$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: 1qLtbQTvKY+yfaw9UPgw/aBPZdnrFmhK5te3oKX3lJk= Subject key identifier: A1:C0:14:F3:9C:8E:69:73:DA:C1:B4:36:83:F8:45:1C:9A:08:D7:96 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 27C8C9CA8C5EEE0D7B44E89F8F406CC63301AC54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 00:21:08 +0000 Manifest this update: Sun 19 Oct 2025 00:16:08 +0000 Manifest next update: Wed 22 Oct 2025 01:39:08 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 3: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: KXnOKgJNqAb5PO14zJwsyQYkql/zWQqTL5cBGyfA7JA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c8:c9:ca:8c:5e:ee:0d:7b:44:e8:9f:8f:40:6c:c6:33:01:ac:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Oct 19 00:16:08 2025 GMT Not After : Oct 22 01:39:08 2025 GMT Subject: CN=A1C014F39C8E6973DAC1B43683F8451C9A08D796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:f9:f1:6d:8e:1e:a2:65:af:4c:f3:29:9c: 28:7a:2e:be:4d:1c:d7:ec:6a:00:b5:dc:7c:02:aa: ab:cb:a4:71:08:7a:74:c3:c6:99:75:5f:9b:fa:6f: 84:d2:79:d5:db:99:b1:2b:8a:3f:ae:cd:90:72:59: b7:ca:00:4f:6f:de:76:9b:7a:36:cc:d8:35:ec:08: f7:b5:06:2d:18:7b:97:22:76:40:7a:3c:2b:bf:28: 83:ed:06:cf:4a:90:3c:73:91:de:8f:bc:3e:a8:fe: e2:b3:66:76:2c:66:b1:3a:14:d6:1e:18:4b:6b:bf: 41:08:da:28:36:2e:df:59:b7:c3:69:83:2e:7c:e7: 29:53:5f:f9:c1:ab:0c:c7:31:40:a0:e1:8d:a3:e1: 78:1d:1b:3c:0b:0b:8c:1a:5d:1b:f7:be:eb:f3:0b: c0:2a:75:ed:fe:8a:20:b3:2d:65:2c:1a:5b:e8:2e: 22:c2:0b:41:35:a7:c5:2e:eb:ce:54:aa:43:47:75: fe:89:a6:db:71:fe:77:75:09:2c:8d:e9:b9:06:c6: 24:24:e8:5f:2c:42:75:1f:ea:54:f7:30:dc:31:1f: 42:c6:7d:6f:d0:db:3d:85:eb:4f:e0:d7:49:fe:dc: 3b:71:59:ab:a1:d1:7d:b5:e2:14:07:24:0e:a4:59: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C0:14:F3:9C:8E:69:73:DA:C1:B4:36:83:F8:45:1C:9A:08:D7:96 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0c:31:40:b9:eb:f4:a1:05:02:18:fe:1b:01:e4:83:c8:ac: 93:23:c2:f0:7b:a8:1c:d6:3a:9b:ff:5a:4b:e1:12:bd:41:0b: 62:3f:1e:67:f5:c6:29:3d:b4:07:ad:bd:82:10:f2:e9:b6:92: e7:74:a2:b1:87:38:1d:9e:70:20:dc:77:34:b5:f8:06:ce:59: d0:2f:73:d8:9f:3e:f9:0f:ed:9c:63:f0:fe:9d:ce:5e:99:8c: 4c:5c:1b:70:88:16:2a:73:6b:45:c2:ba:6f:68:99:ab:af:2d: ad:c5:3d:67:db:b0:18:aa:bb:00:33:f6:ae:c1:b2:48:25:92: 56:3c:2e:91:eb:77:2d:f1:8e:d6:54:13:10:a5:33:e7:b4:ac: 94:64:02:8b:32:b6:5f:b0:9c:cd:0d:d3:44:7e:0a:cf:36:47: dd:76:8a:1a:93:1f:52:59:e5:0d:9b:08:a7:36:51:0b:ef:d4: 26:14:f3:e7:50:bb:c6:09:33:f0:24:67:1c:57:8d:03:00:6f: 5d:52:7e:57:78:ea:8f:d8:e3:48:56:3c:42:07:fd:6e:a2:41: fb:ea:18:f6:02:00:b8:98:d2:04:ba:ad:d8:ae:71:67:a7:82: 4c:ea:0b:8d:01:9e:91:19:09:3d:dd:71:09:71:dd:5d:28:04: 95:d8:eb:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8jJyoxe7g17ROifj0BsxjMBrFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTEwMTkwMDE2MDhaFw0yNTEwMjIwMTM5MDhaMDMxMTAvBgNV BAMTKEExQzAxNEYzOUM4RTY5NzNEQUMxQjQzNjgzRjg0NTFDOUEwOEQ3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZvnxbY4eomWvTPMpnCh6Lr5N HNfsagC13HwCqqvLpHEIenTDxpl1X5v6b4TSedXbmbErij+uzZByWbfKAE9v3nab ejbM2DXsCPe1Bi0Ye5cidkB6PCu/KIPtBs9KkDxzkd6PvD6o/uKzZnYsZrE6FNYe GEtrv0EI2ig2Lt9Zt8Npgy585ylTX/nBqwzHMUCg4Y2j4XgdGzwLC4waXRv3vuvz C8Aqde3+iiCzLWUsGlvoLiLCC0E1p8Uu685UqkNHdf6Jpttx/nd1CSyN6bkGxiQk 6F8sQnUf6lT3MNwxH0LGfW/Q2z2F60/g10n+3DtxWauh0X214hQHJA6kWSLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocAU85yOaXPawbQ2g/hFHJoI15YwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcMMUC56/ShBQIY/hsB5IPIrJMjwvB7qBzW Opv/WkvhEr1BC2I/Hmf1xik9tAetvYIQ8um2kud0orGHOB2ecCDcdzS1+AbOWdAv c9ifPvkP7Zxj8P6dzl6ZjExcG3CIFipza0XCum9omauvLa3FPWfbsBiquwAz9q7B skglklY8LpHrdy3xjtZUExClM+e0rJRkAosytl+wnM0N00R+Cs82R912ihqTH1JZ 5Q2bCKc2UQvv1CYU8+dQu8YJM/AkZxxXjQMAb11Sfld46o/Y40hWPEIH/W6iQfvq GPYCALiY0gS6rdiucWengkzqC40BnpEZCT3dcQlx3V0oBJXY6w4= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:09 2025 by rpki-client