$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: rzrk07Ws2S4bK+iqFK7pQtQs4RVs642aVz2faezbJ3o= Subject key identifier: 6D:F5:EE:42:B9:C7:89:7D:78:30:E4:4A:27:E4:6F:09:09:1F:02:8E Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 3A7330C9DFC88E1E7DC5EBDD6BD3A521FF65930C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 051F Signing time: Tue 04 Nov 2025 09:11:37 +0000 Manifest this update: Tue 04 Nov 2025 09:06:37 +0000 Manifest next update: Fri 07 Nov 2025 09:57:37 +0000 Files and hashes: 1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 2: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: KhWdSTl9NEntgdHIs7MRqLdRuOKcVmwLyqSySn/gcvI=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:30:c9:df:c8:8e:1e:7d:c5:eb:dd:6b:d3:a5:21:ff:65:93:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Nov 4 09:06:37 2025 GMT Not After : Nov 7 09:57:37 2025 GMT Subject: CN=6DF5EE42B9C7897D7830E44A27E46F09091F028E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:cc:23:a4:08:30:c3:5b:d0:cb:77:10:05: f4:64:cf:db:14:fa:f0:b1:ab:fa:74:1f:9b:bb:ab: 95:fe:a9:1d:af:4d:5d:c5:c5:8b:94:d6:d5:6e:33: ff:55:c5:d5:04:96:4a:97:d1:8f:c1:5b:8f:46:1e: 1b:c7:1a:b2:86:96:40:36:b6:91:e6:f1:c3:74:37: 51:3e:c8:35:cd:6c:ce:59:db:b8:f5:7d:bd:14:e0: 08:50:f2:df:c3:b1:a4:e4:44:0e:72:f7:3a:51:b3: 6c:c2:d6:1f:fe:eb:ae:bf:f2:0e:5e:9f:f0:9d:a1: f7:74:80:2e:17:17:23:91:57:3a:91:87:76:be:de: 2f:0b:1d:44:fe:3a:b8:5a:f0:41:b0:2a:8f:c8:f8: d0:9a:1b:fe:c2:4e:53:e2:31:68:92:4a:00:cb:27: c7:aa:32:01:ef:6c:5c:2e:54:f4:41:6f:ab:84:cf: 3f:87:64:16:18:eb:09:25:81:72:a1:c1:45:e9:a9: d8:60:78:5d:8a:58:55:29:35:11:40:f2:fc:2c:9d: c6:8c:62:09:11:3a:f4:94:24:0d:2e:49:f6:09:94: 5a:c9:95:5a:c2:cd:a8:d2:fe:16:21:11:11:39:15: 99:d5:28:ad:4d:55:39:bf:a6:10:f4:a3:04:26:da: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F5:EE:42:B9:C7:89:7D:78:30:E4:4A:27:E4:6F:09:09:1F:02:8E X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ec:b8:bb:b7:49:9a:5c:ed:c6:6d:a1:a9:de:f9:1e:28:87: 48:92:e2:ae:a7:72:e4:17:b1:c3:a5:6a:29:ff:fc:06:15:59: 01:2b:f8:12:7e:b6:fb:16:9f:40:02:6d:8e:b7:cc:2c:0e:53: a2:7b:7c:45:d8:63:d6:0e:d7:5f:ba:eb:0c:3e:22:16:40:e7: fc:fa:7a:17:70:da:82:03:b0:0d:df:08:fe:b6:5b:ae:06:6d: 09:03:97:dd:ba:64:24:fb:e1:06:5a:95:8f:3b:f7:cc:14:a3: 90:b8:fb:ce:5b:75:d8:f2:5d:f4:33:a4:36:f5:00:a9:49:39: 33:c0:8a:79:1d:3a:53:d7:1f:93:5b:65:05:ab:57:c1:eb:f9: 16:66:30:c3:e6:51:72:a1:e0:c8:52:16:88:7c:24:18:9e:96: 99:83:7d:b9:2f:b0:c4:21:9b:5a:1c:1c:ec:b6:69:46:b1:56: 48:2b:85:70:da:d4:21:20:48:38:8a:43:5c:4d:7a:be:81:96: e7:41:3c:03:75:36:aa:a3:ac:7f:4e:a9:9f:ea:cb:72:b4:2f: d4:a8:44:ed:e7:9f:dc:b9:e0:34:68:8e:9c:02:0e:32:12:48: 3c:8d:55:f1:46:82:af:fc:73:c0:9c:14:30:c5:a6:f1:d8:79: 2c:ed:ba:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnMwyd/Ijh59xevda9OlIf9lkwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTExMDQwOTA2MzdaFw0yNTExMDcwOTU3MzdaMDMxMTAvBgNV BAMTKDZERjVFRTQyQjlDNzg5N0Q3ODMwRTQ0QTI3RTQ2RjA5MDkxRjAyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYcwjpAgww1vQy3cQBfRkz9sU +vCxq/p0H5u7q5X+qR2vTV3FxYuU1tVuM/9VxdUElkqX0Y/BW49GHhvHGrKGlkA2 tpHm8cN0N1E+yDXNbM5Z27j1fb0U4AhQ8t/DsaTkRA5y9zpRs2zC1h/+666/8g5e n/Cdofd0gC4XFyORVzqRh3a+3i8LHUT+Orha8EGwKo/I+NCaG/7CTlPiMWiSSgDL J8eqMgHvbFwuVPRBb6uEzz+HZBYY6wklgXKhwUXpqdhgeF2KWFUpNRFA8vwsncaM YgkROvSUJA0uSfYJlFrJlVrCzajS/hYhERE5FZnVKK1NVTm/phD0owQm2i2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfXuQrnHiX14MORKJ+RvCQkfAo4wHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjsuLu3SZpc7cZtoane+R4oh0iS4q6ncuQX scOlain//AYVWQEr+BJ+tvsWn0ACbY63zCwOU6J7fEXYY9YO11+66ww+IhZA5/z6 ehdw2oIDsA3fCP62W64GbQkDl926ZCT74QZalY8798wUo5C4+85bddjyXfQzpDb1 AKlJOTPAinkdOlPXH5NbZQWrV8Hr+RZmMMPmUXKh4MhSFoh8JBielpmDfbkvsMQh m1ocHOy2aUaxVkgrhXDa1CEgSDiKQ1xNer6BludBPAN1NqqjrH9OqZ/qy3K0L9So RO3nn9y54DRojpwCDjISSDyNVfFGgq/8c8CcFDDFpvHYeSztun8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:46 2025 by rpki-client