$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: nAIR+tD47cPgtAywcmS77H25Gb3XH0jkmKGgC/psA28= Subject key identifier: BD:3C:41:8D:BD:E2:05:44:E0:89:44:73:E7:D3:69:7A:13:2B:E6:A3 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 13AF75D743D6E72633A2573F052822E7E54B6120 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 014E Signing time: Sun 19 Oct 2025 00:51:15 +0000 Manifest this update: Sun 19 Oct 2025 00:46:15 +0000 Manifest next update: Wed 22 Oct 2025 06:51:15 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: yEyhDUDKjmPMkEYzxolFe+wUX4Pm17W0afPxkjKrijs=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:af:75:d7:43:d6:e7:26:33:a2:57:3f:05:28:22:e7:e5:4b:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Oct 19 00:46:15 2025 GMT Not After : Oct 22 06:51:15 2025 GMT Subject: CN=BD3C418DBDE20544E0894473E7D3697A132BE6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:55:07:10:1d:6f:3e:8b:55:62:a4:79:76: a8:bb:41:28:e9:1e:90:17:fc:19:ea:73:91:72:30: 83:27:33:99:a9:80:85:f1:81:5e:07:09:ff:ed:1d: 29:0c:a6:14:d1:ec:2c:ff:e0:c8:b2:a3:26:09:9c: e6:49:5b:46:13:4b:6d:6c:3f:55:b3:20:af:d1:c5: 10:58:6b:46:ab:37:f1:06:6e:38:b5:79:22:7d:40: fd:e2:93:fd:5c:c0:7b:56:fc:64:a5:9e:2b:75:80: dc:26:8c:59:88:fe:d9:87:01:34:a9:6a:f0:b0:ab: 56:49:ad:02:68:15:cd:47:b2:14:53:ba:fa:77:44: a9:8c:ff:31:0c:60:5a:43:ea:6c:ee:c8:b9:f6:22: e8:6e:ea:3d:bc:41:7c:2f:3d:51:d4:c2:96:66:f4: 9e:a1:8d:4a:e0:8e:fc:ea:5e:1b:2d:26:bc:f5:c0: 3c:ef:c5:b3:31:81:a5:3b:17:e8:a2:0a:19:4c:82: b7:aa:3e:c6:a2:1e:92:8f:08:97:42:c7:10:00:5f: 8b:fe:d2:11:81:f9:8c:8b:a0:6b:7b:dc:43:07:31: d1:39:c3:0f:e1:1a:ca:c0:ce:31:6e:83:b7:8f:a8: ed:45:cd:bc:5e:0c:4b:85:b4:91:33:23:d2:0d:a8: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3C:41:8D:BD:E2:05:44:E0:89:44:73:E7:D3:69:7A:13:2B:E6:A3 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a0:12:81:87:b0:39:41:ec:3e:f2:a7:cf:57:75:c7:15:b8: a1:82:48:eb:7d:25:91:cb:22:b0:fc:bb:c9:ba:83:ef:3c:b6: dc:5a:66:be:a4:9f:55:bb:0b:54:2a:f1:60:c6:98:f8:d4:7b: 6d:89:f1:a4:3f:a2:ec:b1:10:8f:8e:0a:77:31:91:7a:81:68: 2f:30:da:1b:16:60:7b:f5:20:3f:f9:d4:28:3e:92:b6:a0:b7: c8:d0:ac:b5:2a:2a:89:b4:e4:b3:96:f8:8b:9f:b2:45:32:25: d3:e2:9d:d8:64:62:2d:79:14:94:73:d1:07:14:af:e0:f8:93: 69:e8:22:0f:43:9d:96:1d:e0:0d:05:30:6c:78:23:0e:ea:30: 54:9d:e7:bf:fd:f8:fc:e6:82:cb:d6:4f:39:5b:5a:1c:6f:94: aa:da:d9:fc:6c:86:e8:ee:79:68:5e:5a:76:1c:86:f7:10:86: b1:52:80:ef:dc:46:b2:65:ca:26:d4:a7:c6:c9:eb:13:34:75: e4:fa:b2:e1:80:eb:90:29:2d:2c:bb:e3:9b:72:66:84:bd:ee: 3b:eb:5d:37:d6:9c:ac:83:78:9d:e0:45:2e:e0:cd:31:a3:b7: a9:11:ea:d4:75:de:0e:c4:47:5b:83:5e:71:b1:f3:d4:7d:c3: ce:1f:8b:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE69110PW5yYzolc/BSgi5+VLYSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTEwMTkwMDQ2MTVaFw0yNTEwMjIwNjUxMTVaMDMxMTAvBgNV BAMTKEJEM0M0MThEQkRFMjA1NDRFMDg5NDQ3M0U3RDM2OTdBMTMyQkU2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9lUHEB1vPotVYqR5dqi7QSjp HpAX/Bnqc5FyMIMnM5mpgIXxgV4HCf/tHSkMphTR7Cz/4MiyoyYJnOZJW0YTS21s P1WzIK/RxRBYa0arN/EGbji1eSJ9QP3ik/1cwHtW/GSlnit1gNwmjFmI/tmHATSp avCwq1ZJrQJoFc1HshRTuvp3RKmM/zEMYFpD6mzuyLn2Iuhu6j28QXwvPVHUwpZm 9J6hjUrgjvzqXhstJrz1wDzvxbMxgaU7F+iiChlMgreqPsaiHpKPCJdCxxAAX4v+ 0hGB+YyLoGt73EMHMdE5ww/hGsrAzjFug7ePqO1FzbxeDEuFtJEzI9INqFtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTxBjb3iBUTgiURz59NpehMr5qMwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADigEoGHsDlB7D7yp89XdccVuKGCSOt9JZHL IrD8u8m6g+88ttxaZr6kn1W7C1Qq8WDGmPjUe22J8aQ/ouyxEI+OCncxkXqBaC8w 2hsWYHv1ID/51Cg+kragt8jQrLUqKom05LOW+IufskUyJdPindhkYi15FJRz0QcU r+D4k2noIg9DnZYd4A0FMGx4Iw7qMFSd57/9+PzmgsvWTzlbWhxvlKra2fxshuju eWheWnYchvcQhrFSgO/cRrJlyibUp8bJ6xM0deT6suGA65ApLSy745tyZoS97jvr XTfWnKyDeJ3gRS7gzTGjt6kR6tR13g7ER1uDXnGx89R9w84fi0I= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:33 2025 by rpki-client