$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: LATDnJct1JvS8y8Ff0Asgo848z1Dzyu8lSJ1kJWbc4o= Subject key identifier: FE:62:EB:81:D7:B7:97:57:6A:7C:2C:B2:18:6B:70:8D:FB:AA:C7:1E Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 29C5C044E739DF8DDEA353786C5FBA43675C57FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03BA Signing time: Mon 27 Oct 2025 20:01:59 +0000 Manifest this update: Mon 27 Oct 2025 19:56:59 +0000 Manifest next update: Fri 31 Oct 2025 05:22:59 +0000 Files and hashes: 1: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=) 2: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=) 3: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) 4: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=) 5: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: RgtXLLaHAni7guKTvR6qtToWKEE/x+QutNOz3+EA+NI=) 6: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 05:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c5:c0:44:e7:39:df:8d:de:a3:53:78:6c:5f:ba:43:67:5c:57:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Oct 27 19:56:59 2025 GMT Not After : Oct 31 05:22:59 2025 GMT Subject: CN=FE62EB81D7B797576A7C2CB2186B708DFBAAC71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:65:30:a8:28:2a:49:a9:f8:fa:69:f6:ee: 54:54:72:0c:38:8c:f6:5b:78:58:ab:6e:a0:b4:e4: 1c:e4:d9:11:3c:ac:39:a1:1b:5c:9e:2b:44:aa:7d: 01:2e:ba:be:2c:fb:29:bf:0b:91:80:5b:bf:da:e8: d8:a5:97:0a:96:21:66:94:3b:42:c0:1f:6f:30:8e: 1c:0e:20:f7:7f:f4:09:7c:ee:aa:5b:55:09:9c:4c: 4c:0a:9c:51:5d:7a:5b:68:4a:ba:ae:c0:a7:96:e0: 2e:9a:fc:06:36:d3:1e:de:03:73:d8:37:a1:e8:0b: cb:ce:21:9b:f9:83:27:e9:c7:9f:fb:f6:24:fc:f7: 09:eb:95:7c:d9:1f:ce:73:ee:6f:99:64:37:e1:d8: 49:d2:80:dc:c7:e4:e7:8b:b2:97:5b:e3:73:34:8f: 0b:88:6c:36:79:b0:0b:ea:84:64:b6:4e:c0:fa:52: 3e:79:c9:46:2d:f2:9c:b0:64:4a:23:01:e1:07:ce: 11:67:94:74:b4:92:6d:28:78:c3:f2:83:08:fb:f5: 4b:68:ce:df:bd:bb:a4:01:34:7b:78:ec:b5:e8:42: b9:ec:b3:58:4f:0b:4f:c9:5d:c8:62:5e:18:98:39: 12:6f:84:9b:38:d1:74:6b:c0:f8:a3:e8:4c:73:44: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:62:EB:81:D7:B7:97:57:6A:7C:2C:B2:18:6B:70:8D:FB:AA:C7:1E X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:3c:5d:37:07:e6:d9:c5:3d:89:8d:2c:26:69:d1:ef:fb: ad:93:cf:73:8e:9f:f0:d0:2a:e1:e0:0e:5e:99:e9:31:6c:94: dd:9d:80:8f:d7:4a:7d:4d:46:e4:01:01:8e:81:f2:10:73:04: 14:25:4c:0b:b6:6e:fd:ba:18:4d:e4:2e:99:d4:95:47:a1:3b: 36:b4:9f:0c:bd:ff:77:28:88:7a:e0:db:1e:43:82:a0:63:78: 8d:0f:52:83:bb:e0:0b:ea:ab:f1:c6:4a:c1:ca:45:97:a3:6c: 9d:b4:22:b3:35:71:e6:d2:5e:c3:ec:62:09:09:c7:b2:d2:55: 43:0d:b5:88:2f:85:28:e9:4d:76:dc:d1:bc:b8:ef:c5:53:a8: aa:ec:8b:29:af:bc:f6:7f:53:bf:3c:6e:83:46:ea:9c:82:fd: b1:0c:77:40:a3:bc:66:b8:06:eb:15:2b:ea:61:20:4c:2c:e5: c8:07:2c:04:49:74:72:96:bb:30:9c:b2:56:28:fa:f0:d7:80: 9a:c4:13:2b:18:8e:6f:3e:84:5d:21:ce:5a:dc:0d:eb:30:07: dc:b2:c7:9a:06:ab:b0:53:55:8f:69:fc:f9:1e:31:01:e6:63: fe:6b:da:84:33:86:1c:a7:8c:ed:93:01:bc:56:e5:bc:bf:d1: 58:10:34:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcXAROc5343eo1N4bF+6Q2dcV/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTEwMjcxOTU2NTlaFw0yNTEwMzEwNTIyNTlaMDMxMTAvBgNV BAMTKEZFNjJFQjgxRDdCNzk3NTc2QTdDMkNCMjE4NkI3MDhERkJBQUM3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcGUwqCgqSan4+mn27lRUcgw4 jPZbeFirbqC05Bzk2RE8rDmhG1yeK0SqfQEuur4s+ym/C5GAW7/a6NillwqWIWaU O0LAH28wjhwOIPd/9Al87qpbVQmcTEwKnFFdeltoSrquwKeW4C6a/AY20x7eA3PY N6HoC8vOIZv5gyfpx5/79iT89wnrlXzZH85z7m+ZZDfh2EnSgNzH5OeLspdb43M0 jwuIbDZ5sAvqhGS2TsD6Uj55yUYt8pywZEojAeEHzhFnlHS0km0oeMPygwj79Uto zt+9u6QBNHt47LXoQrnss1hPC0/JXchiXhiYORJvhJs40XRrwPij6ExzRDLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mLrgde3l1dqfCyyGGtwjfuqxx4wHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdYPF03B+bZxT2JjSwmadHv+62Tz3OOn/DQ KuHgDl6Z6TFslN2dgI/XSn1NRuQBAY6B8hBzBBQlTAu2bv26GE3kLpnUlUehOza0 nwy9/3coiHrg2x5DgqBjeI0PUoO74Avqq/HGSsHKRZejbJ20IrM1cebSXsPsYgkJ x7LSVUMNtYgvhSjpTXbc0by478VTqKrsiymvvPZ/U788boNG6pyC/bEMd0CjvGa4 BusVK+phIEws5cgHLARJdHKWuzCcslYo+vDXgJrEEysYjm8+hF0hzlrcDeswB9yy x5oGq7BTVY9p/PkeMQHmY/5r2oQzhhynjO2TAbxW5by/0VgQNGU= -----END CERTIFICATE-----Generated at Wed Oct 29 11:26:11 2025 by rpki-client