$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: ui5ZmPA+eBYIbg3bkGn5o0yun7XCosGMJtYrYrL0axI= Subject key identifier: 80:E0:C0:21:EC:24:8D:1D:53:1A:B7:66:02:D6:0E:92:03:BA:C4:50 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 158E4C09E92A39F1EADA68B250F27C21DFC32363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: D8 Signing time: Sun 19 Oct 2025 08:10:51 +0000 Manifest this update: Sun 19 Oct 2025 08:05:51 +0000 Manifest next update: Wed 22 Oct 2025 15:30:51 +0000 Files and hashes: 1: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: Ol372WYZLpg9F2cw9kvPQ8MZtnXKZsvPNZsm+ji4qLo=) 2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8e:4c:09:e9:2a:39:f1:ea:da:68:b2:50:f2:7c:21:df:c3:23:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Oct 19 08:05:51 2025 GMT Not After : Oct 22 15:30:51 2025 GMT Subject: CN=80E0C021EC248D1D531AB76602D60E9203BAC450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:89:a8:8c:c7:dc:49:42:cc:03:67:19:a6: b1:65:84:e8:9c:6e:23:23:73:a8:b8:02:65:70:da: e2:01:1a:73:a3:6f:ae:7c:2a:33:58:04:bf:74:0d: a1:7d:e5:ff:9c:6d:90:c1:39:4c:d1:ad:d5:c4:ee: 7e:27:57:21:5f:bf:52:8e:0a:8e:9e:36:e5:c8:19: f6:40:c0:b8:53:35:76:a4:a0:d7:ab:3b:c9:48:18: bc:47:49:c7:99:5c:4c:4d:9c:ad:50:53:92:f1:40: c6:68:f1:a3:be:61:74:f9:04:a5:54:5f:c3:22:37: 05:80:7e:23:c5:be:96:b7:52:d5:91:91:31:b8:c9: bf:3d:02:1e:eb:09:6c:b6:69:2b:19:c2:08:f9:ce: 01:0e:c5:aa:4f:e3:1d:77:20:f2:de:ac:a5:b5:fb: 3c:62:51:c4:0a:5b:14:40:34:f5:43:ac:1a:61:e3: 44:32:d8:8e:4f:47:c4:07:9f:c2:01:a5:f4:05:b0: 77:0d:a1:a6:9d:6c:bc:17:d3:5f:7e:a1:b2:a2:68: 4a:be:40:35:3e:96:fa:8e:3d:e0:8d:f9:d8:2e:54: 69:7b:cd:05:6c:1a:61:fd:1f:6c:2c:d0:d5:cb:b6: ee:78:21:68:04:88:4e:77:e6:26:7c:11:77:13:7d: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E0:C0:21:EC:24:8D:1D:53:1A:B7:66:02:D6:0E:92:03:BA:C4:50 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:fa:b3:11:d6:a7:00:88:c1:6d:da:06:97:6e:66:11:0a: ae:e2:0b:40:1d:c8:f2:7d:8e:38:36:58:02:35:9f:1a:4b:45: b8:70:b9:f4:f2:d2:83:8a:fa:40:b0:4a:e9:1a:d1:02:c1:5b: 9c:c5:93:b8:b4:45:5c:06:fc:82:04:88:fb:de:a0:98:18:c8: 13:d1:bc:f4:a2:e0:56:8a:3c:b5:53:25:e8:6d:21:ef:5d:51: 39:32:3c:4c:56:f2:10:5f:00:9a:f1:15:29:66:a7:e7:47:af: 98:6e:17:50:1f:67:9f:57:c7:a0:11:75:5a:f9:d0:6b:92:b7: a3:6b:69:de:ef:3d:1e:a0:dc:74:e5:7e:2f:9b:6b:30:7d:1f: 20:06:1d:74:f5:73:4b:99:4c:6c:a6:f4:19:07:9a:16:7f:9a: cd:82:07:a2:17:b2:99:2f:e3:96:25:48:57:35:4d:3a:0b:e2: 63:e6:cb:a6:79:39:9e:a0:be:1f:49:06:18:b9:78:58:45:20: 4f:58:3e:b4:44:42:30:c9:bc:44:1f:8d:93:30:4e:51:2f:84: 7b:72:70:c0:04:26:ec:71:de:55:03:aa:39:95:ec:c2:46:5d: b5:fc:50:7c:d6:07:70:a8:1c:e8:03:bd:fc:b1:1b:89:8d:d6: e6:15:f7:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFY5MCekqOfHq2miyUPJ8Id/DI2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTEwMTkwODA1NTFaFw0yNTEwMjIxNTMwNTFaMDMxMTAvBgNV BAMTKDgwRTBDMDIxRUMyNDhEMUQ1MzFBQjc2NjAyRDYwRTkyMDNCQUM0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SImojMfcSULMA2cZprFlhOic biMjc6i4AmVw2uIBGnOjb658KjNYBL90DaF95f+cbZDBOUzRrdXE7n4nVyFfv1KO Co6eNuXIGfZAwLhTNXakoNerO8lIGLxHSceZXExNnK1QU5LxQMZo8aO+YXT5BKVU X8MiNwWAfiPFvpa3UtWRkTG4yb89Ah7rCWy2aSsZwgj5zgEOxapP4x13IPLerKW1 +zxiUcQKWxRANPVDrBph40Qy2I5PR8QHn8IBpfQFsHcNoaadbLwX019+obKiaEq+ QDU+lvqOPeCN+dguVGl7zQVsGmH9H2ws0NXLtu54IWgEiE535iZ8EXcTfSZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgODAIewkjR1TGrdmAtYOkgO6xFAwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfL+rMR1qcAiMFt2gaXbmYRCq7iC0AdyPJ9 jjg2WAI1nxpLRbhwufTy0oOK+kCwSuka0QLBW5zFk7i0RVwG/IIEiPveoJgYyBPR vPSi4FaKPLVTJehtIe9dUTkyPExW8hBfAJrxFSlmp+dHr5huF1AfZ59Xx6ARdVr5 0GuSt6Nrad7vPR6g3HTlfi+bazB9HyAGHXT1c0uZTGym9BkHmhZ/ms2CB6IXspkv 45YlSFc1TToL4mPmy6Z5OZ6gvh9JBhi5eFhFIE9YPrREQjDJvEQfjZMwTlEvhHty cMAEJuxx3lUDqjmV7MJGXbX8UHzWB3CoHOgDvfyxG4mN1uYV9w0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:26 2025 by rpki-client