$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft File: 9E6AD12E8763F68692055BC4EE5A1741D489D240.mft (raw, json) Hash identifier: YwoN7Xd4u+mMGJ35sUzaIcP/Vps9/859l13EhUkLbqM= Subject key identifier: F5:0C:BD:D2:90:1D:78:29:11:31:EF:0F:83:19:07:D9:FA:FB:E1:EF Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 3239057BD33CC0800F40D9158D2AEFFEBBC1A116 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft Manifest number: 0139 Signing time: Sat 18 Oct 2025 06:42:01 +0000 Manifest this update: Sat 18 Oct 2025 06:37:01 +0000 Manifest next update: Tue 21 Oct 2025 12:27:01 +0000 Files and hashes: 1: 9E6AD12E8763F68692055BC4EE5A1741D489D240.crl (hash: 6orGB7yPRzZabCSh7vYuujtlSu5ireLTiJx7hUxeOzE=) 2: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: Pu8JRhFp9Ytx+ko3+34MhGiKzNpbqOoP8zXRhQdIFW8=) 3: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Jq8yXQh2Quimw2J5Di1Jpnv+kf1Drg9qN3sT7DolU0U=) 4: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: XewhVGdMZGfa1gubSokKY6kMLA2RRqqki4nl2Mtbjwk=) 5: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:39:05:7b:d3:3c:c0:80:0f:40:d9:15:8d:2a:ef:fe:bb:c1:a1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Oct 18 06:37:01 2025 GMT Not After : Oct 21 12:27:01 2025 GMT Subject: CN=F50CBDD2901D78291131EF0F831907D9FAFBE1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:ce:1f:a9:68:ca:70:f0:52:2c:30:ca:c4: 8c:97:9a:c6:ef:0e:17:16:da:6e:8d:fc:d7:e7:4b: a4:b8:1a:f7:c0:df:29:cb:69:84:72:95:f6:a2:84: 8a:64:06:39:c2:a8:fc:6b:95:c1:20:ef:5e:1e:6a: 36:f9:93:99:35:a8:39:d2:c7:91:7c:83:72:7d:a0: 54:20:3e:60:70:f8:2d:dd:6c:a8:e1:a5:20:bc:02: 75:e7:fe:3d:77:a7:9a:7d:d8:93:68:ec:fe:f3:72: 7e:85:c2:64:ab:ed:6d:67:72:ce:38:5e:8c:33:32: 59:02:cc:a3:60:8e:db:3c:cc:bd:c2:af:46:b5:6f: c9:9a:d5:2c:ae:a3:00:75:73:7c:59:c5:12:ae:de: 81:28:14:f6:06:97:2b:d3:04:e4:44:05:f9:52:51: ad:46:92:14:f9:ee:24:6d:50:1a:ba:e2:45:42:3d: f7:e8:01:74:cd:d9:95:e6:61:95:d2:3d:79:0b:74: a1:c3:96:50:ae:c3:f5:02:b4:c6:4c:03:b2:06:ac: e2:58:03:de:3a:a2:d9:fc:71:77:33:07:0d:00:08: 71:3a:15:04:29:1c:96:e2:30:11:f0:17:d8:3d:12: 16:18:f1:24:55:5f:9a:f1:1e:63:14:d2:d6:17:ef: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0C:BD:D2:90:1D:78:29:11:31:EF:0F:83:19:07:D9:FA:FB:E1:EF X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b6:1c:e4:fd:91:c6:25:a6:12:f9:ce:fa:df:06:91:6e:0f: 42:e8:c2:ef:09:63:3c:41:51:35:e0:e3:4f:7b:b0:1b:1d:26: db:5a:a6:5a:35:3a:8a:91:53:bc:d5:7a:0f:1a:6d:f5:31:e2: 41:7f:cb:ee:61:50:fc:ed:f9:62:d9:11:1a:30:98:f4:8f:fb: 4f:b9:a0:2e:be:5d:cd:8f:82:61:53:07:56:25:e4:4d:37:77: a9:3c:3d:33:39:79:ee:c6:22:d5:11:25:c8:d8:c0:10:cb:60: 69:2c:82:c4:b2:e0:59:46:28:ff:44:56:3a:ef:ba:38:f3:56: a9:67:a3:18:95:61:ee:1c:ea:3c:35:9d:64:81:d4:7a:21:dd: ab:1d:50:68:db:81:bb:fa:23:b0:d5:dd:37:3d:8f:31:42:fd: b0:59:bd:d0:30:a9:d3:d3:a7:06:ec:88:0c:59:10:6d:8a:73: 34:70:2a:50:75:17:4c:53:31:95:2c:d6:c5:85:09:e2:0d:82: 1f:af:8d:a9:5f:af:25:b8:d7:e4:14:ed:3e:49:59:ab:52:ab: 96:a9:a4:0c:dd:ad:9f:b0:8d:0e:24:cf:18:0d:07:ec:bc:5c: ef:f5:69:39:72:52:62:ee:83:59:95:16:52:4c:af:ee:42:45: ca:db:9f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjkFe9M8wIAPQNkVjSrv/rvBoRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTEwMTgwNjM3MDFaFw0yNTEwMjExMjI3MDFaMDMxMTAvBgNV BAMTKEY1MENCREQyOTAxRDc4MjkxMTMxRUYwRjgzMTkwN0Q5RkFGQkUxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//c4fqWjKcPBSLDDKxIyXmsbv DhcW2m6N/NfnS6S4GvfA3ynLaYRylfaihIpkBjnCqPxrlcEg714eajb5k5k1qDnS x5F8g3J9oFQgPmBw+C3dbKjhpSC8AnXn/j13p5p92JNo7P7zcn6FwmSr7W1ncs44 XowzMlkCzKNgjts8zL3Cr0a1b8ma1SyuowB1c3xZxRKu3oEoFPYGlyvTBOREBflS Ua1GkhT57iRtUBq64kVCPffoAXTN2ZXmYZXSPXkLdKHDllCuw/UCtMZMA7IGrOJY A946otn8cXczBw0ACHE6FQQpHJbiMBHwF9g9EhYY8SRVX5rxHmMU0tYX75sjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Qy90pAdeCkRMe8PgxkH2fr74e8wHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3 NDFENDg5RDI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC22HOT9kcYlphL5zvrfBpFuD0Lowu8JYzxB UTXg4097sBsdJttaplo1OoqRU7zVeg8abfUx4kF/y+5hUPzt+WLZERowmPSP+0+5 oC6+Xc2PgmFTB1Yl5E03d6k8PTM5ee7GItURJcjYwBDLYGksgsSy4FlGKP9EVjrv ujjzVqlnoxiVYe4c6jw1nWSB1Hoh3asdUGjbgbv6I7DV3Tc9jzFC/bBZvdAwqdPT pwbsiAxZEG2KczRwKlB1F0xTMZUs1sWFCeINgh+vjalfryW41+QU7T5JWatSq5ap pAzdrZ+wjQ4kzxgNB+y8XO/1aTlyUmLug1mVFlJMr+5CRcrbn7k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:40 2025 by rpki-client