$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: +MiBNWRaqJ1Sfpr6naNue7BSatt4pXeu3GmrcJsNBxQ= Subject key identifier: 9D:55:DA:42:A9:21:FE:08:B5:1C:79:40:35:A8:29:32:DE:CC:98:46 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 32004E1DC9B8A04CC046A5A7A3C4059880F61231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: F1 Signing time: Tue 04 Nov 2025 17:21:15 +0000 Manifest this update: Tue 04 Nov 2025 17:16:15 +0000 Manifest next update: Sat 08 Nov 2025 00:37:15 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 2: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 3: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 4: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: CZOjUytPSacRI7agc7BXnbYPLACDA3bfcgZ9tHiEB/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:00:4e:1d:c9:b8:a0:4c:c0:46:a5:a7:a3:c4:05:98:80:f6:12:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Nov 4 17:16:15 2025 GMT Not After : Nov 8 00:37:15 2025 GMT Subject: CN=9D55DA42A921FE08B51C794035A82932DECC9846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:92:e0:09:09:0d:f8:4a:c3:0b:ba:05:c3:09: 6d:6e:0b:7a:3e:16:95:07:10:25:a1:3c:01:2b:e4: c3:e4:d1:22:dc:b3:9a:ff:51:df:bb:fb:5a:75:5e: 50:6c:12:5a:4c:55:f3:3c:dd:c4:23:b7:39:5f:b9: 07:18:41:f9:90:24:11:db:43:3f:97:bf:0a:70:47: 5a:ec:e4:21:4b:37:3f:38:18:d4:cf:39:33:c6:12: 0c:c8:5c:bc:92:0c:2c:de:be:75:16:26:8a:5f:82: 5a:42:c2:67:8a:c5:70:d3:5a:80:f2:e2:b7:14:16: 80:a7:f8:08:25:72:13:26:91:b1:2d:40:18:39:00: e2:55:5b:d1:5a:64:7a:ef:f0:9c:66:a9:d1:d1:db: c5:6b:bc:6f:85:18:78:f5:6e:fb:d4:b8:1f:7e:ad: 40:6d:d2:e5:8d:b8:00:30:31:00:b9:bc:eb:b5:a1: db:34:4e:7a:1f:6d:ba:bd:9a:06:4d:5c:ef:76:fb: 1e:4b:93:05:73:3a:f5:f6:65:79:f5:23:cf:16:15: e3:22:5d:fa:44:de:4b:58:2e:ee:f1:09:ed:9e:ce: b4:d7:c1:de:ae:a1:1d:d1:6e:36:db:d7:b7:4f:64: 32:4d:e7:8a:00:b8:89:21:52:e9:d9:0f:e1:a6:3b: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:DA:42:A9:21:FE:08:B5:1C:79:40:35:A8:29:32:DE:CC:98:46 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0e:89:79:58:40:d9:79:e8:92:76:d1:9d:06:32:aa:af:d6: 24:7d:81:be:1c:9a:28:e0:f8:d8:f0:d7:5c:50:67:cd:13:01: 51:dc:dc:55:c2:b7:97:6c:15:36:19:c6:2f:c8:f5:94:32:56: 3d:81:fd:60:9d:3b:f7:bb:fc:87:dc:13:69:f9:5c:cb:ad:5a: 45:d1:d0:f1:03:a0:4d:78:29:cc:ce:bd:df:6c:52:11:a1:eb: bb:5b:6d:df:d0:42:19:06:af:66:00:6b:0a:4a:cc:fe:79:3d: a0:b9:70:3c:b2:06:e0:09:67:e7:1b:2c:31:06:a9:05:bb:2e: 17:af:98:0a:ea:a8:05:dc:ea:23:2d:6f:b9:7e:c9:e2:6f:26: 13:9c:6c:db:2f:41:70:50:aa:bf:43:6d:04:08:a9:30:e8:8c: c4:45:e4:bd:00:01:dd:a4:28:db:80:f4:c6:23:51:01:4d:c1: 01:07:0d:4e:30:47:49:fa:2d:6b:92:64:ad:8e:40:7b:e2:68: 0e:47:a5:80:11:9a:f8:f1:30:46:5b:05:bf:e4:a9:0f:db:bd: 68:2b:31:f9:d0:5e:e1:1e:7d:6b:9d:2e:0f:0a:4d:4a:58:f1: eb:78:c9:ef:89:14:4e:9c:0f:87:f5:87:41:a6:2e:c6:07:64: f0:94:f7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgBOHcm4oEzARqWno8QFmID2EjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTExMDQxNzE2MTVaFw0yNTExMDgwMDM3MTVaMDMxMTAvBgNV BAMTKDlENTVEQTQyQTkyMUZFMDhCNTFDNzk0MDM1QTgyOTMyREVDQzk4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikuAJCQ34SsMLugXDCW1uC3o+ FpUHECWhPAEr5MPk0SLcs5r/Ud+7+1p1XlBsElpMVfM83cQjtzlfuQcYQfmQJBHb Qz+XvwpwR1rs5CFLNz84GNTPOTPGEgzIXLySDCzevnUWJopfglpCwmeKxXDTWoDy 4rcUFoCn+AglchMmkbEtQBg5AOJVW9FaZHrv8JxmqdHR28VrvG+FGHj1bvvUuB9+ rUBt0uWNuAAwMQC5vOu1ods0Tnofbbq9mgZNXO92+x5LkwVzOvX2ZXn1I88WFeMi XfpE3ktYLu7xCe2ezrTXwd6uoR3Rbjbb17dPZDJN54oAuIkhUunZD+GmO5U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnVXaQqkh/gi1HHlANagpMt7MmEYwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgOiXlYQNl56JJ20Z0GMqqv1iR9gb4cmijg +Njw11xQZ80TAVHc3FXCt5dsFTYZxi/I9ZQyVj2B/WCdO/e7/IfcE2n5XMutWkXR 0PEDoE14KczOvd9sUhGh67tbbd/QQhkGr2YAawpKzP55PaC5cDyyBuAJZ+cbLDEG qQW7LhevmArqqAXc6iMtb7l+yeJvJhOcbNsvQXBQqr9DbQQIqTDojMRF5L0AAd2k KNuA9MYjUQFNwQEHDU4wR0n6LWuSZK2OQHviaA5HpYARmvjxMEZbBb/kqQ/bvWgr MfnQXuEefWudLg8KTUpY8et4ye+JFE6cD4f1h0GmLsYHZPCU90s= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:00 2025 by rpki-client