$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: cVIVYaFEXJ/tYcyJJm+fS23bGZV7Rb6WO15Q5kTR82M= Subject key identifier: 51:DF:43:49:BA:23:69:71:D6:3C:FE:E1:09:C3:52:2D:3B:B7:52:8A Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 2D940C48C3250CE2E0B342863146B07B9F835D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: CA Signing time: Mon 03 Nov 2025 09:50:00 +0000 Manifest this update: Mon 03 Nov 2025 09:45:00 +0000 Manifest next update: Thu 06 Nov 2025 17:15:00 +0000 Files and hashes: 1: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: tgt+6vMVydYmUSSX6KVIjIO3PvLPHKcU6Lq0b9fAdOs=) 2: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 3: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:94:0c:48:c3:25:0c:e2:e0:b3:42:86:31:46:b0:7b:9f:83:5d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Nov 3 09:45:00 2025 GMT Not After : Nov 6 17:15:00 2025 GMT Subject: CN=51DF4349BA236971D63CFEE109C3522D3BB7528A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:07:e1:0c:bf:81:0c:64:1e:d6:b6:f3:fe: 21:17:43:25:21:54:1e:1a:22:f2:e2:74:f6:06:a1: e5:80:9d:15:ab:1e:e3:99:c9:16:95:a2:6d:72:6c: eb:6c:ff:40:d2:2d:de:d5:80:ac:e9:35:9b:7a:48: f0:65:26:a8:2f:05:33:09:d8:92:66:76:0e:2f:94: 99:f7:a9:44:cd:7b:6c:ba:53:dd:8b:88:7e:c4:c3: f9:9a:ed:39:49:fd:d2:74:ab:56:4a:3b:e3:9f:1d: 40:a1:36:e9:9b:fb:ce:f9:5d:5e:03:d9:1f:d1:67: 66:5e:7c:97:d5:02:73:fc:2d:64:a0:65:c7:fd:80: 6e:ad:ab:38:3d:93:67:a9:39:64:6b:28:13:39:28: cc:bf:3e:b5:7a:66:bb:10:3f:ad:05:0e:80:c2:c9: 7c:2d:96:3b:bb:d7:60:17:0c:47:7a:6f:a4:76:b9: 19:b3:53:07:57:98:8d:85:30:93:71:13:c6:d3:c0: 99:3c:71:e6:5c:c1:7a:b8:2c:6a:1f:69:eb:54:e0: ae:57:14:7c:28:23:48:05:fa:1e:ce:5a:0f:bf:0b: 84:37:28:91:b0:50:d0:03:71:0e:8f:5c:b4:44:b2: bf:e6:8e:b7:ee:a6:c0:b7:5a:7d:51:6b:ab:e9:36: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DF:43:49:BA:23:69:71:D6:3C:FE:E1:09:C3:52:2D:3B:B7:52:8A X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:95:e4:e7:50:ac:87:cf:8f:01:f1:b1:03:11:28:f7:35:43: 71:e7:ba:9d:c9:43:2e:64:d6:15:e6:a0:ef:a4:59:70:07:13: c3:d0:aa:57:e8:87:44:0b:ad:19:3d:48:cb:4d:62:a4:b0:f2: 5f:80:d9:8b:2c:24:1b:28:1e:09:b6:95:fa:34:99:4e:9a:bf: 11:1a:4f:83:00:58:af:9c:77:fd:a2:90:f9:1b:70:a1:b0:81: b3:05:62:47:fd:a2:46:8a:a1:23:62:cc:90:8a:96:35:a4:89: 81:06:06:48:74:75:48:95:13:30:01:c9:81:c0:33:cd:49:5a: bc:a0:eb:46:53:a6:44:76:dd:00:f4:ea:48:2c:18:a9:b3:da: e4:b6:22:f0:ad:a0:65:96:03:6a:80:4f:b4:90:cd:d8:c0:ac: 54:15:bc:19:d5:e5:51:1a:c3:14:25:a4:75:ae:73:70:54:a3: 0a:4d:07:59:fa:28:59:a4:00:8f:d6:8c:b2:a2:e0:58:12:8e: 20:a1:52:b0:46:c0:b5:b6:cd:bc:87:dd:6a:c0:05:7b:19:07: c8:16:cd:3a:c4:dd:4b:00:9f:fa:ae:38:b1:a3:0c:db:dd:bc: e6:cd:2c:68:1e:24:15:30:02:1a:62:4d:d7:43:f3:18:f9:dc: 3e:ca:84:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZQMSMMlDOLgs0KGMUawe5+DXYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTExMDMwOTQ1MDBaFw0yNTExMDYxNzE1MDBaMDMxMTAvBgNV BAMTKDUxREY0MzQ5QkEyMzY5NzFENjNDRkVFMTA5QzM1MjJEM0JCNzUyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMAfhDL+BDGQe1rbz/iEXQyUh VB4aIvLidPYGoeWAnRWrHuOZyRaVom1ybOts/0DSLd7VgKzpNZt6SPBlJqgvBTMJ 2JJmdg4vlJn3qUTNe2y6U92LiH7Ew/ma7TlJ/dJ0q1ZKO+OfHUChNumb+875XV4D 2R/RZ2ZefJfVAnP8LWSgZcf9gG6tqzg9k2epOWRrKBM5KMy/PrV6ZrsQP60FDoDC yXwtlju712AXDEd6b6R2uRmzUwdXmI2FMJNxE8bTwJk8ceZcwXq4LGofaetU4K5X FHwoI0gF+h7OWg+/C4Q3KJGwUNADcQ6PXLREsr/mjrfupsC3Wn1Ra6vpNoXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUd9DSbojaXHWPP7hCcNSLTu3UoowHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWV5OdQrIfPjwHxsQMRKPc1Q3Hnup3JQy5k 1hXmoO+kWXAHE8PQqlfoh0QLrRk9SMtNYqSw8l+A2YssJBsoHgm2lfo0mU6avxEa T4MAWK+cd/2ikPkbcKGwgbMFYkf9okaKoSNizJCKljWkiYEGBkh0dUiVEzAByYHA M81JWryg60ZTpkR23QD06kgsGKmz2uS2IvCtoGWWA2qAT7SQzdjArFQVvBnV5VEa wxQlpHWuc3BUowpNB1n6KFmkAI/WjLKi4FgSjiChUrBGwLW2zbyH3WrABXsZB8gW zTrE3UsAn/quOLGjDNvdvObNLGgeJBUwAhpiTddD8xj53D7KhMk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:10 2025 by rpki-client