$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: GZaChr1ANHsDx7ZfK2AmMQzqC+v0PN1qVqY8DmcoOqo= Subject key identifier: CB:AC:02:39:95:40:31:4E:CE:D8:0F:DA:E2:58:B2:F0:D6:F0:9E:73 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 6FFDF674A3DDD5843897E2CCC8D63E9B36BC4743 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: E5 Signing time: Tue 07 Oct 2025 12:41:15 +0000 Manifest this update: Tue 07 Oct 2025 12:36:15 +0000 Manifest next update: Sat 11 Oct 2025 00:37:15 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 2: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: FvAfThNyRnhULCxqnGKeYLp6wohV44aFiyaS7SRhTks=) 3: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 4: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Oct 2025 18:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fd:f6:74:a3:dd:d5:84:38:97:e2:cc:c8:d6:3e:9b:36:bc:47:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Oct 7 12:36:15 2025 GMT Not After : Oct 11 00:37:15 2025 GMT Subject: CN=CBAC02399540314ECED80FDAE258B2F0D6F09E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:39:33:6e:b6:06:ac:2f:a2:25:b6:53:bd: 89:35:2b:81:65:11:5b:2b:07:80:56:71:ce:1b:b5: 81:6b:17:37:5a:c2:7c:7c:aa:90:53:73:27:9b:b6: 17:9d:7e:79:d1:89:dc:3a:fa:4c:70:c9:38:a8:cd: b4:43:dd:23:25:1b:9e:5f:14:ea:0b:ec:47:62:8f: 5c:6c:e0:87:1d:f3:3a:ca:12:21:bb:38:9e:64:f2: 69:df:03:25:98:ed:df:04:5b:52:01:5d:e5:00:25: 3c:be:4d:eb:f0:83:9c:43:ca:c4:79:ca:52:3a:75: 6d:4a:54:0b:97:de:60:3b:04:2a:95:ad:1a:22:aa: 10:eb:3b:19:60:a9:cb:41:6c:57:24:08:24:45:49: 8b:a0:f7:18:4c:bf:39:ff:95:65:15:15:82:49:4d: e1:60:17:5e:e8:fc:8d:a2:86:78:73:dd:85:14:a0: bb:ad:25:bb:47:26:52:19:9a:09:d8:a2:d8:20:10: 2d:54:8e:5c:1d:2e:bd:6a:2a:62:83:4d:50:75:47: fa:91:ca:fb:ce:56:3e:88:90:8f:d0:2d:a6:15:63: 04:29:f8:2b:16:e0:ca:d2:8d:04:f9:18:a8:27:5d: 39:13:67:56:19:c3:14:b0:ec:96:99:7b:4b:11:d2: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AC:02:39:95:40:31:4E:CE:D8:0F:DA:E2:58:B2:F0:D6:F0:9E:73 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:06:a9:b3:2d:29:d9:46:ed:cb:61:72:e4:44:08:98:39:68: 58:65:d3:e6:4a:5a:b2:92:8b:99:1f:73:30:ab:1b:91:be:7e: 7c:34:fd:e5:a3:50:85:d9:33:d7:ef:cb:80:e0:64:47:32:81: 63:38:57:dc:c5:82:6d:4a:da:72:31:eb:c3:c2:42:8b:a9:a0: 26:09:9b:95:b7:79:98:d8:47:6b:8d:dd:fd:96:0a:30:75:9a: c2:82:03:40:e5:6b:3e:18:b6:59:55:10:93:ff:c7:ee:8a:2d: bb:4b:12:07:fd:86:c7:c8:07:3b:75:e7:7d:b6:55:ea:ce:ff: 14:be:e4:65:7b:a2:d3:15:68:db:ec:12:0a:0a:dd:4e:5d:d7: 36:27:cf:ed:80:95:b8:a6:2a:8f:8a:1d:fe:31:d4:4d:e0:fc: 01:c7:fe:e4:e1:8d:78:7e:f5:da:e3:09:1e:f4:cd:06:bf:38: 4c:aa:4a:76:bb:c4:d0:16:5b:5f:b0:87:6c:f7:1e:35:26:ba: d0:0a:94:2b:bb:53:cd:a3:69:4a:ae:a5:f6:05:22:1f:f6:0a: 08:c6:0c:4d:c6:f2:f5:2d:01:35:00:bc:da:27:c3:62:74:e4: cf:b1:51:5c:8a:e9:96:af:70:2d:59:b2:0b:24:15:ff:fb:66: 01:47:f9:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/32dKPd1YQ4l+LMyNY+mza8R0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTEwMDcxMjM2MTVaFw0yNTEwMTEwMDM3MTVaMDMxMTAvBgNV BAMTKENCQUMwMjM5OTU0MDMxNEVDRUQ4MEZEQUUyNThCMkYwRDZGMDlFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ijkzbrYGrC+iJbZTvYk1K4Fl EVsrB4BWcc4btYFrFzdawnx8qpBTcyebthedfnnRidw6+kxwyTiozbRD3SMlG55f FOoL7Edij1xs4Icd8zrKEiG7OJ5k8mnfAyWY7d8EW1IBXeUAJTy+Tevwg5xDysR5 ylI6dW1KVAuX3mA7BCqVrRoiqhDrOxlgqctBbFckCCRFSYug9xhMvzn/lWUVFYJJ TeFgF17o/I2ihnhz3YUUoLutJbtHJlIZmgnYotggEC1UjlwdLr1qKmKDTVB1R/qR yvvOVj6IkI/QLaYVYwQp+CsW4MrSjQT5GKgnXTkTZ1YZwxSw7JaZe0sR0vJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6wCOZVAMU7O2A/a4liy8NbwnnMwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoGqbMtKdlG7cthcuRECJg5aFhl0+ZKWrKS i5kfczCrG5G+fnw0/eWjUIXZM9fvy4DgZEcygWM4V9zFgm1K2nIx68PCQoupoCYJ m5W3eZjYR2uN3f2WCjB1msKCA0Dlaz4YtllVEJP/x+6KLbtLEgf9hsfIBzt15322 VerO/xS+5GV7otMVaNvsEgoK3U5d1zYnz+2AlbimKo+KHf4x1E3g/AHH/uThjXh+ 9drjCR70zQa/OEyqSna7xNAWW1+wh2z3HjUmutAKlCu7U82jaUqupfYFIh/2CgjG DE3G8vUtATUAvNonw2J05M+xUVyK6ZavcC1ZsgskFf/7ZgFH+Zw= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:12 2025 by rpki-client