$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: VA0U3JS/4itzk5+fFytvN2pl3S5AT34X48trPT20UzU= Subject key identifier: A6:F7:86:BC:AA:3E:FC:F9:C5:F1:98:8E:40:31:18:5A:B2:B9:47:AE Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 5527DE1418075B3E5B9791743AD03363C0981B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 017F Signing time: Mon 03 Nov 2025 17:00:37 +0000 Manifest this update: Mon 03 Nov 2025 16:55:37 +0000 Manifest next update: Thu 06 Nov 2025 22:46:37 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: UXVYbcrVnyp0BFChE+lSd2Q2/HIGGbWemBbuS2bH+LU=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:de:14:18:07:5b:3e:5b:97:91:74:3a:d0:33:63:c0:98:1b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Nov 3 16:55:37 2025 GMT Not After : Nov 6 22:46:37 2025 GMT Subject: CN=A6F786BCAA3EFCF9C5F1988E4031185AB2B947AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ee:2a:11:16:d1:6c:03:7a:77:29:59:98:b1: 70:f2:f2:81:36:76:45:c7:5a:4a:81:e2:23:75:6f: ff:5d:a2:16:6c:a5:00:ec:3a:c4:a2:15:b6:96:62: 45:b2:d2:08:9e:cf:64:91:57:29:c3:2f:a7:02:63: 6f:d4:ba:03:ec:24:a1:92:77:a2:a4:14:2f:70:60: 39:ac:f0:85:44:46:4c:57:14:13:c6:f8:58:46:a4: 61:32:44:fd:cd:a3:a2:65:9f:76:15:ad:ec:30:a9: 80:b7:eb:00:c0:ea:31:10:e0:d1:69:13:20:4f:1b: b5:56:e7:1e:d7:16:a0:8d:88:6e:43:7b:72:87:e9: 4b:c5:fa:f1:5f:e5:00:68:9c:fc:de:6f:68:15:be: 50:ec:6e:c4:d6:ba:17:b3:94:18:1b:2b:33:dc:70: 82:bd:ef:19:34:9c:e0:ec:67:6e:3e:a3:e3:9d:ef: 0d:55:f2:cc:ea:72:16:f1:bd:7c:2b:ed:a3:0b:4c: 8b:ef:67:37:ae:5a:75:c8:29:47:df:73:19:d9:ce: c9:2a:61:f2:26:f2:82:94:2c:40:45:1d:e0:b0:3d: 18:cc:e9:65:0f:b4:87:2d:27:ac:02:37:36:28:82: f5:b8:b9:42:a3:5b:ad:eb:7a:65:48:4f:c1:e2:28: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:86:BC:AA:3E:FC:F9:C5:F1:98:8E:40:31:18:5A:B2:B9:47:AE X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d7:7c:43:91:6c:ac:93:da:68:43:77:1b:45:71:5f:21:ab: c8:0b:4f:ea:dd:f3:1c:f1:d5:a1:b5:5d:03:5f:c3:c5:03:5d: 83:c8:3c:e3:5f:6c:41:f3:b0:1f:f9:6d:55:4c:9b:78:33:c0: e3:75:4b:b2:3b:c3:45:39:68:75:54:17:b5:4f:e4:b0:8b:37: 8a:d2:3b:bf:2e:96:a3:09:9e:f0:f7:5b:18:80:f0:1a:1d:d6: c8:e7:3a:f5:e6:b1:1d:a8:49:8f:ee:79:a8:f6:ec:8d:9d:b3: dc:96:5f:eb:5c:d3:35:82:59:12:e9:dd:6a:4a:a7:56:fc:cd: 6d:05:75:d4:87:c2:63:70:31:6d:df:a8:50:ed:f9:63:44:bd: 37:aa:1c:56:27:8a:b1:19:1e:4a:72:a2:25:9c:8a:9f:39:17: 78:1b:0d:9d:66:80:06:69:e8:bf:fb:b2:57:b5:11:d1:9d:6a: 1c:91:84:df:f1:89:8a:e0:75:b0:c7:d9:af:82:e8:49:a4:2f: 13:0d:94:03:c5:2e:ac:1e:bb:d4:16:1e:2f:5d:f0:df:48:38: 72:d5:a5:9c:1d:b4:73:9d:86:b5:7a:7c:67:36:9b:59:dd:e4: 4e:2a:fa:f5:d6:28:2e:d1:8a:b5:21:d1:03:0e:51:15:7b:65: 89:e3:f6:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSfeFBgHWz5bl5F0OtAzY8CYG5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTExMDMxNjU1MzdaFw0yNTExMDYyMjQ2MzdaMDMxMTAvBgNV BAMTKEE2Rjc4NkJDQUEzRUZDRjlDNUYxOTg4RTQwMzExODVBQjJCOTQ3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7ioRFtFsA3p3KVmYsXDy8oE2 dkXHWkqB4iN1b/9dohZspQDsOsSiFbaWYkWy0giez2SRVynDL6cCY2/UugPsJKGS d6KkFC9wYDms8IVERkxXFBPG+FhGpGEyRP3No6Jln3YVrewwqYC36wDA6jEQ4NFp EyBPG7VW5x7XFqCNiG5De3KH6UvF+vFf5QBonPzeb2gVvlDsbsTWuhezlBgbKzPc cIK97xk0nODsZ24+o+Od7w1V8szqchbxvXwr7aMLTIvvZzeuWnXIKUffcxnZzskq YfIm8oKULEBFHeCwPRjM6WUPtIctJ6wCNzYogvW4uUKjW63remVIT8HiKAdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpveGvKo+/PnF8ZiOQDEYWrK5R64wHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTXfEORbKyT2mhDdxtFcV8hq8gLT+rd8xzx 1aG1XQNfw8UDXYPIPONfbEHzsB/5bVVMm3gzwON1S7I7w0U5aHVUF7VP5LCLN4rS O78ulqMJnvD3WxiA8Bod1sjnOvXmsR2oSY/ueaj27I2ds9yWX+tc0zWCWRLp3WpK p1b8zW0FddSHwmNwMW3fqFDt+WNEvTeqHFYnirEZHkpyoiWcip85F3gbDZ1mgAZp 6L/7sle1EdGdahyRhN/xiYrgdbDH2a+C6EmkLxMNlAPFLqweu9QWHi9d8N9IOHLV pZwdtHOdhrV6fGc2m1nd5E4q+vXWKC7RirUh0QMOURV7ZYnj9js= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:42 2025 by rpki-client