$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: bxtXS9Jzm6S/sy/Hl7Wu18W2WpL8VWzAHVALCxnjblc= Subject key identifier: E9:C4:36:B3:50:3B:DD:E4:4E:6F:EF:F9:4E:FB:5F:F5:A6:7F:E9:50 Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 43E435BCC7C117FB4817EF9254B54C530E310B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 01E1 Signing time: Sat 18 Oct 2025 14:51:53 +0000 Manifest this update: Sat 18 Oct 2025 14:46:53 +0000 Manifest next update: Tue 21 Oct 2025 21:20:53 +0000 Files and hashes: 1: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: LiqrFpCZi9jjQ9ExuAGMLd7TL59TSrfkrGld2vDA3ec=) 2: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) 3: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: WTsFbPPwKVa8sEtf0iQWxkXhqYKrk6du5Xz1AZrAMUw=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e4:35:bc:c7:c1:17:fb:48:17:ef:92:54:b5:4c:53:0e:31:0b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Oct 18 14:46:53 2025 GMT Not After : Oct 21 21:20:53 2025 GMT Subject: CN=E9C436B3503BDDE44E6FEFF94EFB5FF5A67FE950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:c1:2a:cc:5d:0a:8a:a7:21:b2:b9:48:3b: 6f:8f:b8:66:aa:76:14:fc:bf:f6:17:06:4d:46:2a: f7:87:00:5a:5d:de:80:a2:28:50:92:15:78:46:ec: a6:fa:5e:d1:2a:c4:64:8c:e6:8e:76:3e:1e:85:04: 9b:8a:18:58:03:a7:45:20:14:7c:84:e1:f0:00:06: 27:d1:e2:33:5a:f3:7d:5c:f8:8e:25:a6:ca:01:00: 65:8a:c4:0a:c8:8b:fa:27:63:98:ff:a5:73:6c:79: 93:0d:db:6d:82:5d:36:84:77:3f:82:a8:3b:60:7e: 67:ad:6e:b6:c2:2e:12:46:a4:b9:1b:2c:4b:49:58: 00:31:c9:f2:f1:d7:b4:0d:1b:c7:d9:e6:d5:2a:e9: 0b:7f:4e:68:12:11:37:f3:18:95:f9:48:3e:55:81: 0a:f6:3b:fa:30:1d:d7:62:8e:f9:8a:a9:be:44:f3: 6e:4b:23:22:99:c7:58:46:bc:51:38:88:3e:8c:38: ec:d3:49:81:c7:3c:b8:45:8e:32:79:9c:62:23:82: 1e:98:61:9f:bc:dc:9e:3b:a2:f1:79:b9:d3:89:0b: 71:1c:d1:24:58:65:1c:1e:7c:53:e2:b5:f2:89:2b: e3:e2:56:89:d1:76:2d:ca:92:d2:78:5f:b1:ef:b2: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:36:B3:50:3B:DD:E4:4E:6F:EF:F9:4E:FB:5F:F5:A6:7F:E9:50 X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c2:97:a0:1a:c3:65:7e:81:8b:2d:f2:29:64:64:38:ee:94: 44:4e:9e:2d:32:9d:f0:56:67:6b:a9:6f:a4:e5:1d:8d:77:ea: 14:2f:ca:16:b9:fc:f6:59:25:ff:ba:fb:b9:f9:63:f0:68:88: 28:5c:b7:f5:c8:1c:11:f5:7a:e5:6a:cb:a4:f8:38:66:99:58: af:49:19:e4:b6:0a:b9:6e:83:be:c4:6b:0e:ce:3a:bb:45:d7: 10:bf:74:26:28:0b:5d:1e:63:6e:ed:8b:04:45:89:d3:3f:04: b1:42:61:4f:72:88:c7:84:ff:2e:f5:74:8f:92:54:00:f2:cc: 37:89:12:d2:ec:b7:58:30:ab:67:8b:b4:47:6a:72:49:31:b0: 42:24:48:7d:4a:65:82:f7:bb:18:5e:15:bf:ed:d0:6c:10:fa: b1:1b:d9:e3:13:42:aa:db:83:bf:5e:e8:66:88:0e:7d:92:50: e7:e7:0a:20:9e:a0:5f:5f:46:df:c5:79:d7:62:ed:24:0a:f9: 90:c0:f1:96:24:c1:72:fc:87:ce:5c:a5:27:38:be:a2:b9:7d: f2:3c:63:ff:05:96:63:1a:44:fa:ac:0c:ee:38:f2:82:6c:86: b4:94:b3:5b:a9:b9:56:e2:19:f9:50:4f:83:ff:cf:d4:dc:aa: cf:15:b4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+Q1vMfBF/tIF++SVLVMUw4xC2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTEwMTgxNDQ2NTNaFw0yNTEwMjEyMTIwNTNaMDMxMTAvBgNV BAMTKEU5QzQzNkIzNTAzQkRERTQ0RTZGRUZGOTRFRkI1RkY1QTY3RkU5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhcEqzF0KiqchsrlIO2+PuGaq dhT8v/YXBk1GKveHAFpd3oCiKFCSFXhG7Kb6XtEqxGSM5o52Ph6FBJuKGFgDp0Ug FHyE4fAABifR4jNa831c+I4lpsoBAGWKxArIi/onY5j/pXNseZMN222CXTaEdz+C qDtgfmetbrbCLhJGpLkbLEtJWAAxyfLx17QNG8fZ5tUq6Qt/TmgSETfzGJX5SD5V gQr2O/owHddijvmKqb5E825LIyKZx1hGvFE4iD6MOOzTSYHHPLhFjjJ5nGIjgh6Y YZ+83J47ovF5udOJC3Ec0SRYZRwefFPitfKJK+PiVonRdi3KktJ4X7HvsqJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6cQ2s1A73eROb+/5Tvtf9aZ/6VAwHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3Cl6Aaw2V+gYst8ilkZDjulEROni0ynfBW Z2upb6TlHY136hQvyha5/PZZJf+6+7n5Y/BoiChct/XIHBH1euVqy6T4OGaZWK9J GeS2Crlug77Eaw7OOrtF1xC/dCYoC10eY27tiwRFidM/BLFCYU9yiMeE/y71dI+S VADyzDeJEtLst1gwq2eLtEdqckkxsEIkSH1KZYL3uxheFb/t0GwQ+rEb2eMTQqrb g79e6GaIDn2SUOfnCiCeoF9fRt/Feddi7SQK+ZDA8ZYkwXL8h85cpSc4vqK5ffI8 Y/8FlmMaRPqsDO448oJshrSUs1upuVbiGflQT4P/z9Tcqs8VtOs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:48 2025 by rpki-client