$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: dulLMDIOqMFeZf0/qbebc8wCZzQq4LmRLWlMir89KWU= Subject key identifier: 6C:02:FA:25:11:F4:2C:5B:76:D2:91:B5:1B:62:63:95:56:0E:B0:93 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 746E4E58D4C8A35CA61FA791566CF832B325F62F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01AF Signing time: Mon 03 Nov 2025 11:01:40 +0000 Manifest this update: Mon 03 Nov 2025 10:56:40 +0000 Manifest next update: Thu 06 Nov 2025 15:22:40 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: /5gzLzYFEL3IDGDzE+ZhJvKRcw/LsbsivaQpJ6O5bNc=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6e:4e:58:d4:c8:a3:5c:a6:1f:a7:91:56:6c:f8:32:b3:25:f6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Nov 3 10:56:40 2025 GMT Not After : Nov 6 15:22:40 2025 GMT Subject: CN=6C02FA2511F42C5B76D291B51B626395560EB093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:99:75:fd:a9:93:09:c7:fd:1c:f9:59:54: 8c:61:15:fd:f9:80:0a:e4:91:e4:23:58:fa:91:4a: 55:ff:b3:72:8a:08:dd:a5:d1:f4:04:80:14:61:96: 13:17:1b:bd:89:83:86:e4:61:91:e4:39:69:92:30: 9c:20:13:5c:81:4e:fc:fc:0e:1a:63:3b:92:52:2f: 46:de:4f:7d:cb:16:31:37:57:ca:49:77:e4:9a:1a: 18:6a:3f:4c:1c:83:63:d7:f0:5b:27:a6:bb:26:1f: a8:a9:54:b7:8b:6f:1a:b4:e7:78:34:b3:19:20:1e: 1c:b1:d5:0b:cd:e9:3b:8f:29:71:2d:78:e0:0b:9d: aa:a7:d1:84:97:80:26:5e:4d:6b:e1:3d:c5:b3:92: dd:d3:ed:66:da:b2:cd:f4:c5:2d:98:0f:48:06:14: a2:59:d5:93:2d:21:65:37:0e:d0:f9:d2:8d:cd:3c: 5e:f5:18:b3:d0:28:35:8c:b4:c5:0e:86:54:46:db: ae:88:c6:32:ab:e8:99:68:48:2d:5d:84:59:6a:c2: 6e:2b:b7:82:a3:f0:be:29:bd:42:ad:88:cc:ee:73: de:90:18:84:94:ef:9e:d1:de:ec:8a:75:d1:02:ee: 04:ab:13:2e:a0:27:c3:d9:9d:7a:37:74:dc:db:fd: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:FA:25:11:F4:2C:5B:76:D2:91:B5:1B:62:63:95:56:0E:B0:93 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:57:45:5a:56:c6:73:32:9c:b1:b9:4a:70:83:1f:0c:2c:40: fb:f5:0e:a2:63:df:54:07:a9:73:24:7f:af:39:28:01:7f:b0: 82:d6:88:71:19:92:64:9e:07:34:16:46:5b:00:e2:9b:3b:c7: 87:a7:50:3e:3b:d1:45:03:73:7c:a0:24:98:f7:5c:39:75:5f: d2:5d:50:07:5e:2f:ae:36:ec:79:0c:cf:9b:29:77:41:fa:2f: 5e:46:03:e4:b8:8d:cc:d2:4c:1e:f2:11:33:c4:9d:89:5c:29: 72:5d:88:0b:b5:aa:70:9e:cb:00:aa:f8:e6:42:3d:81:81:6b: 9a:e2:fa:96:e7:a5:78:d7:e9:c5:7b:7e:c4:29:cf:9f:55:54: b0:6f:e0:8a:7d:6b:6d:86:6f:e0:c2:88:2e:ce:ff:1e:fb:1b: df:e0:c6:7b:0e:84:c6:ed:e0:e5:42:9f:10:f0:41:d1:46:b5: cf:79:34:59:95:9f:47:d1:66:09:d7:0f:76:20:8a:85:d2:22: 67:c8:f1:17:4a:5d:f0:4e:8a:05:d9:b6:d9:28:8b:eb:c4:63: 8a:44:a1:7a:8a:45:8e:e0:05:31:27:a2:fe:88:0b:13:28:7b: 97:65:62:71:fe:2c:d7:a9:73:bc:22:5e:0b:22:06:96:86:0f: 6e:ad:d2:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdG5OWNTIo1ymH6eRVmz4MrMl9i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTExMDMxMDU2NDBaFw0yNTExMDYxNTIyNDBaMDMxMTAvBgNV BAMTKDZDMDJGQTI1MTFGNDJDNUI3NkQyOTFCNTFCNjI2Mzk1NTYwRUIwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDec5l1/amTCcf9HPlZVIxhFf35 gArkkeQjWPqRSlX/s3KKCN2l0fQEgBRhlhMXG72Jg4bkYZHkOWmSMJwgE1yBTvz8 DhpjO5JSL0beT33LFjE3V8pJd+SaGhhqP0wcg2PX8FsnprsmH6ipVLeLbxq053g0 sxkgHhyx1QvN6TuPKXEteOALnaqn0YSXgCZeTWvhPcWzkt3T7Wbass30xS2YD0gG FKJZ1ZMtIWU3DtD50o3NPF71GLPQKDWMtMUOhlRG266IxjKr6JloSC1dhFlqwm4r t4Kj8L4pvUKtiMzuc96QGISU757R3uyKddEC7gSrEy6gJ8PZnXo3dNzb/c1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAL6JRH0LFt20pG1G2JjlVYOsJMwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1XRVpWxnMynLG5SnCDHwwsQPv1DqJj31QH qXMkf685KAF/sILWiHEZkmSeBzQWRlsA4ps7x4enUD470UUDc3ygJJj3XDl1X9Jd UAdeL6427HkMz5spd0H6L15GA+S4jczSTB7yETPEnYlcKXJdiAu1qnCeywCq+OZC PYGBa5ri+pbnpXjX6cV7fsQpz59VVLBv4Ip9a22Gb+DCiC7O/x77G9/gxnsOhMbt 4OVCnxDwQdFGtc95NFmVn0fRZgnXD3YgioXSImfI8RdKXfBOigXZttkoi+vEY4pE oXqKRY7gBTEnov6ICxMoe5dlYnH+LNepc7wiXgsiBpaGD26t0hs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:28 2025 by rpki-client