$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft File: 09461F85D577EF79DE072EECCA1E12135A3715C0.mft (raw, json) Hash identifier: Xoa5MEHeu89n8p0hoK5EP7imJCtn5d+L9e+j0TW/wyo= Subject key identifier: 5E:83:8B:1D:4A:85:BC:EA:4C:6A:B1:B0:AF:AA:FE:46:7C:83:7A:25 Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Certificate issuer: /CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Certificate serial: 788E6911B019CFC56B200E7C901A737771F21B83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft Manifest number: 01DF Signing time: Sun 02 Nov 2025 21:52:12 +0000 Manifest this update: Sun 02 Nov 2025 21:47:12 +0000 Manifest next update: Thu 06 Nov 2025 02:49:12 +0000 Files and hashes: 1: 09461F85D577EF79DE072EECCA1E12135A3715C0.crl (hash: 4KbUAmFCzMH3cLA/Sp0uYrL/NX9RxVuSrTC6mGLFysY=) 2: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: h3TV+XhpTe6M1r47P8xg6LJKc7ssK2BZBj+55BbrRCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8e:69:11:b0:19:cf:c5:6b:20:0e:7c:90:1a:73:77:71:f2:1b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Validity Not Before: Nov 2 21:47:12 2025 GMT Not After : Nov 6 02:49:12 2025 GMT Subject: CN=5E838B1D4A85BCEA4C6AB1B0AFAAFE467C837A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:94:f0:d8:47:70:2f:19:95:70:87:01:26: 15:92:cb:97:10:14:52:6c:07:95:72:3d:e7:35:a7: 67:65:e4:88:26:2f:8d:0f:e7:81:f9:de:10:2f:82: 6a:92:f2:9e:22:c8:f3:54:ad:e5:76:15:c1:83:63: 66:25:fd:f6:44:85:a5:f1:27:c0:e4:0d:df:cf:33: f2:b3:28:7d:6d:84:90:28:38:1f:00:3b:91:0f:29: 62:5a:dd:f2:e3:4e:14:6e:cd:a9:bc:4d:5b:3a:61: 2d:15:4e:95:48:ab:f0:66:4c:a4:e9:bb:40:3d:b4: 81:01:a1:51:e0:e8:8b:b3:22:6e:1f:5c:3e:ff:45: 81:91:6f:d6:43:cf:a0:f2:42:1e:b0:25:d4:22:c2: fd:a1:ad:df:92:94:51:92:3c:9e:09:4d:12:5b:af: 1d:d2:6b:2f:f9:35:7f:68:de:ba:de:9f:7a:9f:de: 1c:61:f1:e7:7d:bb:69:bf:b6:68:a4:da:c9:f5:d7: 2f:49:af:f4:88:fa:03:b1:b3:01:1a:c3:05:94:be: 22:4f:14:c2:c2:ba:6b:97:cd:6c:e9:9d:3a:04:34: 7e:b6:53:9f:3b:1c:7c:bd:84:04:43:cb:48:f7:d4: 0e:bc:db:22:96:08:e0:8d:be:cd:cd:51:42:9e:b1: 9c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:83:8B:1D:4A:85:BC:EA:4C:6A:B1:B0:AF:AA:FE:46:7C:83:7A:25 X509v3 Authority Key Identifier: keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b0:7b:01:b5:3c:ff:a5:cf:b7:65:74:07:59:25:70:f8:af: 0b:0a:d1:64:e6:2b:1d:65:3a:bc:0c:d1:7c:c4:e5:23:d7:08: 6a:38:32:08:8a:c0:c4:1c:11:d6:fa:47:ae:66:76:ea:44:9f: ca:a9:a7:f4:bf:f4:0e:ed:d9:9f:f5:3f:48:87:c8:b9:fe:91: 5b:09:52:3c:77:06:2f:13:96:99:79:27:a6:84:3a:96:30:a4: 26:55:3e:56:fa:55:d9:84:12:eb:da:9c:03:9c:d1:4b:c0:a1: b6:88:e4:3d:7d:3b:ff:61:53:ba:46:f0:51:20:58:71:4a:16: 7a:5e:14:10:d6:65:9f:ba:9e:4f:fd:99:54:96:df:b8:1e:f2: e6:b3:53:01:20:6b:75:9e:fb:f2:db:63:a6:96:bb:ad:7e:80: f7:d0:27:7f:9e:2a:fe:63:f3:43:fa:2d:ef:0b:58:95:46:bb: c4:30:f0:40:e8:26:cb:84:54:e3:65:e2:1f:ca:e7:14:38:d8: d6:00:6a:db:59:f8:72:14:85:54:4b:a0:3e:c0:a8:48:34:53: 7e:c6:f3:b7:28:a4:96:7c:9c:e9:29:d1:75:54:aa:4a:22:f0: 16:96:43:e1:12:34:9c:14:e3:e4:78:e6:c3:06:d9:39:9a:70: f0:3c:3a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeI5pEbAZz8VrIA58kBpzd3HyG4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1 QTM3MTVDMDAeFw0yNTExMDIyMTQ3MTJaFw0yNTExMDYwMjQ5MTJaMDMxMTAvBgNV BAMTKDVFODM4QjFENEE4NUJDRUE0QzZBQjFCMEFGQUFGRTQ2N0M4MzdBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aZTw2EdwLxmVcIcBJhWSy5cQ FFJsB5VyPec1p2dl5IgmL40P54H53hAvgmqS8p4iyPNUreV2FcGDY2Yl/fZEhaXx J8DkDd/PM/KzKH1thJAoOB8AO5EPKWJa3fLjThRuzam8TVs6YS0VTpVIq/BmTKTp u0A9tIEBoVHg6IuzIm4fXD7/RYGRb9ZDz6DyQh6wJdQiwv2hrd+SlFGSPJ4JTRJb rx3Say/5NX9o3rren3qf3hxh8ed9u2m/tmik2sn11y9Jr/SI+gOxswEawwWUviJP FMLCumuXzWzpnToENH62U587HHy9hARDy0j31A682yKWCOCNvs3NUUKesZxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoOLHUqFvOpMarGwr6r+RnyDeiUwHwYDVR0j BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1 NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3 MTVDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEy MTM1QTM3MTVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+wewG1PP+lz7dldAdZJXD4rwsK0WTmKx1l OrwM0XzE5SPXCGo4MgiKwMQcEdb6R65mdupEn8qpp/S/9A7t2Z/1P0iHyLn+kVsJ Ujx3Bi8Tlpl5J6aEOpYwpCZVPlb6VdmEEuvanAOc0UvAobaI5D19O/9hU7pG8FEg WHFKFnpeFBDWZZ+6nk/9mVSW37ge8uazUwEga3We+/LbY6aWu61+gPfQJ3+eKv5j 80P6Le8LWJVGu8Qw8EDoJsuEVONl4h/K5xQ42NYAattZ+HIUhVRLoD7AqEg0U37G 87copJZ8nOkp0XVUqkoi8BaWQ+ESNJwU4+R45sMG2TmacPA8Ojk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:23 2025 by rpki-client