$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: AhBVDep37twVCXCVd71+m+4G5ZwanEqfQAQpWCLriVI= Subject key identifier: A4:BF:B1:85:8E:5F:65:ED:39:C8:99:DD:F9:C6:23:C8:07:FC:34:2F Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 618AAE5514201A309BC520500D5AD7AC442086E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 028E Signing time: Mon 03 Nov 2025 13:00:03 +0000 Manifest this update: Mon 03 Nov 2025 12:55:03 +0000 Manifest next update: Thu 06 Nov 2025 23:22:03 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: N2SYATO38tght5tYjY+hCZI47ZqbUjbwJYzm0SB6lsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:ae:55:14:20:1a:30:9b:c5:20:50:0d:5a:d7:ac:44:20:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Nov 3 12:55:03 2025 GMT Not After : Nov 6 23:22:03 2025 GMT Subject: CN=A4BFB1858E5F65ED39C899DDF9C623C807FC342F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:41:7d:cd:94:de:21:fe:76:7f:b5:bb:e1: 26:5a:23:fb:a5:c3:02:17:62:b0:12:38:3c:25:36: 55:7f:54:2f:cc:c0:0e:ac:27:c5:67:3a:ca:29:63: 3b:9b:bc:b3:f7:93:d3:3f:0e:13:f3:af:4a:08:05: cc:00:88:21:83:67:f4:3f:64:8e:52:dd:0f:cf:38: 56:86:24:bb:7c:eb:11:60:51:f9:1a:70:9a:66:22: c2:97:e0:56:04:a1:20:13:4e:da:1d:34:36:dc:b1: a6:b4:cd:d4:19:ec:d1:53:96:2d:b6:d2:bd:28:ab: 2b:cd:39:10:ed:ee:2a:fb:cf:61:2a:05:4d:bc:00: 45:6a:5a:3f:c8:30:9a:40:cb:8c:05:c7:2e:a7:72: e7:ce:bf:06:67:bc:59:be:1f:a1:e4:6f:72:2e:ee: 65:ee:c6:a3:a5:22:53:71:3d:3c:d8:09:1e:b5:c6: b6:55:72:c9:60:a7:8d:2b:a0:72:a5:ad:74:f9:3d: 2b:b0:36:8a:36:1f:c3:8f:59:3a:23:56:cc:d5:83: 40:4c:dc:4e:6f:ff:7c:fc:3c:e9:f0:8d:b8:a9:dc: 04:eb:3e:60:5a:b7:16:c9:aa:b9:80:6c:13:59:fb: 6e:fb:9f:51:30:81:2a:0b:60:4c:4e:c7:86:89:6d: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BF:B1:85:8E:5F:65:ED:39:C8:99:DD:F9:C6:23:C8:07:FC:34:2F X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1e:21:1f:18:fe:97:52:e0:65:c5:e3:61:fb:fa:2e:eb:3a: 5a:aa:8e:7e:51:ec:22:36:67:2c:18:04:d8:43:0e:57:da:59: c8:13:59:55:21:5b:31:5d:61:29:bf:14:02:a9:70:0a:4d:45: 90:3e:fd:45:4a:95:29:8d:04:ee:57:2e:e8:d8:b5:53:07:f8: 55:d2:93:12:0a:4d:71:84:45:d9:91:7e:b1:f9:17:f5:8f:64: a5:57:df:a6:b3:8f:8a:e1:9c:83:fa:38:cc:ac:73:12:fa:99: 0f:61:3f:75:21:fc:0e:ad:3d:56:0a:04:f3:b2:3b:56:9f:92: 93:6f:69:95:2e:84:7b:94:8f:68:bd:cb:30:12:6c:18:6e:c3: e0:f8:96:ee:c4:81:3e:19:3b:a3:18:27:c2:54:a7:65:4a:b6: c3:4a:80:12:14:9b:8f:b5:90:38:c3:a7:17:a2:e0:16:bb:14: 32:7d:ac:a5:b2:50:92:40:47:80:25:0f:96:a0:e2:25:3b:68: db:c7:bf:b4:d9:bd:bf:eb:20:7b:01:00:8a:62:e3:f4:29:a2: cd:73:6d:c3:cd:62:d9:80:6d:58:11:6f:d4:b2:cb:8b:1d:96: 9d:ef:65:37:1e:9c:49:1f:2b:5d:99:62:0c:48:fd:ef:b8:4a: 7a:40:c3:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYquVRQgGjCbxSBQDVrXrEQghuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTExMDMxMjU1MDNaFw0yNTExMDYyMzIyMDNaMDMxMTAvBgNV BAMTKEE0QkZCMTg1OEU1RjY1RUQzOUM4OTlEREY5QzYyM0M4MDdGQzM0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gkF9zZTeIf52f7W74SZaI/ul wwIXYrASODwlNlV/VC/MwA6sJ8VnOsopYzubvLP3k9M/DhPzr0oIBcwAiCGDZ/Q/ ZI5S3Q/POFaGJLt86xFgUfkacJpmIsKX4FYEoSATTtodNDbcsaa0zdQZ7NFTli22 0r0oqyvNORDt7ir7z2EqBU28AEVqWj/IMJpAy4wFxy6ncufOvwZnvFm+H6Hkb3Iu 7mXuxqOlIlNxPTzYCR61xrZVcslgp40roHKlrXT5PSuwNoo2H8OPWTojVszVg0BM 3E5v/3z8POnwjbip3ATrPmBatxbJqrmAbBNZ+277n1EwgSoLYExOx4aJbZqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpL+xhY5fZe05yJnd+cYjyAf8NC8wHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoeIR8Y/pdS4GXF42H7+i7rOlqqjn5R7CI2 ZywYBNhDDlfaWcgTWVUhWzFdYSm/FAKpcApNRZA+/UVKlSmNBO5XLujYtVMH+FXS kxIKTXGERdmRfrH5F/WPZKVX36azj4rhnIP6OMyscxL6mQ9hP3Uh/A6tPVYKBPOy O1afkpNvaZUuhHuUj2i9yzASbBhuw+D4lu7EgT4ZO6MYJ8JUp2VKtsNKgBIUm4+1 kDjDpxei4Ba7FDJ9rKWyUJJAR4AlD5ag4iU7aNvHv7TZvb/rIHsBAIpi4/Qpos1z bcPNYtmAbVgRb9Syy4sdlp3vZTcenEkfK12ZYgxI/e+4SnpAw1c= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:42 2025 by rpki-client