$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: F4Q5nd9+FQ5h2FsC7Q615jwbXg3bxF1OuypeyR5ycgY= Subject key identifier: 7A:A7:FD:AB:99:42:4E:69:38:44:D0:F9:5F:97:5F:17:BB:44:F4:48 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 086AD49935D729628985893DAA3E5E8D2A713D99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04DA Signing time: Sat 18 Oct 2025 20:11:55 +0000 Manifest this update: Sat 18 Oct 2025 20:06:55 +0000 Manifest next update: Wed 22 Oct 2025 04:31:55 +0000 Files and hashes: 1: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 4: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: g4Ki23PYBhowQ0HtrVY36Poa9dwW/GDho8R+dwzFMRE=) 5: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:d4:99:35:d7:29:62:89:85:89:3d:aa:3e:5e:8d:2a:71:3d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Oct 18 20:06:55 2025 GMT Not After : Oct 22 04:31:55 2025 GMT Subject: CN=7AA7FDAB99424E693844D0F95F975F17BB44F448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:18:51:59:15:7f:cb:bf:ae:91:bc:04:d6: d9:e6:0a:06:d4:56:06:ac:ea:96:99:19:ce:e0:2e: 3a:4e:38:6a:29:bd:5c:82:ee:57:c8:08:5e:94:b6: 06:fc:24:d8:88:6b:ca:7e:26:69:a2:44:71:8f:76: a5:1e:2a:ed:ad:8d:9c:15:1f:79:4e:47:2f:8d:44: 23:42:92:22:84:c5:4c:5f:40:e4:31:96:60:83:25: 39:73:b6:f3:73:c0:bb:40:5c:48:dd:b8:4e:0d:67: 91:6a:7e:0a:fc:6b:d7:c4:58:2a:c3:5c:a4:b2:f1: 32:27:f1:60:c7:e3:f1:49:bb:e2:31:91:5a:0a:f1: a3:53:f9:26:5a:02:ad:2f:4f:12:1c:7c:e2:24:8f: 09:db:a0:56:45:6e:62:bb:7f:9b:14:82:53:73:04: a6:87:19:55:0a:e8:1f:91:f9:09:e6:77:47:32:4f: b8:47:d7:b8:bf:05:eb:ae:ca:08:51:3f:89:aa:2b: 15:e7:8e:33:d8:32:d3:cb:9a:d6:9c:08:c5:c2:d7: a1:1e:5b:d4:53:b9:7b:d5:92:50:22:f3:5a:ef:0b: ae:3a:10:c6:84:6e:30:3c:65:88:a5:8f:51:fe:10: 0e:0f:bd:8f:9c:a1:52:ad:92:ee:b0:3c:24:40:b6: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:FD:AB:99:42:4E:69:38:44:D0:F9:5F:97:5F:17:BB:44:F4:48 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b3:57:74:9e:98:0b:58:47:3a:e9:6a:1b:79:43:13:5d:e8: 9e:67:1e:f5:1a:ab:42:71:e7:20:f3:35:6d:77:a3:7d:91:24: 49:11:29:9e:51:e0:e2:ad:29:c3:c5:ab:38:dc:93:09:f3:27: 1e:3a:65:5c:d7:b3:4e:04:03:03:ef:7a:f7:80:b3:b4:73:85: dc:0e:1b:cc:e9:28:a2:e1:2d:30:fb:38:b0:f6:e0:c7:a9:35: e4:61:0d:d7:b1:e7:86:87:0d:14:93:8b:ba:72:13:c3:50:48: a5:ec:de:74:cd:6f:ba:74:a7:5a:66:8d:ea:87:82:66:f0:68: ee:31:2f:ea:ca:67:a5:f3:65:48:cd:1a:4c:78:d5:50:7b:9d: d7:f4:87:16:a8:6a:6e:25:90:d8:b5:30:6e:1a:0d:84:06:9d: 80:76:d8:71:6b:36:b5:45:7b:b6:f8:a8:84:d2:7c:bc:7b:ed: e1:bc:ed:7a:6b:c0:98:ba:1f:20:8e:58:12:56:c3:7e:b6:23: c3:44:8f:52:23:21:d0:40:db:33:60:e8:bd:4f:6f:37:2f:15: 66:9f:b2:26:21:f3:b4:b1:38:e7:36:72:0c:3c:da:90:89:61: e8:b4:0a:a5:fe:e7:92:be:f9:07:f3:21:cc:50:2a:dd:8c:fd: 42:ae:24:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGrUmTXXKWKJhYk9qj5ejSpxPZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEwMTgyMDA2NTVaFw0yNTEwMjIwNDMxNTVaMDMxMTAvBgNV BAMTKDdBQTdGREFCOTk0MjRFNjkzODQ0RDBGOTVGOTc1RjE3QkI0NEY0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpRhRWRV/y7+ukbwE1tnmCgbU Vgas6paZGc7gLjpOOGopvVyC7lfICF6Utgb8JNiIa8p+JmmiRHGPdqUeKu2tjZwV H3lORy+NRCNCkiKExUxfQOQxlmCDJTlztvNzwLtAXEjduE4NZ5Fqfgr8a9fEWCrD XKSy8TIn8WDH4/FJu+IxkVoK8aNT+SZaAq0vTxIcfOIkjwnboFZFbmK7f5sUglNz BKaHGVUK6B+R+Qnmd0cyT7hH17i/BeuuyghRP4mqKxXnjjPYMtPLmtacCMXC16Ee W9RTuXvVklAi81rvC646EMaEbjA8ZYilj1H+EA4PvY+coVKtku6wPCRAtu1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqf9q5lCTmk4RND5X5dfF7tE9EgwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACzV3SemAtYRzrpaht5QxNd6J5nHvUaq0Jx 5yDzNW13o32RJEkRKZ5R4OKtKcPFqzjckwnzJx46ZVzXs04EAwPveveAs7RzhdwO G8zpKKLhLTD7OLD24MepNeRhDdex54aHDRSTi7pyE8NQSKXs3nTNb7p0p1pmjeqH gmbwaO4xL+rKZ6XzZUjNGkx41VB7ndf0hxaoam4lkNi1MG4aDYQGnYB22HFrNrVF e7b4qITSfLx77eG87XprwJi6HyCOWBJWw362I8NEj1IjIdBA2zNg6L1PbzcvFWaf siYh87SxOOc2cgw82pCJYei0CqX+55K++QfzIcxQKt2M/UKuJEg= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:51 2025 by rpki-client