$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: e02B49ywDIt5U7rkDQAUzo67SwoIXBEW1tBTyx/41Bg= Subject key identifier: E9:FA:82:45:F5:B1:F7:E8:33:38:14:8B:E6:3B:11:9B:3D:0D:EE:A9 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 1C366CABCDD1CAFB48F5D2CED6C326E57763A721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: 8E Signing time: Mon 20 Oct 2025 13:21:18 +0000 Manifest this update: Mon 20 Oct 2025 13:16:18 +0000 Manifest next update: Thu 23 Oct 2025 18:13:18 +0000 Files and hashes: 1: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=) 3: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: J1BlVr+fzgS5dNmJB9fYimMh+C6bLLd+JJERg9uV4Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:36:6c:ab:cd:d1:ca:fb:48:f5:d2:ce:d6:c3:26:e5:77:63:a7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Oct 20 13:16:18 2025 GMT Not After : Oct 23 18:13:18 2025 GMT Subject: CN=E9FA8245F5B1F7E83338148BE63B119B3D0DEEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:18:a7:e7:e7:46:5a:b6:a3:09:1e:62:57: 1c:dc:77:f0:37:73:9b:6b:60:77:56:46:40:25:61: 3f:03:5b:e6:89:0e:0f:7b:cb:37:2e:0e:02:32:2b: 0e:96:bd:d1:8e:3d:88:d9:65:95:09:44:de:36:03: 25:ac:bf:3d:aa:3f:36:bf:2f:41:3b:23:5e:ee:ee: 5e:24:dd:27:23:5b:30:cd:ab:62:13:d3:ef:03:eb: 96:5e:e2:1a:9c:5a:0f:4d:61:f9:66:4b:d1:66:6e: a2:b6:0d:26:f5:a0:ac:30:e2:55:54:43:fc:10:8b: 8f:23:11:3f:00:c7:40:37:df:bf:41:42:e8:f4:fa: 0d:ed:63:63:42:5b:02:5a:20:7c:de:0d:a4:ca:95: c2:e3:8d:39:13:02:5e:15:34:5c:ff:ba:ed:dd:86: ef:cd:17:65:43:1c:b1:9e:09:81:46:67:a2:d3:93: 5c:f7:57:07:e5:f3:c2:94:22:54:88:b0:fd:7a:9c: ef:46:e9:36:70:b3:70:47:6a:c4:cd:1a:d7:fe:42: 97:90:c8:98:a0:29:4c:be:1f:6a:1d:30:4c:5f:57: 14:6f:ec:eb:f6:a4:cd:00:f3:07:ec:af:e4:65:88: 8b:2b:dd:52:b9:8b:32:44:8e:7a:8b:2f:d2:9f:a8: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:82:45:F5:B1:F7:E8:33:38:14:8B:E6:3B:11:9B:3D:0D:EE:A9 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:76:d4:d6:7c:2e:58:74:89:45:83:7d:83:7d:a7:19:76:c8: 61:c6:76:22:a2:74:58:fe:7a:fa:34:3e:4a:14:6f:16:38:4d: 0b:5b:ce:2c:cc:e0:6c:79:83:14:fb:ec:fd:6a:fd:40:14:25: 96:bc:a7:53:cb:24:c1:b1:7b:15:39:50:72:99:ae:72:79:f5: fa:6f:70:c1:01:b1:12:46:d6:8d:a3:91:9d:eb:df:55:af:c0: 44:b4:aa:e9:f6:74:9f:15:6b:2c:a0:00:cc:9c:7f:23:94:57: e8:81:0d:6a:b4:c4:7c:47:3a:72:87:ac:1d:38:8e:fe:3d:a3: c2:45:fc:86:ba:94:be:e1:9d:7b:28:51:79:bd:3a:05:d6:1e: 5a:f2:3b:17:77:a4:b6:c5:e6:19:dc:20:88:f8:f8:22:01:fa: 82:d2:c6:03:d8:b8:19:7c:12:b2:9a:95:46:9d:02:c3:c2:b1: 9f:66:a0:0c:be:bd:a8:80:98:33:7e:73:2c:42:3a:1b:5b:c2: 5d:6c:8b:33:95:a8:ca:a6:01:af:d8:d2:a4:2f:10:66:8a:7e: 03:76:35:40:60:52:4e:36:cb:43:b9:b0:1d:81:0c:34:f8:06: 94:5e:39:6b:5f:45:75:e9:a1:99:be:bc:4d:56:65:16:41:18: 09:36:da:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDZsq83RyvtI9dLO1sMm5XdjpyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTEwMjAxMzE2MThaFw0yNTEwMjMxODEzMThaMDMxMTAvBgNV BAMTKEU5RkE4MjQ1RjVCMUY3RTgzMzM4MTQ4QkU2M0IxMTlCM0QwREVFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqxin5+dGWrajCR5iVxzcd/A3 c5trYHdWRkAlYT8DW+aJDg97yzcuDgIyKw6WvdGOPYjZZZUJRN42AyWsvz2qPza/ L0E7I17u7l4k3ScjWzDNq2IT0+8D65Ze4hqcWg9NYflmS9FmbqK2DSb1oKww4lVU Q/wQi48jET8Ax0A3379BQuj0+g3tY2NCWwJaIHzeDaTKlcLjjTkTAl4VNFz/uu3d hu/NF2VDHLGeCYFGZ6LTk1z3Vwfl88KUIlSIsP16nO9G6TZws3BHasTNGtf+QpeQ yJigKUy+H2odMExfVxRv7Ov2pM0A8wfsr+RliIsr3VK5izJEjnqLL9KfqClfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fqCRfWx9+gzOBSL5jsRmz0N7qkwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC521NZ8Llh0iUWDfYN9pxl2yGHGdiKidFj+ evo0PkoUbxY4TQtbzizM4Gx5gxT77P1q/UAUJZa8p1PLJMGxexU5UHKZrnJ59fpv cMEBsRJG1o2jkZ3r31WvwES0qun2dJ8VayygAMycfyOUV+iBDWq0xHxHOnKHrB04 jv49o8JF/Ia6lL7hnXsoUXm9OgXWHlryOxd3pLbF5hncIIj4+CIB+oLSxgPYuBl8 ErKalUadAsPCsZ9moAy+vaiAmDN+cyxCOhtbwl1sizOVqMqmAa/Y0qQvEGaKfgN2 NUBgUk42y0O5sB2BDDT4BpReOWtfRXXpoZm+vE1WZRZBGAk22r4= -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:44 2025 by rpki-client