$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: eeGqKBU68Lo0aB71c6YPeoN8HMT1pmRWBg/272c1/RU= Subject key identifier: F2:A2:0B:B1:68:92:EE:01:9B:E2:CC:FC:7E:48:E7:CA:37:5E:47:C5 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 1AE876C98412C2CEA10FF3FEDC8314FB4DA11C06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: 0105 Signing time: Mon 03 Nov 2025 05:02:13 +0000 Manifest this update: Mon 03 Nov 2025 04:57:13 +0000 Manifest next update: Thu 06 Nov 2025 13:18:13 +0000 Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) 2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: DWHXf/F2F5SdUJS7+5JYMYctf4pVlXIzV91oCvWm2DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:76:c9:84:12:c2:ce:a1:0f:f3:fe:dc:83:14:fb:4d:a1:1c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Nov 3 04:57:13 2025 GMT Not After : Nov 6 13:18:13 2025 GMT Subject: CN=F2A20BB16892EE019BE2CCFC7E48E7CA375E47C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:93:b2:31:3a:b4:54:25:42:b7:54:18:e5: a3:fd:48:65:19:df:94:7f:9f:29:f7:25:38:da:d3: 4f:f5:eb:dd:54:91:e0:c3:33:03:61:80:43:79:9e: d7:36:45:cd:b1:60:a0:63:59:da:e7:75:e9:40:af: 01:70:b0:2c:5a:ea:df:65:eb:9b:07:7d:6a:53:a0: 73:16:1e:32:54:05:b5:5d:27:3a:73:0a:e7:31:c5: a2:6a:31:41:80:41:ec:17:0e:56:a5:f6:0d:5a:30: 3b:fa:26:22:46:e5:5a:f7:33:6e:cf:0b:20:03:ed: 7d:0c:e7:7f:25:8b:52:c4:14:55:62:40:1d:ac:8f: be:cd:96:27:d9:0a:85:dd:1a:b0:75:60:5b:f3:3e: 40:e5:40:f2:ff:48:fa:4c:2e:8a:b1:06:b1:38:0d: fb:2b:ac:e7:4b:06:29:04:1b:d5:6e:8b:9e:34:56: 3d:35:f3:40:67:8c:c0:b0:51:4f:47:9e:15:6a:5c: 3c:b5:5b:d2:34:42:7c:6d:34:44:1b:81:cc:86:52: 5d:55:df:03:6d:2b:02:fc:cb:56:8e:5c:9c:ed:5d: 4d:44:c7:e0:79:2a:f3:dc:5c:ab:1d:7a:cd:64:44: 38:31:aa:80:71:01:40:e1:4e:87:28:68:b7:76:d3: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:0B:B1:68:92:EE:01:9B:E2:CC:FC:7E:48:E7:CA:37:5E:47:C5 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:f6:de:d8:69:cb:57:09:88:4e:d9:49:eb:eb:e6:28:d2: 95:f1:75:05:9b:40:a2:dd:6c:db:ae:95:25:8c:1a:1a:1e:a7: 71:f7:76:a0:e5:04:1e:c8:51:30:6e:a7:e8:26:35:d9:c8:a9: 2f:c4:fa:b6:54:fd:d5:89:79:5e:a9:de:e9:e3:17:48:c6:7a: 2c:0e:83:bd:f8:b4:ff:8e:dc:fc:5e:cd:75:03:d6:c8:15:0a: d2:5b:61:58:c1:a3:80:95:3a:64:4c:c7:27:de:66:92:65:51: 5c:35:3d:7a:f1:2e:51:ce:71:01:c4:c9:b6:14:95:9b:c3:79: 67:73:ac:c8:93:2b:30:f6:f2:7a:0b:67:78:00:46:31:88:6b: c1:bb:01:ab:6c:18:b4:31:3c:46:7c:8e:fb:a5:c1:f6:48:b7: 94:47:22:f7:05:48:59:13:2f:b6:ef:6c:fa:08:56:51:cb:00: fc:cc:fb:72:e4:3f:be:af:4b:fd:f6:c4:f0:d0:15:c8:03:15: 37:3e:39:82:6c:fd:c4:cf:1c:13:e6:e9:7f:9b:76:1d:11:f1: 98:08:f7:36:ba:46:17:a4:17:c7:6b:3e:42:e1:ea:f0:ed:fa: e5:ed:61:b8:8a:66:b6:46:53:77:43:e6:82:e7:cf:04:49:01: 6b:03:3f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuh2yYQSws6hD/P+3IMU+02hHAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTExMDMwNDU3MTNaFw0yNTExMDYxMzE4MTNaMDMxMTAvBgNV BAMTKEYyQTIwQkIxNjg5MkVFMDE5QkUyQ0NGQzdFNDhFN0NBMzc1RTQ3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDJOyMTq0VCVCt1QY5aP9SGUZ 35R/nyn3JTja00/1691UkeDDMwNhgEN5ntc2Rc2xYKBjWdrndelArwFwsCxa6t9l 65sHfWpToHMWHjJUBbVdJzpzCucxxaJqMUGAQewXDlal9g1aMDv6JiJG5Vr3M27P CyAD7X0M538li1LEFFViQB2sj77NlifZCoXdGrB1YFvzPkDlQPL/SPpMLoqxBrE4 DfsrrOdLBikEG9Vui540Vj0180BnjMCwUU9HnhVqXDy1W9I0QnxtNEQbgcyGUl1V 3wNtKwL8y1aOXJztXU1Ex+B5KvPcXKsdes1kRDgxqoBxAUDhTocoaLd200MfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qILsWiS7gGb4sz8fkjnyjdeR8UwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDc9t7YactXCYhO2Unr6+Yo0pXxdQWbQKLd bNuulSWMGhoep3H3dqDlBB7IUTBup+gmNdnIqS/E+rZU/dWJeV6p3unjF0jGeiwO g734tP+O3PxezXUD1sgVCtJbYVjBo4CVOmRMxyfeZpJlUVw1PXrxLlHOcQHEybYU lZvDeWdzrMiTKzD28noLZ3gARjGIa8G7AatsGLQxPEZ8jvulwfZIt5RHIvcFSFkT L7bvbPoIVlHLAPzM+3LkP76vS/32xPDQFcgDFTc+OYJs/cTPHBPm6X+bdh0R8ZgI 9za6RhekF8drPkLh6vDt+uXtYbiKZrZGU3dD5oLnzwRJAWsDPxc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:57 2025 by rpki-client