$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: bz9fclMkScit677BOCcmIzdh6GLJq7DxRWDniJ/WrUY= Subject key identifier: A0:25:12:12:D8:E0:57:D3:E5:10:06:E1:B1:FE:09:92:49:B2:F9:C2 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 4154AC97614C7E115360DE57E12B3F3629FDCDB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 00:11:37 +0000 Manifest this update: Sun 19 Oct 2025 00:06:37 +0000 Manifest next update: Wed 22 Oct 2025 01:44:37 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: D2IqmWZ3r6NhyRrlernyTiIhVjWqay+4DsblQMqXqgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:54:ac:97:61:4c:7e:11:53:60:de:57:e1:2b:3f:36:29:fd:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Oct 19 00:06:37 2025 GMT Not After : Oct 22 01:44:37 2025 GMT Subject: CN=A0251212D8E057D3E51006E1B1FE099249B2F9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:a0:e4:db:57:8e:8b:83:2a:1b:c8:cd:1a: 74:e8:54:e8:58:19:81:a7:5f:57:c6:ba:25:16:5c: 45:21:85:44:27:38:22:c4:03:04:5a:83:bf:4f:a0: 11:8f:a1:20:03:68:0d:2a:b1:c5:35:8e:bb:ac:26: d6:e4:f4:45:6a:de:7c:ff:b1:08:27:57:bb:86:40: 5b:8e:8e:95:19:94:de:e1:fc:81:27:be:c0:a7:4d: 27:7d:bc:7c:cf:08:d9:f0:91:d9:2b:55:df:98:69: 23:ec:20:a9:9c:68:e7:74:2d:ce:1c:b9:7f:ab:d1: a8:a5:be:29:a1:33:ce:1d:65:d8:7f:b4:cc:d7:5c: 24:ef:a7:15:3c:75:22:36:bc:24:5e:e2:27:41:11: dd:7d:e7:69:0c:50:a9:f3:2a:64:e7:64:cf:a9:96: 6d:17:ee:61:de:20:ee:35:0a:aa:14:f5:a6:b9:44: 16:af:b9:1a:23:da:ba:32:a3:72:1a:3d:91:1c:c7: ff:50:e2:d8:cd:ea:46:ae:af:99:b8:fc:87:b8:94: 3f:ad:0e:80:31:b5:5e:08:6c:9a:a3:c1:cb:2f:bf: 4b:fc:c8:50:59:61:59:02:6d:66:d2:11:98:9c:0a: 65:eb:76:e8:ab:31:1d:06:05:14:9a:ef:38:cc:eb: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:12:12:D8:E0:57:D3:E5:10:06:E1:B1:FE:09:92:49:B2:F9:C2 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:cf:22:f1:f0:c8:2c:71:6a:c9:31:2d:30:a2:1e:f6:16:aa: ae:3a:c7:f1:7e:24:6e:4b:9e:61:fd:25:a7:6b:bd:e7:0c:c3: 01:d9:8c:42:91:67:cd:cd:25:a3:23:21:37:cf:1a:e3:05:6a: 1e:43:9a:35:46:e6:8b:a1:d1:8e:10:eb:26:22:1b:b2:dc:f6: f9:39:0f:8b:6d:96:42:a3:b7:80:f7:2b:96:f3:26:c9:91:6b: dd:cf:9f:ef:91:fb:db:75:06:43:7c:3f:5b:e6:27:30:ab:8a: 92:99:0e:fd:af:7d:cf:3e:fa:17:f1:43:0d:b5:bd:d2:2e:d6: bf:0c:b0:1e:2a:4e:0f:a3:77:6d:f3:50:1c:93:46:d1:1d:dd: 06:65:21:51:78:20:b2:6c:be:e6:a2:5a:c5:94:b0:1b:52:ae: 6f:67:87:3c:49:80:7e:b8:bc:d0:e2:12:bd:78:b6:59:4b:b2: 05:c6:12:bd:03:9d:21:9e:86:a7:14:cc:54:ad:24:ae:13:0d: 0d:2b:cb:d4:1e:b8:c3:24:36:b4:80:5e:1f:07:f2:68:9e:57: a6:02:8d:6c:89:3a:21:8c:71:86:24:39:09:b2:27:20:af:dd: fe:37:9b:9a:29:71:95:90:03:ff:a5:30:87:dd:7d:2b:21:9f: 84:bd:d8:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVSsl2FMfhFTYN5X4Ss/Nin9zbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTEwMTkwMDA2MzdaFw0yNTEwMjIwMTQ0MzdaMDMxMTAvBgNV BAMTKEEwMjUxMjEyRDhFMDU3RDNFNTEwMDZFMUIxRkUwOTkyNDlCMkY5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKKDk21eOi4MqG8jNGnToVOhY GYGnX1fGuiUWXEUhhUQnOCLEAwRag79PoBGPoSADaA0qscU1jrusJtbk9EVq3nz/ sQgnV7uGQFuOjpUZlN7h/IEnvsCnTSd9vHzPCNnwkdkrVd+YaSPsIKmcaOd0Lc4c uX+r0ailvimhM84dZdh/tMzXXCTvpxU8dSI2vCRe4idBEd1952kMUKnzKmTnZM+p lm0X7mHeIO41CqoU9aa5RBavuRoj2royo3IaPZEcx/9Q4tjN6kaur5m4/Ie4lD+t DoAxtV4IbJqjwcsvv0v8yFBZYVkCbWbSEZicCmXrduirMR0GBRSa7zjM60RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCUSEtjgV9PlEAbhsf4Jkkmy+cIwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfPIvHwyCxxaskxLTCiHvYWqq46x/F+JG5L nmH9JadrvecMwwHZjEKRZ83NJaMjITfPGuMFah5DmjVG5ouh0Y4Q6yYiG7Lc9vk5 D4ttlkKjt4D3K5bzJsmRa93Pn++R+9t1BkN8P1vmJzCripKZDv2vfc8++hfxQw21 vdIu1r8MsB4qTg+jd23zUByTRtEd3QZlIVF4ILJsvuaiWsWUsBtSrm9nhzxJgH64 vNDiEr14tllLsgXGEr0DnSGehqcUzFStJK4TDQ0ry9QeuMMkNrSAXh8H8mieV6YC jWyJOiGMcYYkOQmyJyCv3f43m5opcZWQA/+lMIfdfSshn4S92E8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:55 2025 by rpki-client