$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: +aUf4yllo2Tg4T0f0JXBa3bk7zxnIigwRHtRiJIImQA= Subject key identifier: C9:59:CD:FC:96:72:53:9E:02:8B:D1:1C:A0:C7:AE:50:70:24:24:60 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 2787B08AE79692AB1D57B8C8A0EC0DA2F44FA4AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: DD Signing time: Mon 03 Nov 2025 00:22:10 +0000 Manifest this update: Mon 03 Nov 2025 00:17:10 +0000 Manifest next update: Thu 06 Nov 2025 10:55:10 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: 6hkE3XWauccz24/t57c1JknyZhGQw2NjUAU5fHAvwFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:87:b0:8a:e7:96:92:ab:1d:57:b8:c8:a0:ec:0d:a2:f4:4f:a4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Nov 3 00:17:10 2025 GMT Not After : Nov 6 10:55:10 2025 GMT Subject: CN=C959CDFC9672539E028BD11CA0C7AE5070242460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:6d:59:e3:7e:65:09:4c:c9:94:3a:4a:4c: 01:92:04:36:e4:f1:ad:85:a2:2b:a2:7a:52:45:d3: b5:ba:a0:58:1b:f9:53:58:d9:b3:36:17:e9:a4:bc: 4b:3a:c6:af:5f:ca:5b:0b:39:b1:d0:b3:68:99:25: 7c:2f:4d:78:88:da:70:4c:32:22:6c:fa:53:ff:d3: 9c:9c:ea:ec:a5:14:a7:f6:32:69:57:c4:79:10:60: 45:ba:78:79:3c:12:29:42:bb:52:ae:8f:64:b9:4a: a4:e5:68:b7:7c:c4:ec:49:54:a3:9f:c3:00:bc:57: 97:21:af:6d:84:16:96:52:ff:e1:07:36:fd:43:8e: ca:83:15:f2:07:76:31:5b:19:b9:a7:e6:81:25:44: 38:60:39:94:e9:79:2e:9c:0b:e9:bc:b4:b8:f8:4d: ab:d2:76:f5:0b:c4:aa:a2:6e:d3:4a:30:06:75:c3: a3:ad:67:f6:82:8d:64:c6:e2:0d:24:a1:7f:60:a6: 53:b4:9b:8a:c2:c0:96:a3:a8:27:23:45:37:5c:a1: 7d:34:9c:a7:02:a1:08:9d:1b:2a:01:7f:d8:18:a6: 6d:0e:82:31:da:42:72:f8:40:3b:77:f9:1c:4c:5a: 02:a0:34:70:ef:8a:e5:ad:f3:9d:a8:17:5d:63:f8: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:59:CD:FC:96:72:53:9E:02:8B:D1:1C:A0:C7:AE:50:70:24:24:60 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ea:ca:d6:23:25:ff:07:3b:48:bc:1a:ae:ff:01:ef:5c:4c: ba:d7:ab:08:b8:f8:b4:68:bf:04:38:c6:fe:b6:17:6d:14:98: d9:4f:b3:1f:63:71:87:7d:ab:ca:d8:a7:f1:c8:22:fa:b6:82: 82:00:89:7f:a4:97:9e:c5:8e:2c:57:dc:67:bd:a3:0a:39:a0: 99:44:72:33:ab:5c:36:34:d2:b8:5f:76:d0:85:f1:69:cc:98: 67:14:2c:69:6f:f8:05:eb:fb:2d:9a:47:3f:5a:9d:bf:3e:c1: ef:d2:7d:03:4d:06:1d:5e:42:ff:52:7f:01:96:31:7d:7e:b0: 60:1c:15:d4:2a:de:cf:cf:e0:e1:77:80:eb:fa:28:79:b4:a6: 93:23:f0:5e:f0:40:a3:c3:5b:83:20:f7:86:aa:d5:b3:d1:4f: 0a:c9:6a:05:1c:23:13:7c:83:62:63:12:ba:00:26:c5:18:77: af:48:b2:d0:dd:95:c9:f8:20:81:1a:08:e8:c0:19:99:c2:51: fd:0a:cd:0c:8f:13:9d:52:3e:a6:7d:ba:8c:5b:ad:be:6a:29: 57:3b:75:74:e5:9b:9e:f3:d9:04:d4:49:6d:21:aa:f9:2d:34: 6b:09:4a:bc:f0:63:c4:90:50:d9:fb:aa:2f:54:1b:1a:da:12: 8f:57:ba:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4ewiueWkqsdV7jIoOwNovRPpK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTExMDMwMDE3MTBaFw0yNTExMDYxMDU1MTBaMDMxMTAvBgNV BAMTKEM5NTlDREZDOTY3MjUzOUUwMjhCRDExQ0EwQzdBRTUwNzAyNDI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7G1Z435lCUzJlDpKTAGSBDbk 8a2FoiuielJF07W6oFgb+VNY2bM2F+mkvEs6xq9fylsLObHQs2iZJXwvTXiI2nBM MiJs+lP/05yc6uylFKf2MmlXxHkQYEW6eHk8EilCu1Kuj2S5SqTlaLd8xOxJVKOf wwC8V5chr22EFpZS/+EHNv1DjsqDFfIHdjFbGbmn5oElRDhgOZTpeS6cC+m8tLj4 TavSdvULxKqibtNKMAZ1w6OtZ/aCjWTG4g0koX9gplO0m4rCwJajqCcjRTdcoX00 nKcCoQidGyoBf9gYpm0OgjHaQnL4QDt3+RxMWgKgNHDviuWt852oF11j+AHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVnN/JZyU54Ci9EcoMeuUHAkJGAwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnqytYjJf8HO0i8Gq7/Ae9cTLrXqwi4+LRo vwQ4xv62F20UmNlPsx9jcYd9q8rYp/HIIvq2goIAiX+kl57FjixX3Ge9owo5oJlE cjOrXDY00rhfdtCF8WnMmGcULGlv+AXr+y2aRz9anb8+we/SfQNNBh1eQv9SfwGW MX1+sGAcFdQq3s/P4OF3gOv6KHm0ppMj8F7wQKPDW4Mg94aq1bPRTwrJagUcIxN8 g2JjEroAJsUYd69IstDdlcn4IIEaCOjAGZnCUf0KzQyPE51SPqZ9uoxbrb5qKVc7 dXTlm57z2QTUSW0hqvktNGsJSrzwY8SQUNn7qi9UGxraEo9Xuj0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:04 2025 by rpki-client