$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: jCzG/33Y9nxZ8yWx8obei739fK50+xSYDShj7oOzHKM= Subject key identifier: DE:AC:4F:E3:B7:F3:F0:F7:98:A5:DD:1B:73:9E:1F:98:91:5C:80:EE Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 2BBB80B7DB4AA8B1389BD400F965DBC4D926586A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: DB Signing time: Tue 04 Nov 2025 12:40:05 +0000 Manifest this update: Tue 04 Nov 2025 12:35:05 +0000 Manifest next update: Fri 07 Nov 2025 16:31:05 +0000 Files and hashes: 1: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 2: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 3: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) 4: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: xZoMgSgp1xGjd8mjFiX5jc9URRWddJdli5YjjvUu7Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bb:80:b7:db:4a:a8:b1:38:9b:d4:00:f9:65:db:c4:d9:26:58:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Nov 4 12:35:05 2025 GMT Not After : Nov 7 16:31:05 2025 GMT Subject: CN=DEAC4FE3B7F3F0F798A5DD1B739E1F98915C80EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:23:c7:87:51:68:df:32:83:14:34:e0:6d: 67:b2:f2:d4:98:ff:c1:e0:cd:e9:92:13:d1:bb:21: 17:11:85:31:15:12:1b:a0:7f:4e:e7:9c:eb:2b:39: d5:e2:de:1b:0e:b5:ee:73:83:4d:7e:64:23:19:1d: fd:4c:01:57:ba:8a:08:b7:5e:86:cb:f1:e6:15:0a: e2:a3:6d:13:a6:94:d2:85:a4:15:e5:e1:07:59:76: 03:dc:29:09:4b:06:1d:ce:55:f1:54:82:a1:4e:04: fe:4e:22:76:96:1d:e1:7a:35:48:78:a7:c3:54:3a: ee:84:67:4a:de:70:ba:00:6c:4a:2e:d3:88:52:60: bc:35:59:80:25:f8:1a:df:72:bb:c5:47:99:af:3e: 15:40:b9:37:83:a4:ea:e9:ed:2b:33:3e:a6:92:05: 3d:54:72:08:08:2e:d0:66:17:f4:83:b7:f4:d0:ad: af:7d:aa:6f:50:0b:b8:d5:a1:98:36:e3:65:2b:88: 80:69:5e:2e:32:67:e9:ae:fc:a0:ff:36:c4:ab:8c: b4:6f:ff:89:4a:fe:de:5b:4a:74:1e:1b:6c:53:57: c3:10:36:36:ca:8d:1e:1a:42:10:98:6f:ad:0e:d0: f4:27:d3:45:e3:34:ca:e0:d0:63:a9:4a:28:93:de: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AC:4F:E3:B7:F3:F0:F7:98:A5:DD:1B:73:9E:1F:98:91:5C:80:EE X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4c:79:72:6f:f5:e9:21:8c:1d:84:fe:42:02:ef:ac:e9:a3: 59:5f:5d:2e:94:b7:c7:03:1e:6b:3a:49:e5:57:b6:cc:d7:25: aa:0d:78:00:40:a2:58:12:34:d2:73:c2:a2:57:00:b7:91:31: 88:ab:23:6e:b4:30:28:56:54:e1:1a:55:91:6c:b8:b3:a3:89: df:b1:0b:4e:8e:78:34:cc:73:68:60:0e:31:11:f2:6c:5f:b6: 90:30:4d:1d:39:32:1d:c7:40:5e:72:f9:5c:b2:3c:5b:c9:67: d3:2a:9a:b2:aa:ee:16:77:e9:00:b0:a8:94:8a:ad:0d:c4:0c: 88:36:c1:45:77:2d:ed:56:46:4f:83:95:73:ce:a1:ea:14:75: 81:8f:13:95:8d:8e:11:a9:47:51:bd:c3:18:43:47:8b:f5:3f: 1f:66:75:27:41:29:66:f9:f5:78:fd:c7:8e:33:32:5f:52:b9: 34:46:6a:70:68:2e:b5:27:d7:78:e8:da:a3:1d:91:61:ba:dd: 7c:1f:97:0f:66:95:74:2e:3b:95:11:77:ae:dc:e3:3f:45:c7: 6b:e8:95:84:4c:65:ad:cb:2f:67:67:8f:3d:cd:09:4f:45:d3: c8:64:0a:a1:45:d6:9a:f6:d7:0f:3c:fd:9a:8c:63:b7:b6:24: 6e:b6:42:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7uAt9tKqLE4m9QA+WXbxNkmWGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTExMDQxMjM1MDVaFw0yNTExMDcxNjMxMDVaMDMxMTAvBgNV BAMTKERFQUM0RkUzQjdGM0YwRjc5OEE1REQxQjczOUUxRjk4OTE1QzgwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xyPHh1Fo3zKDFDTgbWey8tSY /8HgzemSE9G7IRcRhTEVEhugf07nnOsrOdXi3hsOte5zg01+ZCMZHf1MAVe6igi3 XobL8eYVCuKjbROmlNKFpBXl4QdZdgPcKQlLBh3OVfFUgqFOBP5OInaWHeF6NUh4 p8NUOu6EZ0recLoAbEou04hSYLw1WYAl+BrfcrvFR5mvPhVAuTeDpOrp7SszPqaS BT1UcggILtBmF/SDt/TQra99qm9QC7jVoZg242UriIBpXi4yZ+mu/KD/NsSrjLRv /4lK/t5bSnQeG2xTV8MQNjbKjR4aQhCYb60O0PQn00XjNMrg0GOpSiiT3pPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qxP47fz8PeYpd0bc54fmJFcgO4wHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElMeXJv9ekhjB2E/kIC76zpo1lfXS6Ut8cD Hms6SeVXtszXJaoNeABAolgSNNJzwqJXALeRMYirI260MChWVOEaVZFsuLOjid+x C06OeDTMc2hgDjER8mxftpAwTR05Mh3HQF5y+VyyPFvJZ9MqmrKq7hZ36QCwqJSK rQ3EDIg2wUV3Le1WRk+DlXPOoeoUdYGPE5WNjhGpR1G9wxhDR4v1Px9mdSdBKWb5 9Xj9x44zMl9SuTRGanBoLrUn13jo2qMdkWG63Xwflw9mlXQuO5URd67c4z9Fx2vo lYRMZa3LL2dnjz3NCU9F08hkCqFF1pr21w88/ZqMY7e2JG62Qn0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:12 2025 by rpki-client