$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: dQ9n8GB5qvEQaW5V9z053Vhee40evD1HaAJiCwbVnSU= Subject key identifier: DF:BB:9C:98:51:2C:FE:4D:0D:CA:80:4B:A2:0C:CB:61:69:40:FE:0D Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 356FA8E18658425B2AD8F41EBF85AA430E56E805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 04C2 Signing time: Mon 03 Nov 2025 19:00:36 +0000 Manifest this update: Mon 03 Nov 2025 18:55:36 +0000 Manifest next update: Thu 06 Nov 2025 21:19:36 +0000 Files and hashes: 1: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: xkx6/wwTWirVmwM4GDElj1UOn7ozm4O//SwbwCrDLXk=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: iAHJXG4K6+3EiEQSytu2MEfHZRYK05stg/Yr8f+Zlv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6f:a8:e1:86:58:42:5b:2a:d8:f4:1e:bf:85:aa:43:0e:56:e8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Nov 3 18:55:36 2025 GMT Not After : Nov 6 21:19:36 2025 GMT Subject: CN=DFBB9C98512CFE4D0DCA804BA20CCB616940FE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:dd:a5:58:c3:3c:7f:45:3e:71:b9:9e:3e: e2:ba:e9:ce:4f:4d:16:c1:1f:2d:09:17:96:ab:4a: 78:20:4d:b0:92:94:03:9a:4e:b3:f8:95:83:68:79: 39:03:10:90:23:4c:75:1a:30:3e:62:70:1a:d8:e2: 8c:66:70:33:0b:93:7d:3d:8f:de:97:d7:aa:d6:ad: 7e:48:41:7f:13:e3:05:7a:ef:cd:9b:1c:26:0d:ad: 8e:3b:d7:93:b9:79:3f:fa:ae:36:63:50:ed:9f:d3: 26:8c:7d:49:70:8d:27:53:84:9b:59:e9:2d:13:05: 52:2d:18:a2:c9:a0:78:4a:22:d9:a9:66:65:d0:3f: e7:75:b3:0d:c5:81:2f:fa:92:c1:83:95:98:3d:35: 8d:c0:33:fb:67:4f:fa:e9:f5:84:9d:08:81:a8:c2: 99:ab:60:ce:46:91:b0:00:9a:1a:f5:ff:b8:00:5d: d2:83:08:71:ac:8a:18:d6:37:77:fa:c6:e7:64:75: d5:44:17:dd:23:d6:be:f4:79:ed:27:37:14:35:c4: 7e:2a:e9:1f:83:70:f8:12:e1:ce:3c:b8:2f:0e:cb: a3:59:18:4d:99:14:70:17:b0:8d:ae:44:34:0d:29: 69:7d:34:f7:2f:c1:fd:0e:e6:c4:6b:02:cf:86:53: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:9C:98:51:2C:FE:4D:0D:CA:80:4B:A2:0C:CB:61:69:40:FE:0D X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:85:52:f4:cc:3f:40:b0:f4:35:24:b0:f6:73:eb:ac:73:b2: 72:b1:b0:a2:73:e9:cf:b5:c3:96:d9:43:fd:f0:30:18:e8:a3: 62:4d:20:30:9a:9c:90:0c:bb:9a:de:3a:2e:c3:e6:49:d6:e5: d6:14:f8:db:8f:93:de:74:2e:0a:f6:a7:fc:18:53:ba:b1:c5: 66:52:b1:48:62:df:b0:aa:3c:dd:95:48:5e:7b:a5:dd:2a:6c: 7f:8b:c3:1b:80:ca:02:e8:6e:56:d1:2a:71:53:a5:a3:56:14: 9c:22:16:91:af:8e:cb:c7:43:c6:89:9e:a8:45:b0:ff:ed:5e: 71:74:56:94:2b:3c:df:ac:f2:06:46:00:01:82:13:1e:fe:24: 70:b7:4c:8f:cf:bf:ae:e4:f6:7e:de:cb:87:f7:e2:33:de:1e: 2c:2d:b5:d6:4e:ee:40:97:f0:36:34:91:2a:fc:84:3a:c5:ff: 5f:17:8f:47:fd:59:f0:1f:a6:3a:f2:e6:6c:9e:24:22:39:45: b2:db:84:b5:35:22:b8:86:51:2f:7e:3d:2b:2b:a7:6f:f5:65: 29:6b:9b:0f:d2:21:2f:82:25:77:3e:c3:16:90:99:df:d5:6c: 04:50:4a:86:14:94:df:77:d0:54:ff:f0:4c:a7:35:b2:79:5c: b3:84:73:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNW+o4YZYQlsq2PQev4WqQw5W6AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNTExMDMxODU1MzZaFw0yNTExMDYyMTE5MzZaMDMxMTAvBgNV BAMTKERGQkI5Qzk4NTEyQ0ZFNEQwRENBODA0QkEyMENDQjYxNjk0MEZFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQt2lWMM8f0U+cbmePuK66c5P TRbBHy0JF5arSnggTbCSlAOaTrP4lYNoeTkDEJAjTHUaMD5icBrY4oxmcDMLk309 j96X16rWrX5IQX8T4wV6782bHCYNrY4715O5eT/6rjZjUO2f0yaMfUlwjSdThJtZ 6S0TBVItGKLJoHhKItmpZmXQP+d1sw3FgS/6ksGDlZg9NY3AM/tnT/rp9YSdCIGo wpmrYM5GkbAAmhr1/7gAXdKDCHGsihjWN3f6xudkddVEF90j1r70ee0nNxQ1xH4q 6R+DcPgS4c48uC8Oy6NZGE2ZFHAXsI2uRDQNKWl9NPcvwf0O5sRrAs+GU1mPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37ucmFEs/k0NyoBLogzLYWlA/g0wHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGFUvTMP0Cw9DUksPZz66xzsnKxsKJz6c+1 w5bZQ/3wMBjoo2JNIDCanJAMu5reOi7D5knW5dYU+NuPk950Lgr2p/wYU7qxxWZS sUhi37CqPN2VSF57pd0qbH+LwxuAygLoblbRKnFTpaNWFJwiFpGvjsvHQ8aJnqhF sP/tXnF0VpQrPN+s8gZGAAGCEx7+JHC3TI/Pv67k9n7ey4f34jPeHiwttdZO7kCX 8DY0kSr8hDrF/18Xj0f9WfAfpjry5myeJCI5RbLbhLU1IriGUS9+PSsrp2/1ZSlr mw/SIS+CJXc+wxaQmd/VbARQSoYUlN930FT/8EynNbJ5XLOEcx8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:36 2025 by rpki-client