$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: p7LyEEY6YkHo/O0ouzh6dYCU1mab/ki0uC6HG3KQXuA= Subject key identifier: EF:CC:CF:D3:DE:63:FA:0F:FA:12:FE:3C:93:CB:B9:FC:D0:85:F7:68 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 7C285B1E1CB24B1E452B48207E47320D79EF931A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: A0 Signing time: Mon 03 Nov 2025 18:40:47 +0000 Manifest this update: Mon 03 Nov 2025 18:35:47 +0000 Manifest next update: Fri 07 Nov 2025 05:27:47 +0000 Files and hashes: 1: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: YjTK6BERT2lBkgglNhrKv5PxETGVkXgrWayFk1yO5C0=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:28:5b:1e:1c:b2:4b:1e:45:2b:48:20:7e:47:32:0d:79:ef:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Nov 3 18:35:47 2025 GMT Not After : Nov 7 05:27:47 2025 GMT Subject: CN=EFCCCFD3DE63FA0FFA12FE3C93CBB9FCD085F768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:be:6d:f0:7d:8f:3f:98:b0:66:28:9b:43: 9c:a6:be:d8:e7:f9:51:15:2a:2e:2c:fd:be:8c:56: 4c:46:c8:54:78:7c:b8:17:41:7d:29:f1:3d:98:99: b1:51:93:64:53:3c:51:e5:55:af:1e:61:d2:c9:97: 31:fd:fe:71:a0:49:06:0a:e8:15:32:f2:b0:d8:73: 00:06:37:f0:da:6c:be:e1:0c:86:cc:66:b8:47:81: b1:18:4d:45:21:94:79:bf:2a:58:03:1b:c9:17:7f: 6b:26:ec:cc:40:b6:e9:f8:0b:e2:6d:ac:04:9e:40: 3f:09:ae:03:08:ca:6c:59:cc:11:44:cd:b1:8b:fd: 45:00:0d:be:32:5d:69:1f:c1:44:ea:ed:de:9f:5d: a6:fe:d7:a5:00:24:ad:ef:86:80:aa:d9:d8:ea:29: c8:be:74:3c:96:1f:36:01:88:6b:9a:53:e6:fe:fd: 07:a2:12:53:c4:96:0e:6a:c0:ff:b3:a7:a4:d4:b1: 08:45:a9:16:18:d4:0e:d8:13:77:bc:a7:68:fd:5f: de:07:9d:94:91:a4:e5:e4:47:e5:81:ac:e7:a7:61: dc:ae:e9:59:84:06:b1:0d:85:78:fe:83:09:fb:7e: de:10:5c:29:b2:e3:5a:15:64:c6:00:07:6f:3a:fa: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:CF:D3:DE:63:FA:0F:FA:12:FE:3C:93:CB:B9:FC:D0:85:F7:68 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:30:32:e8:76:d4:52:a7:45:cf:93:26:04:92:e4:b3:ba:a8: df:fb:17:29:1c:8e:02:ea:dd:c5:41:c0:52:ca:3e:fb:49:f7: 7b:c7:3f:c7:f3:9b:63:ac:e3:4b:d6:02:a6:93:cf:cc:f2:92: 82:d9:8f:88:f8:c1:76:85:3a:ac:6f:f0:d7:64:a8:8c:d6:89: 76:fa:64:ce:1b:13:dc:5c:82:5a:c6:fa:b8:c3:44:dd:ce:4f: 61:4c:f0:94:60:5b:80:3a:6c:d1:27:35:21:0c:3f:79:12:95: ef:c4:d6:3d:c9:d5:fb:6c:da:1e:15:9d:02:37:21:29:ee:8c: 24:b6:25:0b:2d:a5:2b:70:cc:1f:ed:9a:41:fc:f8:ce:49:de: 3a:ad:13:f9:39:8d:29:6a:6f:c7:4f:1e:4d:88:a4:ab:b4:a3: 68:8c:a5:06:70:88:c9:e3:c0:6a:06:b9:3c:f3:85:9f:4e:90: 96:b3:f9:1f:c6:63:1f:e7:52:02:c0:c3:59:f3:9f:0d:3d:ab: 8c:46:dc:9d:02:22:eb:5d:02:1d:5a:03:fb:d7:97:ae:f5:d2: c4:e5:6d:2b:c3:e2:81:29:43:61:5c:59:1c:fc:bd:f5:af:3a: ac:8f:28:6d:d9:37:f4:68:8f:0d:a2:db:d0:74:ac:2c:2a:68: db:a7:b3:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfChbHhyySx5FK0ggfkcyDXnvkxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTExMDMxODM1NDdaFw0yNTExMDcwNTI3NDdaMDMxMTAvBgNV BAMTKEVGQ0NDRkQzREU2M0ZBMEZGQTEyRkUzQzkzQ0JCOUZDRDA4NUY3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGb5t8H2PP5iwZiibQ5ymvtjn +VEVKi4s/b6MVkxGyFR4fLgXQX0p8T2YmbFRk2RTPFHlVa8eYdLJlzH9/nGgSQYK 6BUy8rDYcwAGN/DabL7hDIbMZrhHgbEYTUUhlHm/KlgDG8kXf2sm7MxAtun4C+Jt rASeQD8JrgMIymxZzBFEzbGL/UUADb4yXWkfwUTq7d6fXab+16UAJK3vhoCq2djq Kci+dDyWHzYBiGuaU+b+/QeiElPElg5qwP+zp6TUsQhFqRYY1A7YE3e8p2j9X94H nZSRpOXkR+WBrOenYdyu6VmEBrENhXj+gwn7ft4QXCmy41oVZMYAB286+h9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78zP095j+g/6Ev48k8u5/NCF92gwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAwMuh21FKnRc+TJgSS5LO6qN/7FykcjgLq 3cVBwFLKPvtJ93vHP8fzm2Os40vWAqaTz8zykoLZj4j4wXaFOqxv8NdkqIzWiXb6 ZM4bE9xcglrG+rjDRN3OT2FM8JRgW4A6bNEnNSEMP3kSle/E1j3J1fts2h4VnQI3 ISnujCS2JQstpStwzB/tmkH8+M5J3jqtE/k5jSlqb8dPHk2IpKu0o2iMpQZwiMnj wGoGuTzzhZ9OkJaz+R/GYx/nUgLAw1nznw09q4xG3J0CIutdAh1aA/vXl6710sTl bSvD4oEpQ2FcWRz8vfWvOqyPKG3ZN/Rojw2i29B0rCwqaNuns80= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:54 2025 by rpki-client