$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: 8bb8vzOVu78VYufLTD26qddpulDODxtOldx0cy6Eo6k= Subject key identifier: CA:D2:4D:C5:57:6B:6F:65:74:F8:98:56:8E:63:23:6F:CD:56:7F:BD Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 1DE2F342D53B31BF195E3E4A3B5470702F36445E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 09:21:11 +0000 Manifest this update: Mon 20 Oct 2025 09:16:11 +0000 Manifest next update: Thu 23 Oct 2025 12:32:11 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: gKg/DTN2p1BqyceaSt809aRulfquIfpAx9azDLWl4Ms=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e2:f3:42:d5:3b:31:bf:19:5e:3e:4a:3b:54:70:70:2f:36:44:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Oct 20 09:16:11 2025 GMT Not After : Oct 23 12:32:11 2025 GMT Subject: CN=CAD24DC5576B6F6574F898568E63236FCD567FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:be:47:de:47:6c:0a:a8:e2:aa:4a:8b:51:f6: 4c:f6:b7:f7:37:c6:d0:0a:8a:57:95:69:ab:fb:be: 98:e0:f1:3f:8f:a1:3f:c4:f1:a6:4b:d0:ea:52:47: cf:c6:80:73:0e:82:cb:02:99:2d:04:6b:1a:8d:54: 14:b6:6e:4e:3c:6a:41:49:99:2e:d6:b4:d1:89:52: cb:8c:9d:0e:9c:6b:7d:7e:c0:2d:ef:55:5a:65:72: aa:b4:5e:be:ed:9f:59:c5:94:72:c0:ef:d5:70:d1: e6:5b:16:4c:56:31:98:cc:a1:7d:b2:88:6b:01:79: e8:fc:c0:af:8c:3f:4c:6e:c2:22:ec:09:92:91:05: c6:b4:07:41:54:d9:1c:99:11:d2:b6:3e:14:aa:7d: 7a:7a:64:85:09:6d:ae:6b:c6:fd:85:08:09:32:fe: 95:d8:cd:99:52:cf:a1:e7:8a:4f:41:f1:32:86:ee: 47:0f:73:d6:1a:69:62:ba:fb:0e:d8:66:fd:23:7a: 2b:b6:5e:04:18:a8:f8:4c:aa:2d:af:ee:46:67:aa: ba:99:0f:19:a3:55:67:de:0b:e9:c5:07:87:1d:6b: 7e:25:57:3a:fc:63:d9:55:ff:eb:c0:cb:c7:87:4a: ef:f1:42:30:9b:f1:cb:cb:0c:b5:88:86:c7:07:bc: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:4D:C5:57:6B:6F:65:74:F8:98:56:8E:63:23:6F:CD:56:7F:BD X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ba:62:46:ac:19:40:74:bf:2e:a4:01:ee:67:f5:58:e7:a3: 53:6f:08:fe:d6:5b:8c:f2:8f:8a:f8:f0:87:94:93:ce:5d:fb: 07:68:5e:a3:3f:ae:fa:99:e3:59:47:8f:83:71:10:00:1e:6c: 69:6d:03:11:c8:85:a6:71:9b:22:00:54:da:61:6d:27:56:25: ae:6c:6f:11:cc:70:b9:30:02:51:4a:2e:57:8e:db:17:c5:15: 84:da:6d:9c:a6:35:e3:c9:f2:79:c0:c6:69:7f:e7:8c:47:9c: 9a:f1:c1:19:60:a7:f6:c4:b0:2b:3b:c8:f0:35:b6:50:5a:f7: ef:8b:92:e8:b5:31:5c:ab:d1:e6:30:d1:f1:9e:61:61:67:01: 36:cf:05:25:86:31:70:7f:d8:9f:86:41:75:0a:f9:31:17:5c: ec:43:57:14:5c:84:23:29:ca:55:27:d1:cd:d5:06:a6:eb:53: 37:5e:2c:0a:a3:03:8a:b8:09:3d:6c:e0:51:d0:b9:c5:a9:cc: ce:88:f4:f3:0f:d1:eb:b8:6c:85:16:05:23:33:c7:df:74:89: 8d:85:36:da:91:5f:bb:2e:d2:8e:1e:42:84:8e:4f:76:12:6d: 94:4e:8a:11:38:7f:90:61:cd:ff:30:67:1f:2c:36:8f:c8:e7: 15:5c:f1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeLzQtU7Mb8ZXj5KO1RwcC82RF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTEwMjAwOTE2MTFaFw0yNTEwMjMxMjMyMTFaMDMxMTAvBgNV BAMTKENBRDI0REM1NTc2QjZGNjU3NEY4OTg1NjhFNjMyMzZGQ0Q1NjdGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyvkfeR2wKqOKqSotR9kz2t/c3 xtAKileVaav7vpjg8T+PoT/E8aZL0OpSR8/GgHMOgssCmS0EaxqNVBS2bk48akFJ mS7WtNGJUsuMnQ6ca31+wC3vVVplcqq0Xr7tn1nFlHLA79Vw0eZbFkxWMZjMoX2y iGsBeej8wK+MP0xuwiLsCZKRBca0B0FU2RyZEdK2PhSqfXp6ZIUJba5rxv2FCAky /pXYzZlSz6Hnik9B8TKG7kcPc9YaaWK6+w7YZv0jeiu2XgQYqPhMqi2v7kZnqrqZ DxmjVWfeC+nFB4cda34lVzr8Y9lV/+vAy8eHSu/xQjCb8cvLDLWIhscHvIRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUytJNxVdrb2V0+JhWjmMjb81Wf70wHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe6YkasGUB0vy6kAe5n9Vjno1NvCP7WW4zy j4r48IeUk85d+wdoXqM/rvqZ41lHj4NxEAAebGltAxHIhaZxmyIAVNphbSdWJa5s bxHMcLkwAlFKLleO2xfFFYTabZymNePJ8nnAxml/54xHnJrxwRlgp/bEsCs7yPA1 tlBa9++Lkui1MVyr0eYw0fGeYWFnATbPBSWGMXB/2J+GQXUK+TEXXOxDVxRchCMp ylUn0c3VBqbrUzdeLAqjA4q4CT1s4FHQucWpzM6I9PMP0eu4bIUWBSMzx990iY2F NtqRX7su0o4eQoSOT3YSbZROihE4f5Bhzf8wZx8sNo/I5xVc8Ss= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:42 2025 by rpki-client