$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: jUM3oC5QJGnlPVwcKYaQCUYQKhFJWMNRfgVxjjvpTAU= Subject key identifier: DA:85:A1:F8:6D:9C:6B:BC:9F:4C:62:5C:64:46:77:15:7A:4D:ED:5A Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 76F5A48280DA308742FC7DEE50387B45E0ECE257 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: CA Signing time: Sun 02 Nov 2025 15:21:13 +0000 Manifest this update: Sun 02 Nov 2025 15:16:13 +0000 Manifest next update: Wed 05 Nov 2025 21:11:13 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: KUMNKFHcTj3BWbdSXP2hHUkrKqLYF2Wv0pG5ePxZQUU=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 3: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f5:a4:82:80:da:30:87:42:fc:7d:ee:50:38:7b:45:e0:ec:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Nov 2 15:16:13 2025 GMT Not After : Nov 5 21:11:13 2025 GMT Subject: CN=DA85A1F86D9C6BBC9F4C625C644677157A4DED5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:f5:a3:cc:07:5b:e9:66:de:fb:47:66:b2: ef:8d:1c:c4:07:45:dd:68:e6:3f:d8:25:cf:57:67: c5:94:47:67:5a:59:3b:ce:35:59:86:bf:79:2d:76: 28:a5:d7:e7:08:06:9a:6e:5d:f0:28:b8:0e:40:5e: db:1e:31:74:ae:95:00:57:1f:f1:fa:02:96:ad:63: 8a:06:17:24:43:d2:53:96:d9:24:84:fc:4e:c8:f8: 43:57:5d:7b:98:ef:bf:fa:b0:8b:14:94:6f:0c:2d: 8b:28:08:04:f7:40:41:bd:fa:8f:36:56:fb:00:5b: 80:9a:ec:82:56:4e:51:79:97:ad:a4:26:0b:82:6a: 93:0a:61:5d:c1:4a:28:16:ec:51:12:ac:70:83:08: dd:d4:f2:6a:a4:ef:72:9d:11:1b:55:63:22:8f:32: b3:b8:d6:fd:85:d0:50:5b:85:02:6c:8a:ff:09:a8: 05:99:41:55:87:c3:c3:39:52:d1:2e:dc:b5:6c:34: ae:52:94:66:87:7d:c1:63:d3:cb:31:2f:b6:2b:8d: 17:90:26:5a:7d:12:35:d7:1c:07:bb:05:06:27:c0: 22:8a:94:78:32:29:8a:ed:85:2c:4b:f7:3a:81:aa: 7a:35:5b:06:e6:c2:80:03:30:0c:8b:8f:32:50:8f: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:A1:F8:6D:9C:6B:BC:9F:4C:62:5C:64:46:77:15:7A:4D:ED:5A X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d1:36:18:11:b6:c5:30:ce:55:da:ca:4b:d2:a4:16:fb:a1: c2:20:f2:0f:0b:4a:e9:77:9e:9c:1e:3e:08:69:1e:04:85:34: b7:6a:37:80:74:5b:7d:78:8c:29:7e:7a:da:9e:0b:cc:17:25: 20:23:8c:04:fd:46:79:3b:60:19:d8:02:93:c6:3b:39:41:88: f1:a4:3a:7c:f0:78:cd:09:59:85:66:ab:25:e3:85:06:ab:b2: b7:b5:77:58:a7:99:0b:fe:f3:a7:ab:99:b7:fb:12:c9:86:d8: 90:8f:e4:32:d4:73:c3:c5:77:8d:8e:77:0c:9e:3a:70:aa:e2: f8:fd:7b:7d:80:7f:9a:f3:c4:8b:d3:f0:11:d1:a0:9f:0e:79: 79:8c:01:45:96:88:1a:45:de:5d:e9:56:77:ea:ef:83:d8:fc: dd:47:67:ed:30:ab:be:c9:4e:ae:21:5b:b7:d6:39:c6:c5:a6: 7b:85:a6:d6:68:47:af:37:1f:64:bd:58:65:38:52:89:71:e3: 6d:97:b9:1f:ae:40:a0:08:9f:8a:17:c4:80:92:e2:e3:12:dd: ef:a8:d8:cd:33:fc:a9:6c:9f:55:62:bc:3e:a0:44:cd:a1:49: c3:9f:aa:5d:58:e6:9a:51:8f:91:6c:bc:58:99:ea:d2:b2:5f: 30:a6:26:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvWkgoDaMIdC/H3uUDh7ReDs4lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTExMDIxNTE2MTNaFw0yNTExMDUyMTExMTNaMDMxMTAvBgNV BAMTKERBODVBMUY4NkQ5QzZCQkM5RjRDNjI1QzY0NDY3NzE1N0E0REVENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdS/WjzAdb6Wbe+0dmsu+NHMQH Rd1o5j/YJc9XZ8WUR2daWTvONVmGv3ktdiil1+cIBppuXfAouA5AXtseMXSulQBX H/H6ApatY4oGFyRD0lOW2SSE/E7I+ENXXXuY77/6sIsUlG8MLYsoCAT3QEG9+o82 VvsAW4Ca7IJWTlF5l62kJguCapMKYV3BSigW7FESrHCDCN3U8mqk73KdERtVYyKP MrO41v2F0FBbhQJsiv8JqAWZQVWHw8M5UtEu3LVsNK5SlGaHfcFj08sxL7YrjReQ Jlp9EjXXHAe7BQYnwCKKlHgyKYrthSxL9zqBqno1WwbmwoADMAyLjzJQj6WhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oWh+G2ca7yfTGJcZEZ3FXpN7VowHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjRNhgRtsUwzlXaykvSpBb7ocIg8g8LSul3 npwePghpHgSFNLdqN4B0W314jCl+etqeC8wXJSAjjAT9Rnk7YBnYApPGOzlBiPGk OnzweM0JWYVmqyXjhQarsre1d1inmQv+86ermbf7EsmG2JCP5DLUc8PFd42Odwye OnCq4vj9e32Af5rzxIvT8BHRoJ8OeXmMAUWWiBpF3l3pVnfq74PY/N1HZ+0wq77J Tq4hW7fWOcbFpnuFptZoR683H2S9WGU4Uolx422XuR+uQKAIn4oXxICS4uMS3e+o 2M0z/Klsn1VivD6gRM2hScOfql1Y5ppRj5FsvFiZ6tKyXzCmJj4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:34 2025 by rpki-client