$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: Mbfw8a8arQAWkpzE6CGx0mVy3ZMlP7oHGSIh4e9+GQQ= Subject key identifier: 83:E4:A4:2C:5A:35:CD:E1:59:BD:CB:33:B1:09:F6:75:28:03:16:4B Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 58CD79D1C11C3E232D6EDA055717D6367AA7838C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 10:12:11 +0000 Manifest this update: Mon 20 Oct 2025 10:07:11 +0000 Manifest next update: Thu 23 Oct 2025 19:02:11 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: fHvff5p/EFOeK8eS64E2ZnZpAmjFfweV+IRIxaPTLNQ=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:cd:79:d1:c1:1c:3e:23:2d:6e:da:05:57:17:d6:36:7a:a7:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Oct 20 10:07:11 2025 GMT Not After : Oct 23 19:02:11 2025 GMT Subject: CN=83E4A42C5A35CDE159BDCB33B109F6752803164B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:b4:b8:0e:6c:c2:ff:ff:f1:0a:72:08:f6: 00:45:f6:0b:5d:06:af:06:6e:74:cc:62:27:d5:6d: 75:78:09:77:b1:33:88:a3:5c:80:06:6c:f3:f0:07: 48:85:76:82:a1:be:45:58:fb:2f:ab:8e:9e:d1:6c: 61:a7:ac:38:17:b0:81:e4:14:bb:82:d8:45:8d:c7: 16:f9:a2:6f:48:50:e2:c2:6d:3b:94:d0:28:0b:7b: 0b:c4:f5:84:4b:ea:a7:84:e1:1b:7c:29:ee:16:44: 7d:08:df:1b:2f:b5:3d:5e:9d:e1:ab:02:85:9e:95: a1:ba:b9:18:ce:53:1b:05:64:85:1f:87:96:bc:b4: 74:8e:11:7e:9a:92:f5:65:83:b7:fd:f8:c0:0a:37: e6:d5:89:12:74:47:5d:5d:39:17:53:31:b3:03:4e: 18:96:e7:37:9a:3d:4a:30:10:ac:7a:92:8a:aa:ef: d2:2c:5d:e5:7e:05:0f:81:5b:c3:a1:9c:22:38:81: e1:8a:60:0a:54:c2:48:44:21:7c:ae:62:a2:33:32: bd:4b:0d:d9:ab:80:99:d4:b1:1c:04:cd:17:8d:53: 4d:92:55:75:fc:d4:59:0c:cf:21:83:74:20:a6:f6: c9:6f:0c:06:c5:ce:45:b8:80:69:8f:b4:d5:86:ca: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:A4:2C:5A:35:CD:E1:59:BD:CB:33:B1:09:F6:75:28:03:16:4B X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:54:d0:80:2a:43:f8:0c:dd:1b:4c:fe:76:26:93:53:5c: b1:4a:9a:bd:48:66:08:ea:aa:86:47:85:74:74:34:96:06:ef: 4a:60:34:e9:96:2c:b0:05:d9:55:a4:33:87:4e:29:2c:9b:d0: f0:a5:92:f7:bd:22:cb:f6:af:b7:79:b5:70:4c:ac:25:7a:c9: fa:a7:dd:63:2f:f1:2a:85:c1:5e:e9:21:95:f9:4b:53:25:5b: 92:cf:80:4b:5b:51:84:7d:29:7a:6e:67:59:de:59:7e:ed:df: f5:45:e0:a7:cb:22:f0:d1:f2:50:5c:cf:3c:2d:f7:67:9e:5a: 9e:2e:07:08:a2:84:1d:61:38:ba:63:ef:ce:e8:66:45:66:66: 66:16:2d:b7:09:19:c8:fa:84:4d:f5:44:b7:3e:f1:bd:2e:e9: c6:e0:83:4e:2b:cb:4e:67:17:92:ed:69:4a:8a:54:a3:67:b8: 19:d5:95:8c:46:f4:d7:4f:1f:83:c1:12:c0:44:e8:c2:81:6b: cd:4c:2d:d8:ce:83:8e:3c:f4:a5:f7:32:05:e0:b0:3e:cb:3a: 7f:58:22:52:80:c7:10:d2:42:cf:22:9c:17:8a:83:05:51:97: 77:cf:b0:c7:fe:2f:b8:44:80:11:96:55:3a:c1:84:24:d1:37: 3f:38:ae:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWM150cEcPiMtbtoFVxfWNnqng4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTEwMjAxMDA3MTFaFw0yNTEwMjMxOTAyMTFaMDMxMTAvBgNV BAMTKDgzRTRBNDJDNUEzNUNERTE1OUJEQ0IzM0IxMDlGNjc1MjgwMzE2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMW7S4DmzC///xCnII9gBF9gtd Bq8GbnTMYifVbXV4CXexM4ijXIAGbPPwB0iFdoKhvkVY+y+rjp7RbGGnrDgXsIHk FLuC2EWNxxb5om9IUOLCbTuU0CgLewvE9YRL6qeE4Rt8Ke4WRH0I3xsvtT1eneGr AoWelaG6uRjOUxsFZIUfh5a8tHSOEX6akvVlg7f9+MAKN+bViRJ0R11dORdTMbMD ThiW5zeaPUowEKx6koqq79IsXeV+BQ+BW8OhnCI4geGKYApUwkhEIXyuYqIzMr1L DdmrgJnUsRwEzReNU02SVXX81FkMzyGDdCCm9slvDAbFzkW4gGmPtNWGyow3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+SkLFo1zeFZvcszsQn2dSgDFkswHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsYVNCAKkP4DN0bTP52JpNTXLFKmr1IZgjq qoZHhXR0NJYG70pgNOmWLLAF2VWkM4dOKSyb0PClkve9Isv2r7d5tXBMrCV6yfqn 3WMv8SqFwV7pIZX5S1MlW5LPgEtbUYR9KXpuZ1neWX7t3/VF4KfLIvDR8lBczzwt 92eeWp4uBwiihB1hOLpj787oZkVmZmYWLbcJGcj6hE31RLc+8b0u6cbgg04ry05n F5LtaUqKVKNnuBnVlYxG9NdPH4PBEsBE6MKBa81MLdjOg4489KX3MgXgsD7LOn9Y IlKAxxDSQs8inBeKgwVRl3fPsMf+L7hEgBGWVTrBhCTRNz84roc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:01 2025 by rpki-client