$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: J0v+8Sti+ibtAJwmLBSJqtTvmyGUNXSSCIFZBwkZyaU= Subject key identifier: B8:5D:B5:68:9A:53:6E:CF:EA:A0:C0:22:26:9F:58:34:60:5C:6B:64 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 1C627DC8D9569CA1663E8254263333AC3177BF78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0508 Signing time: Mon 15 Sep 2025 06:21:08 +0000 Manifest this update: Mon 15 Sep 2025 06:16:08 +0000 Manifest next update: Thu 18 Sep 2025 10:50:08 +0000 Files and hashes: 1: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 3: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: 8eovTeVoScNLnxUpnT/Uz8rp9b/7zWnELGrPo+uS89M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 10:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:62:7d:c8:d9:56:9c:a1:66:3e:82:54:26:33:33:ac:31:77:bf:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Sep 15 06:16:08 2025 GMT Not After : Sep 18 10:50:08 2025 GMT Subject: CN=B85DB5689A536ECFEAA0C022269F5834605C6B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:6e:d6:49:94:e0:79:30:df:b6:d1:7c:0a: 29:5b:8f:95:ad:29:7a:bf:66:65:40:18:ce:73:05: 2c:21:ea:32:f8:36:30:ac:51:2c:22:7f:6b:34:d6: 90:49:71:28:27:21:8c:f3:e5:88:05:f3:1e:85:50: 72:1b:e3:47:34:9d:e4:68:94:77:c5:ba:70:f4:bd: 41:58:0e:ae:5a:6c:3b:38:03:03:61:14:8a:b4:ba: bb:52:84:6a:16:21:2b:11:a9:3b:1c:e6:b4:ee:88: 33:fb:3a:84:10:c1:dd:a3:a3:1d:48:b4:79:38:42: d0:6f:ce:40:24:a7:db:e6:38:86:36:da:d8:e6:06: 11:f8:7b:df:c7:6f:5e:e1:70:c5:f0:ca:ec:2a:da: 78:5e:de:70:28:c5:d0:36:dc:fd:9b:08:be:95:c7: 39:d6:ab:91:e3:d0:6d:23:d2:96:2d:23:6e:e6:07: 5e:97:59:bf:0b:13:21:73:90:e2:04:fd:b2:0f:eb: 05:1b:f9:0f:af:3a:06:6a:f2:3a:78:94:01:f4:47: 5a:44:fa:34:74:85:82:cf:4b:23:51:98:68:c0:4d: e6:f8:97:81:65:e6:fa:9e:a2:b2:29:b9:26:7b:6c: 76:cb:94:e9:10:47:4f:9a:f6:6c:d4:a7:8c:2f:54: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5D:B5:68:9A:53:6E:CF:EA:A0:C0:22:26:9F:58:34:60:5C:6B:64 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:b5:f8:c8:26:bd:ec:39:02:3e:09:41:a5:14:16:a5:3a: b5:50:1d:d5:71:b2:1c:20:36:5b:75:2a:4f:22:ff:d1:10:ec: e2:99:e9:1f:c5:0f:ef:e9:56:cc:30:ba:1a:d5:06:ef:24:eb: 12:9b:a0:cb:c4:ce:bd:de:b5:a3:8c:d3:f5:a3:7b:50:66:8f: 7f:e2:5a:99:21:f0:18:e4:1e:fc:f3:93:f2:fa:29:cf:2d:a0: 50:fd:d9:6a:fd:50:80:3d:c0:9d:52:af:61:8e:a1:42:2a:29: ec:ac:29:00:db:09:48:72:ae:f2:3a:0d:60:09:a5:76:3b:53: e0:da:df:72:eb:09:63:a0:a6:67:f2:d5:f5:73:06:8b:02:8d: d7:73:ee:c9:ac:58:ea:66:60:be:0d:96:02:4d:ec:13:6b:6b: c0:33:5b:99:c4:97:5f:b5:2b:ca:3f:31:4f:69:e8:7c:52:7c: c4:ea:34:ec:71:be:b5:37:48:6d:e9:c1:83:a3:59:46:94:ca: be:2b:bb:a0:75:58:6e:a4:c2:13:1a:e3:7a:4e:8b:dd:5a:08: d7:3f:07:fb:ea:e9:6c:f1:d4:0e:44:bb:b6:5b:34:bb:13:5a: af:95:33:20:b0:a2:f7:bb:aa:90:42:07:3d:bc:22:44:2d:27: be:1b:2c:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGJ9yNlWnKFmPoJUJjMzrDF3v3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTA5MTUwNjE2MDhaFw0yNTA5MTgxMDUwMDhaMDMxMTAvBgNV BAMTKEI4NURCNTY4OUE1MzZFQ0ZFQUEwQzAyMjI2OUY1ODM0NjA1QzZCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5W7WSZTgeTDfttF8Cilbj5Wt KXq/ZmVAGM5zBSwh6jL4NjCsUSwif2s01pBJcSgnIYzz5YgF8x6FUHIb40c0neRo lHfFunD0vUFYDq5abDs4AwNhFIq0urtShGoWISsRqTsc5rTuiDP7OoQQwd2jox1I tHk4QtBvzkAkp9vmOIY22tjmBhH4e9/Hb17hcMXwyuwq2nhe3nAoxdA23P2bCL6V xznWq5Hj0G0j0pYtI27mB16XWb8LEyFzkOIE/bIP6wUb+Q+vOgZq8jp4lAH0R1pE +jR0hYLPSyNRmGjATeb4l4Fl5vqeorIpuSZ7bHbLlOkQR0+a9mzUp4wvVP0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuF21aJpTbs/qoMAiJp9YNGBca2QwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaetfjIJr3sOQI+CUGlFBalOrVQHdVxshwg Nlt1Kk8i/9EQ7OKZ6R/FD+/pVswwuhrVBu8k6xKboMvEzr3etaOM0/Wje1Bmj3/i Wpkh8BjkHvzzk/L6Kc8toFD92Wr9UIA9wJ1Sr2GOoUIqKeysKQDbCUhyrvI6DWAJ pXY7U+Da33LrCWOgpmfy1fVzBosCjddz7smsWOpmYL4NlgJN7BNra8AzW5nEl1+1 K8o/MU9p6HxSfMTqNOxxvrU3SG3pwYOjWUaUyr4ru6B1WG6kwhMa43pOi91aCNc/ B/vq6Wzx1A5Eu7ZbNLsTWq+VMyCwove7qpBCBz28IkQtJ74bLNY= -----END CERTIFICATE-----Generated at Mon Sep 15 17:17:04 2025 by rpki-client