$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: IpQCuZppFL5ADdkGThN2aKCopssDxtmd4O2JCC45tzQ= Subject key identifier: 28:FB:32:07:54:4B:C2:8B:26:70:A4:3F:AF:7F:02:34:E2:5F:CE:1D Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 7A474826EFD22E44547E2E9479664DB6C3B01983 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0141 Signing time: Mon 20 Oct 2025 08:11:18 +0000 Manifest this update: Mon 20 Oct 2025 08:06:18 +0000 Manifest next update: Thu 23 Oct 2025 15:10:18 +0000 Files and hashes: 1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: o03GaRpglmdRih5KfEwA98cPs551ETzY2GDdw+9lsG8=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:47:48:26:ef:d2:2e:44:54:7e:2e:94:79:66:4d:b6:c3:b0:19:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Oct 20 08:06:18 2025 GMT Not After : Oct 23 15:10:18 2025 GMT Subject: CN=28FB3207544BC28B2670A43FAF7F0234E25FCE1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:0c:fb:13:fb:5b:67:4d:53:79:c7:c0:05: 8a:29:2e:0d:cc:1a:42:8a:76:a1:89:2d:cd:2f:95: e8:94:d9:c7:cd:03:37:21:a8:f1:31:8d:0b:12:cb: 26:d9:f2:e5:00:f6:94:e3:56:e4:0c:f1:c6:f7:93: 9d:69:81:bc:fb:0a:a9:7d:c3:f6:6b:0c:07:5f:7e: 94:fa:0d:d7:ca:1f:87:ed:b7:23:2d:7b:96:55:15: 20:c0:19:63:b5:d6:63:d0:1f:39:d5:67:5c:ba:a2: 68:0d:44:1e:56:04:57:7e:9d:39:48:3b:53:3f:db: dd:ae:e4:7a:76:df:62:c2:b4:cb:62:8c:99:57:02: db:16:e6:04:68:b3:3c:fe:54:58:6b:68:9c:6d:f0: 38:3e:63:e4:4e:d5:9f:c8:0d:64:df:d9:43:f0:2b: 41:fb:fd:1a:6c:c0:9e:fe:c2:47:46:26:3b:97:c3: e3:fe:10:42:70:1d:4a:e9:46:75:1f:11:2b:0c:4f: 85:ac:59:9a:17:1e:22:3f:17:37:61:05:1b:1b:3c: 8b:15:a0:01:b4:8a:71:29:6d:80:43:ea:53:71:c6: 9a:ef:3f:32:f7:52:e8:31:6f:05:6e:b4:88:2b:43: 3d:e1:d9:93:b2:44:97:3d:a1:84:1b:34:89:14:73: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FB:32:07:54:4B:C2:8B:26:70:A4:3F:AF:7F:02:34:E2:5F:CE:1D X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:7e:87:67:8b:38:10:e7:42:19:88:9a:5b:a6:d2:33:cf: 2c:e7:6b:e7:42:45:7f:ee:c2:68:55:6c:10:4b:a8:99:81:52: 6b:76:3f:99:2a:6b:9c:8d:ff:70:18:28:c3:ff:04:3f:de:3e: 02:19:0b:5a:6f:e6:02:ae:2e:f9:36:e8:b3:fa:8a:c9:76:f4: fb:92:47:c0:60:47:00:a4:be:bd:98:3c:c5:c1:2e:ae:f8:91: b1:68:40:43:ec:a7:48:e0:63:20:9b:9d:57:06:09:d7:74:90: 7c:19:c0:93:32:03:d8:98:91:14:24:24:82:cd:02:12:23:ab: 3c:dd:be:55:9b:1b:b8:6d:be:f3:06:45:e8:8c:a1:2f:14:a8: 8a:e2:e2:e8:81:d9:ae:15:66:fd:a5:ff:87:97:99:37:49:b0: 3f:7f:13:4b:90:72:1b:b8:4e:f6:5c:18:94:35:e2:1a:f0:d5: b2:18:3c:8f:aa:b8:f5:4f:8f:b4:80:f4:5f:94:94:55:ac:7b: 1b:cc:a4:e7:00:98:c7:3f:f0:81:f7:77:73:72:1d:52:8a:cc: 37:6b:fd:02:46:c0:9d:aa:66:8b:64:71:9e:ec:62:34:e5:27: 83:03:17:1e:3c:8c:b1:d0:58:c0:b3:77:d0:5c:a8:5a:39:53: 2f:f2:42:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekdIJu/SLkRUfi6UeWZNtsOwGYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTEwMjAwODA2MThaFw0yNTEwMjMxNTEwMThaMDMxMTAvBgNV BAMTKDI4RkIzMjA3NTQ0QkMyOEIyNjcwQTQzRkFGN0YwMjM0RTI1RkNFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHAz7E/tbZ01TecfABYopLg3M GkKKdqGJLc0vleiU2cfNAzchqPExjQsSyybZ8uUA9pTjVuQM8cb3k51pgbz7Cql9 w/ZrDAdffpT6DdfKH4fttyMte5ZVFSDAGWO11mPQHznVZ1y6omgNRB5WBFd+nTlI O1M/292u5Hp232LCtMtijJlXAtsW5gRoszz+VFhraJxt8Dg+Y+RO1Z/IDWTf2UPw K0H7/RpswJ7+wkdGJjuXw+P+EEJwHUrpRnUfESsMT4WsWZoXHiI/FzdhBRsbPIsV oAG0inEpbYBD6lNxxprvPzL3UugxbwVutIgrQz3h2ZOyRJc9oYQbNIkUc2z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPsyB1RLwosmcKQ/r38CNOJfzh0wHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ27fodnizgQ50IZiJpbptIzzyzna+dCRX/u wmhVbBBLqJmBUmt2P5kqa5yN/3AYKMP/BD/ePgIZC1pv5gKuLvk26LP6isl29PuS R8BgRwCkvr2YPMXBLq74kbFoQEPsp0jgYyCbnVcGCdd0kHwZwJMyA9iYkRQkJILN AhIjqzzdvlWbG7htvvMGReiMoS8UqIri4uiB2a4VZv2l/4eXmTdJsD9/E0uQchu4 TvZcGJQ14hrw1bIYPI+quPVPj7SA9F+UlFWsexvMpOcAmMc/8IH3d3NyHVKKzDdr /QJGwJ2qZotkcZ7sYjTlJ4MDFx48jLHQWMCzd9BcqFo5Uy/yQsc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:14 2025 by rpki-client