$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: ZbOMIBRj7qk13VJB7+nddI8yIEnjcPfokWqewI5CLk8= Subject key identifier: 3F:7D:DD:E2:54:D0:2F:F2:B6:67:D8:B1:14:00:40:C5:1D:0D:DC:8A Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 49AE446884FE1D02041752E270B502B6C51D95E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 18:50:05 +0000 Manifest this update: Sun 19 Oct 2025 18:45:05 +0000 Manifest next update: Wed 22 Oct 2025 20:32:05 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: hfd2kEcZ1/NCNrBHa3RDkL1/ey7qM+qesg+MOzkNc/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ae:44:68:84:fe:1d:02:04:17:52:e2:70:b5:02:b6:c5:1d:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Oct 19 18:45:05 2025 GMT Not After : Oct 22 20:32:05 2025 GMT Subject: CN=3F7DDDE254D02FF2B667D8B1140040C51D0DDC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:2e:d0:6a:85:a0:10:1d:46:d7:b9:0b:36: e5:9c:ff:de:b4:47:fa:38:81:da:d6:06:85:fc:3c: 1a:6c:86:d4:49:dd:79:df:34:20:79:f9:3c:93:dc: 72:6c:ee:e0:09:05:a2:f8:1d:c4:74:82:f7:f7:13: 64:60:0e:76:4e:c8:9f:35:95:ce:dd:0d:0b:7a:42: 2d:cd:e4:ea:67:e4:a3:dd:5b:b9:75:48:25:25:87: 3b:1d:1b:05:41:e1:68:b5:7d:e7:9a:4e:bf:cc:34: 7d:b0:96:51:ce:9b:27:04:02:e9:72:84:39:7d:67: 53:7e:05:2a:95:6c:ae:f9:88:fe:75:1d:23:2c:5a: 74:7f:3c:71:cb:70:5e:cc:94:68:5d:c0:87:bf:74: f5:bf:b3:e2:9f:2f:a7:41:32:9c:60:ad:70:c1:e9: a2:a2:d9:b7:f5:f3:6b:31:61:88:81:57:17:ce:4c: 59:ef:cb:bd:37:88:2f:bb:e2:dc:fe:03:1b:f4:19: 59:50:0b:11:65:8d:65:94:4e:6d:1a:a1:81:19:db: 8f:91:27:9b:8b:1a:00:60:f3:3a:94:aa:43:03:e7: 6f:85:88:a5:f6:fb:12:e4:47:c5:55:1c:31:61:24: cd:0e:d3:58:95:a8:04:61:df:3e:f7:85:c4:dd:6f: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7D:DD:E2:54:D0:2F:F2:B6:67:D8:B1:14:00:40:C5:1D:0D:DC:8A X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4a:8b:6c:76:22:8b:78:b1:9e:f0:91:a5:6b:b6:d0:bf:f2: ca:c6:d4:10:7a:a1:44:0a:39:eb:b2:f8:8a:3b:92:96:1a:6f: b6:87:1d:1c:7c:ee:ae:1d:2b:33:0b:36:dc:17:9d:c8:14:67: fb:39:f5:72:1c:4e:2f:8d:f8:dd:6a:d8:2b:a1:27:ab:e7:9b: cc:63:cb:a6:65:e3:3b:8c:2a:64:7f:88:f4:83:97:0d:22:f5: 51:b5:48:15:91:7f:a0:1d:a8:8a:c2:9f:53:0c:26:b6:c0:42: 73:d1:52:ad:6c:22:45:1e:00:48:5e:61:43:a9:d1:73:5a:68: 28:92:57:dd:00:6a:5e:f2:e7:fb:61:fc:1c:88:ae:5c:c6:40: 68:dc:00:ee:ba:e6:a2:2c:c1:60:c7:2f:f5:83:62:8d:e0:7f: dd:c9:d3:11:e4:5a:09:87:c2:61:1b:95:31:f9:1d:a6:90:c4: 4b:ce:c1:c5:26:60:cb:b2:1e:af:77:05:a3:ef:99:02:b8:9e: 48:c7:95:01:69:6c:72:51:c0:a9:95:ec:de:3c:91:8d:25:9b: f1:ca:b7:1b:52:45:1a:20:5d:04:33:25:2b:21:a6:1f:27:14: 14:71:f1:db:d4:22:09:0b:42:fb:68:c7:71:4f:6a:07:83:d8: bd:bb:ba:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSa5EaIT+HQIEF1LicLUCtsUdleMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTEwMTkxODQ1MDVaFw0yNTEwMjIyMDMyMDVaMDMxMTAvBgNV BAMTKDNGN0REREUyNTREMDJGRjJCNjY3RDhCMTE0MDA0MEM1MUQwRERDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIS7QaoWgEB1G17kLNuWc/960 R/o4gdrWBoX8PBpshtRJ3XnfNCB5+TyT3HJs7uAJBaL4HcR0gvf3E2RgDnZOyJ81 lc7dDQt6Qi3N5Opn5KPdW7l1SCUlhzsdGwVB4Wi1feeaTr/MNH2wllHOmycEAuly hDl9Z1N+BSqVbK75iP51HSMsWnR/PHHLcF7MlGhdwIe/dPW/s+KfL6dBMpxgrXDB 6aKi2bf182sxYYiBVxfOTFnvy703iC+74tz+Axv0GVlQCxFljWWUTm0aoYEZ24+R J5uLGgBg8zqUqkMD52+FiKX2+xLkR8VVHDFhJM0O01iVqARh3z73hcTdb7OnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP33d4lTQL/K2Z9ixFABAxR0N3IowHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZKi2x2Iot4sZ7wkaVrttC/8srG1BB6oUQK Oeuy+Io7kpYab7aHHRx87q4dKzMLNtwXncgUZ/s59XIcTi+N+N1q2CuhJ6vnm8xj y6Zl4zuMKmR/iPSDlw0i9VG1SBWRf6AdqIrCn1MMJrbAQnPRUq1sIkUeAEheYUOp 0XNaaCiSV90Aal7y5/th/ByIrlzGQGjcAO665qIswWDHL/WDYo3gf93J0xHkWgmH wmEblTH5HaaQxEvOwcUmYMuyHq93BaPvmQK4nkjHlQFpbHJRwKmV7N48kY0lm/HK txtSRRogXQQzJSshph8nFBRx8dvUIgkLQvtox3FPageD2L27uvc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:29 2025 by rpki-client