$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: UJsU5SRG13inBFJiEqY8z4Mot3nriJiWD+dD26usqa0= Subject key identifier: D3:4B:06:6A:A3:09:7B:3E:38:B7:76:BF:95:28:1C:49:87:EB:2C:3A Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 75CF89B21FE3FF11B4D3241286BAB75C16F3D3CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: BC Signing time: Sun 02 Nov 2025 21:21:27 +0000 Manifest this update: Sun 02 Nov 2025 21:16:27 +0000 Manifest next update: Wed 05 Nov 2025 23:09:27 +0000 Files and hashes: 1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: npLaApzhyiFjp7J5rX0l9EUnm/CqFJ0xX0lcr5JF37s=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) 3: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) 5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cf:89:b2:1f:e3:ff:11:b4:d3:24:12:86:ba:b7:5c:16:f3:d3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Nov 2 21:16:27 2025 GMT Not After : Nov 5 23:09:27 2025 GMT Subject: CN=D34B066AA3097B3E38B776BF95281C4987EB2C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:4f:65:e8:c4:8e:ba:7e:09:3e:50:6e:24: 66:35:40:1e:f6:e8:5d:60:03:a5:09:a1:cd:13:a3: 67:4a:87:06:84:7d:2a:5e:fe:f4:39:9e:3d:f8:bd: 8f:93:72:8b:79:26:fc:06:51:d5:e9:d0:2a:a8:c4: e5:dc:f5:3e:7b:6a:70:65:97:d7:d1:d7:84:35:60: 15:e9:88:14:bb:8c:2b:15:8e:51:7a:db:d0:9a:af: 06:40:a1:d9:44:c0:0e:27:e7:45:3d:34:51:6b:d5: 6e:23:e6:bf:b3:86:83:fd:63:98:8e:7d:60:67:a7: 62:e3:8c:d8:9b:a3:09:90:32:57:11:a0:41:b8:19: 78:75:91:91:24:66:e9:70:3b:9e:66:7c:33:4d:ab: 5e:28:5f:1d:5d:d7:58:91:b0:81:b6:b9:a5:fd:02: b0:bd:bc:38:84:a5:27:c1:f4:9c:64:81:cb:09:43: 67:5d:34:f0:d0:68:d6:30:a2:c5:69:af:ef:e1:3b: 0d:76:58:c5:91:1f:ff:4a:22:f4:f6:70:0e:eb:71: 14:fc:7d:be:f7:48:d4:2c:63:6d:45:55:3a:4e:b7: d0:b5:91:65:a8:d7:e6:f2:bd:b1:46:a0:a2:a9:6e: 51:6a:63:67:1d:00:6a:88:10:08:7d:91:35:2b:d1: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4B:06:6A:A3:09:7B:3E:38:B7:76:BF:95:28:1C:49:87:EB:2C:3A X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d4:dd:95:fd:a0:41:3c:a6:96:d3:71:94:31:27:99:5b:9e: 7c:7a:bf:4f:38:66:6a:a7:12:e2:6d:5a:93:f3:95:ae:44:a1: b1:77:0a:91:cb:32:1b:a7:09:cc:d2:ec:71:a2:55:8d:6c:b9: 69:f3:ec:88:b4:ca:80:84:61:2f:7b:51:99:63:03:2c:ad:9c: ab:95:6d:b2:9c:56:35:cc:0b:00:f6:0a:f0:bf:62:68:3b:83: 41:73:cd:46:4c:d3:9e:16:ea:c0:eb:2f:3a:58:55:23:cb:60: ba:f1:b1:18:79:7d:dd:71:f0:bc:6c:b9:32:0f:3e:35:87:07: f3:a7:f6:39:ad:37:05:cd:1d:12:b9:68:b0:e3:62:1c:a7:e2: a1:8a:e2:41:17:8f:70:87:74:a4:75:1c:30:ac:42:30:99:ad: b6:ae:76:de:c1:e5:55:5d:c1:d3:28:ea:c5:00:04:4d:79:be: d2:37:1e:c3:ff:44:2b:d0:c4:93:9d:91:b7:90:e5:12:64:9f: 9f:dc:52:c9:d6:a9:46:df:cb:b0:8e:20:a2:ca:b8:cd:a5:20: 30:a8:f5:e8:3a:4c:a2:bd:8c:07:18:d4:4c:4b:01:0b:ee:49: eb:b2:9a:64:36:f5:99:76:16:5a:28:8d:7f:1d:7e:0f:a8:23: 30:95:ca:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdc+Jsh/j/xG00yQShrq3XBbz08wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTExMDIyMTE2MjdaFw0yNTExMDUyMzA5MjdaMDMxMTAvBgNV BAMTKEQzNEIwNjZBQTMwOTdCM0UzOEI3NzZCRjk1MjgxQzQ5ODdFQjJDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwk9l6MSOun4JPlBuJGY1QB72 6F1gA6UJoc0To2dKhwaEfSpe/vQ5nj34vY+Tcot5JvwGUdXp0CqoxOXc9T57anBl l9fR14Q1YBXpiBS7jCsVjlF629CarwZAodlEwA4n50U9NFFr1W4j5r+zhoP9Y5iO fWBnp2LjjNibowmQMlcRoEG4GXh1kZEkZulwO55mfDNNq14oXx1d11iRsIG2uaX9 ArC9vDiEpSfB9JxkgcsJQ2ddNPDQaNYwosVpr+/hOw12WMWRH/9KIvT2cA7rcRT8 fb73SNQsY21FVTpOt9C1kWWo1+byvbFGoKKpblFqY2cdAGqIEAh9kTUr0ZTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00sGaqMJez44t3a/lSgcSYfrLDowHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzU3ZX9oEE8ppbTcZQxJ5lbnnx6v084Zmqn EuJtWpPzla5EobF3CpHLMhunCczS7HGiVY1suWnz7Ii0yoCEYS97UZljAyytnKuV bbKcVjXMCwD2CvC/Ymg7g0FzzUZM054W6sDrLzpYVSPLYLrxsRh5fd1x8LxsuTIP PjWHB/On9jmtNwXNHRK5aLDjYhyn4qGK4kEXj3CHdKR1HDCsQjCZrbaudt7B5VVd wdMo6sUABE15vtI3HsP/RCvQxJOdkbeQ5RJkn5/cUsnWqUbfy7COIKLKuM2lIDCo 9eg6TKK9jAcY1ExLAQvuSeuymmQ29Zl2FloojX8dfg+oIzCVyr4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:02:04 2025 by rpki-client