$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: 4BrKMCOBzNVeSEeoswDy1Q8GmdNq+22BomCmEOXbnvM= Subject key identifier: 28:77:AF:97:0A:93:D4:D4:E2:A6:FA:46:F1:B0:05:11:49:DF:C8:13 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 3C7C11D1F355A5F6A00A5FA66E3A919CC3B6AD25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0228 Signing time: Thu 23 Oct 2025 05:22:23 +0000 Manifest this update: Thu 23 Oct 2025 05:17:23 +0000 Manifest next update: Sun 26 Oct 2025 11:30:23 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: ANRsQshYhySsvF2Qk/JzbnIjgKtPBLOCV2pT+Ki0WZI=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7c:11:d1:f3:55:a5:f6:a0:0a:5f:a6:6e:3a:91:9c:c3:b6:ad:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Oct 23 05:17:23 2025 GMT Not After : Oct 26 11:30:23 2025 GMT Subject: CN=2877AF970A93D4D4E2A6FA46F1B0051149DFC813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:6d:c4:6d:dc:dd:99:23:e3:01:02:b0:5e: 60:a8:fe:98:e1:d3:2c:c7:6f:38:02:8e:6a:ad:71: 8a:a6:d4:19:c1:43:b8:d5:a9:c2:87:ee:91:ea:43: 95:52:bc:6c:d2:7a:65:02:ac:40:c0:70:ea:d1:1c: 3a:8b:89:8e:70:7e:b6:36:a6:ca:1f:fe:16:f6:43: d7:87:b7:a7:f8:6b:05:e8:ba:40:af:d4:12:ab:fc: e5:ec:90:50:b3:72:bb:cb:48:84:1d:06:2f:7b:99: 8b:3a:8e:df:3d:8f:ae:84:69:ad:36:87:e7:81:33: 4b:10:01:2f:45:2d:76:8e:b7:0f:3c:4f:a2:ba:eb: 9c:18:4d:b8:13:ea:d7:71:a6:da:3d:65:b3:89:19: ac:d7:7a:7b:e9:62:96:65:bb:ba:8b:1a:3c:69:b2: df:51:50:d0:33:f2:6a:f9:19:a4:68:ba:09:40:8d: 93:7c:af:3a:99:44:12:8c:63:6b:2c:7b:fb:5d:c0: a7:7a:c7:f4:dc:d4:30:9e:f9:f7:38:9d:3d:ee:d5: 54:18:d4:ae:65:4a:e7:94:dc:b8:54:68:2a:80:3e: d2:76:52:f2:c6:5e:03:9e:aa:5b:aa:a2:22:66:64: 5f:9f:65:59:56:4c:b5:c1:8a:b2:01:08:f7:20:a4: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:77:AF:97:0A:93:D4:D4:E2:A6:FA:46:F1:B0:05:11:49:DF:C8:13 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:85:87:c3:3b:e6:5c:44:4c:71:25:ca:d0:39:0e:89:46:61: 23:61:97:53:6f:e9:16:19:24:03:61:cb:71:df:90:ae:c0:5d: 2f:7a:8d:ae:91:d8:3c:93:8f:e6:e1:23:99:ca:61:f4:9f:5f: b6:11:0d:bd:f5:84:e0:b3:dc:f6:8d:42:fd:ee:3b:ef:13:cd: eb:4e:9b:dd:d1:fe:ee:07:a6:0a:d7:0a:ca:6e:16:b3:a6:bb: 19:5c:42:5c:e8:1b:36:b2:48:06:6a:a6:29:3b:a0:05:d1:16: cc:24:42:29:b5:92:4e:2f:a2:4c:8f:9e:55:0e:be:ea:3b:b6: 0f:95:c2:f6:95:5c:f1:b8:c7:be:fe:d0:05:6a:64:67:ca:1e: 3c:83:ab:b3:75:dd:f3:ae:2b:ee:7f:df:30:37:2a:b0:5a:6f: 8d:65:55:41:28:51:97:64:96:64:9a:d3:e4:c7:a8:d4:60:f1: a3:c3:fa:dc:92:e3:7e:e2:a1:aa:f0:be:30:55:14:1c:83:e2: d2:65:a7:51:1b:89:1f:f2:5b:90:d5:8d:88:00:d9:6d:b9:ff: de:d2:19:00:ae:0a:c9:ae:f9:8a:0f:33:fb:2a:5b:ff:fc:d0: a6:29:87:cc:c5:3e:be:6d:29:bb:43:c9:ae:90:7b:3c:bc:1d: 57:15:c5:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHwR0fNVpfagCl+mbjqRnMO2rSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTEwMjMwNTE3MjNaFw0yNTEwMjYxMTMwMjNaMDMxMTAvBgNV BAMTKDI4NzdBRjk3MEE5M0Q0RDRFMkE2RkE0NkYxQjAwNTExNDlERkM4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C23EbdzdmSPjAQKwXmCo/pjh 0yzHbzgCjmqtcYqm1BnBQ7jVqcKH7pHqQ5VSvGzSemUCrEDAcOrRHDqLiY5wfrY2 psof/hb2Q9eHt6f4awXoukCv1BKr/OXskFCzcrvLSIQdBi97mYs6jt89j66Eaa02 h+eBM0sQAS9FLXaOtw88T6K665wYTbgT6tdxpto9ZbOJGazXenvpYpZlu7qLGjxp st9RUNAz8mr5GaRouglAjZN8rzqZRBKMY2sse/tdwKd6x/Tc1DCe+fc4nT3u1VQY 1K5lSueU3LhUaCqAPtJ2UvLGXgOeqluqoiJmZF+fZVlWTLXBirIBCPcgpB4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHevlwqT1NTipvpG8bAFEUnfyBMwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWFh8M75lxETHElytA5DolGYSNhl1Nv6RYZ JANhy3HfkK7AXS96ja6R2DyTj+bhI5nKYfSfX7YRDb31hOCz3PaNQv3uO+8TzetO m93R/u4HpgrXCspuFrOmuxlcQlzoGzaySAZqpik7oAXRFswkQim1kk4vokyPnlUO vuo7tg+VwvaVXPG4x77+0AVqZGfKHjyDq7N13fOuK+5/3zA3KrBab41lVUEoUZdk lmSa0+THqNRg8aPD+tyS437ioarwvjBVFByD4tJlp1EbiR/yW5DVjYgA2W25/97S GQCuCsmu+YoPM/sqW//80KYph8zFPr5tKbtDya6Qezy8HVcVxR0= -----END CERTIFICATE-----Generated at Sat Oct 25 03:46:35 2025 by rpki-client