$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: DJpJsK4Q2e1YLd/dQf4+H0c6+sKEoh4CVocLfNtdCUI= Subject key identifier: 4A:EA:D6:EA:B3:E4:C5:CC:89:89:DE:AE:9C:8E:BD:6F:9A:07:96:B2 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 1FDEA8C706C36B00F050012783A847E58BD17EE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0226 Signing time: Sat 18 Oct 2025 18:52:21 +0000 Manifest this update: Sat 18 Oct 2025 18:47:21 +0000 Manifest next update: Wed 22 Oct 2025 01:02:21 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 3: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: k76WThpMqjMgyie0+T1rN6KwsReni7o2d6RnDoPVQDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:de:a8:c7:06:c3:6b:00:f0:50:01:27:83:a8:47:e5:8b:d1:7e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Oct 18 18:47:21 2025 GMT Not After : Oct 22 01:02:21 2025 GMT Subject: CN=4AEAD6EAB3E4C5CC8989DEAE9C8EBD6F9A0796B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:3e:93:b5:f0:f5:0c:a3:27:8a:f5:e5:54: d2:9b:5c:07:a4:52:b4:93:93:9b:b3:f7:06:79:88: c3:21:ac:50:e8:0e:e6:ea:d9:0a:0c:f4:f0:8d:92: 0e:ba:bb:6f:69:17:63:07:60:bd:b8:ca:00:5c:a7: 0e:a1:6b:1b:f7:52:f2:6c:88:b3:84:15:70:a5:8d: 2c:83:c0:16:db:46:1e:63:cd:bc:e9:d7:2c:06:77: f6:f2:0e:83:39:b1:62:52:02:30:dd:5d:58:5d:41: e9:8b:bb:16:84:30:31:95:f4:63:db:b2:fe:b6:34: 78:81:eb:66:74:95:59:17:ed:f6:d9:a1:ab:a6:c3: df:58:45:05:68:2b:7a:45:0d:d3:66:04:76:e5:0b: 29:8e:30:0b:77:75:33:d3:70:92:93:b6:bb:17:e0: 64:e0:4f:7f:3f:55:f6:7e:e4:c5:bd:a3:cf:4f:c1: 93:ca:f2:08:92:69:4e:79:1b:6c:c9:40:9b:f7:4b: 91:a5:b3:f7:ac:a3:96:06:6d:be:e6:f7:26:29:6b: 62:e9:07:fd:5a:f7:d3:aa:56:bb:0c:38:78:ce:fd: bd:38:66:c4:50:1a:f2:be:2b:87:bf:3f:40:08:21: bb:d3:2e:da:69:a6:cf:a3:60:23:a6:06:5b:31:6d: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:D6:EA:B3:E4:C5:CC:89:89:DE:AE:9C:8E:BD:6F:9A:07:96:B2 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:03:a3:a7:41:9d:af:58:d5:71:81:4f:fc:18:f7:3a:4f:a4: 8b:63:90:e6:8d:53:af:52:0a:48:c8:55:76:12:83:0d:d6:6b: 84:3e:a4:1e:16:ca:08:0a:f0:b5:0f:c8:b1:ed:85:a7:9d:bc: b6:a4:57:92:8f:65:91:2a:bd:15:9e:0a:d3:5d:22:20:4d:8a: 56:83:01:71:7f:d1:7c:1f:eb:15:4d:b3:1e:c7:4e:ce:97:65: 0e:a6:9e:0a:55:a7:00:2d:1e:4a:df:5b:63:e5:63:84:0b:4a: aa:4a:9f:f9:40:6d:44:98:d9:9d:5c:81:c8:d3:6d:ac:90:39: 14:77:70:cd:f1:fc:68:bd:2f:2b:c8:47:0c:72:d2:77:cd:1e: d3:6e:60:b4:98:2e:65:bb:90:2c:46:c8:ae:d7:ea:9c:02:71: 6b:b5:f0:f6:17:17:60:9f:8e:86:81:6f:b5:95:83:ce:2b:58: ad:51:ef:39:ce:4d:1e:32:78:2d:00:cd:2d:0c:a2:b8:a4:aa: f5:23:a0:4c:63:16:5b:a3:d5:f8:f2:e8:26:bf:02:ec:9c:e8: 83:6b:9a:d5:e9:14:f9:a5:45:59:66:99:34:7c:b2:f9:90:0a: eb:8b:7e:00:4d:df:8d:c7:6a:b0:11:ae:4a:50:b8:b2:8f:ab: a8:a5:2f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH96oxwbDawDwUAEng6hH5YvRfucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTEwMTgxODQ3MjFaFw0yNTEwMjIwMTAyMjFaMDMxMTAvBgNV BAMTKDRBRUFENkVBQjNFNEM1Q0M4OTg5REVBRTlDOEVCRDZGOUEwNzk2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcj6TtfD1DKMnivXlVNKbXAek UrSTk5uz9wZ5iMMhrFDoDubq2QoM9PCNkg66u29pF2MHYL24ygBcpw6haxv3UvJs iLOEFXCljSyDwBbbRh5jzbzp1ywGd/byDoM5sWJSAjDdXVhdQemLuxaEMDGV9GPb sv62NHiB62Z0lVkX7fbZoaumw99YRQVoK3pFDdNmBHblCymOMAt3dTPTcJKTtrsX 4GTgT38/VfZ+5MW9o89PwZPK8giSaU55G2zJQJv3S5Gls/eso5YGbb7m9yYpa2Lp B/1a99OqVrsMOHjO/b04ZsRQGvK+K4e/P0AIIbvTLtppps+jYCOmBlsxbXahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSurW6rPkxcyJid6unI69b5oHlrIwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYDo6dBna9Y1XGBT/wY9zpPpItjkOaNU69S CkjIVXYSgw3Wa4Q+pB4WyggK8LUPyLHthaedvLakV5KPZZEqvRWeCtNdIiBNilaD AXF/0Xwf6xVNsx7HTs6XZQ6mngpVpwAtHkrfW2PlY4QLSqpKn/lAbUSY2Z1cgcjT bayQORR3cM3x/Gi9LyvIRwxy0nfNHtNuYLSYLmW7kCxGyK7X6pwCcWu18PYXF2Cf joaBb7WVg84rWK1R7znOTR4yeC0AzS0MorikqvUjoExjFluj1fjy6Ca/Auyc6INr mtXpFPmlRVlmmTR8svmQCuuLfgBN343HarARrkpQuLKPq6ilL1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:39 2025 by rpki-client