$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: 3mnbIVj3W0FeYgPQoXaXEfzyrqEMKvR/7xnrXh5MRIw= Subject key identifier: 7B:3A:D8:3D:87:A2:1E:E9:92:A9:84:00:69:C5:4D:05:73:69:74:4F Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 4B37FCC0B321DFCD6F7F4BE2AB1858263542188F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: 94 Signing time: Mon 03 Nov 2025 04:11:18 +0000 Manifest this update: Mon 03 Nov 2025 04:06:18 +0000 Manifest next update: Thu 06 Nov 2025 13:19:18 +0000 Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: BSGlbibj19oFqJVrIZMoqlgJ5D3wagWo6W+A7vJYqdg=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:37:fc:c0:b3:21:df:cd:6f:7f:4b:e2:ab:18:58:26:35:42:18:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Nov 3 04:06:18 2025 GMT Not After : Nov 6 13:19:18 2025 GMT Subject: CN=7B3AD83D87A21EE992A9840069C54D057369744F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:9f:cf:0d:c0:90:41:ad:6c:d4:e8:77:17: 18:cc:7d:d9:51:28:85:2f:de:64:94:a2:39:a3:01: 91:14:10:f6:90:28:5c:33:b7:c0:9d:15:70:84:a4: 64:c8:03:04:78:28:50:1a:b2:a7:71:a7:af:f2:f9: d5:78:bb:29:a2:51:10:3d:f7:25:42:45:2c:fe:8f: 3b:25:fb:a1:41:db:c4:8a:80:1f:99:00:17:6f:ee: 05:0b:a9:8d:db:69:31:ab:16:32:6b:58:3f:9e:61: f0:42:ec:8d:a9:ff:9e:6b:cd:10:05:8f:a0:a2:9c: b2:3f:24:2d:36:32:63:39:28:0b:02:69:5f:6f:4f: f1:54:24:8a:15:64:70:66:15:4d:8f:ac:94:4b:cb: eb:19:e5:9f:33:a7:9c:6c:93:8a:32:94:7f:ee:52: 19:26:68:48:90:da:de:31:82:a3:27:82:c1:1e:1d: 77:7a:df:d1:2a:3e:a3:a8:6f:21:81:0e:31:54:41: ca:40:46:1d:94:f5:21:7e:a6:af:f5:42:27:4b:0b: 8b:5f:c0:09:90:c3:9c:12:38:c6:c4:92:e9:ac:e4: 5b:c5:2d:57:28:e9:90:dd:7e:5c:31:7e:29:7d:a8: 06:53:92:92:45:e3:0d:02:24:f0:ab:42:61:dc:87: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:D8:3D:87:A2:1E:E9:92:A9:84:00:69:C5:4D:05:73:69:74:4F X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5b:ca:cb:6a:dc:b9:bd:6d:fe:3f:4e:26:6d:24:91:62:f1: ac:ca:df:84:c4:ff:9a:99:20:ba:09:5b:9d:e9:6f:00:46:40: be:c1:b2:cd:e2:96:d8:19:7b:63:e0:9b:2c:5b:37:9f:43:b6: 54:ed:df:7a:42:db:cd:f9:ab:c6:57:b5:89:03:4a:c6:0c:b6: ab:8a:c1:e7:29:34:ce:8e:3e:e5:e0:ca:0b:b8:73:12:24:1a: 4a:b9:bc:f4:ac:70:e5:d5:48:de:5d:c8:08:a8:13:b1:86:b1: c0:e3:30:be:cd:4d:3e:74:5c:28:c7:88:0a:0c:65:7c:51:9f: 2d:dd:a3:67:bf:bc:72:a7:2b:55:60:19:69:12:7d:cb:36:7c: 54:82:37:7b:34:ab:50:57:83:7b:e2:e8:c5:35:37:41:40:8b: d8:2f:07:77:43:00:85:a0:a5:67:62:b0:00:a3:20:91:ed:7d: 65:22:f7:d4:6b:b0:42:3c:99:3a:a1:9d:b6:c5:b3:8d:21:9f: ca:8b:25:75:01:ad:08:81:05:4c:6b:3e:8f:5a:5e:9a:b0:5f: 3c:77:2d:76:bf:70:76:d0:68:18:64:8d:1a:35:67:71:a5:5d: 3d:fe:6d:fe:9b:3e:3d:03:e4:9b:47:f1:aa:eb:0f:75:69:8c: d3:77:32:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzf8wLMh381vf0viqxhYJjVCGI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTExMDMwNDA2MThaFw0yNTExMDYxMzE5MThaMDMxMTAvBgNV BAMTKDdCM0FEODNEODdBMjFFRTk5MkE5ODQwMDY5QzU0RDA1NzM2OTc0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa65/PDcCQQa1s1Oh3FxjMfdlR KIUv3mSUojmjAZEUEPaQKFwzt8CdFXCEpGTIAwR4KFAasqdxp6/y+dV4uymiURA9 9yVCRSz+jzsl+6FB28SKgB+ZABdv7gULqY3baTGrFjJrWD+eYfBC7I2p/55rzRAF j6CinLI/JC02MmM5KAsCaV9vT/FUJIoVZHBmFU2PrJRLy+sZ5Z8zp5xsk4oylH/u UhkmaEiQ2t4xgqMngsEeHXd639EqPqOobyGBDjFUQcpARh2U9SF+pq/1QidLC4tf wAmQw5wSOMbEkums5FvFLVco6ZDdflwxfil9qAZTkpJF4w0CJPCrQmHch52HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezrYPYeiHumSqYQAacVNBXNpdE8wHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVbystq3Lm9bf4/TiZtJJFi8azK34TE/5qZ ILoJW53pbwBGQL7Bss3iltgZe2PgmyxbN59DtlTt33pC2835q8ZXtYkDSsYMtquK wecpNM6OPuXgygu4cxIkGkq5vPSscOXVSN5dyAioE7GGscDjML7NTT50XCjHiAoM ZXxRny3do2e/vHKnK1VgGWkSfcs2fFSCN3s0q1BXg3vi6MU1N0FAi9gvB3dDAIWg pWdisACjIJHtfWUi99RrsEI8mTqhnbbFs40hn8qLJXUBrQiBBUxrPo9aXpqwXzx3 LXa/cHbQaBhkjRo1Z3GlXT3+bf6bPj0D5JtH8arrD3VpjNN3Msk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:03 2025 by rpki-client