04:79:43:a7: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3F:20:15:02:CD:97:A9:8E:CE:6D:E2:21:6A:E8:F4:F1:A0:DB:7E X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:57:2a:05:23:6c:8d:58:34:bc:e0:55:fd:8b:df:cb:75:68: 12:ea:b2:c5:ca:ce:40:d3:c9:2f:67:fd:4f:d6:b6:80:c6:5b: 48:23:d4:bd:82:e5:a8:e9:d9:72:8c:67:cf:a9:76:e0:21:a8: 96:f8:c2:c0:68:1e:94:38:b6:2f:3b:56:25:bf:32:ea:eb:40: b7:fd:a3:20:98:8f:76:29:84:f1:de:13:3e:bb:61:f5:6d:24: 21:fa:45:f1:98:1d:9e:20:aa:ad:20:57:b7:a0:ce:e1:bc:3d: 7a:5f:90:33:6a:cc:de:19:e7:87:99:b7:3b:5e:c7:cc:6a:78: 6f:77:54:25:e8:f2:0b:13:a8:39:4f:37:49:00:cc:60:b7:b5: dd:6f:ed:d4:d9:52:14:75:79:35:65:cd:5d:8a:62:b7:6d:b6: ab:79:d0:56:9f:71:14:95:43:67:ce:06:0a:09:f8:96:58:5d: 61:75:bd:4b:b4:47:7d:e7:7d:25:0b:1e:88:55:f3:6b:9d:9d: 89:a4:ac:17:4d:8a:56:6a:f8:7d:a4:20:dd:d6:e4:e9:45:dc: cd:11:0c:30:d2:91:c6:34:31:88:00:eb:25:cb:20:10:a3:42: df:72:12:1e:85:6b:b4:eb:27:64:90:ca:a1:e5:2f:85:a6:84: 1c:40:43:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeP4KUC4BZWhK9WKS7AwtLrPwIBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTExMDMxOTI1MDVaFw0yNTExMDcwNjMzMDVaMDMxMTAvBgNV BAMTKDZGM0YyMDE1MDJDRDk3QTk4RUNFNkRFMjIxNkFFOEY0RjFBMERCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2dteUVgYFFUYEJwO09VdQjOB EltLslA+fdWwRWqPINx8q+so/W28iCQIjFgPP6a4fl7W/gL2ny0biPKs7LAf/Hax +hpwb93zqknc4lUMEUHa7hzYVmzuZ+SkaVEbQynGF9eq957Fw6e3qyh5B2xtNzNm lxf5IvJOoqd2g2YdGFd85O7A3LpsTHLpfr+jvk5tQ56ewliM1qsBA9g4NjWyfAlq RDAQrjFNy4XfYOeoJZmqeLoMONMrAHxP9fxajqzeJctbFhQsXcQsfzQis0O0atd+ l2CcV6dsS9XmUj6LlfFxHY+xRsRrMwUd5RF+ur0MJFUHbBBwSIReBHlDpzBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbz8gFQLNl6mOzm3iIWro9PGg234wHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1XKgUjbI1YNLzgVf2L38t1aBLqssXKzkDT yS9n/U/WtoDGW0gj1L2C5ajp2XKMZ8+pduAhqJb4wsBoHpQ4ti87ViW/MurrQLf9 oyCYj3YphPHeEz67YfVtJCH6RfGYHZ4gqq0gV7egzuG8PXpfkDNqzN4Z54eZtzte x8xqeG93VCXo8gsTqDlPN0kAzGC3td1v7dTZUhR1eTVlzV2KYrdttqt50FafcRSV Q2fOBgoJ+JZYXWF1vUu0R33nfSULHohV82udnYmkrBdNilZq+H2kIN3W5OlF3M0R DDDSkcY0MYgA6yXLIBCjQt9yEh6Fa7TrJ2SQyqHlL4WmhBxAQ98= -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:23 2025 by rpki-client