$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: Yt4XdhpAmC80YMxdq/LmOxHM1scdj+6q0+BDzIwzcps= Subject key identifier: A1:90:DB:DD:A1:A3:0D:71:5A:20:E7:47:DA:24:25:7D:8B:D7:D9:33 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 10608DC34AED960A7BC1D6FA674139FDA1D73C06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0407 Signing time: Sat 18 Oct 2025 11:41:26 +0000 Manifest this update: Sat 18 Oct 2025 11:36:26 +0000 Manifest next update: Tue 21 Oct 2025 14:19:26 +0000 Files and hashes: 1: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 3/TUAVIleHPgS8EqkxCc6pUBmsN5Z3cJ1cA0xnfRznI=) 2: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 5: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:60:8d:c3:4a:ed:96:0a:7b:c1:d6:fa:67:41:39:fd:a1:d7:3c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Oct 18 11:36:26 2025 GMT Not After : Oct 21 14:19:26 2025 GMT Subject: CN=A190DBDDA1A30D715A20E747DA24257D8BD7D933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:11:ce:c1:05:69:54:29:16:0b:ba:6e:eb: 72:71:22:65:d0:15:e6:2e:fc:01:44:94:0c:fd:4b: 4b:e9:92:c7:e7:56:65:ae:50:75:ec:cf:c2:7c:1a: 94:e9:fe:d7:53:aa:a5:e4:90:e7:8f:8f:e6:f8:c4: 9f:06:07:96:67:97:aa:10:e6:3e:b8:2a:79:fb:ea: 11:c6:c5:82:16:af:06:f1:8c:fe:45:28:96:12:86: 95:8e:cb:a7:2b:2a:ff:37:d5:29:76:d0:3f:72:ca: 51:3b:14:7d:f1:5e:4e:77:12:de:e4:6f:03:23:0b: bb:c5:23:70:d4:14:b5:5a:34:5c:26:dc:ef:e1:83: bb:0c:a1:10:91:70:08:84:ae:2a:6c:96:09:35:21: b4:7e:48:21:7c:bc:5c:0b:73:8c:da:f1:6f:51:c1: d6:40:7c:b8:a6:a4:bd:21:e1:d9:dd:aa:ab:5a:b4: 4e:8f:e3:0d:80:16:e6:af:ef:d9:b1:e3:28:66:34: a8:d3:3e:0f:3b:5f:e3:f7:7c:e5:9b:79:b1:86:8b: 10:75:31:f9:c0:6e:46:16:fe:1a:35:67:a1:06:e9: 60:b9:60:76:37:c1:75:11:70:77:3d:5f:d3:18:cf: d4:4a:95:e2:fe:69:32:4f:64:08:0a:b0:c4:17:ae: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:DB:DD:A1:A3:0D:71:5A:20:E7:47:DA:24:25:7D:8B:D7:D9:33 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:6a:4e:c2:d7:3d:f2:c4:ef:b8:b3:b5:58:0d:73:40:a7: 1f:e7:ff:eb:aa:cb:69:9c:e0:75:5e:ce:ae:aa:4d:a7:62:e4: 91:a2:fe:98:e3:5c:55:5f:d5:9e:61:24:66:82:ed:ed:7c:c5: f6:1f:50:f3:65:1b:0a:ee:e8:15:5e:1f:7f:49:77:0d:04:ef: c4:c9:6c:54:b4:b5:e6:c1:4f:a7:01:c3:f3:fb:c2:42:81:b9: 4d:71:8a:cb:f8:e8:88:27:8c:eb:b2:5e:4d:e1:cc:c2:79:22: 7e:38:ae:e2:98:62:b3:2d:a5:9c:ee:b3:0e:23:eb:29:32:10: fc:8b:46:63:d6:dd:74:4d:b2:cc:d3:59:f4:f4:1b:ac:f4:15: ba:34:9d:06:1c:05:e8:9c:96:64:10:89:14:e1:cf:79:9e:d1: bc:a4:59:df:f5:4c:0f:87:37:8e:f6:03:dd:91:d8:49:77:4a: 05:4c:81:93:89:5b:98:7d:76:4a:eb:93:ff:10:8a:66:69:34: 3b:5e:5c:5e:52:85:ac:e7:2a:b2:7c:11:de:8a:fa:d2:f0:5e: 9e:44:fe:55:04:b4:ed:8b:e2:43:72:5a:02:73:ac:f9:d6:9a: 06:36:d8:41:8c:9e:9b:87:d9:36:ab:92:5e:f1:c0:b4:b4:95: 80:75:28:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGCNw0rtlgp7wdb6Z0E5/aHXPAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTEwMTgxMTM2MjZaFw0yNTEwMjExNDE5MjZaMDMxMTAvBgNV BAMTKEExOTBEQkREQTFBMzBENzE1QTIwRTc0N0RBMjQyNTdEOEJEN0Q5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LxHOwQVpVCkWC7pu63JxImXQ FeYu/AFElAz9S0vpksfnVmWuUHXsz8J8GpTp/tdTqqXkkOePj+b4xJ8GB5Znl6oQ 5j64Knn76hHGxYIWrwbxjP5FKJYShpWOy6crKv831Sl20D9yylE7FH3xXk53Et7k bwMjC7vFI3DUFLVaNFwm3O/hg7sMoRCRcAiEripslgk1IbR+SCF8vFwLc4za8W9R wdZAfLimpL0h4dndqqtatE6P4w2AFuav79mx4yhmNKjTPg87X+P3fOWbebGGixB1 MfnAbkYW/ho1Z6EG6WC5YHY3wXURcHc9X9MYz9RKleL+aTJPZAgKsMQXrlWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZDb3aGjDXFaIOdH2iQlfYvX2TMwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsqak7C1z3yxO+4s7VYDXNApx/n/+uqy2mc 4HVezq6qTadi5JGi/pjjXFVf1Z5hJGaC7e18xfYfUPNlGwru6BVeH39Jdw0E78TJ bFS0tebBT6cBw/P7wkKBuU1xisv46IgnjOuyXk3hzMJ5In44ruKYYrMtpZzusw4j 6ykyEPyLRmPW3XRNsszTWfT0G6z0Fbo0nQYcBeiclmQQiRThz3me0bykWd/1TA+H N472A92R2El3SgVMgZOJW5h9dkrrk/8QimZpNDteXF5ShaznKrJ8Ed6K+tLwXp5E /lUEtO2L4kNyWgJzrPnWmgY22EGMnpuH2Tarkl7xwLS0lYB1KC8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:40 2025 by rpki-client