$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: kKcMkfg0YwxcW0XWzQa6m0mPGS47kbVVY+Ylw9ga4W4= Subject key identifier: BB:C5:6F:9B:39:E9:75:65:A8:09:F7:55:3A:D8:68:7D:8C:DB:1F:24 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 617906E73B7EE6BA783D880AEC2AC88019680F44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 040E Signing time: Mon 03 Nov 2025 02:01:27 +0000 Manifest this update: Mon 03 Nov 2025 01:56:27 +0000 Manifest next update: Thu 06 Nov 2025 02:14:27 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 5: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: /UXuFHUQ8OyAtweHRJLrJRzaBBTL/2RQfMK+lgcdVeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:79:06:e7:3b:7e:e6:ba:78:3d:88:0a:ec:2a:c8:80:19:68:0f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Nov 3 01:56:27 2025 GMT Not After : Nov 6 02:14:27 2025 GMT Subject: CN=BBC56F9B39E97565A809F7553AD8687D8CDB1F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:86:14:01:3d:9e:7c:21:4f:75:4d:b1:bc: c2:cd:b5:18:0c:eb:fc:40:7e:b1:e6:5c:76:70:d7: 64:eb:72:22:7e:44:31:a8:30:bf:2d:cc:25:e6:5a: 59:3c:22:f1:8e:c4:b7:40:ab:5a:dd:8f:56:7d:11: de:1a:c5:f2:f4:88:72:39:62:1a:80:22:46:a2:63: e6:b4:f9:26:52:c3:60:1a:61:fa:d2:5b:c4:1d:aa: ba:ad:df:b4:ac:9e:d0:8b:d8:0a:16:38:9b:6d:ab: 9d:69:8c:da:f3:a5:8f:67:08:32:c7:17:1b:0c:86: a9:b7:86:14:cf:46:de:1a:e1:b5:c8:ef:96:61:80: 08:27:f9:9e:87:a9:eb:63:df:db:62:45:c8:0f:e6: b1:8b:0e:1a:21:66:b4:56:64:aa:c9:67:f2:3c:cc: 96:57:ff:af:67:4d:f7:f3:90:fa:b6:86:aa:03:a3: 5c:75:7c:da:11:b8:5a:5b:5c:eb:43:64:c3:5a:e6: c8:a9:39:4e:dd:55:2e:f9:fc:85:bf:02:ff:48:8e: 85:ad:95:dc:bd:2d:99:7e:44:25:b0:13:14:9a:5f: ff:a7:3d:f3:03:93:fd:3d:37:70:99:3a:64:ce:a2: e1:27:7e:c4:5e:52:af:b9:d5:02:5d:27:07:9c:43: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:6F:9B:39:E9:75:65:A8:09:F7:55:3A:D8:68:7D:8C:DB:1F:24 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8c:48:c4:23:83:56:73:69:6e:00:33:12:ea:d6:d0:38:16: 06:bb:2c:94:05:0c:1c:af:1f:07:42:02:cd:aa:74:35:df:63: 85:5b:96:9c:78:51:d2:33:14:57:a3:74:74:93:a0:27:98:67: 31:87:8e:16:5a:1e:44:38:dc:71:dd:8a:cf:3d:6b:ea:31:c8: 27:ee:b3:b5:ab:bf:73:3f:7e:e6:04:0e:59:c8:df:9d:bf:de: 65:90:be:ae:ae:e0:1a:60:54:34:6c:98:d5:97:48:d0:a1:ab: 9d:d5:87:9f:50:6c:7d:c4:de:e2:b2:d3:b7:8c:19:28:f5:74: f1:9b:4d:46:d2:de:7b:3f:1e:66:0c:5c:34:b0:25:65:a9:dc: ab:fb:11:8d:45:dd:f2:3e:5e:3f:27:6c:1d:4e:66:0d:59:23: ea:25:86:58:81:56:4e:a7:b0:d6:77:c7:27:d4:0a:03:6e:e8: e8:28:93:19:d4:db:8d:c1:85:3b:a5:e3:48:cf:45:bd:fb:fb: 20:74:86:2d:d3:02:11:e4:ce:7f:2b:7e:83:53:4b:e6:db:f7: 58:e1:35:ea:e2:f0:28:18:b7:d6:41:68:5f:34:1a:d3:3e:28: dc:b0:01:9a:6f:7c:8e:cd:7a:99:5e:8e:23:0b:9a:10:68:02: ec:b5:f8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXkG5zt+5rp4PYgK7CrIgBloD0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTExMDMwMTU2MjdaFw0yNTExMDYwMjE0MjdaMDMxMTAvBgNV BAMTKEJCQzU2RjlCMzlFOTc1NjVBODA5Rjc1NTNBRDg2ODdEOENEQjFGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSIYUAT2efCFPdU2xvMLNtRgM 6/xAfrHmXHZw12TrciJ+RDGoML8tzCXmWlk8IvGOxLdAq1rdj1Z9Ed4axfL0iHI5 YhqAIkaiY+a0+SZSw2AaYfrSW8Qdqrqt37SsntCL2AoWOJttq51pjNrzpY9nCDLH FxsMhqm3hhTPRt4a4bXI75ZhgAgn+Z6Hqetj39tiRcgP5rGLDhohZrRWZKrJZ/I8 zJZX/69nTffzkPq2hqoDo1x1fNoRuFpbXOtDZMNa5sipOU7dVS75/IW/Av9IjoWt ldy9LZl+RCWwExSaX/+nPfMDk/09N3CZOmTOouEnfsReUq+51QJdJwecQ3+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8VvmznpdWWoCfdVOthofYzbHyQwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2MSMQjg1ZzaW4AMxLq1tA4Fga7LJQFDByv HwdCAs2qdDXfY4Vblpx4UdIzFFejdHSToCeYZzGHjhZaHkQ43HHdis89a+oxyCfu s7Wrv3M/fuYEDlnI352/3mWQvq6u4BpgVDRsmNWXSNChq53Vh59QbH3E3uKy07eM GSj1dPGbTUbS3ns/HmYMXDSwJWWp3Kv7EY1F3fI+Xj8nbB1OZg1ZI+olhliBVk6n sNZ3xyfUCgNu6OgokxnU243BhTul40jPRb37+yB0hi3TAhHkzn8rfoNTS+bb91jh Neri8CgYt9ZBaF80GtM+KNywAZpvfI7NeplejiMLmhBoAuy1+C4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:38 2025 by rpki-client