$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: nLvLIn1BJ6EqNFB2wmptZ4gBqN+v0fb4Cl2XqT//pV8= Subject key identifier: 10:02:C5:F6:56:25:48:8A:AE:C2:F9:8B:3B:E4:C1:12:E0:1F:36:F5 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 37A1B68B4312576AF4210ADE9E230AB66D215FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0178 Signing time: Sun 19 Oct 2025 00:20:36 +0000 Manifest this update: Sun 19 Oct 2025 00:15:36 +0000 Manifest next update: Wed 22 Oct 2025 05:34:36 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: ax+0910dZe/OakDhm3BGa2o5KXNDSm4lMEBlu2Rmr5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a1:b6:8b:43:12:57:6a:f4:21:0a:de:9e:23:0a:b6:6d:21:5f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Oct 19 00:15:36 2025 GMT Not After : Oct 22 05:34:36 2025 GMT Subject: CN=1002C5F65625488AAEC2F98B3BE4C112E01F36F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:a2:0e:15:84:5e:4e:e1:c7:98:08:be:d9: 85:35:ec:05:14:4d:80:29:6a:d3:e8:bc:98:8d:3b: fd:6c:ee:c7:66:c5:30:9f:36:36:8f:36:5d:24:16: 66:37:4f:a0:32:d9:91:e4:fc:1b:78:dd:a7:01:a5: 6d:3a:60:38:67:b5:62:46:03:7b:da:1a:bd:51:f6: ce:16:e2:3d:d2:7d:5f:e6:1d:74:0c:0b:e8:26:85: 3c:b2:3b:89:fc:93:b5:fc:b8:9c:b8:07:df:a4:e7: 5a:9d:63:06:95:61:ff:22:da:dc:08:6c:5f:cf:9f: 2e:f4:d8:c3:4f:65:3a:e8:e4:78:57:52:be:0f:c1: 16:66:87:c2:68:1b:1f:9e:6b:da:cc:43:12:c8:6e: c8:a8:2b:a3:f6:35:6a:3b:b6:42:64:c4:f5:b5:0b: 09:8f:c2:05:4d:ad:2f:00:6b:30:69:de:b4:23:b0: b8:01:8b:92:59:65:a1:19:19:33:6c:35:4d:e4:a7: f5:f4:bc:60:8a:bc:d5:46:e1:a6:34:61:1d:cf:6d: 85:14:76:ca:c9:6d:f8:9a:6e:ba:72:a2:d2:4c:cd: a3:9b:5c:3c:18:bf:87:36:a0:b9:dd:12:a2:ae:7f: 9b:99:83:dc:51:98:f6:f9:4a:21:03:c0:92:0e:06: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:02:C5:F6:56:25:48:8A:AE:C2:F9:8B:3B:E4:C1:12:E0:1F:36:F5 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:bf:de:dc:0a:69:e7:c6:81:bb:84:44:bf:ef:3b:c8:da: 44:15:fc:e1:30:b2:12:63:56:1e:60:bc:65:de:11:a8:fe:ba: ab:de:cb:8c:ca:46:58:19:56:1a:85:93:49:e6:4b:bd:1b:50: a8:ed:ba:e6:e4:98:24:e3:c8:f2:75:cc:5b:c5:6b:e4:75:72: 61:a4:c1:bd:2b:32:86:9c:e6:b5:b1:81:83:68:3a:7e:ec:64: 5d:2e:e4:5d:a9:b8:90:13:d2:d8:79:7f:42:e6:8d:c3:aa:9a: 86:ec:4d:28:b5:17:cc:32:21:a2:e4:e0:c4:d4:4e:27:88:e7: 4b:6e:bf:6b:33:c7:8f:3f:b4:35:ee:bd:0a:57:10:12:73:d5: e7:06:f7:0e:be:f0:36:15:27:e6:33:b8:b8:be:ee:21:92:37: c6:08:0a:c4:9f:af:f2:6f:1e:a5:1e:fd:a7:0b:ef:66:7b:30: 87:f3:25:e7:ec:f3:b5:9b:88:d8:02:b9:b9:57:5b:64:d4:71: e2:0e:f3:5c:9e:6b:e1:f8:6b:b3:68:b4:01:1b:e3:97:e3:86: dd:59:cc:2b:3c:59:89:a5:9c:e0:3f:07:d1:5c:1d:db:6a:4c: af:c5:ce:56:cc:69:08:f2:7c:23:af:f4:f2:d1:05:f0:56:11: b0:17:65:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6G2i0MSV2r0IQreniMKtm0hX8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTEwMTkwMDE1MzZaFw0yNTEwMjIwNTM0MzZaMDMxMTAvBgNV BAMTKDEwMDJDNUY2NTYyNTQ4OEFBRUMyRjk4QjNCRTRDMTEyRTAxRjM2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KaIOFYReTuHHmAi+2YU17AUU TYApatPovJiNO/1s7sdmxTCfNjaPNl0kFmY3T6Ay2ZHk/Bt43acBpW06YDhntWJG A3vaGr1R9s4W4j3SfV/mHXQMC+gmhTyyO4n8k7X8uJy4B9+k51qdYwaVYf8i2twI bF/Pny702MNPZTro5HhXUr4PwRZmh8JoGx+ea9rMQxLIbsioK6P2NWo7tkJkxPW1 CwmPwgVNrS8AazBp3rQjsLgBi5JZZaEZGTNsNU3kp/X0vGCKvNVG4aY0YR3PbYUU dsrJbfiabrpyotJMzaObXDwYv4c2oLndEqKuf5uZg9xRmPb5SiEDwJIOBrV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEALF9lYlSIquwvmLO+TBEuAfNvUwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHxv97cCmnnxoG7hES/7zvI2kQV/OEwshJj Vh5gvGXeEaj+uqvey4zKRlgZVhqFk0nmS70bUKjtuubkmCTjyPJ1zFvFa+R1cmGk wb0rMoac5rWxgYNoOn7sZF0u5F2puJAT0th5f0LmjcOqmobsTSi1F8wyIaLk4MTU TieI50tuv2szx48/tDXuvQpXEBJz1ecG9w6+8DYVJ+YzuLi+7iGSN8YICsSfr/Jv HqUe/acL72Z7MIfzJefs87WbiNgCublXW2TUceIO81yea+H4a7NotAEb45fjht1Z zCs8WYmlnOA/B9FcHdtqTK/FzlbMaQjyfCOv9PLRBfBWEbAXZVo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:01 2025 by rpki-client