$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: Vpuo6ab8qHdPjUTshhkXEZvC3U426w3M7A9HokYmGrU= Subject key identifier: 26:8D:56:96:84:CE:8E:2E:4A:A4:60:6F:18:0F:6A:AF:59:23:43:75 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 3A0002825EC07609DC06B67058BDE254C969F34E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 0118 Signing time: Mon 20 Oct 2025 08:20:37 +0000 Manifest this update: Mon 20 Oct 2025 08:15:37 +0000 Manifest next update: Thu 23 Oct 2025 10:55:37 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: q0HaGIexh+2tZRrc2kqV+3INSq9nfZ4vjmcIFboyoMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:00:02:82:5e:c0:76:09:dc:06:b6:70:58:bd:e2:54:c9:69:f3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Oct 20 08:15:37 2025 GMT Not After : Oct 23 10:55:37 2025 GMT Subject: CN=268D569684CE8E2E4AA4606F180F6AAF59234375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:89:de:41:ac:61:8d:08:3c:c5:e8:54:2d: ff:ee:16:08:eb:e6:fd:1d:bc:6c:f8:ab:6e:3c:0c: ab:0c:ef:aa:46:76:c0:77:a6:4c:df:25:9f:f5:3a: ca:b8:8b:ae:1f:25:fd:77:32:af:7d:09:81:9e:ac: 30:ed:ed:25:3f:dc:26:a8:05:27:45:d8:ef:e4:65: f7:13:b2:80:27:ed:f2:66:14:83:65:04:d1:1b:04: a6:cf:40:7f:e1:66:67:e8:be:66:b0:d8:62:f3:a6: 2c:8f:f6:b3:46:e0:b7:85:8d:87:d7:14:64:e6:f4: 2d:53:0b:5f:89:29:37:bd:32:9e:c5:20:dc:6c:5d: db:c6:c8:6e:98:d2:2f:23:8e:ac:97:91:60:f0:f5: 8f:4f:d1:30:fa:67:84:a6:94:fe:7a:08:ab:78:93: 02:0e:a9:c3:3d:67:e1:d7:d9:ca:c2:52:8f:a9:51: a7:88:b9:79:ca:d9:09:0c:84:13:92:b0:01:54:02: 85:b2:19:d2:25:c3:3d:f0:5e:c3:82:13:77:5a:d5: e1:69:29:0a:4f:d8:75:08:37:11:3a:93:ec:d2:4a: b5:49:0e:29:8c:73:aa:7f:25:2b:62:ed:6b:d3:eb: d1:e1:87:df:22:a9:06:28:3f:72:07:c3:59:ca:96: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8D:56:96:84:CE:8E:2E:4A:A4:60:6F:18:0F:6A:AF:59:23:43:75 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:46:ad:17:d4:c6:0e:65:16:f7:ff:73:1f:cc:f3:45:37: 4b:ea:86:fc:fd:50:cb:e4:13:8f:45:60:12:ff:d2:c9:1e:b1: 5c:62:67:d6:49:4d:29:77:6f:a0:3c:4a:e0:90:99:98:9e:05: e0:b4:9e:5c:27:9e:1d:66:f7:38:a6:a7:99:35:ab:f0:7c:8b: fe:1b:8f:5f:f1:03:35:7e:00:e8:ca:dc:47:b5:ce:48:fb:eb: f7:bf:c0:30:f1:f1:48:26:96:61:10:a7:c4:ae:4e:6a:b9:b5: 4d:af:de:71:21:e4:59:61:ad:28:be:b6:f0:9d:d6:a8:eb:81: 98:f0:3a:71:7b:fa:45:f3:0b:4d:71:c0:d1:c0:a8:21:15:75: 77:6e:5a:ef:a4:08:63:a0:2a:ca:e0:12:1a:b9:15:01:e2:85: 53:7a:d1:f7:44:b4:21:1f:aa:f8:bf:0d:e3:7a:bd:df:15:59: 35:05:4b:43:ad:62:61:da:eb:99:01:f0:9d:8a:50:89:ed:e5: 83:f9:5e:a2:53:55:e8:38:a7:dd:e6:f3:38:ac:46:4d:91:a0: e6:b7:2e:52:4e:65:7a:ac:17:52:01:bb:98:67:fc:f4:e8:71: e6:08:6d:1c:23:9b:57:30:81:69:f0:ca:d0:38:ec:98:c5:d1: ef:77:66:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgACgl7AdgncBrZwWL3iVMlp804wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTEwMjAwODE1MzdaFw0yNTEwMjMxMDU1MzdaMDMxMTAvBgNV BAMTKDI2OEQ1Njk2ODRDRThFMkU0QUE0NjA2RjE4MEY2QUFGNTkyMzQzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71oneQaxhjQg8xehULf/uFgjr 5v0dvGz4q248DKsM76pGdsB3pkzfJZ/1Osq4i64fJf13Mq99CYGerDDt7SU/3Cao BSdF2O/kZfcTsoAn7fJmFINlBNEbBKbPQH/hZmfovmaw2GLzpiyP9rNG4LeFjYfX FGTm9C1TC1+JKTe9Mp7FINxsXdvGyG6Y0i8jjqyXkWDw9Y9P0TD6Z4SmlP56CKt4 kwIOqcM9Z+HX2crCUo+pUaeIuXnK2QkMhBOSsAFUAoWyGdIlwz3wXsOCE3da1eFp KQpP2HUINxE6k+zSSrVJDimMc6p/JSti7WvT69Hhh98iqQYoP3IHw1nKlsxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJo1WloTOji5KpGBvGA9qr1kjQ3UwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzxRq0X1MYOZRb3/3MfzPNFN0vqhvz9UMvk E49FYBL/0skesVxiZ9ZJTSl3b6A8SuCQmZieBeC0nlwnnh1m9zimp5k1q/B8i/4b j1/xAzV+AOjK3Ee1zkj76/e/wDDx8UgmlmEQp8SuTmq5tU2v3nEh5FlhrSi+tvCd 1qjrgZjwOnF7+kXzC01xwNHAqCEVdXduWu+kCGOgKsrgEhq5FQHihVN60fdEtCEf qvi/DeN6vd8VWTUFS0OtYmHa65kB8J2KUInt5YP5XqJTVeg4p93m8zisRk2RoOa3 LlJOZXqsF1IBu5hn/PToceYIbRwjm1cwgWnwytA47JjF0e93Zr8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:16 2025 by rpki-client