$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: UozCoFh+b180fFxe7CK/nxqH7ScyR3nP+VHv3mRz9OY= Subject key identifier: 69:89:90:2A:8A:47:2B:49:75:DD:70:A0:9F:4D:B7:E3:79:B5:43:18 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 32FA6C76AB8F4996E79322984078F76C48064EC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: D5 Signing time: Tue 04 Nov 2025 20:41:25 +0000 Manifest this update: Tue 04 Nov 2025 20:36:25 +0000 Manifest next update: Sat 08 Nov 2025 07:13:25 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) 3: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: m9imJVkYbxq69v9CbRfYn33VCgCtusuSUi3lzKFr1AE=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fa:6c:76:ab:8f:49:96:e7:93:22:98:40:78:f7:6c:48:06:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Nov 4 20:36:25 2025 GMT Not After : Nov 8 07:13:25 2025 GMT Subject: CN=6989902A8A472B4975DD70A09F4DB7E379B54318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:84:60:36:cf:85:fe:c5:0f:ac:17:96:32: dd:1e:15:54:55:58:bd:57:18:d9:ce:6b:35:d6:d3: 9d:35:09:ab:ed:fd:b5:b0:31:20:e7:4f:81:55:aa: 58:da:72:4f:e5:d4:f7:6e:a3:70:ff:36:d1:af:80: c4:d5:d2:39:a6:8a:2f:3b:47:9b:39:ff:73:d5:c3: 0b:b2:8e:05:06:54:90:f8:34:5d:ad:49:eb:af:1a: 13:17:18:a2:98:c4:b7:4b:16:d7:8e:59:4f:ac:e8: a9:f5:78:58:c4:69:62:0b:9f:d3:e7:cf:c9:08:cb: 79:30:f4:07:79:43:2f:19:22:e1:7f:45:be:81:33: 85:08:43:76:b0:27:1e:34:ed:dc:35:55:d2:d0:04: 4f:54:f9:74:d7:98:79:c7:28:e6:01:2b:c3:ac:08: 49:9d:58:82:91:79:0c:68:de:da:01:9c:93:76:e6: c0:7d:30:1b:7a:b4:d3:ae:5c:e0:a9:64:67:62:20: 10:42:43:b9:a4:74:1f:08:66:34:64:24:2b:7c:48: 78:0d:ec:f5:8e:5d:ac:c5:0f:b8:45:1e:3c:64:22: 79:71:2a:aa:0d:a1:38:19:00:b8:2d:94:0f:96:2d: 9b:cf:93:2e:96:f2:f7:30:a1:36:f2:ea:3b:9a:e3: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:89:90:2A:8A:47:2B:49:75:DD:70:A0:9F:4D:B7:E3:79:B5:43:18 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:ff:d1:c1:8d:a0:ad:9c:3a:b5:76:6d:25:6f:7d:68:e5: 67:51:9a:67:6c:ed:a4:7d:75:00:f4:26:cc:85:7a:ce:ef:2d: 57:15:68:d8:52:6c:b7:e7:37:01:09:17:d3:30:de:80:93:a6: 47:81:5b:5a:e0:6c:00:1a:a0:aa:7a:0a:c6:a1:99:f0:d7:b3: a1:f3:84:4d:9a:2b:d4:b2:88:2c:47:e1:2f:18:fb:1d:16:51: 90:cc:fe:9a:11:2e:ac:e2:44:5a:cf:09:39:84:37:aa:6d:8c: c5:d0:ff:12:04:98:bf:9f:2b:08:5f:cd:17:bb:fd:d2:88:af: bf:5c:68:92:9c:6d:87:f5:7b:7a:b2:4b:6f:b5:c5:4e:69:96: f8:8c:0b:14:37:2a:86:0f:b2:15:89:b0:ba:63:fc:78:51:c4: c0:29:e4:ac:c0:e2:41:e6:c2:44:86:ab:30:7c:9b:34:56:db: d2:54:2e:bd:04:28:19:58:4a:1a:3e:c9:9c:52:c8:7e:41:12: f1:7d:cb:74:a3:50:7e:6f:6a:d4:de:ec:8a:ea:59:5a:ca:21: 64:d4:49:9b:a4:a1:b0:00:74:0f:78:78:9e:ab:c2:d1:bc:5a: ad:e6:9a:1b:f9:ab:da:fb:de:8f:4c:47:5a:70:17:91:b3:53: 5c:cb:90:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvpsdquPSZbnkyKYQHj3bEgGTsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTExMDQyMDM2MjVaFw0yNTExMDgwNzEzMjVaMDMxMTAvBgNV BAMTKDY5ODk5MDJBOEE0NzJCNDk3NURENzBBMDlGNERCN0UzNzlCNTQzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bIRgNs+F/sUPrBeWMt0eFVRV WL1XGNnOazXW0501Cavt/bWwMSDnT4FVqljack/l1Pduo3D/NtGvgMTV0jmmii87 R5s5/3PVwwuyjgUGVJD4NF2tSeuvGhMXGKKYxLdLFteOWU+s6Kn1eFjEaWILn9Pn z8kIy3kw9Ad5Qy8ZIuF/Rb6BM4UIQ3awJx407dw1VdLQBE9U+XTXmHnHKOYBK8Os CEmdWIKReQxo3toBnJN25sB9MBt6tNOuXOCpZGdiIBBCQ7mkdB8IZjRkJCt8SHgN 7PWOXazFD7hFHjxkInlxKqoNoTgZALgtlA+WLZvPky6W8vcwoTby6jua43QjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYmQKopHK0l13XCgn02343m1QxgwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAZ/9HBjaCtnDq1dm0lb31o5WdRmmds7aR9 dQD0JsyFes7vLVcVaNhSbLfnNwEJF9Mw3oCTpkeBW1rgbAAaoKp6CsahmfDXs6Hz hE2aK9SyiCxH4S8Y+x0WUZDM/poRLqziRFrPCTmEN6ptjMXQ/xIEmL+fKwhfzRe7 /dKIr79caJKcbYf1e3qyS2+1xU5plviMCxQ3KoYPshWJsLpj/HhRxMAp5KzA4kHm wkSGqzB8mzRW29JULr0EKBlYSho+yZxSyH5BEvF9y3SjUH5vatTe7IrqWVrKIWTU SZukobAAdA94eJ6rwtG8Wq3mmhv5q9r73o9MR1pwF5GzU1zLkHg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:51 2025 by rpki-client