$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: ghpt5xqAhZzba3nAfnxXhnNOUzhgrAamc9tsamYHCPE= Subject key identifier: 09:4B:2E:91:F2:47:49:6F:7B:35:8F:94:7E:BC:7D:60:3F:71:A1:55 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 16A9F0CD549922615BEC4594DBA53679D94F9237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: E9 Signing time: Mon 20 Oct 2025 13:00:58 +0000 Manifest this update: Mon 20 Oct 2025 12:55:58 +0000 Manifest next update: Thu 23 Oct 2025 14:24:58 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: AQWlrhFl9zmdvixGstKG9DvlQIStvcE4gaTvYymTtYU=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a9:f0:cd:54:99:22:61:5b:ec:45:94:db:a5:36:79:d9:4f:92:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Oct 20 12:55:58 2025 GMT Not After : Oct 23 14:24:58 2025 GMT Subject: CN=094B2E91F247496F7B358F947EBC7D603F71A155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:69:0b:f4:28:39:4c:4b:14:d1:9e:2e:fc: e6:30:bc:23:e0:ab:d7:68:eb:54:2a:d7:29:ca:87: 48:b7:ee:0c:75:2f:b2:e7:a4:c9:e9:a5:88:17:f9: 05:c7:32:c0:6c:c0:6b:e0:db:f1:70:3b:16:65:cf: a9:7c:f5:8f:40:ad:6c:30:47:89:75:b2:10:de:47: 5c:26:3e:79:ff:1c:98:3f:8c:9b:b5:a6:44:05:9e: 4f:48:8e:64:43:d3:7e:11:c8:a9:a5:57:f1:ec:0e: 6c:18:5d:54:57:4c:6b:e7:6f:f2:2a:7b:a6:fb:09: f6:13:42:33:4c:b4:7a:97:6d:ee:dd:d4:85:2e:55: ca:20:a6:1a:7a:34:ae:61:4d:0b:1a:82:60:d3:2e: a2:1f:08:93:72:dc:fb:8c:32:ea:8b:01:bb:a0:f0: 13:a2:34:89:ec:0a:2a:1b:06:52:39:43:b1:bc:ac: 73:3c:02:d3:25:1f:98:c1:6d:83:ea:fd:fb:82:dc: 7c:30:66:29:19:6b:59:f9:94:ef:cf:a9:fd:9d:98: ef:fc:21:10:9c:02:01:57:34:61:a2:4e:95:34:95: b5:2e:61:63:17:63:be:d6:2d:cd:59:06:78:61:ec: 3f:15:cf:35:17:f5:9b:62:5e:e8:30:b9:48:53:a2: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4B:2E:91:F2:47:49:6F:7B:35:8F:94:7E:BC:7D:60:3F:71:A1:55 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:8c:82:08:d6:fd:d1:2b:e0:bf:41:d5:60:8c:ad:64:d8: 22:69:20:34:8b:1d:31:70:c2:28:69:8a:11:b6:2f:ca:b2:75: d1:f0:e2:02:16:2b:a8:01:2d:4c:bf:b1:62:48:b3:83:4e:1e: 36:d0:65:83:c8:20:e7:64:5e:20:85:8a:01:64:50:77:8c:5c: 15:34:ee:8b:5e:53:08:45:1c:38:cd:f8:42:da:48:f5:c5:df: b2:da:82:3e:c9:e9:01:d5:c2:42:2c:82:d6:02:d8:18:47:df: 44:08:62:81:e8:d2:e2:f1:1e:7a:17:ae:4f:34:30:c8:68:00: b4:26:51:0d:cc:d9:45:a2:08:22:56:61:80:f6:55:58:f8:d1: eb:a0:76:ca:9a:20:33:19:e9:af:bf:30:0b:de:b8:c6:73:c1: 76:36:5c:d7:83:10:e6:6c:26:e4:1d:99:61:95:ec:81:01:32: 8f:dc:fd:3e:9a:4a:16:03:6a:36:aa:d7:a6:9d:68:ff:7d:de: dd:39:b0:49:77:3d:10:00:7b:1f:04:46:03:7c:c2:94:52:ae: 28:12:28:62:95:ab:76:cb:af:0c:9c:12:e0:18:7c:78:49:2e: 80:3a:c3:26:07:36:b5:66:67:37:fd:d6:2e:b0:0e:1b:fa:a8: e8:e7:60:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqnwzVSZImFb7EWU26U2edlPkjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEwMjAxMjU1NThaFw0yNTEwMjMxNDI0NThaMDMxMTAvBgNV BAMTKDA5NEIyRTkxRjI0NzQ5NkY3QjM1OEY5NDdFQkM3RDYwM0Y3MUExNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnl2kL9Cg5TEsU0Z4u/OYwvCPg q9do61Qq1ynKh0i37gx1L7LnpMnppYgX+QXHMsBswGvg2/FwOxZlz6l89Y9ArWww R4l1shDeR1wmPnn/HJg/jJu1pkQFnk9IjmRD034RyKmlV/HsDmwYXVRXTGvnb/Iq e6b7CfYTQjNMtHqXbe7d1IUuVcogphp6NK5hTQsagmDTLqIfCJNy3PuMMuqLAbug 8BOiNInsCiobBlI5Q7G8rHM8AtMlH5jBbYPq/fuC3HwwZikZa1n5lO/Pqf2dmO/8 IRCcAgFXNGGiTpU0lbUuYWMXY77WLc1ZBnhh7D8VzzUX9ZtiXugwuUhTonsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUsukfJHSW97NY+Ufrx9YD9xoVUwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwyjIII1v3RK+C/QdVgjK1k2CJpIDSLHTFw wihpihG2L8qyddHw4gIWK6gBLUy/sWJIs4NOHjbQZYPIIOdkXiCFigFkUHeMXBU0 7oteUwhFHDjN+ELaSPXF37Lagj7J6QHVwkIsgtYC2BhH30QIYoHo0uLxHnoXrk80 MMhoALQmUQ3M2UWiCCJWYYD2VVj40eugdsqaIDMZ6a+/MAveuMZzwXY2XNeDEOZs JuQdmWGV7IEBMo/c/T6aShYDajaq16adaP993t05sEl3PRAAex8ERgN8wpRSrigS KGKVq3bLrwycEuAYfHhJLoA6wyYHNrVmZzf91i6wDhv6qOjnYIY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:34:21 2025 by rpki-client