$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json) Hash identifier: AB6P4o17pFvZml6cNzQwA5872dCkTLjQpKfGqVLP5GM= Subject key identifier: A6:4B:11:DC:A3:80:46:3C:AF:CA:EF:25:9B:BD:C6:82:1D:77:54:30 Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536 Certificate serial: 4B3F7F76EE303B11907472A89A00AAF45F9B278C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft Manifest number: 0209 Signing time: Sat 18 Oct 2025 14:30:38 +0000 Manifest this update: Sat 18 Oct 2025 14:25:38 +0000 Manifest next update: Tue 21 Oct 2025 22:56:38 +0000 Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=) 2: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=) 3: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: VE14JC6KZqV/zKMlH+cY1/3XUuK22Bxs0kJ+A0PD6B4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3f:7f:76:ee:30:3b:11:90:74:72:a8:9a:00:aa:f4:5f:9b:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536 Validity Not Before: Oct 18 14:25:38 2025 GMT Not After : Oct 21 22:56:38 2025 GMT Subject: CN=A64B11DCA380463CAFCAEF259BBDC6821D775430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:dd:7d:c9:d5:5f:65:93:23:70:6b:c1:db: 31:12:2f:93:32:9c:c6:5a:93:b8:c2:11:ba:ee:18: cd:b4:e1:d1:09:14:45:c6:7d:a1:5f:78:f2:c8:53: 40:18:a9:5d:a0:06:1c:05:42:19:20:c5:b8:75:73: 53:62:e7:60:3a:c8:28:ee:cd:ea:84:67:15:bf:f8: 9b:76:6f:25:24:ea:10:30:d1:12:db:0c:f3:b3:dc: 26:9f:86:e8:e9:e5:d3:fe:1f:41:ff:0a:ac:14:17: b5:64:45:bf:22:50:e6:09:1c:3b:6c:6e:f7:3f:3f: 4a:0f:b4:fa:43:2c:4e:ee:d1:58:87:8b:a8:c9:63: 7b:e1:cf:7c:85:90:f3:21:fc:7d:c6:73:2c:a4:ff: 64:07:2b:69:a5:b4:ec:6f:75:c5:90:d5:1e:03:33: e9:06:53:70:ed:52:2c:55:13:a8:21:df:17:c7:a5: 8e:b4:81:41:4b:42:24:89:7a:25:df:fd:6a:db:f8: 9e:73:c8:ca:71:41:49:d4:71:09:a1:e7:96:48:a7: 33:48:f7:57:66:b7:83:be:b0:89:15:ff:9b:4a:4e: 20:9f:eb:ad:21:70:2b:80:57:c0:3b:da:17:70:4a: 04:95:c8:8b:f5:07:84:f7:ed:fe:bb:7f:fd:40:66: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:11:DC:A3:80:46:3C:AF:CA:EF:25:9B:BD:C6:82:1D:77:54:30 X509v3 Authority Key Identifier: keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:c1:2f:ef:57:8c:66:6b:1d:60:c7:93:a8:4c:58:a9:74: 86:ed:a0:10:42:6b:d5:90:7d:f2:5d:6b:cf:d1:8d:5b:85:95: 7c:ed:b3:f8:74:a1:ca:6b:d7:77:89:55:c7:72:bc:43:14:49: f9:46:6a:6d:08:0c:dd:8f:8b:5d:df:9d:1d:59:1d:7a:fa:7f: 31:97:0e:9b:c6:a5:f5:f2:5f:b3:12:7f:f0:8c:94:01:67:07: 5b:b1:c3:ec:cc:ff:39:e8:f5:5a:4e:b6:70:a7:f4:8b:24:35: 61:00:fa:60:76:56:6b:86:f2:22:c5:27:71:49:b9:3a:48:8a: 7f:90:27:e7:3c:9a:07:dd:51:7a:31:bd:04:c0:9f:66:ed:1f: b9:f7:55:b5:d9:08:77:3c:99:f2:94:6b:9a:34:78:62:c8:8e: 2b:18:a0:fd:db:36:d8:85:62:03:56:65:bd:f3:ed:6a:a8:27: 75:87:88:28:58:4b:2b:b5:ad:05:2f:45:85:3b:5b:94:5d:21: c9:e0:00:2e:4e:7d:2a:a5:ec:81:ea:bb:57:0a:2c:a3:0d:50: ed:cb:f8:e1:5c:fb:a9:0c:ec:3b:3d:0c:1f:12:9b:8a:2c:28: 78:bf:e6:f6:eb:44:c6:5a:32:5c:ef:cb:3d:e9:9b:3d:06:55: 0d:0b:3f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSz9/du4wOxGQdHKomgCq9F+bJ4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkx RkZGOTUzNjAeFw0yNTEwMTgxNDI1MzhaFw0yNTEwMjEyMjU2MzhaMDMxMTAvBgNV BAMTKEE2NEIxMURDQTM4MDQ2M0NBRkNBRUYyNTlCQkRDNjgyMUQ3NzU0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dt19ydVfZZMjcGvB2zESL5My nMZak7jCEbruGM204dEJFEXGfaFfePLIU0AYqV2gBhwFQhkgxbh1c1Ni52A6yCju zeqEZxW/+Jt2byUk6hAw0RLbDPOz3Cafhujp5dP+H0H/CqwUF7VkRb8iUOYJHDts bvc/P0oPtPpDLE7u0ViHi6jJY3vhz3yFkPMh/H3Gcyyk/2QHK2mltOxvdcWQ1R4D M+kGU3DtUixVE6gh3xfHpY60gUFLQiSJeiXf/Wrb+J5zyMpxQUnUcQmh55ZIpzNI 91dmt4O+sIkV/5tKTiCf660hcCuAV8A72hdwSgSVyIv1B4T37f67f/1AZkQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpksR3KOARjyvyu8lm73Ggh13VDAwHwYDVR0j BBgwFoAUkmxD5trMGJeEBqLJxXJySR//lTYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzViYzEzMC05NjRhLTQ3YjgtOTIyYi04MzA2OWRlNjdhN2MvMC85MjZDNDNFNkRB Q0MxODk3ODQwNkEyQzlDNTcyNzI0OTFGRkY5NTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkxRkZG OTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3Mjcy NDkxRkZGOTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtvwS/vV4xmax1gx5OoTFipdIbtoBBCa9WQ ffJda8/RjVuFlXzts/h0ocpr13eJVcdyvEMUSflGam0IDN2Pi13fnR1ZHXr6fzGX DpvGpfXyX7MSf/CMlAFnB1uxw+zM/zno9VpOtnCn9IskNWEA+mB2VmuG8iLFJ3FJ uTpIin+QJ+c8mgfdUXoxvQTAn2btH7n3VbXZCHc8mfKUa5o0eGLIjisYoP3bNtiF YgNWZb3z7WqoJ3WHiChYSyu1rQUvRYU7W5RdIcngAC5OfSql7IHqu1cKLKMNUO3L +OFc+6kM7Ds9DB8Sm4osKHi/5vbrRMZaMlzvyz3pmz0GVQ0LPw0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:38 2025 by rpki-client