$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: Rhu/2aIm1kN/mDtgQkW2tK1juYw7wwrtL0j8OzdXRuo= Subject key identifier: B8:21:64:71:D1:1D:51:81:A2:AC:FB:0F:70:86:FE:1A:C7:DE:74:24 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 01AD69DA692453E34C67949D2A7BB597FE563D5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 037C Signing time: Sun 19 Oct 2025 07:31:39 +0000 Manifest this update: Sun 19 Oct 2025 07:26:39 +0000 Manifest next update: Wed 22 Oct 2025 18:32:39 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: BGVp1yS0/EcsFsvFvS3ppTgVh76dMMTPu+/9JtmiUMM=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ad:69:da:69:24:53:e3:4c:67:94:9d:2a:7b:b5:97:fe:56:3d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Oct 19 07:26:39 2025 GMT Not After : Oct 22 18:32:39 2025 GMT Subject: CN=B8216471D11D5181A2ACFB0F7086FE1AC7DE7424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:ad:e3:22:e3:d4:07:53:82:f6:0a:f9:3e: 8f:7b:7a:bb:d9:bd:6a:44:fc:13:87:2e:ab:eb:8c: 8f:0d:73:6a:27:d2:c6:32:b1:72:25:04:35:1e:61: 2f:de:a7:bb:a2:2c:11:a8:46:b4:8d:53:a6:df:8b: 28:96:90:ed:c1:02:4e:a9:5e:a6:1c:e0:b1:d7:1e: 60:1a:3b:66:83:d4:c8:67:58:2a:df:3c:5a:f3:d7: 42:5f:25:0d:cd:a8:3a:de:34:2e:8b:18:0d:98:01: fb:a9:b9:84:1a:fb:91:8f:f4:29:34:a6:aa:32:07: d9:12:d2:bd:c5:ac:16:b1:7b:ed:77:12:53:c1:72: 3b:12:c8:d2:10:29:17:63:fb:94:9d:2c:93:56:79: 5e:e3:63:2d:3b:57:0f:2c:d3:c2:f5:85:e0:24:d8: 9e:f7:f3:ac:15:e3:38:db:c3:22:e6:d4:d0:8e:d1: 4a:9c:4d:3e:64:05:38:c2:c7:23:f0:c4:34:ed:f6: 81:01:23:51:fa:e9:64:e2:62:ba:6e:5a:11:36:67: d2:76:fa:ff:1e:5a:d9:ce:e1:57:bf:df:cc:47:21: 07:14:f8:b5:f5:ef:b2:97:22:fe:3b:3a:14:7a:cd: fc:31:75:fe:36:55:5d:56:2e:b2:48:84:3b:72:a7: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:64:71:D1:1D:51:81:A2:AC:FB:0F:70:86:FE:1A:C7:DE:74:24 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:b5:5a:50:dd:b7:d4:35:5f:f6:8b:20:e1:eb:5e:a5:04: 0a:1b:69:1c:ba:d7:96:90:1f:41:c6:dc:f9:6f:48:ce:92:3a: 8b:a5:a1:0e:e3:54:23:88:72:0f:92:69:86:16:af:e9:f4:5b: 11:2d:9f:01:16:5c:69:59:e1:f1:dd:7b:61:7a:4b:d1:d7:31: d5:41:c2:0e:b5:76:fa:de:19:f1:e5:39:85:5d:81:73:48:28: 48:52:27:a0:be:d8:bd:80:e7:2f:8c:5f:9f:2e:c7:99:c8:1a: e7:d3:0d:62:15:c9:e2:8b:b5:8e:5c:8a:49:3d:af:7b:d4:c6: 8e:c9:85:79:01:6a:aa:40:02:a6:4a:92:ab:88:07:92:7c:d1: 36:15:52:27:34:a2:f6:2e:e3:e9:3e:1a:94:92:d3:92:3a:5e: 14:8b:98:c2:9d:0d:7e:fe:4f:74:68:82:5f:f2:ee:e0:06:a3: 5c:e8:f4:d2:87:29:18:99:f5:ea:dc:0a:cb:28:fd:60:ff:cc: 2a:33:12:46:05:47:87:13:c6:3d:a4:9c:fd:e3:b3:ea:5d:16: 34:fa:81:a9:6d:a6:82:50:53:48:3b:ab:cb:97:6b:f6:bc:90: 08:be:c0:77:11:02:4b:dd:05:6b:a7:10:65:88:5a:c2:d6:4e: cc:5c:96:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAa1p2mkkU+NMZ5SdKnu1l/5WPVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTEwMTkwNzI2MzlaFw0yNTEwMjIxODMyMzlaMDMxMTAvBgNV BAMTKEI4MjE2NDcxRDExRDUxODFBMkFDRkIwRjcwODZGRTFBQzdERTc0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNa3jIuPUB1OC9gr5Po97ervZ vWpE/BOHLqvrjI8Nc2on0sYysXIlBDUeYS/ep7uiLBGoRrSNU6bfiyiWkO3BAk6p XqYc4LHXHmAaO2aD1MhnWCrfPFrz10JfJQ3NqDreNC6LGA2YAfupuYQa+5GP9Ck0 pqoyB9kS0r3FrBaxe+13ElPBcjsSyNIQKRdj+5SdLJNWeV7jYy07Vw8s08L1heAk 2J7386wV4zjbwyLm1NCO0UqcTT5kBTjCxyPwxDTt9oEBI1H66WTiYrpuWhE2Z9J2 +v8eWtnO4Ve/38xHIQcU+LX177KXIv47OhR6zfwxdf42VV1WLrJIhDtyp1Z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCFkcdEdUYGirPsPcIb+GsfedCQwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOHtVpQ3bfUNV/2iyDh616lBAobaRy615aQ H0HG3PlvSM6SOouloQ7jVCOIcg+SaYYWr+n0WxEtnwEWXGlZ4fHde2F6S9HXMdVB wg61dvreGfHlOYVdgXNIKEhSJ6C+2L2A5y+MX58ux5nIGufTDWIVyeKLtY5cikk9 r3vUxo7JhXkBaqpAAqZKkquIB5J80TYVUic0ovYu4+k+GpSS05I6XhSLmMKdDX7+ T3Rogl/y7uAGo1zo9NKHKRiZ9ercCsso/WD/zCozEkYFR4cTxj2knP3js+pdFjT6 galtpoJQU0g7q8uXa/a8kAi+wHcRAkvdBWunEGWIWsLWTsxclp0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:42 2025 by rpki-client