$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: CUjezj3gjLND9UnFey4zgPwbw4CMt4kR3I/SJAGG73g= Subject key identifier: 33:97:06:62:54:36:A2:16:E1:F8:3C:B9:C0:66:86:BB:C8:81:CA:74 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 38A20D2B11AFB0FC3B7636F6BE1301F79C75BCFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: D7 Signing time: Mon 20 Oct 2025 15:32:15 +0000 Manifest this update: Mon 20 Oct 2025 15:27:15 +0000 Manifest next update: Thu 23 Oct 2025 15:43:15 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: 7v7x74eMsDVDZBirRFGWfbiHbulqBIBUtSUonm7NC5M=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a2:0d:2b:11:af:b0:fc:3b:76:36:f6:be:13:01:f7:9c:75:bc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Oct 20 15:27:15 2025 GMT Not After : Oct 23 15:43:15 2025 GMT Subject: CN=339706625436A216E1F83CB9C06686BBC881CA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:29:bc:d1:48:0f:0a:e7:69:6c:d0:90:65:d9: 4c:ff:60:0c:62:7b:7c:ba:d7:39:0d:5c:2b:d0:4c: 52:26:3f:06:a7:3b:1a:69:bf:79:b9:ee:4d:2c:04: 66:66:69:cc:6a:50:7c:35:76:6c:61:ab:e9:0b:7f: f9:0b:8d:62:ef:17:ac:bc:da:95:d7:25:67:e7:89: 38:2b:30:b8:7f:20:65:46:2b:76:ec:74:19:5f:e3: e6:5d:f0:88:2e:b1:ca:80:4c:fa:10:18:c4:cf:38: a3:4e:71:e8:03:2e:22:9a:da:55:10:cb:1e:bc:b8: 4c:3c:83:80:81:9a:c6:28:70:50:2a:75:59:76:ef: 20:c6:d9:76:89:0b:84:2d:5d:69:6a:d2:24:10:a1: 11:e2:0b:9d:aa:b8:c3:7a:31:8d:b9:74:ad:e5:ee: 37:d6:2f:23:8f:7f:11:3f:1d:34:b4:bb:66:98:e4: 6d:3c:68:62:b4:01:6c:cc:b2:66:0b:15:3d:5f:e2: 12:6b:0d:5b:d6:24:48:f7:86:d0:14:6e:58:fe:dd: 5d:7a:52:bc:48:00:a5:b9:c0:50:2f:b8:29:f2:1d: 81:c1:25:88:61:43:4b:4b:6e:04:d5:03:74:3d:b5: f6:d4:81:f3:62:d0:ef:6f:4c:18:1f:26:0a:7a:ca: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:06:62:54:36:A2:16:E1:F8:3C:B9:C0:66:86:BB:C8:81:CA:74 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:87:7f:3a:1b:72:60:07:9d:89:7e:e8:89:73:15:62:e4: 1f:ca:b3:f5:8f:6b:1a:73:72:8b:57:b0:5e:d0:1c:37:da:43: 8f:b1:e3:ff:3c:3c:6f:a8:55:0b:2a:82:67:5a:e1:b8:1a:93: 93:6b:e8:fa:1c:63:f2:5a:44:13:5f:cd:78:0c:3f:56:7d:60: 3b:7f:3e:59:c8:64:a4:09:f1:69:06:51:f7:d2:83:f3:0a:b1: 97:44:a9:46:18:b7:53:38:09:bf:64:06:18:18:b1:32:07:20: 60:03:97:31:94:69:22:b7:34:82:2c:d8:04:d8:02:4f:a2:42: c8:c1:93:6c:be:74:fd:7a:1d:af:64:d9:2b:fc:89:a2:bf:27: f7:e8:d2:64:80:c2:1e:2e:94:da:3b:a0:8d:29:d1:ab:12:c7: 10:4d:12:f6:01:e8:df:e4:04:f4:dc:43:5d:11:16:9e:4f:ee: 5f:ea:9c:f3:51:0d:ce:8e:f2:0d:0a:cc:92:2d:4d:1d:da:f1: 17:cc:6d:e2:7f:94:d8:4f:4e:fc:ac:cd:b7:70:60:73:8e:81: e3:a2:a4:db:46:1e:07:93:34:35:75:52:79:f2:08:84:43:c5: 88:96:fa:e0:b0:ff:f8:fa:eb:a2:c7:e9:7a:85:ab:e9:c6:37: 1e:06:0d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKINKxGvsPw7djb2vhMB95x1vP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTEwMjAxNTI3MTVaFw0yNTEwMjMxNTQzMTVaMDMxMTAvBgNV BAMTKDMzOTcwNjYyNTQzNkEyMTZFMUY4M0NCOUMwNjY4NkJCQzg4MUNBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzKbzRSA8K52ls0JBl2Uz/YAxi e3y61zkNXCvQTFImPwanOxppv3m57k0sBGZmacxqUHw1dmxhq+kLf/kLjWLvF6y8 2pXXJWfniTgrMLh/IGVGK3bsdBlf4+Zd8IguscqATPoQGMTPOKNOcegDLiKa2lUQ yx68uEw8g4CBmsYocFAqdVl27yDG2XaJC4QtXWlq0iQQoRHiC52quMN6MY25dK3l 7jfWLyOPfxE/HTS0u2aY5G08aGK0AWzMsmYLFT1f4hJrDVvWJEj3htAUblj+3V16 UrxIAKW5wFAvuCnyHYHBJYhhQ0tLbgTVA3Q9tfbUgfNi0O9vTBgfJgp6ymmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5cGYlQ2ohbh+Dy5wGaGu8iBynQwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCXh386G3JgB52JfuiJcxVi5B/Ks/WPaxpz cotXsF7QHDfaQ4+x4/88PG+oVQsqgmda4bgak5Nr6PocY/JaRBNfzXgMP1Z9YDt/ PlnIZKQJ8WkGUffSg/MKsZdEqUYYt1M4Cb9kBhgYsTIHIGADlzGUaSK3NIIs2ATY Ak+iQsjBk2y+dP16Ha9k2Sv8iaK/J/fo0mSAwh4ulNo7oI0p0asSxxBNEvYB6N/k BPTcQ10RFp5P7l/qnPNRDc6O8g0KzJItTR3a8RfMbeJ/lNhPTvyszbdwYHOOgeOi pNtGHgeTNDV1UnnyCIRDxYiW+uCw//j666LH6XqFq+nGNx4GDfI= -----END CERTIFICATE-----Generated at Tue Oct 21 10:45:43 2025 by rpki-client