$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: FixM2icQPuuQXUwlfDOl/JHQ6gnsNBp3WSd9ao83d1I= Subject key identifier: EB:39:A5:3A:64:5A:2C:1C:86:8E:6A:4F:6E:AE:8A:E8:34:69:1C:27 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 788562A637FE6592588C2114B1D8DB6A47962AA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 011F Signing time: Wed 05 Nov 2025 01:20:36 +0000 Manifest this update: Wed 05 Nov 2025 01:15:36 +0000 Manifest next update: Sat 08 Nov 2025 03:58:36 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: kBoXsfDMkNVSLyHBAsQISLNgVUQzMFMVwVriF8YoIzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:85:62:a6:37:fe:65:92:58:8c:21:14:b1:d8:db:6a:47:96:2a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Nov 5 01:15:36 2025 GMT Not After : Nov 8 03:58:36 2025 GMT Subject: CN=EB39A53A645A2C1C868E6A4F6EAE8AE834691C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:03:b3:06:66:93:b6:48:6b:d6:9a:c8:43: b2:78:1b:f3:8a:ce:a6:14:9e:86:d2:d3:94:6c:a1: 27:69:e1:da:9a:bf:b3:05:4a:3e:d2:9b:bf:de:d9: a9:b2:c2:d7:05:07:0b:c5:a3:cc:99:9f:f0:58:73: 55:dd:e0:80:8a:d7:95:c6:e4:1e:b6:82:14:48:0f: be:44:0e:ec:89:82:12:9e:a2:ac:b4:15:4d:09:74: a2:e4:47:14:a5:e4:01:48:84:a2:5d:d9:af:58:cf: f3:99:64:e1:29:b2:57:97:cc:d5:58:4c:c4:46:55: 7d:3b:da:e9:61:32:35:bb:c8:0c:13:28:4d:77:80: 5f:a8:55:74:72:96:92:8f:c1:bb:4e:d4:58:72:e4: 22:02:b6:39:ce:d4:01:be:9c:00:2b:c3:15:c7:53: 3b:7c:82:a9:c1:e8:46:2c:5d:37:83:14:bd:3c:14: 24:70:7e:db:21:1e:1e:3a:ed:fd:a3:8e:30:ab:7a: e4:4b:a9:6e:9b:72:8c:64:91:d1:ce:1c:f0:d3:dd: 01:74:1e:06:ea:6a:a0:08:bc:c2:b1:a9:35:d9:ff: 7b:a9:8f:8f:58:f1:33:94:bd:c2:d2:bf:cd:a8:18: 05:bc:b5:d9:90:d5:e5:27:40:03:32:f8:5e:0f:e7: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:A5:3A:64:5A:2C:1C:86:8E:6A:4F:6E:AE:8A:E8:34:69:1C:27 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:45:1c:ed:57:b2:b5:66:23:d7:2f:e5:9b:55:17:5c:5c:71: 7c:62:78:2d:4c:22:54:77:20:e1:f6:46:40:49:92:ae:04:f2: 49:97:eb:8e:9a:d7:74:a7:81:86:09:b6:dd:40:84:b7:90:fb: a3:a6:a7:7c:80:0c:c7:c3:a4:4f:3e:42:1e:6b:da:9b:7f:0e: 4e:fc:7d:b5:2c:3f:f7:bb:ed:79:34:71:5a:95:9e:bb:53:af: e9:82:64:5e:1b:6c:37:ee:12:57:cc:76:bd:3c:24:97:f6:7b: 5c:8b:3e:b5:c2:d9:91:0c:f8:e1:0f:c7:d7:49:cd:08:b1:56: 7e:fa:a4:78:2d:4e:97:81:44:61:1e:f5:df:b5:fb:fe:2c:d5: 04:ed:3f:f7:d9:9f:44:47:41:6e:b7:62:d2:0c:61:86:d0:9f: 33:8c:bf:ae:9d:3d:ac:a3:b1:0a:84:a8:a0:df:a6:fc:b0:cf: dc:77:c1:b9:68:5d:4a:0a:d8:5a:e7:c5:08:e2:9f:65:58:04: d0:14:b7:01:e5:4c:b9:6b:c9:ea:8e:80:ec:1f:b6:3a:ef:f7: 3c:10:b5:ba:25:24:aa:40:c9:65:58:cf:4e:c8:19:41:72:b8: 4b:5f:03:f8:f4:d4:1e:ef:f3:f3:ec:3c:34:3f:9c:26:a6:b8: 7f:31:88:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIVipjf+ZZJYjCEUsdjbakeWKqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTExMDUwMTE1MzZaFw0yNTExMDgwMzU4MzZaMDMxMTAvBgNV BAMTKEVCMzlBNTNBNjQ1QTJDMUM4NjhFNkE0RjZFQUU4QUU4MzQ2OTFDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeAOzBmaTtkhr1prIQ7J4G/OK zqYUnobS05RsoSdp4dqav7MFSj7Sm7/e2amywtcFBwvFo8yZn/BYc1Xd4ICK15XG 5B62ghRID75EDuyJghKeoqy0FU0JdKLkRxSl5AFIhKJd2a9Yz/OZZOEpsleXzNVY TMRGVX072ulhMjW7yAwTKE13gF+oVXRylpKPwbtO1Fhy5CICtjnO1AG+nAArwxXH Uzt8gqnB6EYsXTeDFL08FCRwftshHh467f2jjjCreuRLqW6bcoxkkdHOHPDT3QF0 HgbqaqAIvMKxqTXZ/3upj49Y8TOUvcLSv82oGAW8tdmQ1eUnQAMy+F4P50uLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zmlOmRaLByGjmpPbq6K6DRpHCcwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9FHO1XsrVmI9cv5ZtVF1xccXxieC1MIlR3 IOH2RkBJkq4E8kmX646a13SngYYJtt1AhLeQ+6Omp3yADMfDpE8+Qh5r2pt/Dk78 fbUsP/e77Xk0cVqVnrtTr+mCZF4bbDfuElfMdr08JJf2e1yLPrXC2ZEM+OEPx9dJ zQixVn76pHgtTpeBRGEe9d+1+/4s1QTtP/fZn0RHQW63YtIMYYbQnzOMv66dPayj sQqEqKDfpvywz9x3wbloXUoK2FrnxQjin2VYBNAUtwHlTLlryeqOgOwftjrv9zwQ tbolJKpAyWVYz07IGUFyuEtfA/j01B7v8/PsPDQ/nCamuH8xiPE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:26:00 2025 by rpki-client