$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: VbMIn2xGERNibmIJlWlA0UG2WT9qokMOPIBnjnZqBg4= Subject key identifier: 86:B5:D4:EB:C2:57:68:09:8B:92:92:3C:39:04:05:03:CA:AB:E9:B6 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 462AB0A66D85460CC7F35CEDE4A61F0768536675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 022C Signing time: Sun 19 Oct 2025 15:20:02 +0000 Manifest this update: Sun 19 Oct 2025 15:15:02 +0000 Manifest next update: Thu 23 Oct 2025 01:59:02 +0000 Files and hashes: 1: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 3: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: m7G54/tUl7IJJ1ysMdcEyRWBdxUqCaHRk8842tYUEa8=) 4: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 5: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 6: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2a:b0:a6:6d:85:46:0c:c7:f3:5c:ed:e4:a6:1f:07:68:53:66:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Oct 19 15:15:02 2025 GMT Not After : Oct 23 01:59:02 2025 GMT Subject: CN=86B5D4EBC25768098B92923C39040503CAABE9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:25:5c:03:21:2b:56:cf:ed:30:78:77:54: 31:2a:63:73:74:cd:48:2f:8e:dd:32:e8:29:2f:81: 34:6d:cd:f9:24:05:cc:e1:e3:eb:01:96:8b:bf:dc: 15:db:3e:b7:60:db:b1:1d:61:4f:a2:b1:fd:80:6e: a7:32:47:66:71:48:2d:b4:ac:b5:84:3e:ab:2c:67: 61:57:3e:a5:48:cb:e7:94:66:14:94:77:75:96:a7: 69:84:f1:28:4c:89:6c:d9:ee:61:83:0e:eb:ea:9a: 57:84:07:22:7d:be:ce:4b:23:e5:1b:59:56:7c:c1: 77:26:56:22:b4:64:07:3c:a6:0e:c4:9c:68:68:9a: b2:e8:2c:0b:89:77:ec:14:36:55:5d:48:b6:d9:f3: 03:aa:86:1e:f0:a5:db:2f:37:c6:d5:74:e4:e3:80: 10:2b:b2:69:ec:20:ed:2c:0f:12:0f:bd:11:12:c1: 1b:56:f9:82:c8:6b:4b:f5:f4:69:06:55:5d:e8:1e: e2:c8:dc:34:e9:94:b1:56:15:ea:9a:66:1a:2f:04: 5e:6a:00:91:8c:b4:f9:0f:0c:9e:e4:d9:e7:3c:02: cb:6d:89:ce:6a:f1:8a:35:e2:42:25:8d:e0:00:1d: 33:06:e0:38:79:5e:ca:1c:1e:e6:fe:a3:b6:e6:f4: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:D4:EB:C2:57:68:09:8B:92:92:3C:39:04:05:03:CA:AB:E9:B6 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:7c:34:9f:17:27:95:ab:6c:59:a8:9c:30:ab:5e:76:c1: 82:05:37:87:42:50:98:32:1f:42:f8:97:0c:a1:d5:b5:cf:9f: 64:58:9f:55:7f:db:09:06:10:45:46:7b:c9:f5:3e:11:f5:e9: 45:bb:b2:20:2e:8a:63:3c:e7:b8:05:69:98:08:50:a2:c0:f8: 90:db:4b:6d:7c:fc:63:11:15:bf:14:5e:74:97:39:4c:a4:4c: 93:b7:f8:e6:17:c0:69:ca:21:89:a1:27:54:0f:12:d9:02:a2: 05:cd:d8:c5:7a:bd:94:a9:21:a6:12:f8:25:88:99:3f:88:0d: 97:17:c1:69:b7:d2:ab:89:0c:e9:2f:fa:43:c2:19:ec:2c:0d: 88:ca:37:84:63:cc:a1:f8:84:3e:ec:52:5c:cb:00:7a:ff:f2: 09:17:59:de:5f:01:87:2a:ae:ef:a7:a7:69:d4:fe:b3:96:c6: c8:7a:f7:63:9b:4e:83:ef:ba:a4:23:73:db:75:16:b8:62:f9: 80:72:6e:96:bf:0a:1d:05:67:73:7f:fc:ff:97:7b:d4:ce:c0: 19:35:92:d6:60:ea:c7:ba:0f:f0:5e:2f:67:1e:ca:ad:d5:f6: d9:49:53:29:b7:ac:cf:85:1e:4a:8b:1d:6a:df:51:35:1a:5e: 19:4e:94:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiqwpm2FRgzH81zt5KYfB2hTZnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTEwMTkxNTE1MDJaFw0yNTEwMjMwMTU5MDJaMDMxMTAvBgNV BAMTKDg2QjVENEVCQzI1NzY4MDk4QjkyOTIzQzM5MDQwNTAzQ0FBQkU5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlyVcAyErVs/tMHh3VDEqY3N0 zUgvjt0y6CkvgTRtzfkkBczh4+sBlou/3BXbPrdg27EdYU+isf2AbqcyR2ZxSC20 rLWEPqssZ2FXPqVIy+eUZhSUd3WWp2mE8ShMiWzZ7mGDDuvqmleEByJ9vs5LI+Ub WVZ8wXcmViK0ZAc8pg7EnGhomrLoLAuJd+wUNlVdSLbZ8wOqhh7wpdsvN8bVdOTj gBArsmnsIO0sDxIPvRESwRtW+YLIa0v19GkGVV3oHuLI3DTplLFWFeqaZhovBF5q AJGMtPkPDJ7k2ec8Asttic5q8Yo14kIljeAAHTMG4Dh5XsocHub+o7bm9BsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrXU68JXaAmLkpI8OQQFA8qr6bYwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM3fDSfFyeVq2xZqJwwq152wYIFN4dCUJgy H0L4lwyh1bXPn2RYn1V/2wkGEEVGe8n1PhH16UW7siAuimM857gFaZgIUKLA+JDb S218/GMRFb8UXnSXOUykTJO3+OYXwGnKIYmhJ1QPEtkCogXN2MV6vZSpIaYS+CWI mT+IDZcXwWm30quJDOkv+kPCGewsDYjKN4RjzKH4hD7sUlzLAHr/8gkXWd5fAYcq ru+np2nU/rOWxsh692ObToPvuqQjc9t1Frhi+YBybpa/Ch0FZ3N//P+Xe9TOwBk1 ktZg6se6D/BeL2ceyq3V9tlJUym3rM+FHkqLHWrfUTUaXhlOlAA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:27 2025 by rpki-client