$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: R3jvv7CLKiK+kE3pTj9hFPLxx3izTAbTgvEz9TCWGrM= Subject key identifier: 66:F9:CF:29:EB:EA:D7:84:20:94:21:8F:9D:A0:96:42:69:B2:0A:A0 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 7B9C5E70633611D1E37975126E9F161D4E474571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01DA Signing time: Sun 02 Nov 2025 23:12:24 +0000 Manifest this update: Sun 02 Nov 2025 23:07:24 +0000 Manifest next update: Thu 06 Nov 2025 10:52:24 +0000 Files and hashes: 1: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) 2: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: JPRSmVWxztwUb50nyOr7KCY4LutSpeLljxQShWgm+3k=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 4: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9c:5e:70:63:36:11:d1:e3:79:75:12:6e:9f:16:1d:4e:47:45:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Nov 2 23:07:24 2025 GMT Not After : Nov 6 10:52:24 2025 GMT Subject: CN=66F9CF29EBEAD7842094218F9DA0964269B20AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:92:4a:e4:8f:b6:e0:5c:aa:b1:2d:ae:d5: ff:bc:0d:d7:5f:b2:95:fe:02:ba:64:c9:83:9c:b8: 75:27:c4:05:79:2f:6b:63:57:4c:22:c8:47:20:71: e4:1b:50:a4:eb:d6:4b:f2:e6:e1:3e:8b:17:ce:79: af:1e:36:04:c9:4f:46:30:59:17:28:73:e0:f2:7b: 29:50:1f:8c:8b:ea:b1:62:62:47:02:1c:de:bd:63: 94:36:d5:10:2a:80:1c:cf:0a:7a:73:d3:08:53:0c: f2:72:b5:73:3e:8d:5a:1f:d1:80:89:2c:7b:e1:b1: e1:09:53:97:37:99:86:77:4b:3b:96:88:79:95:0e: 78:c6:bd:12:be:9f:f2:f8:c4:29:34:42:fd:34:08: a2:7f:df:f6:93:10:ae:09:be:6b:64:84:01:e1:d4: 37:c6:64:9c:a7:d9:8e:57:0c:86:ef:e7:aa:26:c2: 6d:d7:87:96:e7:99:3e:7e:96:e0:00:b1:6a:96:87: 49:04:fc:cb:64:46:8e:da:1d:f6:d2:5e:50:ad:22: 05:7e:2b:1f:9c:a1:e2:ca:fc:4a:a4:77:13:12:c6: 90:6a:bd:63:24:f5:67:6d:b6:72:ba:c3:26:a5:96: c5:5c:e8:b4:8c:9b:24:1e:8b:13:c9:0c:12:99:f4: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:CF:29:EB:EA:D7:84:20:94:21:8F:9D:A0:96:42:69:B2:0A:A0 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:7d:34:7d:bd:bc:1d:2b:08:08:29:fe:da:01:c7:3b:42: 40:57:4c:81:80:56:61:dc:fe:ed:77:4b:50:4a:12:95:31:a4: da:1e:51:fd:9f:b7:10:d3:23:20:c8:b5:a7:95:44:30:d3:c9: 54:bd:16:94:83:d0:a6:68:53:f8:d6:e9:5b:88:ab:0f:c0:a3: 39:99:a3:c2:d2:21:a6:ae:c3:f6:5a:c8:45:eb:87:a4:02:1f: 95:47:8b:ce:2f:8a:dc:23:e5:8b:14:87:7d:00:0d:80:f0:1b: 25:70:ef:48:2a:85:e8:8c:df:1e:33:d0:7c:05:4e:f1:b7:6d: 59:d3:6e:c8:94:79:4f:2c:99:d9:b0:ce:19:d8:48:2d:c5:cb: 07:e1:8c:5f:c7:66:b7:0c:8e:97:b4:42:d0:52:f7:40:e0:53: c5:3b:c6:f9:84:e1:1d:f5:74:c6:ab:04:4a:8f:83:ad:02:81: 72:9e:9f:b5:90:0b:71:ce:95:a7:ec:d8:f9:08:1e:59:ab:75: 49:9d:47:68:43:8e:e3:9a:8b:b3:a3:a4:2c:40:75:f3:a2:25: 44:1b:8e:c2:fc:36:dc:02:15:98:49:0a:e8:d4:e3:83:35:a7: 47:f7:cd:c5:b2:41:17:1f:fb:0b:bd:b5:5b:6e:15:7e:95:c0: 86:e7:45:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5xecGM2EdHjeXUSbp8WHU5HRXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTExMDIyMzA3MjRaFw0yNTExMDYxMDUyMjRaMDMxMTAvBgNV BAMTKDY2RjlDRjI5RUJFQUQ3ODQyMDk0MjE4RjlEQTA5NjQyNjlCMjBBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh5JK5I+24FyqsS2u1f+8Dddf spX+ArpkyYOcuHUnxAV5L2tjV0wiyEcgceQbUKTr1kvy5uE+ixfOea8eNgTJT0Yw WRcoc+DyeylQH4yL6rFiYkcCHN69Y5Q21RAqgBzPCnpz0whTDPJytXM+jVof0YCJ LHvhseEJU5c3mYZ3SzuWiHmVDnjGvRK+n/L4xCk0Qv00CKJ/3/aTEK4JvmtkhAHh 1DfGZJyn2Y5XDIbv56omwm3Xh5bnmT5+luAAsWqWh0kE/MtkRo7aHfbSXlCtIgV+ Kx+coeLK/EqkdxMSxpBqvWMk9WdttnK6wyallsVc6LSMmyQeixPJDBKZ9IBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZvnPKevq14QglCGPnaCWQmmyCqAwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBtfTR9vbwdKwgIKf7aAcc7QkBXTIGAVmHc /u13S1BKEpUxpNoeUf2ftxDTIyDItaeVRDDTyVS9FpSD0KZoU/jW6VuIqw/AozmZ o8LSIaauw/ZayEXrh6QCH5VHi84vitwj5YsUh30ADYDwGyVw70gqheiM3x4z0HwF TvG3bVnTbsiUeU8smdmwzhnYSC3FywfhjF/HZrcMjpe0QtBS90DgU8U7xvmE4R31 dMarBEqPg60CgXKen7WQC3HOlafs2PkIHlmrdUmdR2hDjuOai7OjpCxAdfOiJUQb jsL8NtwCFZhJCujU44M1p0f3zcWyQRcf+wu9tVtuFX6VwIbnRd8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:02 2025 by rpki-client