$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: 4zkdFVo/475hKtdkBW95PaBq4hkyj6ddas+sia55lSk= Subject key identifier: 8D:FE:40:E2:A7:AD:C3:D4:FE:BF:7C:59:97:71:10:C1:3C:0F:E1:77 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 1F4B76FB5E0B4F5FD7FD2D1404282CDDBAD9C92F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01BC Signing time: Sun 19 Oct 2025 00:20:51 +0000 Manifest this update: Sun 19 Oct 2025 00:15:51 +0000 Manifest next update: Wed 22 Oct 2025 08:15:51 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) 2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: P/A0gKYDfkZ3F/85QK8RriXGNniB2sgtr7CSqgrdG90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4b:76:fb:5e:0b:4f:5f:d7:fd:2d:14:04:28:2c:dd:ba:d9:c9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Oct 19 00:15:51 2025 GMT Not After : Oct 22 08:15:51 2025 GMT Subject: CN=8DFE40E2A7ADC3D4FEBF7C59977110C13C0FE177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:fc:3b:e2:2e:59:0d:cb:ef:f7:bc:2e:0c: 33:bc:00:c1:d2:02:ce:60:82:df:8d:14:53:41:d6: 01:42:bd:81:bd:c8:25:03:61:ed:0c:45:c2:7c:ae: 36:49:ce:23:c3:38:39:dc:f5:7c:4a:a7:c2:b1:b3: 2b:d8:aa:11:57:67:ed:b4:4c:16:1f:aa:94:51:02: b6:75:a0:9a:9d:fc:b3:dc:8b:3c:d6:30:9d:62:56: 20:09:98:d9:48:e8:05:da:32:f6:26:c1:98:d9:e1: 10:4b:3a:19:81:f6:af:55:bc:e2:bc:59:30:18:46: 08:37:49:3f:5e:d8:f9:c7:62:69:9e:05:20:90:a8: c1:b8:fb:00:73:d8:56:ab:ec:5b:5c:b8:68:31:66: 2c:64:0b:1b:da:0e:6b:fa:7b:e3:1f:27:7a:ab:f0: 20:68:98:8f:30:72:2b:07:29:85:bb:47:68:ec:bf: 85:12:f9:4b:5e:aa:5b:4e:97:33:53:a7:38:15:78: 8b:47:48:d2:bb:1d:9c:63:ec:0b:c3:e4:0d:b7:84: df:8a:c6:8e:3b:2c:33:55:72:11:67:6f:9a:c2:f8: bd:b9:a9:19:b1:36:b2:fd:d7:0e:1b:d8:42:6d:4e: cd:a8:0c:52:79:05:d5:b2:3a:7d:1e:35:f2:ed:3c: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FE:40:E2:A7:AD:C3:D4:FE:BF:7C:59:97:71:10:C1:3C:0F:E1:77 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a1:5a:88:3b:79:df:a3:a8:8b:98:80:69:57:45:76:a5:b0: b8:a5:07:92:c2:3e:a0:cf:ee:59:d2:54:48:53:5e:81:4c:86: 29:8e:f5:65:b6:9c:ed:9f:61:fb:2b:d3:ef:04:78:ce:33:2a: 0f:5b:dd:52:b7:50:c5:0b:b9:11:9f:9c:2a:d6:8e:59:a9:ed: 71:16:19:da:9b:40:ed:71:23:a9:b5:dd:7f:d5:86:42:e1:9b: d5:68:7f:bd:b5:16:5e:a8:17:eb:2a:c3:68:c3:92:44:6d:62: c9:f7:f9:4d:5f:73:57:81:06:88:b8:d8:21:e0:ba:18:2f:bf: fd:e9:4a:32:03:8c:be:74:d6:f3:30:ad:04:89:61:68:cb:eb: 6d:5b:54:77:2d:c2:41:74:4a:8a:61:71:a6:e7:53:34:e9:55: 37:e7:a5:f9:2e:20:98:0a:a8:9a:4d:9e:a0:42:b1:1a:25:1b: fe:93:b6:cd:0a:ba:6e:98:5c:f7:1f:53:6b:af:d2:91:e6:10: 00:47:54:ff:88:75:b0:15:aa:fa:7f:01:65:06:af:2a:f0:21: 79:1e:e3:5f:91:ff:0e:10:d7:ee:60:12:94:c9:d6:04:80:e2: 8e:46:19:84:64:a3:b4:6f:c8:93:3e:a8:70:19:f3:36:cf:b5: ce:6a:5f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0t2+14LT1/X/S0UBCgs3brZyS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTEwMTkwMDE1NTFaFw0yNTEwMjIwODE1NTFaMDMxMTAvBgNV BAMTKDhERkU0MEUyQTdBREMzRDRGRUJGN0M1OTk3NzExMEMxM0MwRkUxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4vw74i5ZDcvv97wuDDO8AMHS As5ggt+NFFNB1gFCvYG9yCUDYe0MRcJ8rjZJziPDODnc9XxKp8KxsyvYqhFXZ+20 TBYfqpRRArZ1oJqd/LPcizzWMJ1iViAJmNlI6AXaMvYmwZjZ4RBLOhmB9q9VvOK8 WTAYRgg3ST9e2PnHYmmeBSCQqMG4+wBz2Far7FtcuGgxZixkCxvaDmv6e+MfJ3qr 8CBomI8wcisHKYW7R2jsv4US+UteqltOlzNTpzgVeItHSNK7HZxj7AvD5A23hN+K xo47LDNVchFnb5rC+L25qRmxNrL91w4b2EJtTs2oDFJ5BdWyOn0eNfLtPEqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjf5A4qetw9T+v3xZl3EQwTwP4XcwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABShWog7ed+jqIuYgGlXRXalsLilB5LCPqDP 7lnSVEhTXoFMhimO9WW2nO2fYfsr0+8EeM4zKg9b3VK3UMULuRGfnCrWjlmp7XEW GdqbQO1xI6m13X/VhkLhm9Vof721Fl6oF+sqw2jDkkRtYsn3+U1fc1eBBoi42CHg uhgvv/3pSjIDjL501vMwrQSJYWjL621bVHctwkF0SophcabnUzTpVTfnpfkuIJgK qJpNnqBCsRolG/6Tts0Kum6YXPcfU2uv0pHmEABHVP+IdbAVqvp/AWUGryrwIXke 41+R/w4Q1+5gEpTJ1gSA4o5GGYRko7RvyJM+qHAZ8zbPtc5qX1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:24 2025 by rpki-client