$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: 8relDbgHxiEWSYRQqDKv2qzltRUHIf5GTJvjh6eyirU= Subject key identifier: ED:2D:32:79:CE:9C:58:E5:63:05:69:D0:2F:D9:3B:60:C6:FA:2F:BC Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 73C18B6AE8FF513B3FEEB7028FD216F1AE16E0E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: DD Signing time: Sun 19 Oct 2025 13:11:26 +0000 Manifest this update: Sun 19 Oct 2025 13:06:26 +0000 Manifest next update: Wed 22 Oct 2025 19:19:26 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: PcfWuKEf0j4sqGbvZ7+UDICHzJNe4zKhwwDset42oRY=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c1:8b:6a:e8:ff:51:3b:3f:ee:b7:02:8f:d2:16:f1:ae:16:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Oct 19 13:06:26 2025 GMT Not After : Oct 22 19:19:26 2025 GMT Subject: CN=ED2D3279CE9C58E5630569D02FD93B60C6FA2FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:00:41:42:34:45:a1:63:89:95:19:ea:ad: 1b:9f:32:33:e1:cb:43:95:c6:5f:fd:41:a5:0e:1d: 7b:5a:28:d0:f7:d8:12:94:89:eb:62:bb:d0:3e:2f: d5:64:4f:8c:54:ae:4a:e1:25:84:00:09:4c:e6:22: 11:e6:f4:c9:69:dc:0a:04:99:0b:b1:36:10:31:50: 47:be:02:fe:e0:76:49:26:44:96:18:86:da:8a:a9: d8:16:e2:e0:35:da:d0:36:9e:b3:6b:ec:ab:ff:95: 77:ad:99:d7:d2:52:80:77:3f:f4:3c:6f:b9:28:8c: de:f4:fd:b5:c5:08:5f:23:e6:ce:80:21:87:7f:44: 32:46:97:7f:58:db:94:32:f6:af:c7:54:43:75:d7: 07:21:5c:67:1e:b1:46:ed:37:37:e6:bb:b5:37:1b: 9b:23:1b:c7:7f:75:25:19:8f:eb:06:06:05:e2:9f: d1:17:33:81:77:f8:70:6a:d2:2a:c6:4b:bb:b9:71: 8d:39:26:37:e7:e5:b6:35:e0:a4:1b:4f:d7:d3:e0: 76:0a:79:6c:45:bf:9d:aa:cf:b3:d7:d9:99:81:b1: 92:fd:f0:d9:b2:b7:84:69:7e:39:ce:64:75:ff:93: e7:f8:2f:46:db:6e:8f:63:26:b3:6b:15:a6:28:91: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:32:79:CE:9C:58:E5:63:05:69:D0:2F:D9:3B:60:C6:FA:2F:BC X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6a:0c:46:aa:71:2d:f9:fc:b4:c0:3c:6e:ef:a1:c8:41:2c: 45:41:e7:95:d0:eb:e1:f2:d0:01:85:c9:f9:bd:27:e1:00:65: 13:fa:6b:0c:fd:45:b2:57:0f:b4:13:e9:3c:27:c4:4e:b9:a6: 18:fe:ff:46:cc:bf:b8:0f:69:2b:29:a4:76:f4:83:18:a8:ea: d1:a1:58:d0:67:29:92:82:de:8c:ea:10:d4:1e:b2:8b:79:e0: ec:37:04:7b:2c:39:a8:22:14:ac:44:48:b3:1e:4b:36:67:71: aa:43:c5:c1:3f:3f:63:bf:07:a7:c9:a4:69:e3:90:bb:ce:7f: 21:41:04:27:d0:53:af:c1:91:47:72:56:c9:1e:09:1b:98:71: 64:c5:56:a1:4a:52:8d:1a:7d:c9:00:0e:18:04:d9:78:de:07: 14:b3:bd:24:19:cd:77:07:16:99:5c:5f:1e:cb:e1:18:c2:a5: 59:e4:9f:a6:c9:55:48:bd:c6:1f:eb:86:be:b2:5b:79:20:32: fb:20:87:38:ad:84:53:38:c1:02:06:fd:0e:9f:8e:5b:03:aa: 85:09:00:4a:d6:50:e7:e2:f0:81:15:46:84:71:e4:be:3c:81: 18:d8:45:24:26:b9:0d:69:af:bd:3a:7b:aa:46:78:25:d0:a2: e0:c8:c9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8GLauj/UTs/7rcCj9IW8a4W4OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTEwMTkxMzA2MjZaFw0yNTEwMjIxOTE5MjZaMDMxMTAvBgNV BAMTKEVEMkQzMjc5Q0U5QzU4RTU2MzA1NjlEMDJGRDkzQjYwQzZGQTJGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpgBBQjRFoWOJlRnqrRufMjPh y0OVxl/9QaUOHXtaKND32BKUietiu9A+L9VkT4xUrkrhJYQACUzmIhHm9Mlp3AoE mQuxNhAxUEe+Av7gdkkmRJYYhtqKqdgW4uA12tA2nrNr7Kv/lXetmdfSUoB3P/Q8 b7kojN70/bXFCF8j5s6AIYd/RDJGl39Y25Qy9q/HVEN11wchXGcesUbtNzfmu7U3 G5sjG8d/dSUZj+sGBgXin9EXM4F3+HBq0irGS7u5cY05Jjfn5bY14KQbT9fT4HYK eWxFv52qz7PX2ZmBsZL98Nmyt4RpfjnOZHX/k+f4L0bbbo9jJrNrFaYokdmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7S0yec6cWOVjBWnQL9k7YMb6L7wwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRqDEaqcS35/LTAPG7vochBLEVB55XQ6+Hy 0AGFyfm9J+EAZRP6awz9RbJXD7QT6TwnxE65phj+/0bMv7gPaSsppHb0gxio6tGh WNBnKZKC3ozqENQesot54Ow3BHssOagiFKxESLMeSzZncapDxcE/P2O/B6fJpGnj kLvOfyFBBCfQU6/BkUdyVskeCRuYcWTFVqFKUo0afckADhgE2XjeBxSzvSQZzXcH FplcXx7L4RjCpVnkn6bJVUi9xh/rhr6yW3kgMvsghzithFM4wQIG/Q6fjlsDqoUJ AErWUOfi8IEVRoRx5L48gRjYRSQmuQ1pr706e6pGeCXQouDIydY= -----END CERTIFICATE-----Generated at Sun Oct 19 15:43:41 2025 by rpki-client