$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: KvlddMbuKimvu6BimL2JqB6RLMhXjy6v+62Jr43AHx4= Subject key identifier: E3:25:49:3D:DA:F8:41:5D:65:A9:3F:34:C6:51:FF:36:22:31:3F:39 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 038811C43CF9B75ED9E8DBB09E3C12149AF577BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: EA Signing time: Sat 18 Oct 2025 02:21:01 +0000 Manifest this update: Sat 18 Oct 2025 02:16:01 +0000 Manifest next update: Tue 21 Oct 2025 11:37:01 +0000 Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 3: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: yt3wb+6y1QCXp1R2uwShWzgorwiPpcuPLqOiGZnvxSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:88:11:c4:3c:f9:b7:5e:d9:e8:db:b0:9e:3c:12:14:9a:f5:77:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Oct 18 02:16:01 2025 GMT Not After : Oct 21 11:37:01 2025 GMT Subject: CN=E325493DDAF8415D65A93F34C651FF3622313F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:78:e4:1f:60:b5:bf:0d:08:cd:b9:4c:e2: 31:21:5a:a6:ec:0a:c1:4f:78:b5:44:b7:d1:e5:39: 9d:71:88:bd:ed:74:a1:d2:f4:48:39:4a:1c:d0:b3: 18:bb:89:8d:d3:46:8a:54:f7:4d:35:85:09:a0:77: ab:48:57:5c:18:2c:58:13:59:a6:27:18:66:38:17: cc:9c:39:ce:e0:80:2d:78:cd:c8:a0:79:36:e7:cf: 93:78:26:62:64:02:a1:55:09:fc:62:43:58:09:0e: 9d:c0:76:2c:05:3d:66:2c:10:61:d3:d6:26:3d:bc: 63:ee:b4:68:36:8f:dd:af:72:ad:99:d5:3c:e4:9f: 08:64:4f:45:b3:37:3a:33:51:22:38:a2:4f:a5:b1: a8:07:40:b4:09:3c:8a:a0:d7:94:e5:c0:fe:69:67: df:c9:33:26:af:90:7a:6c:5d:53:d2:98:f7:12:38: d6:0e:af:e8:2e:16:eb:45:0b:9e:15:d8:f0:27:f8: bb:c2:ad:83:93:ff:13:e1:98:01:6c:12:e0:9d:77: ad:61:2e:f6:4c:8a:63:56:33:45:12:29:7b:eb:2f: 44:8c:c8:b3:55:5a:38:b8:c4:bd:af:8e:ae:58:48: ac:e9:2d:b1:ff:16:04:c8:5a:34:66:dd:08:e6:83: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:25:49:3D:DA:F8:41:5D:65:A9:3F:34:C6:51:FF:36:22:31:3F:39 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9e:7a:8a:d0:e6:c8:5c:0b:2d:6f:1c:d1:ae:a7:cf:9a:60: cd:d6:7e:d4:72:22:89:28:bd:87:a6:57:26:a2:07:90:0c:7e: 1e:e6:96:55:15:b6:18:3c:6d:5c:62:50:96:ad:f6:ea:87:6b: 9f:87:4e:68:fd:b8:d3:36:70:12:25:e4:1c:3f:63:6e:e3:91: bb:8a:0d:07:1c:39:9a:c2:41:12:90:ae:d1:be:90:f5:c4:05: 81:af:b6:44:44:e7:9a:c6:92:0b:2a:f3:85:dc:aa:43:71:bf: 25:71:0f:6b:81:4e:d3:ea:2a:65:b4:2d:5a:c4:b7:c7:5c:0a: 8f:fc:c8:8f:24:f4:de:19:fd:2d:d2:81:fb:ed:8e:47:a5:80: 97:76:57:b9:80:3e:d1:b9:30:8a:0e:e4:95:6f:5b:80:69:3b: d6:09:07:8a:97:9d:e1:3d:fd:de:51:8a:2b:c6:4d:b8:22:95: 85:4a:b5:54:d5:91:4d:ea:bc:3e:cb:5c:3e:22:d8:e7:9a:14: 12:ba:44:c9:3f:b3:b1:b5:db:ca:da:99:bf:58:96:61:1d:46: 67:70:4c:98:ef:f4:4d:24:ee:7e:40:ea:a6:a9:1f:e7:c2:cb: 64:7e:e4:04:ea:03:c3:37:1d:e9:87:10:92:c6:70:53:a3:00: bd:23:54:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4gRxDz5t17Z6NuwnjwSFJr1d70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTEwMTgwMjE2MDFaFw0yNTEwMjExMTM3MDFaMDMxMTAvBgNV BAMTKEUzMjU0OTNEREFGODQxNUQ2NUE5M0YzNEM2NTFGRjM2MjIzMTNGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBXjkH2C1vw0IzblM4jEhWqbs CsFPeLVEt9HlOZ1xiL3tdKHS9Eg5ShzQsxi7iY3TRopU9001hQmgd6tIV1wYLFgT WaYnGGY4F8ycOc7ggC14zcigeTbnz5N4JmJkAqFVCfxiQ1gJDp3AdiwFPWYsEGHT 1iY9vGPutGg2j92vcq2Z1TzknwhkT0WzNzozUSI4ok+lsagHQLQJPIqg15TlwP5p Z9/JMyavkHpsXVPSmPcSONYOr+guFutFC54V2PAn+LvCrYOT/xPhmAFsEuCdd61h LvZMimNWM0USKXvrL0SMyLNVWji4xL2vjq5YSKzpLbH/FgTIWjRm3Qjmg+/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4yVJPdr4QV1lqT80xlH/NiIxPzkwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyeeorQ5shcCy1vHNGup8+aYM3WftRyIoko vYemVyaiB5AMfh7mllUVthg8bVxiUJat9uqHa5+HTmj9uNM2cBIl5Bw/Y27jkbuK DQccOZrCQRKQrtG+kPXEBYGvtkRE55rGkgsq84XcqkNxvyVxD2uBTtPqKmW0LVrE t8dcCo/8yI8k9N4Z/S3SgfvtjkelgJd2V7mAPtG5MIoO5JVvW4BpO9YJB4qXneE9 /d5RiivGTbgilYVKtVTVkU3qvD7LXD4i2OeaFBK6RMk/s7G128ramb9YlmEdRmdw TJjv9E0k7n5A6qapH+fCy2R+5ATqA8M3HemHEJLGcFOjAL0jVAU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:31 2025 by rpki-client