$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: zPPm60vv0Nz6zOPYG//wNu0lFMBUTXPLTSY9OA06NWQ= Subject key identifier: E4:1E:C1:52:76:21:F5:93:84:96:CC:47:3C:47:17:CE:BA:DA:B7:7D Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 190CF50566D5E3408B824DB235DA2658DA006830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 0233 Signing time: Tue 04 Nov 2025 11:30:02 +0000 Manifest this update: Tue 04 Nov 2025 11:25:02 +0000 Manifest next update: Fri 07 Nov 2025 18:04:02 +0000 Files and hashes: 1: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 2: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 3: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: TOjKZ4+G1CrJu9lE0C3RCAC5y//fHxNGp5LFAWWBWAw=) 4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 5: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 6: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0c:f5:05:66:d5:e3:40:8b:82:4d:b2:35:da:26:58:da:00:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Nov 4 11:25:02 2025 GMT Not After : Nov 7 18:04:02 2025 GMT Subject: CN=E41EC1527621F5938496CC473C4717CEBADAB77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:40:27:a7:6e:9d:36:56:81:6a:36:d0:5f: cd:40:00:3d:58:d0:b6:d6:49:7b:cd:bd:ee:f9:67: e0:10:2c:78:45:95:f5:4a:9e:4d:5d:8c:fa:0f:6c: 79:65:58:b6:93:7a:4b:7b:7f:d8:f1:f8:e2:aa:2d: 30:58:13:9b:9e:13:90:12:b0:91:d7:cb:95:c6:2a: a9:6c:64:ed:5d:d6:18:5f:64:25:3d:11:62:d4:ac: 67:57:ee:c2:5e:1b:49:40:a8:05:0f:8c:54:ac:81: f8:17:0b:c4:8b:23:a7:ab:9b:68:70:a9:9c:04:ad: f8:2a:e4:f9:7f:d5:20:4d:ea:fa:19:d2:b5:f6:b5: a4:cd:ea:94:15:d3:9a:0a:42:47:e3:44:a4:f0:68: c1:0e:76:40:28:08:be:c4:39:4a:9d:72:11:70:23: 3e:48:cd:59:73:de:36:4e:35:24:8c:de:a7:59:67: c6:08:7f:43:53:09:d4:9e:2a:33:69:91:49:20:95: eb:be:2f:0c:ff:a1:de:e4:d4:1e:0f:c0:3b:a6:ca: 0b:da:0a:41:39:71:86:c0:7d:96:77:2d:5d:0d:94: ab:d1:86:82:d4:af:f4:9a:28:36:f4:ea:fa:fa:32: 4f:5f:ee:7a:c6:e9:e3:b3:69:e6:8d:01:ae:57:e7: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:C1:52:76:21:F5:93:84:96:CC:47:3C:47:17:CE:BA:DA:B7:7D X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:18:fa:29:ee:63:2d:f8:ba:e0:9e:ec:2e:28:41:29:51: a1:1d:05:83:12:ef:0a:a7:f2:a7:c8:8c:e0:63:3f:17:03:27: 8c:0b:3a:c4:cd:e3:c6:ff:02:6a:83:54:f2:6d:33:08:6e:a1: 91:86:86:3d:ea:19:04:63:09:cb:8b:05:da:bb:64:7c:bc:54: 3b:47:27:8b:e1:b0:f6:5c:03:22:93:b0:03:7e:d1:d8:59:b1: f0:21:6d:be:35:2d:d8:f0:e3:7a:10:48:d3:45:d3:35:32:b6: 3e:1e:a3:eb:58:46:94:4b:d8:dd:79:f9:da:f5:16:bc:31:ef: 49:1f:28:6d:52:d1:ed:62:08:29:b6:b3:65:f9:84:54:81:54: cd:d1:18:ba:46:8f:fc:d0:28:92:eb:6f:51:75:eb:3f:3f:70: 98:b6:38:0d:8c:e1:ab:ee:e4:64:e5:2a:6c:60:aa:cb:04:37: f4:7f:8a:09:34:51:4f:b6:6f:52:02:01:88:d8:e6:72:4b:68: 8b:6d:87:f9:13:3b:9e:8e:07:33:a7:05:a6:7c:71:9c:09:97: 7c:5f:80:5a:da:f8:ca:5b:42:7a:b3:50:7a:aa:01:78:c1:10: b9:ad:3a:8b:3a:62:0d:ae:5c:1a:5d:5b:44:9e:b8:25:0b:88: 34:d2:a3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQz1BWbV40CLgk2yNdomWNoAaDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTExMDQxMTI1MDJaFw0yNTExMDcxODA0MDJaMDMxMTAvBgNV BAMTKEU0MUVDMTUyNzYyMUY1OTM4NDk2Q0M0NzNDNDcxN0NFQkFEQUI3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1kAnp26dNlaBajbQX81AAD1Y 0LbWSXvNve75Z+AQLHhFlfVKnk1djPoPbHllWLaTekt7f9jx+OKqLTBYE5ueE5AS sJHXy5XGKqlsZO1d1hhfZCU9EWLUrGdX7sJeG0lAqAUPjFSsgfgXC8SLI6erm2hw qZwErfgq5Pl/1SBN6voZ0rX2taTN6pQV05oKQkfjRKTwaMEOdkAoCL7EOUqdchFw Iz5IzVlz3jZONSSM3qdZZ8YIf0NTCdSeKjNpkUkgleu+Lwz/od7k1B4PwDumygva CkE5cYbAfZZ3LV0NlKvRhoLUr/SaKDb06vr6Mk9f7nrG6eOzaeaNAa5X53GrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5B7BUnYh9ZOElsxHPEcXzrrat30wHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJFGPop7mMt+LrgnuwuKEEpUaEdBYMS7wqn 8qfIjOBjPxcDJ4wLOsTN48b/AmqDVPJtMwhuoZGGhj3qGQRjCcuLBdq7ZHy8VDtH J4vhsPZcAyKTsAN+0dhZsfAhbb41Ldjw43oQSNNF0zUytj4eo+tYRpRL2N15+dr1 Frwx70kfKG1S0e1iCCm2s2X5hFSBVM3RGLpGj/zQKJLrb1F16z8/cJi2OA2M4avu 5GTlKmxgqssEN/R/igk0UU+2b1ICAYjY5nJLaItth/kTO56OBzOnBaZ8cZwJl3xf gFra+MpbQnqzUHqqAXjBELmtOos6Yg2uXBpdW0SeuCULiDTSoyE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:30 2025 by rpki-client