$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: WzqFGyN6BLMsDUWVnQrUhiAUQtk29Q2y/5ra6iS1LGE= Subject key identifier: 37:F9:CF:1B:62:B0:8E:E2:60:83:BB:03:FD:72:9F:A9:97:CA:76:34 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 61BE09176D62B36CB21AF847869B5A4B224EEB78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 0127 Signing time: Sat 18 Oct 2025 18:11:16 +0000 Manifest this update: Sat 18 Oct 2025 18:06:16 +0000 Manifest next update: Tue 21 Oct 2025 23:33:16 +0000 Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 3: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: oQziBbOohAPV6DFjDnTrIIdTmVMZtNeZxqBcY9zsNm4=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:be:09:17:6d:62:b3:6c:b2:1a:f8:47:86:9b:5a:4b:22:4e:eb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Oct 18 18:06:16 2025 GMT Not After : Oct 21 23:33:16 2025 GMT Subject: CN=37F9CF1B62B08EE26083BB03FD729FA997CA7634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:f0:52:58:71:ce:ca:f1:80:b1:1a:9b:a6: f8:1e:fb:4b:5a:a2:4f:0f:9b:d9:dd:2b:6b:f2:71: 76:e4:43:eb:2f:07:fb:8e:b6:87:ed:89:c7:00:06: 9a:82:28:e4:59:c3:99:56:59:07:e2:d2:36:d3:b3: fa:bf:8b:fb:8d:31:ce:28:c2:fa:fa:b4:78:3c:1a: a7:e0:cb:14:f0:66:6a:a4:c9:54:d0:ef:cd:92:7b: 97:1f:eb:be:a0:8b:2c:58:b8:af:f1:32:90:9e:ec: 4a:15:f1:0c:4d:67:1c:1c:9b:b8:3c:29:c6:be:2f: 63:cf:8f:05:ec:c0:90:8a:59:c3:f1:8c:17:d1:b2: 89:2b:ef:6f:8a:0a:56:35:ce:ef:36:fe:d9:06:5b: 60:0d:72:35:b0:71:d9:c9:67:36:6a:78:c8:16:13: 59:88:f4:2f:10:1c:0f:2a:fc:90:e1:9a:9c:2d:ad: ce:53:ce:fd:f6:65:61:d4:73:c5:c5:19:91:18:10: a9:a0:bd:7a:59:86:6d:db:85:98:64:4f:d8:93:aa: 82:4e:77:68:67:46:e0:85:f3:81:cd:f1:6f:8c:f2: 26:6f:84:67:02:4c:80:55:50:b1:08:13:9f:45:5e: 88:2e:e3:bb:c5:55:3c:30:a2:98:3a:2c:02:87:1c: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F9:CF:1B:62:B0:8E:E2:60:83:BB:03:FD:72:9F:A9:97:CA:76:34 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:60:46:d1:e9:2e:ca:76:b5:68:90:ff:c6:37:d6:36:81:09: 65:4d:ce:d3:d2:b1:9e:89:b6:67:59:e6:87:2b:be:43:b2:2c: b9:7e:da:c3:f4:ed:a0:44:06:f9:4a:a8:c5:2e:a3:72:9e:88: 12:07:f2:44:d5:43:d1:fd:5d:a0:40:b9:65:e1:e4:1f:8a:3c: 24:2b:2f:61:36:35:41:7b:d3:e5:b6:6f:2e:90:af:ca:a3:1e: 9b:4a:6c:e7:36:85:1f:03:7c:bd:92:e4:ad:3d:ea:b0:03:af: eb:8a:ef:a7:9b:24:74:fc:c4:2a:fb:8f:50:1b:e4:2f:bc:ea: 67:78:cb:bc:c6:47:0d:72:aa:6c:3c:08:e1:9b:6c:d4:0c:be: 04:47:65:76:59:a4:de:ab:22:af:12:20:a4:c8:97:84:b9:ce: 28:5e:5e:f7:56:c7:a4:c5:c1:09:42:2b:85:85:5b:bb:cb:cc: da:9e:8d:25:ec:9c:cc:cf:34:3f:57:19:11:2f:f9:c9:e5:a4: 14:3b:32:a0:ec:9a:73:20:f3:d2:b0:00:1b:00:9b:1e:6d:89: 2a:1b:30:c9:e4:73:1f:03:1a:35:2d:13:80:d0:66:52:3b:4e: 44:4d:42:b9:65:5c:f7:ab:91:6f:5d:b9:9c:c0:05:b0:d2:4f: 45:19:6c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYb4JF21is2yyGvhHhptaSyJO63gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTEwMTgxODA2MTZaFw0yNTEwMjEyMzMzMTZaMDMxMTAvBgNV BAMTKDM3RjlDRjFCNjJCMDhFRTI2MDgzQkIwM0ZENzI5RkE5OTdDQTc2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSPBSWHHOyvGAsRqbpvge+0ta ok8Pm9ndK2vycXbkQ+svB/uOtofticcABpqCKORZw5lWWQfi0jbTs/q/i/uNMc4o wvr6tHg8GqfgyxTwZmqkyVTQ782Se5cf676giyxYuK/xMpCe7EoV8QxNZxwcm7g8 Kca+L2PPjwXswJCKWcPxjBfRsokr72+KClY1zu82/tkGW2ANcjWwcdnJZzZqeMgW E1mI9C8QHA8q/JDhmpwtrc5Tzv32ZWHUc8XFGZEYEKmgvXpZhm3bhZhkT9iTqoJO d2hnRuCF84HN8W+M8iZvhGcCTIBVULEIE59FXogu47vFVTwwopg6LAKHHKarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/nPG2KwjuJgg7sD/XKfqZfKdjQwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1gRtHpLsp2tWiQ/8Y31jaBCWVNztPSsZ6J tmdZ5ocrvkOyLLl+2sP07aBEBvlKqMUuo3KeiBIH8kTVQ9H9XaBAuWXh5B+KPCQr L2E2NUF70+W2by6Qr8qjHptKbOc2hR8DfL2S5K096rADr+uK76ebJHT8xCr7j1Ab 5C+86md4y7zGRw1yqmw8COGbbNQMvgRHZXZZpN6rIq8SIKTIl4S5ziheXvdWx6TF wQlCK4WFW7vLzNqejSXsnMzPND9XGREv+cnlpBQ7MqDsmnMg89KwABsAmx5tiSob MMnkcx8DGjUtE4DQZlI7TkRNQrllXPerkW9duZzABbDST0UZbOw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:11 2025 by rpki-client