$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: giyBTcl2w1NeMFBrad/FEzhxST8lknw8dpxBLKG1xFU= Subject key identifier: 4E:90:23:31:88:84:1B:82:B0:3B:E0:90:9A:61:DD:F5:4D:79:10:F3 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 75EBF60E32C2EF9518EBF29E360E8002B3B0FD46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: C4 Signing time: Sun 19 Oct 2025 18:51:18 +0000 Manifest this update: Sun 19 Oct 2025 18:46:18 +0000 Manifest next update: Thu 23 Oct 2025 06:29:18 +0000 Files and hashes: 1: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 3: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: Y8kkqnQHr2jyRcVsXTnSTCcnUsI5es4QUHL4DX8WIRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:f6:0e:32:c2:ef:95:18:eb:f2:9e:36:0e:80:02:b3:b0:fd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Oct 19 18:46:18 2025 GMT Not After : Oct 23 06:29:18 2025 GMT Subject: CN=4E90233188841B82B03BE0909A61DDF54D7910F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:c8:20:a4:30:6c:97:f6:ef:4b:4d:33:eb: 9a:ed:a1:47:00:b0:ec:27:e5:dc:f3:c9:92:c0:56: 7b:c5:71:4e:5e:cd:4f:da:9a:30:c3:27:04:9d:16: 61:cc:86:ca:ba:7b:72:1f:77:7e:a9:e0:d9:a6:e7: c6:e1:52:fc:aa:f7:92:b4:a7:f9:25:91:11:64:34: da:da:f5:aa:0a:c4:a8:aa:62:26:c4:6e:e9:e5:88: 3c:1e:85:39:61:86:db:f9:5b:8e:88:4d:2c:66:07: 33:26:55:4f:ef:00:7a:58:73:5e:23:f0:09:80:81: a1:30:a6:0a:d7:50:98:ad:94:44:2f:b9:c2:47:fe: 70:77:be:37:94:17:f5:c0:78:32:51:fa:0f:5f:be: cd:9b:c1:d7:45:fd:d1:80:47:f5:f3:7d:64:bf:ff: 3a:a6:85:52:5a:2a:fb:d2:36:a8:28:5f:3d:f9:4a: be:64:3c:b4:ba:9c:70:fe:88:00:68:93:a0:5e:12: c6:a4:34:c8:bb:36:41:0a:05:7b:eb:2e:75:d9:bb: 1b:36:30:c2:a9:0f:7e:73:4a:fd:8e:72:bc:5d:c0: c8:7a:dd:c3:34:3e:04:d7:0f:37:d9:62:8d:d6:48: fd:10:ef:a4:96:9a:bd:2d:26:a1:49:b4:c3:ce:5e: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:23:31:88:84:1B:82:B0:3B:E0:90:9A:61:DD:F5:4D:79:10:F3 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9b:2b:8b:f4:3f:6b:b2:74:2b:79:52:71:a4:09:f7:f6:15: 41:62:68:24:e6:8b:38:52:f5:56:90:6b:13:9a:7f:92:d2:e8: 31:03:c4:3e:da:68:62:24:33:df:a5:7c:06:72:e9:79:7e:57: ba:6b:a1:c9:11:55:b7:98:56:c0:15:87:b4:d5:f4:b9:c6:d9: 53:c5:bd:55:b2:33:c9:8c:15:f9:57:38:ae:0a:62:88:77:2b: b4:e2:2d:80:71:30:32:92:bd:87:e1:04:1e:1c:46:4a:69:fd: 6e:fd:68:9b:6d:17:ba:01:1f:2c:b5:48:ce:f3:90:bb:28:7b: 92:1e:3a:c1:80:16:58:d7:f4:ff:54:fc:65:c5:17:cc:e5:ef: d1:a5:25:7d:d4:b9:8c:18:6d:72:5d:a1:f6:cb:38:e6:b8:b5: 38:e2:3a:5f:24:4b:33:67:88:13:3a:e7:2a:08:89:c4:e2:1f: 7e:23:02:6f:d1:be:36:a7:4b:b1:a9:40:b8:19:f7:67:09:95: 14:2d:a2:ca:27:be:42:48:47:8c:64:d5:95:ec:a1:fe:6e:b2: 0c:c7:b8:f8:2a:c6:1a:7f:50:13:3f:6a:5c:83:f5:e2:9a:84: 27:6d:78:16:a2:93:27:73:31:98:14:e8:58:7c:21:28:06:dd: 21:14:c4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdev2DjLC75UY6/KeNg6AArOw/UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTEwMTkxODQ2MThaFw0yNTEwMjMwNjI5MThaMDMxMTAvBgNV BAMTKDRFOTAyMzMxODg4NDFCODJCMDNCRTA5MDlBNjFEREY1NEQ3OTEwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMMggpDBsl/bvS00z65rtoUcA sOwn5dzzyZLAVnvFcU5ezU/amjDDJwSdFmHMhsq6e3Ifd36p4Nmm58bhUvyq95K0 p/klkRFkNNra9aoKxKiqYibEbunliDwehTlhhtv5W46ITSxmBzMmVU/vAHpYc14j 8AmAgaEwpgrXUJitlEQvucJH/nB3vjeUF/XAeDJR+g9fvs2bwddF/dGAR/XzfWS/ /zqmhVJaKvvSNqgoXz35Sr5kPLS6nHD+iABok6BeEsakNMi7NkEKBXvrLnXZuxs2 MMKpD35zSv2OcrxdwMh63cM0PgTXDzfZYo3WSP0Q76SWmr0tJqFJtMPOXmHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTpAjMYiEG4KwO+CQmmHd9U15EPMwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6bK4v0P2uydCt5UnGkCff2FUFiaCTmizhS 9VaQaxOaf5LS6DEDxD7aaGIkM9+lfAZy6Xl+V7prockRVbeYVsAVh7TV9LnG2VPF vVWyM8mMFflXOK4KYoh3K7TiLYBxMDKSvYfhBB4cRkpp/W79aJttF7oBHyy1SM7z kLsoe5IeOsGAFljX9P9U/GXFF8zl79GlJX3UuYwYbXJdofbLOOa4tTjiOl8kSzNn iBM65yoIicTiH34jAm/RvjanS7GpQLgZ92cJlRQtosonvkJIR4xk1ZXsof5usgzH uPgqxhp/UBM/alyD9eKahCdteBaikydzMZgU6Fh8ISgG3SEUxBo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:19:53 2025 by rpki-client