$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: a6kNFywNdMC1Nx76murlra4SWxzUv1pkFlcQz5O9ut8= Subject key identifier: D8:11:BC:23:50:D7:D9:DB:CE:03:A9:6B:39:B4:8E:D9:48:15:3B:A1 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 7A240A5C09E9AC24FEFC0D1833BB5DAE5059E626 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 0224 Signing time: Sat 18 Oct 2025 02:20:00 +0000 Manifest this update: Sat 18 Oct 2025 02:15:00 +0000 Manifest next update: Tue 21 Oct 2025 14:15:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: n/bXIFcDYFpOK+ZdWyG9Dbbtr2M3gYoSf8LJrsXEhxA=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:24:0a:5c:09:e9:ac:24:fe:fc:0d:18:33:bb:5d:ae:50:59:e6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Oct 18 02:15:00 2025 GMT Not After : Oct 21 14:15:00 2025 GMT Subject: CN=D811BC2350D7D9DBCE03A96B39B48ED948153BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:07:58:54:8f:ed:47:d7:6c:d2:82:16:c1:dd: 55:23:ad:7f:fd:0f:3e:fd:b0:9e:50:97:e6:cf:72: 10:cc:3a:19:f3:54:62:55:ef:8a:87:da:59:7a:de: 1a:a5:41:73:e8:00:dc:b5:18:7d:bc:4b:73:27:40: e2:8d:f2:a3:e8:90:5e:9c:46:7f:fb:b4:96:ec:5e: d8:bb:4b:b9:fb:21:8d:b0:a1:c8:06:1a:29:7d:54: 8d:b4:2f:4e:03:81:9e:a7:1d:3b:fc:88:43:85:ab: e1:d5:bb:f0:82:70:87:8a:e2:0a:f0:61:d3:64:0b: 11:fc:0c:cb:8a:d3:d2:59:1e:db:c3:15:1d:2a:bc: 64:da:0b:4c:88:4b:52:a4:e2:14:90:de:50:5c:8c: 2a:f8:65:64:09:fe:c9:9b:25:1b:de:1b:c1:73:45: cc:d5:80:99:6c:5f:5d:c9:51:3f:24:54:bb:3d:b5: 37:03:a7:4b:96:c5:e2:b7:4d:02:36:a5:bd:d0:08: 87:18:c2:1c:72:ba:63:1c:f6:32:6f:a5:11:d2:b1: ed:03:34:19:e8:53:a9:e1:c2:cf:cf:28:df:7e:2f: 2f:49:5c:53:9c:b1:d0:b7:8b:c6:97:8a:51:87:2b: 10:2c:96:eb:53:3c:fb:62:d9:df:89:0b:8b:fb:ed: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:BC:23:50:D7:D9:DB:CE:03:A9:6B:39:B4:8E:D9:48:15:3B:A1 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:71:2c:11:5a:c7:69:7b:55:aa:5d:9e:ed:c8:64:78:b6:a9: eb:6f:64:85:69:f6:06:6a:17:c9:3a:84:22:cb:02:ee:f9:41: 88:3e:36:f5:2d:9b:db:92:08:cc:d7:db:d9:99:ee:f9:2b:bf: 13:88:2a:27:61:a3:a6:74:35:ca:81:45:20:a8:c5:24:a5:e3: 28:d2:44:37:d6:50:dc:c7:ea:65:ca:43:e8:b5:3b:00:74:29: c5:de:a3:66:95:35:6b:20:38:ee:05:90:8c:6b:16:ad:b2:be: 7b:91:d8:09:99:d3:2f:e1:ac:f7:86:c6:f6:26:7b:07:ff:60: 6b:30:9b:4c:61:c5:c0:0d:54:64:c4:0d:1c:a9:7d:f7:9d:9f: 04:97:19:de:41:5e:fc:d3:c4:57:cc:e6:2d:b6:1e:de:f2:1a: 39:93:07:42:c4:93:dc:5a:0d:5e:a6:61:a7:84:fa:d1:8f:62: dc:ce:d7:57:07:d3:43:fb:15:43:67:da:23:58:1e:c2:00:41: a8:d9:82:75:2c:f3:b9:aa:cb:ec:52:c6:21:df:63:98:f1:72: 67:a8:47:34:b9:0f:a1:9b:cf:60:6f:e1:1c:5e:0a:ea:85:e3: d2:d2:f0:3c:eb:24:22:b3:69:c3:fd:bc:9f:c5:96:1b:68:8e: 6c:65:49:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiQKXAnprCT+/A0YM7tdrlBZ5iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTEwMTgwMjE1MDBaFw0yNTEwMjExNDE1MDBaMDMxMTAvBgNV BAMTKEQ4MTFCQzIzNTBEN0Q5REJDRTAzQTk2QjM5QjQ4RUQ5NDgxNTNCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpB1hUj+1H12zSghbB3VUjrX/9 Dz79sJ5Ql+bPchDMOhnzVGJV74qH2ll63hqlQXPoANy1GH28S3MnQOKN8qPokF6c Rn/7tJbsXti7S7n7IY2wocgGGil9VI20L04DgZ6nHTv8iEOFq+HVu/CCcIeK4grw YdNkCxH8DMuK09JZHtvDFR0qvGTaC0yIS1Kk4hSQ3lBcjCr4ZWQJ/smbJRveG8Fz RczVgJlsX13JUT8kVLs9tTcDp0uWxeK3TQI2pb3QCIcYwhxyumMc9jJvpRHSse0D NBnoU6nhws/PKN9+Ly9JXFOcsdC3i8aXilGHKxAslutTPPti2d+JC4v77f87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2BG8I1DX2dvOA6lrObSO2UgVO6EwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtxLBFax2l7Vapdnu3IZHi2qetvZIVp9gZq F8k6hCLLAu75QYg+NvUtm9uSCMzX29mZ7vkrvxOIKidho6Z0NcqBRSCoxSSl4yjS RDfWUNzH6mXKQ+i1OwB0KcXeo2aVNWsgOO4FkIxrFq2yvnuR2AmZ0y/hrPeGxvYm ewf/YGswm0xhxcANVGTEDRypffednwSXGd5BXvzTxFfM5i22Ht7yGjmTB0LEk9xa DV6mYaeE+tGPYtzO11cH00P7FUNn2iNYHsIAQajZgnUs87mqy+xSxiHfY5jxcmeo RzS5D6Gbz2Bv4RxeCuqF49LS8DzrJCKzacP9vJ/FlhtojmxlSYw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:14 2025 by rpki-client