$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: r/ixX+1hS9GcsGRmykJ8zoRHdFjKlF3kCru8db45Hj8= Subject key identifier: 8E:05:C0:80:52:C5:D7:EE:2F:35:63:E6:84:DB:56:DC:33:AE:BA:38 Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 64B0CFFAE502F553A118E5BFC21DDE6E34266820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 0470 Signing time: Sun 19 Oct 2025 12:31:04 +0000 Manifest this update: Sun 19 Oct 2025 12:26:04 +0000 Manifest next update: Wed 22 Oct 2025 23:48:04 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY=) 2: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: RdsBHNP59AmqBkeDO80vHwXNgyQttkqAcLfe2ft2UL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b0:cf:fa:e5:02:f5:53:a1:18:e5:bf:c2:1d:de:6e:34:26:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Oct 19 12:26:04 2025 GMT Not After : Oct 22 23:48:04 2025 GMT Subject: CN=8E05C08052C5D7EE2F3563E684DB56DC33AEBA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:39:fe:36:54:b2:75:88:35:f0:a8:5b:36: ce:88:c2:9e:30:f8:d3:33:f6:52:81:e1:a9:f0:0b: 3a:70:a8:95:bb:1d:ec:ca:e6:27:85:63:13:6e:20: c9:46:30:52:d9:ba:26:e6:41:92:ed:d2:88:a6:17: 0b:d0:fe:f0:93:d8:f1:d2:1b:9e:69:8f:1d:fb:e7: 93:69:60:95:8b:b9:a5:8a:a7:9b:99:64:9d:c6:ff: 59:91:dd:08:a2:54:b6:ed:85:8c:e8:c9:05:43:93: 2a:b7:7c:05:58:fa:5d:20:94:1f:83:57:36:e3:b8: a7:5d:b2:b6:da:17:95:5f:d3:e8:22:36:b7:6d:f7: fa:3a:dc:a1:78:71:f6:af:24:4c:b2:08:ce:f3:39: 8c:12:92:58:db:b7:0a:fb:df:af:d6:b9:cc:7f:c6: da:18:db:b5:70:2a:bd:61:ea:e1:b8:09:10:cd:04: 7d:0e:71:24:f3:b4:b6:39:72:22:53:c2:d6:8e:a1: 06:65:38:e8:b2:80:eb:58:a6:37:dc:ad:08:5f:f6: 6c:86:42:17:45:f0:c3:3f:3a:01:ce:a2:18:4b:27: c8:4c:95:72:85:5b:b8:89:67:e3:1f:c4:98:db:03: 93:a9:51:fd:07:c7:44:b1:e2:46:dd:8c:ef:33:00: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:05:C0:80:52:C5:D7:EE:2F:35:63:E6:84:DB:56:DC:33:AE:BA:38 X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4e:f0:39:bb:e3:39:aa:78:83:73:b8:c5:c9:5a:ae:1d:22: d6:11:c9:cb:da:35:4d:c7:a5:75:fd:62:d0:12:79:25:46:4b: e5:c4:c6:3f:82:c3:28:91:a8:0d:e9:df:d0:fb:d6:72:ce:e7: cb:99:a1:2f:78:24:48:6a:18:c8:b5:12:93:13:10:24:41:ad: 8e:9c:4f:ec:1e:c0:3f:cf:3e:86:df:6b:4c:11:95:9d:c7:7b: 08:53:fe:0f:59:28:3a:f9:b7:19:4c:87:6c:c7:73:02:9a:8b: 47:64:31:73:3b:0a:ae:5a:00:24:1b:ad:32:9f:c2:8c:27:bd: ad:9d:f4:6b:76:34:80:62:d9:c8:e1:d0:02:f0:ea:28:2f:13: 34:3c:e3:2b:a6:9b:9a:27:f1:0a:a5:0c:f8:76:7d:8c:68:e0: fe:f9:0b:a5:1f:72:9d:7b:a0:96:f4:6b:07:a9:63:b4:53:b9: 77:39:42:d4:48:4f:47:17:0f:d2:07:e3:80:34:15:50:03:ee: 07:90:e2:4f:29:cc:9b:85:92:a0:ef:1f:21:cf:9c:af:fc:59: 2b:6d:7c:2c:cf:55:db:8e:3e:1b:16:42:13:11:9d:26:0b:43: a9:5a:c9:86:44:ba:9c:ba:bf:b2:65:53:12:16:6d:cd:b1:14: 6c:9d:50:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLDP+uUC9VOhGOW/wh3ebjQmaCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTEwMTkxMjI2MDRaFw0yNTEwMjIyMzQ4MDRaMDMxMTAvBgNV BAMTKDhFMDVDMDgwNTJDNUQ3RUUyRjM1NjNFNjg0REI1NkRDMzNBRUJBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMzn+NlSydYg18KhbNs6Iwp4w +NMz9lKB4anwCzpwqJW7HezK5ieFYxNuIMlGMFLZuibmQZLt0oimFwvQ/vCT2PHS G55pjx3755NpYJWLuaWKp5uZZJ3G/1mR3QiiVLbthYzoyQVDkyq3fAVY+l0glB+D VzbjuKddsrbaF5Vf0+giNrdt9/o63KF4cfavJEyyCM7zOYwSkljbtwr736/Wucx/ xtoY27VwKr1h6uG4CRDNBH0OcSTztLY5ciJTwtaOoQZlOOiygOtYpjfcrQhf9myG QhdF8MM/OgHOohhLJ8hMlXKFW7iJZ+MfxJjbA5OpUf0Hx0Sx4kbdjO8zAEfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgXAgFLF1+4vNWPmhNtW3DOuujgwHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJO8Dm74zmqeINzuMXJWq4dItYRycvaNU3H pXX9YtASeSVGS+XExj+CwyiRqA3p39D71nLO58uZoS94JEhqGMi1EpMTECRBrY6c T+wewD/PPobfa0wRlZ3HewhT/g9ZKDr5txlMh2zHcwKai0dkMXM7Cq5aACQbrTKf wownva2d9Gt2NIBi2cjh0ALw6igvEzQ84yumm5on8QqlDPh2fYxo4P75C6Ufcp17 oJb0awepY7RTuXc5QtRIT0cXD9IH44A0FVAD7geQ4k8pzJuFkqDvHyHPnK/8WStt fCzPVduOPhsWQhMRnSYLQ6layYZEupy6v7JlUxIWbc2xFGydUHY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:07 2025 by rpki-client