
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File: 9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier: OZb2v+exsbsJafJM8u9VPvZum0b8vEx/WpzzGjOFFSY=
Subject key identifier: 6B:E2:B4:3A:77:91:74:5B:05:72:5C:3C:E9:68:2A:DA:96:EC:9D:79
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial: 08E5BCCB4FE509D67AF0E73ED83DE3EAF24F881A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number: 0521
Signing time: Mon 03 Nov 2025 21:52:11 +0000
Manifest this update: Mon 03 Nov 2025 21:47:11 +0000
Manifest next update: Fri 07 Nov 2025 06:41:11 +0000
Files and hashes: 1: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
2: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
3: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=)
4: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
5: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
6: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
7: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
8: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
9: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
10: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
11: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
12: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
13: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: SgsotEI1SZ9oJNKPcNIzjjmNECtgKeHbBcJfhx89iX4=)
14: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: KQqgd7ldPyz/gRFTilGPGr9oIIQJC/RpJrKkzl2qLlE=)
15: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
16: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 06:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e5:bc:cb:4f:e5:09:d6:7a:f0:e7:3e:d8:3d:e3:ea:f2:4f:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Validity
Not Before: Nov 3 21:47:11 2025 GMT
Not After : Nov 7 06:41:11 2025 GMT
Subject: CN=6BE2B43A7791745B05725C3CE9682ADA96EC9D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:6d:39:86:b6:95:2d:d6:71:cd:6d:1c:60:
ba:1c:6f:60:e9:cf:e9:fb:49:cd:f8:2c:5b:e0:82:
fb:34:91:c2:07:93:75:39:ee:ac:6a:10:32:21:7d:
44:45:99:95:db:2e:17:4b:6e:db:61:cf:f9:a6:8f:
7f:73:d3:ce:d9:44:4b:c8:8b:cd:ba:f0:84:7b:be:
ba:3d:d7:8b:41:7d:e2:c9:ea:f2:f7:c9:95:9d:09:
e4:bc:8c:52:d0:84:07:40:fc:0b:12:18:0c:5e:79:
0c:c9:d5:4f:3b:dc:e7:37:fa:83:b1:18:5e:e5:4b:
f5:28:f9:e7:08:86:11:d0:d7:d4:5c:c9:9d:f6:2a:
26:4a:4b:21:2d:85:e3:3b:35:99:70:cc:c5:7a:89:
44:16:cb:69:ec:44:ec:4a:f8:2e:fb:1f:8c:0e:84:
cb:5d:a0:bf:45:25:62:61:d7:5d:b9:af:cb:a7:12:
2f:dc:67:1e:12:83:54:29:f8:af:1e:78:e8:90:15:
f6:ca:4a:84:42:95:2a:32:56:a9:fd:e9:58:4a:60:
85:0c:c9:bb:c6:a7:d7:90:b2:2d:19:7a:9e:58:6b:
a2:da:57:08:88:dd:b7:a3:21:30:39:ec:15:33:ab:
63:f0:fe:54:0b:22:3d:df:97:27:28:2c:a2:cf:2d:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:B4:3A:77:91:74:5B:05:72:5C:3C:E9:68:2A:DA:96:EC:9D:79
X509v3 Authority Key Identifier:
keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:52:f9:87:a6:9d:0f:f8:eb:f0:26:a6:b3:09:4b:78:df:30:
6e:33:85:0f:b9:03:67:18:e7:6f:d6:f6:eb:73:ea:c2:73:19:
12:30:f8:be:b0:b8:9e:68:80:68:d4:b2:81:b1:d1:d1:ac:1a:
50:1b:a1:0a:a6:2c:0a:c7:62:86:69:bb:f6:6e:e7:21:17:2c:
be:37:18:6e:2b:92:5c:62:18:2c:ba:16:c2:d1:5b:ae:63:46:
3c:ea:fe:3c:3b:f0:b6:5d:bf:f6:1f:88:3c:5e:15:30:89:56:
0b:8d:e6:2b:fa:cf:56:0f:f6:48:b9:26:15:c8:35:72:ba:e5:
1a:61:ab:ca:c3:ea:1d:15:a1:ad:a0:19:e3:81:cb:3e:be:c5:
f6:9d:2b:79:ba:43:fe:b1:6f:8c:5d:09:32:58:f2:18:2a:e6:
94:db:f4:15:4b:57:1b:1e:10:a1:37:a5:1c:59:99:d1:22:04:
8c:90:46:b4:a4:4e:11:3f:62:d8:c7:bc:36:4b:ae:48:c0:40:
b0:24:f9:fa:f7:28:6e:16:df:ab:5c:c9:6f:f6:89:d8:03:fd:
d5:90:d6:10:37:73:73:53:9a:67:38:d1:9b:e8:18:cb:10:37:
39:89:91:ab:be:8c:c5:94:56:ff:58:bc:16:b1:57:6b:81:0f:
a8:b7:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:06:42 2025 by rpki-client