$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft File: 9E6AD12E8763F68692055BC4EE5A1741D489D240.mft (raw, json) Hash identifier: 38kdkwerkfS7HbJfKhgyvgzUaeGmEoe6GCkpNS7glCA= Subject key identifier: D3:73:8D:97:C0:D1:2E:7A:9C:E9:29:A9:9D:6F:A4:82:C6:CE:64:A3 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 023792F90490104096B1E431CA8C0DA0960AB0B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft Manifest number: 0140 Signing time: Mon 03 Nov 2025 13:21:58 +0000 Manifest this update: Mon 03 Nov 2025 13:16:58 +0000 Manifest next update: Thu 06 Nov 2025 20:11:58 +0000 Files and hashes: 1: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo=) 2: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: XewhVGdMZGfa1gubSokKY6kMLA2RRqqki4nl2Mtbjwk=) 3: 9E6AD12E8763F68692055BC4EE5A1741D489D240.crl (hash: PjGRnSGZXvTctWNd+bL0AouUOawDHVS6NqQgazQm3Zw=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Jq8yXQh2Quimw2J5Di1Jpnv+kf1Drg9qN3sT7DolU0U=) 5: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: Pu8JRhFp9Ytx+ko3+34MhGiKzNpbqOoP8zXRhQdIFW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:37:92:f9:04:90:10:40:96:b1:e4:31:ca:8c:0d:a0:96:0a:b0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Nov 3 13:16:58 2025 GMT Not After : Nov 6 20:11:58 2025 GMT Subject: CN=D3738D97C0D12E7A9CE929A99D6FA482C6CE64A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:6e:4a:1f:cc:df:c4:e9:d4:f8:64:fb:9b: 80:90:0d:94:1b:68:c2:1f:cb:02:f2:d1:d4:db:1d: f2:c9:ff:fb:07:1a:3d:3e:65:ab:72:d0:d7:b8:0d: 86:fd:c1:0d:78:5d:88:68:df:16:58:86:fd:c5:20: 24:07:07:21:c7:b6:92:7b:25:a9:fb:20:0a:fe:62: ad:8b:e2:89:15:e4:be:e8:f1:ac:39:a5:b5:0d:1c: 31:2c:6a:85:73:3f:ce:19:69:a6:ad:8c:bc:af:c8: 89:73:73:8a:00:6b:02:04:98:f6:64:5d:81:d8:fb: a5:98:11:c7:67:64:d6:a3:1f:b9:70:a7:bc:9e:2b: b6:da:71:ca:c4:5c:7e:fb:0a:12:da:a9:0f:13:a0: 07:38:ee:f5:1a:fa:14:da:3c:e4:51:b9:8f:e8:e7: 61:82:5b:fd:67:4f:37:2c:24:bc:48:39:25:28:45: 57:29:df:77:cd:1a:4f:72:1f:4e:03:e5:1c:9a:d4: cc:6e:50:73:b1:cd:ea:88:e5:f2:5d:86:c2:59:b4: c4:8a:44:3d:f0:59:65:26:3d:17:63:26:88:b6:ec: b6:35:2c:a8:4f:01:77:b4:8d:1a:ef:a2:61:4a:1b: 72:de:9b:d7:b9:5e:f7:85:25:ce:c5:15:ab:15:d4: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:8D:97:C0:D1:2E:7A:9C:E9:29:A9:9D:6F:A4:82:C6:CE:64:A3 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5d:0e:34:5a:70:c7:83:4e:62:38:0d:e0:5d:5c:6f:91:c4: b4:df:19:d7:8d:50:a9:d6:9a:d3:a6:e4:c0:cd:fa:b3:ee:36: 80:0d:58:24:fb:03:eb:aa:bf:43:f3:89:1b:6a:7d:06:8e:52: 87:4d:99:0c:e8:a8:c4:5f:36:32:5f:ae:ef:37:77:a0:2b:a7: cd:af:8d:62:94:77:e0:11:0f:57:fc:95:57:27:34:5b:bf:ba: 10:30:fb:e3:b3:ad:d0:cd:f6:5e:c4:d4:dd:82:ec:b3:03:b0: c3:23:92:53:20:f0:61:e4:57:50:31:25:7a:cf:35:0b:20:c5: 52:f0:7e:76:4b:b3:8c:50:a0:e7:13:bd:ae:08:d8:8a:ad:d1: c5:01:bd:86:1c:37:ae:3f:7b:c9:61:27:be:2b:c0:c3:bd:2f: 8b:83:04:77:d6:6f:2b:f9:c6:50:58:6e:8e:0d:2b:89:2e:9d: 52:11:b6:e7:bb:c6:8b:8e:a8:d8:ad:ac:4c:9c:d2:72:3c:e8: 67:91:b3:e4:82:8c:fa:91:db:0f:6e:2d:b2:b4:2a:16:a2:91: 56:be:2a:23:4e:a7:b1:da:3c:13:9f:a4:e6:c0:a0:93:c6:2c: fa:f9:22:2d:ae:90:5d:be:d2:69:ea:0a:35:60:23:2e:f0:56: 69:80:6d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjeS+QSQEECWseQxyowNoJYKsLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTExMDMxMzE2NThaFw0yNTExMDYyMDExNThaMDMxMTAvBgNV BAMTKEQzNzM4RDk3QzBEMTJFN0E5Q0U5MjlBOTlENkZBNDgyQzZDRTY0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYW5KH8zfxOnU+GT7m4CQDZQb aMIfywLy0dTbHfLJ//sHGj0+Zaty0Ne4DYb9wQ14XYho3xZYhv3FICQHByHHtpJ7 Jan7IAr+Yq2L4okV5L7o8aw5pbUNHDEsaoVzP84ZaaatjLyvyIlzc4oAawIEmPZk XYHY+6WYEcdnZNajH7lwp7yeK7baccrEXH77ChLaqQ8ToAc47vUa+hTaPORRuY/o 52GCW/1nTzcsJLxIOSUoRVcp33fNGk9yH04D5Rya1MxuUHOxzeqI5fJdhsJZtMSK RD3wWWUmPRdjJoi27LY1LKhPAXe0jRrvomFKG3Lem9e5XveFJc7FFasV1EFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03ONl8DRLnqc6SmpnW+kgsbOZKMwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3 NDFENDg5RDI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHldDjRacMeDTmI4DeBdXG+RxLTfGdeNUKnW mtOm5MDN+rPuNoANWCT7A+uqv0PziRtqfQaOUodNmQzoqMRfNjJfru83d6Arp82v jWKUd+ARD1f8lVcnNFu/uhAw++OzrdDN9l7E1N2C7LMDsMMjklMg8GHkV1AxJXrP NQsgxVLwfnZLs4xQoOcTva4I2Iqt0cUBvYYcN64/e8lhJ74rwMO9L4uDBHfWbyv5 xlBYbo4NK4kunVIRtue7xouOqNitrEyc0nI86GeRs+SCjPqR2w9uLbK0KhaikVa+ KiNOp7HaPBOfpObAoJPGLPr5Ii2ukF2+0mnqCjVgIy7wVmmAbdA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:23 2025 by rpki-client