$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: bwF4OjMCAue4Exsm2TC2U3yL1DAhkxq3rjckAyTSZ1A= Subject key identifier: 85:A2:C3:31:F4:1E:0D:6B:76:5E:B5:28:09:10:F5:8D:C7:85:AF:7F Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 740D7E0929DAC6A4C4CEB9241A2C4F9D6D95FA6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0326 Signing time: Sat 18 Oct 2025 17:21:38 +0000 Manifest this update: Sat 18 Oct 2025 17:16:38 +0000 Manifest next update: Tue 21 Oct 2025 21:06:38 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: cBS1hF9j8+x96nk/xw0D2hYAQNVhL30NVHsL3Z1AGD4=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:7e:09:29:da:c6:a4:c4:ce:b9:24:1a:2c:4f:9d:6d:95:fa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Oct 18 17:16:38 2025 GMT Not After : Oct 21 21:06:38 2025 GMT Subject: CN=85A2C331F41E0D6B765EB5280910F58DC785AF7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:27:08:c6:3f:e0:31:4b:8e:23:97:69:82: ee:ae:e0:3c:1c:41:c1:cf:f1:4e:6f:25:08:65:7a: ab:10:58:ea:91:59:9c:5f:af:2f:2b:c5:cb:6a:14: 11:dc:f2:b1:e2:c6:a1:a5:12:dd:9b:d5:12:4b:06: 62:96:08:82:81:00:b7:7b:5d:07:68:55:42:19:75: 91:76:f3:f8:06:90:6e:5b:d1:4a:86:c2:d9:82:85: 32:a9:eb:e2:33:d0:2c:c5:ff:ad:fc:f5:3c:e3:60: a4:b4:a4:0d:96:da:ca:6d:bb:98:bc:a9:91:fe:4b: dc:79:25:1d:a7:b2:5f:43:c8:ba:c4:6c:06:2f:e4: 48:82:f7:2a:b0:81:3a:5d:91:eb:5c:de:03:15:49: 01:fe:ce:3e:43:64:ff:2a:15:04:cf:c9:08:dd:ab: 63:74:3c:65:07:1b:e5:6b:1e:45:dd:50:37:b7:43: c4:3d:3d:90:fd:c1:da:62:d4:66:e8:ca:42:6a:61: ea:d9:e9:36:ec:c5:75:cf:eb:77:7c:72:b9:09:fb: 41:a0:c3:8b:7c:df:ef:de:5d:8d:2c:09:cb:37:a9: 6e:a2:4a:15:f2:a8:2c:7d:36:6b:31:85:a9:33:7e: 9b:c6:31:0b:31:2d:b6:31:36:88:0a:b3:00:1d:0e: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:C3:31:F4:1E:0D:6B:76:5E:B5:28:09:10:F5:8D:C7:85:AF:7F X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f0:15:2e:e8:44:5a:7b:6a:00:40:27:9a:48:8e:2f:f1:b8: d4:0a:61:eb:16:eb:f3:0c:9d:dd:12:1d:0f:95:6a:9f:94:7f: 18:5c:d6:74:e3:c3:3e:47:83:e0:34:58:7a:9b:34:fd:85:bb: 9d:28:8b:7b:df:0c:a7:57:45:b9:fd:5e:62:27:a4:2f:26:e3: e0:e5:83:63:20:74:11:ad:c9:40:0c:4b:11:a9:e9:22:c7:e1: 1a:c8:dd:88:b7:1d:56:f0:ff:e4:16:4b:af:a1:fb:dd:dc:6a: 40:cc:4f:c4:c5:52:a9:7a:db:24:b2:56:8d:87:e1:1f:11:c0: ab:99:fa:de:24:02:6b:b1:74:ff:ff:76:93:4e:d9:64:6f:a2: dc:4b:60:67:e8:c5:8b:82:34:c0:43:d0:2d:38:fa:f7:75:97: 22:24:4b:17:3d:b0:4b:de:56:f9:2b:81:d4:5d:b6:7f:f9:07: 54:53:32:70:f2:05:dc:0b:71:74:f8:ea:45:28:28:3b:d2:73: c1:08:39:fc:df:78:7e:78:e1:eb:55:fd:94:0a:2d:5f:0f:04: ee:fa:5b:9a:45:7e:b6:3f:cf:2c:ec:b7:02:02:5a:fe:9d:5c: 69:9e:13:67:f5:fa:a9:c0:9d:7a:53:c0:90:ea:4e:ed:cb:c0: c8:61:91:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdA1+CSnaxqTEzrkkGixPnW2V+m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTEwMTgxNzE2MzhaFw0yNTEwMjEyMTA2MzhaMDMxMTAvBgNV BAMTKDg1QTJDMzMxRjQxRTBENkI3NjVFQjUyODA5MTBGNThEQzc4NUFGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFycIxj/gMUuOI5dpgu6u4Dwc QcHP8U5vJQhleqsQWOqRWZxfry8rxctqFBHc8rHixqGlEt2b1RJLBmKWCIKBALd7 XQdoVUIZdZF28/gGkG5b0UqGwtmChTKp6+Iz0CzF/6389TzjYKS0pA2W2sptu5i8 qZH+S9x5JR2nsl9DyLrEbAYv5EiC9yqwgTpdketc3gMVSQH+zj5DZP8qFQTPyQjd q2N0PGUHG+VrHkXdUDe3Q8Q9PZD9wdpi1GboykJqYerZ6TbsxXXP63d8crkJ+0Gg w4t83+/eXY0sCcs3qW6iShXyqCx9NmsxhakzfpvGMQsxLbYxNogKswAdDlq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhaLDMfQeDWt2XrUoCRD1jceFr38wHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/wFS7oRFp7agBAJ5pIji/xuNQKYesW6/MM nd0SHQ+Vap+Ufxhc1nTjwz5Hg+A0WHqbNP2Fu50oi3vfDKdXRbn9XmInpC8m4+Dl g2MgdBGtyUAMSxGp6SLH4RrI3Yi3HVbw/+QWS6+h+93cakDMT8TFUql62ySyVo2H 4R8RwKuZ+t4kAmuxdP//dpNO2WRvotxLYGfoxYuCNMBD0C04+vd1lyIkSxc9sEve VvkrgdRdtn/5B1RTMnDyBdwLcXT46kUoKDvSc8EIOfzfeH544etV/ZQKLV8PBO76 W5pFfrY/zyzstwICWv6dXGmeE2f1+qnAnXpTwJDqTu3LwMhhkec= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:31 2025 by rpki-client