$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: o4qO7/8C5oFehSL+imlo20IfAhoMvpC3KOEHWSwvzS0= Subject key identifier: C3:7D:4F:72:D1:44:BF:5E:04:64:8A:95:1A:36:2E:48:A6:21:96:AF Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 7A9B9862732A660E269E038FC532F197053EE047 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01D3 Signing time: Sat 18 Oct 2025 15:02:22 +0000 Manifest this update: Sat 18 Oct 2025 14:57:22 +0000 Manifest next update: Tue 21 Oct 2025 18:01:22 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: YRHAgsyGIgPSK9r9+yf9LYi1M5ebZXJg5Udq9v7f+/c=) 2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 4: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9b:98:62:73:2a:66:0e:26:9e:03:8f:c5:32:f1:97:05:3e:e0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Oct 18 14:57:22 2025 GMT Not After : Oct 21 18:01:22 2025 GMT Subject: CN=C37D4F72D144BF5E04648A951A362E48A62196AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:d6:08:03:4f:24:9e:3c:91:07:08:3f:9a: f3:1c:45:df:8d:62:73:80:a9:f0:22:47:f7:62:1d: fa:30:52:66:fd:d4:01:fe:e5:f2:63:18:75:14:18: ba:ad:00:58:8c:cb:25:2c:4c:1e:5b:e8:78:dd:2d: f7:ac:ed:9b:e1:78:26:2b:32:77:11:84:6c:3a:eb: 2f:d9:64:f0:d6:e0:c7:d7:63:35:f6:0f:54:fe:0c: 6f:e3:d4:a9:59:32:67:f8:fe:8d:6b:3e:e8:56:36: 24:4a:26:ad:6b:11:07:f7:44:e2:bb:47:4e:20:25: 33:76:16:7a:f1:f1:cb:6d:b5:27:28:12:3c:c9:35: a7:4a:01:e1:09:da:04:5a:36:25:9b:ce:19:27:a4: ca:86:bb:b0:3b:69:03:66:a9:de:33:3b:ce:a2:63: af:38:43:89:26:8c:35:ad:c2:f2:73:52:31:ae:db: 92:3b:30:27:5e:f3:75:33:8d:58:13:3f:30:48:04: ac:14:07:89:33:e0:99:4e:fd:5e:c7:a8:a7:ed:2b: ef:db:3e:b5:8f:a2:c8:ba:c9:5b:c3:08:88:5b:4a: 73:40:05:a2:f7:72:97:0b:b6:f6:2d:fd:ff:8b:2f: 34:55:dd:32:9b:12:50:4c:37:7a:ad:07:16:87:e4: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7D:4F:72:D1:44:BF:5E:04:64:8A:95:1A:36:2E:48:A6:21:96:AF X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:98:40:d7:47:93:d3:aa:b0:a9:07:35:41:0a:d1:63:0b:45: 57:13:7c:a7:b5:54:4c:1d:0b:96:52:f5:41:80:97:44:ca:e6: a5:e3:17:e5:b9:5f:0c:e8:d2:2e:2e:de:78:27:1a:04:f7:69: b1:ae:52:ed:f4:3d:35:64:21:1e:cc:48:89:40:06:ed:87:d3: 22:b3:9f:d6:1d:d4:a1:d5:23:97:a0:e2:85:b2:9b:d8:de:d5: a2:b5:62:ba:db:61:b5:9e:42:00:20:5c:61:91:57:ca:76:8b: 19:e9:8b:37:ea:1a:95:00:b5:5a:94:52:72:32:12:00:e6:0d: d3:63:17:56:9e:47:d4:5e:91:09:e9:9b:48:82:ed:42:a3:09: 8d:18:ac:de:4e:ea:ab:4f:ab:35:d5:47:d2:bc:d6:61:cc:d6: 80:ca:4c:9e:5f:99:43:02:34:ad:d1:f8:bb:b9:05:0e:45:92: e7:e5:d2:a4:0b:db:42:7a:91:93:2f:d7:e5:93:53:cf:63:33: f7:55:3c:48:82:66:ad:58:cb:b1:31:37:7c:a7:d2:96:dd:77: 10:69:18:14:24:81:77:71:15:40:54:19:c7:d8:18:e5:e9:ab: 53:3e:c9:32:b1:20:59:ee:31:15:86:65:92:e0:72:4d:7e:44: 64:8e:70:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepuYYnMqZg4mngOPxTLxlwU+4EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTEwMTgxNDU3MjJaFw0yNTEwMjExODAxMjJaMDMxMTAvBgNV BAMTKEMzN0Q0RjcyRDE0NEJGNUUwNDY0OEE5NTFBMzYyRTQ4QTYyMTk2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgNYIA08knjyRBwg/mvMcRd+N YnOAqfAiR/diHfowUmb91AH+5fJjGHUUGLqtAFiMyyUsTB5b6HjdLfes7ZvheCYr MncRhGw66y/ZZPDW4MfXYzX2D1T+DG/j1KlZMmf4/o1rPuhWNiRKJq1rEQf3ROK7 R04gJTN2Fnrx8ctttScoEjzJNadKAeEJ2gRaNiWbzhknpMqGu7A7aQNmqd4zO86i Y684Q4kmjDWtwvJzUjGu25I7MCde83UzjVgTPzBIBKwUB4kz4JlO/V7HqKftK+/b PrWPosi6yVvDCIhbSnNABaL3cpcLtvYt/f+LLzRV3TKbElBMN3qtBxaH5BlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw31PctFEv14EZIqVGjYuSKYhlq8wHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGYQNdHk9OqsKkHNUEK0WMLRVcTfKe1VEwd C5ZS9UGAl0TK5qXjF+W5Xwzo0i4u3ngnGgT3abGuUu30PTVkIR7MSIlABu2H0yKz n9Yd1KHVI5eg4oWym9je1aK1YrrbYbWeQgAgXGGRV8p2ixnpizfqGpUAtVqUUnIy EgDmDdNjF1aeR9RekQnpm0iC7UKjCY0YrN5O6qtPqzXVR9K81mHM1oDKTJ5fmUMC NK3R+Lu5BQ5Fkufl0qQL20J6kZMv1+WTU89jM/dVPEiCZq1Yy7ExN3yn0pbddxBp GBQkgXdxFUBUGcfYGOXpq1M+yTKxIFnuMRWGZZLgck1+RGSOcBk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:30 2025 by rpki-client