$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: WkxGxvjKx46xO+3wtiCUQ9FOUNoZIF4aLBVFo1kUzTg= Subject key identifier: 77:B0:27:8A:BA:18:71:A7:2D:1C:20:06:B0:BA:2F:AA:B8:5E:84:25 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 2E952CD1C00120A1A5E351979760A734016A8644 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 020E Signing time: Sat 18 Oct 2025 10:12:19 +0000 Manifest this update: Sat 18 Oct 2025 10:07:19 +0000 Manifest next update: Tue 21 Oct 2025 15:28:19 +0000 Files and hashes: 1: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: 3hwScsIZwix6pQW8BhdiLAAPzGPUMcjBCfnj+nPUhu8=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:2c:d1:c0:01:20:a1:a5:e3:51:97:97:60:a7:34:01:6a:86:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Oct 18 10:07:19 2025 GMT Not After : Oct 21 15:28:19 2025 GMT Subject: CN=77B0278ABA1871A72D1C2006B0BA2FAAB85E8425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:bc:d7:37:d8:09:f4:22:9f:e0:60:26:4a: 1a:d2:1a:8c:3f:60:93:53:20:e3:f5:cd:66:74:98: 8c:61:8e:53:1a:13:3f:c4:01:ee:cf:67:c5:8d:31: b8:d1:09:ee:12:27:50:d2:af:6e:23:a7:c3:3b:da: b8:5a:39:09:8b:4e:6d:09:93:69:d3:b0:86:6d:60: 65:29:09:30:39:69:72:d7:bc:a2:ee:8b:46:54:7a: 73:6d:a5:dd:2c:68:4b:47:93:f0:3e:c0:fd:d8:b2: 6e:94:42:a4:9d:c1:4e:fd:1b:3a:32:a8:65:13:7c: bb:86:c5:32:63:86:37:47:1b:08:05:b7:9b:42:97: 15:ef:7a:2d:ec:88:71:61:ab:9b:3e:5a:53:15:f5: 67:1b:51:52:58:6e:3c:80:89:af:0d:5d:18:72:2b: 7b:28:3a:dd:3b:d7:82:85:fd:db:8e:4a:68:97:8c: 2e:64:bc:d1:fd:ea:44:c1:d3:b0:91:7f:29:d4:70: 53:3e:84:7e:ad:25:0b:9b:4c:ad:ff:04:97:62:bd: 50:f6:09:d9:57:af:fb:ed:15:a8:c7:30:d3:b0:c8: 5d:ac:64:62:67:a5:a6:fc:65:05:11:2d:6a:50:73: 1c:1b:ca:57:05:59:c9:26:15:d0:3f:8b:41:d7:ed: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:27:8A:BA:18:71:A7:2D:1C:20:06:B0:BA:2F:AA:B8:5E:84:25 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8e:b5:7c:47:89:91:50:d6:0b:20:bb:d0:ba:70:34:9c:fe: 4c:50:5c:1e:4e:ae:8c:27:9f:c1:7c:d6:ee:d1:7e:d9:e2:53: f0:51:94:3a:9e:b4:1b:ff:47:99:be:6c:99:c6:e4:43:bb:08: 4b:5f:75:61:0f:78:85:ff:f3:61:72:5f:04:02:dd:12:0e:36: bf:82:99:2a:3b:ee:d3:fb:91:86:71:00:e3:29:cf:8b:ec:61: 2b:2a:38:01:70:0f:5e:6a:0e:71:4b:a3:c0:31:89:43:37:02: 87:5c:82:67:ca:0f:67:a4:4c:78:a8:20:6d:6f:a6:38:0c:16: 42:6b:df:7c:39:99:84:4e:02:48:3c:92:0a:58:c2:00:47:5c: b4:f3:8d:20:c0:e4:54:31:bd:de:87:f4:43:76:3e:8d:e4:19: be:5e:24:9a:a4:40:6f:b9:e9:46:f5:4c:3d:b6:ed:f7:d7:c8: 85:1f:ff:3f:11:01:f2:42:6b:34:c1:1b:1d:bb:6e:4b:d8:62: ac:99:ae:21:da:a1:d3:76:be:df:eb:06:6e:23:5a:38:39:00: 53:48:0b:d3:65:e4:af:84:c4:85:d2:72:2a:c7:b7:8d:40:9b: 05:7b:15:51:c1:2d:e1:0a:03:49:38:78:0b:2a:d1:1c:25:1e: b2:ac:9b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpUs0cABIKGl41GXl2CnNAFqhkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNTEwMTgxMDA3MTlaFw0yNTEwMjExNTI4MTlaMDMxMTAvBgNV BAMTKDc3QjAyNzhBQkExODcxQTcyRDFDMjAwNkIwQkEyRkFBQjg1RTg0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUbzXN9gJ9CKf4GAmShrSGow/ YJNTIOP1zWZ0mIxhjlMaEz/EAe7PZ8WNMbjRCe4SJ1DSr24jp8M72rhaOQmLTm0J k2nTsIZtYGUpCTA5aXLXvKLui0ZUenNtpd0saEtHk/A+wP3Ysm6UQqSdwU79Gzoy qGUTfLuGxTJjhjdHGwgFt5tClxXvei3siHFhq5s+WlMV9WcbUVJYbjyAia8NXRhy K3soOt0714KF/duOSmiXjC5kvNH96kTB07CRfynUcFM+hH6tJQubTK3/BJdivVD2 CdlXr/vtFajHMNOwyF2sZGJnpab8ZQURLWpQcxwbylcFWckmFdA/i0HX7UOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7AniroYcactHCAGsLovqrhehCUwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuOtXxHiZFQ1gsgu9C6cDSc/kxQXB5Orown n8F81u7RftniU/BRlDqetBv/R5m+bJnG5EO7CEtfdWEPeIX/82FyXwQC3RIONr+C mSo77tP7kYZxAOMpz4vsYSsqOAFwD15qDnFLo8AxiUM3AodcgmfKD2ekTHioIG1v pjgMFkJr33w5mYROAkg8kgpYwgBHXLTzjSDA5FQxvd6H9EN2Po3kGb5eJJqkQG+5 6Ub1TD227ffXyIUf/z8RAfJCazTBGx27bkvYYqyZriHaodN2vt/rBm4jWjg5AFNI C9Nl5K+ExIXScirHt41AmwV7FVHBLeEKA0k4eAsq0RwlHrKsmyc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:23 2025 by rpki-client