$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: zQ8VFV34m74Oz2uowDjXXeY0s7i3B3jJ8mO+u7H2wMM= Subject key identifier: F5:3F:5D:CC:FD:38:76:07:AB:6E:A0:39:15:A5:2C:C4:02:C6:CA:9A Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 12CD85A62BF5658473E3557EA6EC51E5E4C6CB82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 17:02:12 +0000 Manifest this update: Sun 02 Nov 2025 16:57:12 +0000 Manifest next update: Wed 05 Nov 2025 21:25:12 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: WA4qS4OdWGFitZTjdM3OAzCl8F+3s3NBwFMiPKBLM/8=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cd:85:a6:2b:f5:65:84:73:e3:55:7e:a6:ec:51:e5:e4:c6:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Nov 2 16:57:12 2025 GMT Not After : Nov 5 21:25:12 2025 GMT Subject: CN=F53F5DCCFD387607AB6EA03915A52CC402C6CA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cf:b6:9c:ca:ba:73:1e:28:9c:a3:8d:fc:0a: e9:19:77:49:9d:50:99:bb:ec:65:ef:b0:ad:0a:85: e1:73:98:68:a5:a5:35:90:23:74:a1:96:da:98:23: af:4f:ee:4d:c3:6f:e3:38:38:1b:18:f5:d6:9b:a3: 8b:bb:a0:95:04:9a:7c:e7:47:11:c0:9e:64:f2:d0: bd:0d:74:2d:d1:90:92:54:c6:f7:d8:40:1e:55:77: 67:82:b9:3f:30:cb:5e:6c:21:74:53:85:6d:33:79: 70:22:8d:59:9a:64:60:ef:56:1d:4e:c5:49:04:0d: c9:4f:d3:49:e9:dc:97:59:b7:a0:ff:c9:cb:c4:95: fa:c4:37:ce:da:7e:8a:07:99:14:42:1f:83:2b:94: 51:67:56:2f:39:fe:5d:3a:dc:fd:62:87:5f:65:f5: ff:9c:12:45:d4:71:a7:81:8d:dd:de:e9:a9:a3:f1: 25:e3:b4:60:b0:eb:cd:14:48:e2:ef:dc:8b:55:e3: 1e:24:2d:e1:22:81:54:76:b4:25:6a:44:b7:c5:31: 48:02:dc:50:24:bd:7e:56:0d:d6:4b:be:25:31:96: f3:d2:27:b1:c5:00:ba:a3:4b:ed:be:81:0a:9f:16: 9f:8e:ec:f4:37:7a:54:6d:63:dd:a9:3b:b9:cd:95: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:5D:CC:FD:38:76:07:AB:6E:A0:39:15:A5:2C:C4:02:C6:CA:9A X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8a:b5:00:6f:30:43:5e:14:4e:bd:c4:ad:c8:be:5d:6e:2e: 61:23:1c:f1:e1:75:64:7b:9b:a9:d1:95:6e:34:be:8e:3a:71: a9:29:c4:ee:b7:dd:4d:94:3c:18:f3:47:78:ed:3e:96:3e:d4: 78:c5:04:dd:b3:ca:62:34:c5:4a:b1:15:13:6b:44:5c:85:7d: 69:00:c6:c8:55:49:a0:12:09:48:c6:69:c1:26:88:c4:10:27: de:d2:d7:ee:75:13:85:62:4c:b3:53:e5:51:d0:a0:69:ad:db: 6e:03:a7:79:89:95:11:7f:8d:af:ec:c3:52:eb:2f:86:7f:8a: 6a:1d:a3:d8:72:11:40:b2:f2:32:b7:25:19:f7:0b:11:ef:22: 95:dd:1f:d6:db:ef:38:80:90:e0:b1:eb:fb:ef:5c:2a:fc:8b: 4d:80:86:52:66:60:2a:f6:9c:6a:75:5d:ac:54:5c:59:4a:ce: be:12:de:a4:27:c9:78:bd:79:86:dd:0d:76:6e:de:1f:2b:8e: e9:00:45:01:40:65:12:fd:97:84:b3:b8:3b:55:17:d0:76:93: 6d:8e:1f:96:db:4c:90:be:d7:00:2a:88:4f:b2:47:2e:5a:39: b4:c7:0a:a6:2f:f3:ea:0b:a3:34:ce:b3:f7:0a:3e:13:0e:2b: 53:47:0a:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEs2Fpiv1ZYRz41V+puxR5eTGy4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTExMDIxNjU3MTJaFw0yNTExMDUyMTI1MTJaMDMxMTAvBgNV BAMTKEY1M0Y1RENDRkQzODc2MDdBQjZFQTAzOTE1QTUyQ0M0MDJDNkNBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyz7acyrpzHiico438CukZd0md UJm77GXvsK0KheFzmGilpTWQI3ShltqYI69P7k3Db+M4OBsY9dabo4u7oJUEmnzn RxHAnmTy0L0NdC3RkJJUxvfYQB5Vd2eCuT8wy15sIXRThW0zeXAijVmaZGDvVh1O xUkEDclP00np3JdZt6D/ycvElfrEN87afooHmRRCH4MrlFFnVi85/l063P1ih19l 9f+cEkXUcaeBjd3e6amj8SXjtGCw680USOLv3ItV4x4kLeEigVR2tCVqRLfFMUgC 3FAkvX5WDdZLviUxlvPSJ7HFALqjS+2+gQqfFp+O7PQ3elRtY92pO7nNlffHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9T9dzP04dgerbqA5FaUsxALGypowHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyKtQBvMENeFE69xK3Ivl1uLmEjHPHhdWR7 m6nRlW40vo46cakpxO633U2UPBjzR3jtPpY+1HjFBN2zymI0xUqxFRNrRFyFfWkA xshVSaASCUjGacEmiMQQJ97S1+51E4ViTLNT5VHQoGmt224Dp3mJlRF/ja/sw1Lr L4Z/imodo9hyEUCy8jK3JRn3CxHvIpXdH9bb7ziAkOCx6/vvXCr8i02AhlJmYCr2 nGp1XaxUXFlKzr4S3qQnyXi9eYbdDXZu3h8rjukARQFAZRL9l4SzuDtVF9B2k22O H5bbTJC+1wAqiE+yRy5aObTHCqYv8+oLozTOs/cKPhMOK1NHCuk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:16 2025 by rpki-client