$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: ypTTlQUlnw/vd7gTbbZav5rKVFL/Z7zuZnKAYwc06xs= Subject key identifier: EB:82:83:B1:DF:D6:20:72:8B:73:AD:3D:B5:62:9D:D4:1A:9D:B7:24 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 74EBF617A2B2CBE93D6B8B33F760526FEA1660DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0383 Signing time: Tue 04 Nov 2025 13:01:38 +0000 Manifest this update: Tue 04 Nov 2025 12:56:38 +0000 Manifest next update: Fri 07 Nov 2025 15:20:38 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: ZMOvz0QzvSkytlBs/8eEnd31nUPzcYY79ZTsXjau1vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:eb:f6:17:a2:b2:cb:e9:3d:6b:8b:33:f7:60:52:6f:ea:16:60:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Nov 4 12:56:38 2025 GMT Not After : Nov 7 15:20:38 2025 GMT Subject: CN=EB8283B1DFD620728B73AD3DB5629DD41A9DB724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:39:c0:cb:43:90:7f:14:d4:b0:cf:03:c5: e4:0c:b8:99:86:97:7b:25:30:24:8f:10:25:dc:84: ca:d5:88:40:72:10:e5:21:8d:95:34:3a:19:ad:9d: 16:94:24:e9:8a:12:87:9c:09:66:9e:c8:fc:7f:6d: 7c:fa:ff:51:f8:93:3a:a6:e9:ce:43:19:f9:a1:13: fe:39:8f:04:6e:1d:09:f4:73:8f:18:88:82:f0:bb: 78:a2:cb:e2:9b:d3:ff:59:5c:97:18:69:88:e7:08: be:29:a4:f7:3b:82:bb:15:71:e0:bb:99:1e:70:3b: 8d:2f:3e:2b:30:fe:9a:8d:66:e2:11:69:b2:29:87: 67:66:4b:13:41:b8:50:ba:f4:11:b4:14:fe:67:21: 8b:94:0f:4d:e6:11:91:8d:d4:67:de:d7:f0:94:42: fb:60:77:c1:14:44:1a:20:d7:fe:f9:68:e4:26:b8: aa:8a:36:60:bc:4d:f6:6b:5b:04:20:5f:9a:65:85: c6:34:84:b3:ca:d0:a2:c6:45:8b:2c:cd:79:61:ed: 97:ce:0d:34:8d:80:7d:64:f9:4a:ed:c7:96:a4:f6: 97:84:de:fd:95:6b:15:94:df:d6:49:e0:fb:48:e0: 63:2e:06:f2:82:74:d4:9c:34:0f:a8:63:dc:37:e4: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:82:83:B1:DF:D6:20:72:8B:73:AD:3D:B5:62:9D:D4:1A:9D:B7:24 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f8:a7:33:8b:10:df:8f:14:60:00:4a:5b:6a:8a:f0:c3:57: cf:24:64:6f:23:15:1b:ea:c5:7e:64:06:19:4a:7c:0c:14:d8: b6:d0:86:f7:1e:cb:53:4a:75:29:a2:e1:32:13:a4:e0:d2:8c: 1b:8e:c8:1c:5f:e0:85:2b:14:52:43:61:16:a1:42:89:c2:dd: 57:2b:ff:85:bb:69:03:4d:c6:0f:71:45:55:6e:de:da:f0:12: df:a4:69:55:35:47:8f:73:9f:aa:2d:fd:35:6b:32:b1:4d:1c: 60:9a:a7:d7:91:1e:f0:13:97:e4:ae:93:c5:79:f0:53:d2:9e: d3:d8:63:c3:02:e0:5c:51:64:9d:c8:cf:ff:5c:db:e2:14:80: c6:4f:e9:64:4b:7a:2b:9b:15:ef:44:7b:af:30:7a:9c:aa:40: 41:3c:77:af:7c:8d:8f:7e:a9:6d:66:ee:7e:7d:0d:a8:09:cb: bf:be:fc:c7:02:ec:df:61:bf:10:5f:07:d9:1d:26:08:b1:dd: bd:84:10:b0:52:65:68:a9:4c:a5:07:54:e1:9c:f6:c5:67:c1: 37:12:1d:20:05:e2:63:71:ea:0b:80:4c:70:b2:50:b0:63:71: 41:a2:a5:17:ad:c5:d5:6a:71:51:c1:a7:15:10:af:23:a9:29: fa:a0:b9:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOv2F6Kyy+k9a4sz92BSb+oWYN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTExMDQxMjU2MzhaFw0yNTExMDcxNTIwMzhaMDMxMTAvBgNV BAMTKEVCODI4M0IxREZENjIwNzI4QjczQUQzREI1NjI5REQ0MUE5REI3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7znAy0OQfxTUsM8DxeQMuJmG l3slMCSPECXchMrViEByEOUhjZU0OhmtnRaUJOmKEoecCWaeyPx/bXz6/1H4kzqm 6c5DGfmhE/45jwRuHQn0c48YiILwu3iiy+Kb0/9ZXJcYaYjnCL4ppPc7grsVceC7 mR5wO40vPisw/pqNZuIRabIph2dmSxNBuFC69BG0FP5nIYuUD03mEZGN1Gfe1/CU Qvtgd8EURBog1/75aOQmuKqKNmC8TfZrWwQgX5plhcY0hLPK0KLGRYsszXlh7ZfO DTSNgH1k+Urtx5ak9peE3v2VaxWU39ZJ4PtI4GMuBvKCdNScNA+oY9w35EDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64KDsd/WIHKLc609tWKd1BqdtyQwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/4pzOLEN+PFGAASltqivDDV88kZG8jFRvq xX5kBhlKfAwU2LbQhvcey1NKdSmi4TITpODSjBuOyBxf4IUrFFJDYRahQonC3Vcr /4W7aQNNxg9xRVVu3trwEt+kaVU1R49zn6ot/TVrMrFNHGCap9eRHvATl+Suk8V5 8FPSntPYY8MC4FxRZJ3Iz/9c2+IUgMZP6WRLeiubFe9Ee68wepyqQEE8d698jY9+ qW1m7n59DagJy7++/McC7N9hvxBfB9kdJgix3b2EELBSZWipTKUHVOGc9sVnwTcS HSAF4mNx6guATHCyULBjcUGipRetxdVqcVHBpxUQryOpKfqguS4= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:15 2025 by rpki-client