$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: zRHnY2EpDH+N+x++eHYUi57al3+5Wyx7Qe+exXvGXE4= Subject key identifier: 0C:CA:54:0C:8A:9B:99:58:D9:0C:D9:3C:62:57:EC:F1:88:13:26:48 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 3FB757B7903BB2716E704BF6678791EEC1E99F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 01ED Signing time: Sat 18 Oct 2025 23:01:46 +0000 Manifest this update: Sat 18 Oct 2025 22:56:46 +0000 Manifest next update: Wed 22 Oct 2025 07:10:46 +0000 Files and hashes: 1: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) 3: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: S35gtwZck76+o0vYWPDkG+BYI4d9aa5LxsawmHRsju8=) 4: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b7:57:b7:90:3b:b2:71:6e:70:4b:f6:67:87:91:ee:c1:e9:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Oct 18 22:56:46 2025 GMT Not After : Oct 22 07:10:46 2025 GMT Subject: CN=0CCA540C8A9B9958D90CD93C6257ECF188132648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:01:8b:53:5d:4b:4e:3f:d1:47:59:5a:8a: bd:08:47:54:ee:6d:51:5c:e2:9f:e2:dc:68:86:c6: 84:d2:81:84:12:e1:da:52:3a:25:3b:36:28:4f:32: e1:83:5c:c8:86:af:ed:82:a0:c1:14:34:14:c8:e8: d0:a4:16:b7:48:d0:ac:fe:db:99:fb:b1:2d:8f:ce: 7b:e5:2c:96:2d:79:37:42:e3:d7:b7:54:89:0d:3c: c4:b0:7a:64:20:28:7d:54:48:97:56:96:c7:5c:48: 81:0e:58:f4:45:52:72:09:8c:62:b8:3d:15:01:c8: d0:96:c4:72:45:0c:94:95:c0:0e:47:b8:c7:fa:9d: 26:c1:ce:23:7c:5c:c8:45:27:d0:ba:b1:29:22:5a: 28:a9:48:22:15:95:49:cd:0c:bd:22:85:c8:db:dc: ef:93:d5:62:3a:89:85:64:bb:af:f8:71:3f:2e:e1: 4a:3b:6a:2e:ee:1a:bb:4d:c9:39:1a:b8:13:3a:a4: dd:6e:41:67:ca:15:f6:c0:5f:40:f8:5c:f2:f5:e0: a6:33:09:17:ac:2e:8d:b8:e0:7b:3e:99:4e:37:16: 0d:20:30:38:c1:aa:be:69:f4:67:00:68:32:06:ff: d5:06:96:4f:a7:5c:a8:37:4a:63:45:2e:e5:70:2b: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CA:54:0C:8A:9B:99:58:D9:0C:D9:3C:62:57:EC:F1:88:13:26:48 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c9:00:ea:d7:b5:7e:36:fb:35:cf:d9:70:87:f6:df:c5:08: a3:17:f9:5c:0f:67:78:bd:cf:51:07:87:91:ff:e3:6d:86:fd: 82:f3:9a:93:68:90:61:d6:5c:d6:78:78:b5:24:6a:11:1b:a5: fc:1f:f7:3f:6b:8e:50:fb:7d:4e:03:33:83:c1:98:22:6d:f2: b6:5c:01:35:5f:19:35:19:4a:35:a4:5f:b1:fd:b9:20:4d:2f: 8b:94:4b:f8:69:e6:6a:c1:f5:9d:6f:87:05:a2:af:14:88:5b: 91:37:de:ab:57:86:f7:1f:62:ab:bd:85:a5:ce:22:4b:75:21: 6a:bc:4b:83:0e:2c:b0:da:3b:ff:0e:d1:46:94:9c:e9:1e:fa: 29:7e:26:80:32:29:6c:b9:1a:52:26:e4:82:a7:c8:1d:c1:b8: 92:c4:ec:63:e3:c5:70:3a:3f:20:9d:a2:8c:c5:91:15:5d:83: 8c:fb:d4:79:f9:05:ee:25:7f:f5:17:23:29:2c:e2:c3:f2:64: 79:ed:b1:f2:85:15:6e:b1:6c:ae:9a:7e:9d:91:1b:df:c8:ef: 64:b8:f4:ff:bc:4c:5c:c9:68:7d:f0:90:23:6b:18:31:61:ca: 59:9c:20:66:59:50:0f:9d:9b:76:4f:c0:46:12:e5:a7:61:60: e6:62:37:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7dXt5A7snFucEv2Z4eR7sHpnw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTEwMTgyMjU2NDZaFw0yNTEwMjIwNzEwNDZaMDMxMTAvBgNV BAMTKDBDQ0E1NDBDOEE5Qjk5NThEOTBDRDkzQzYyNTdFQ0YxODgxMzI2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32gGLU11LTj/RR1lair0IR1Tu bVFc4p/i3GiGxoTSgYQS4dpSOiU7NihPMuGDXMiGr+2CoMEUNBTI6NCkFrdI0Kz+ 25n7sS2PznvlLJYteTdC49e3VIkNPMSwemQgKH1USJdWlsdcSIEOWPRFUnIJjGK4 PRUByNCWxHJFDJSVwA5HuMf6nSbBziN8XMhFJ9C6sSkiWiipSCIVlUnNDL0ihcjb 3O+T1WI6iYVku6/4cT8u4Uo7ai7uGrtNyTkauBM6pN1uQWfKFfbAX0D4XPL14KYz CResLo244Hs+mU43Fg0gMDjBqr5p9GcAaDIG/9UGlk+nXKg3SmNFLuVwK9gFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMpUDIqbmVjZDNk8Ylfs8YgTJkgwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETJAOrXtX42+zXP2XCH9t/FCKMX+VwPZ3i9 z1EHh5H/422G/YLzmpNokGHWXNZ4eLUkahEbpfwf9z9rjlD7fU4DM4PBmCJt8rZc ATVfGTUZSjWkX7H9uSBNL4uUS/hp5mrB9Z1vhwWirxSIW5E33qtXhvcfYqu9haXO Ikt1IWq8S4MOLLDaO/8O0UaUnOke+il+JoAyKWy5GlIm5IKnyB3BuJLE7GPjxXA6 PyCdoozFkRVdg4z71Hn5Be4lf/UXIyks4sPyZHntsfKFFW6xbK6afp2RG9/I72S4 9P+8TFzJaH3wkCNrGDFhylmcIGZZUA+dm3ZPwEYS5adhYOZiN9I= -----END CERTIFICATE-----Generated at Sun Oct 19 15:25:39 2025 by rpki-client