$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: QkDqpIMJwEJxszl+slJAhZi9yLPbVJRZoIX316jUm2c= Subject key identifier: B9:A8:DE:6A:8C:12:35:CB:2C:8A:20:48:13:42:DC:3E:90:0F:F9:04 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 51ACFCAF9E00D32250CAE8B7842C7379DA5F09F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 052C Signing time: Sun 26 Oct 2025 22:31:20 +0000 Manifest this update: Sun 26 Oct 2025 22:26:20 +0000 Manifest next update: Thu 30 Oct 2025 03:10:20 +0000 Files and hashes: 1: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: e9uiS3KNGlZ+EQjSXY4m6NwJ9lRr8aifmafZU96mQ7k=) 2: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=) 3: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: Gss2BFwCvkYMrYmTDPR8XZwGfdbzMzVTFBRvuPZp/uA=) 4: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=) 5: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: TiFQ5+3RDDZw3hEMovau4FHuHmfphOknHBNZEgIPquo=) 6: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: YsYjeZAf16Zh9IW0n3A2VBH6CtsZ0R5Gz9CV9gVp6Is=) 7: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ac:fc:af:9e:00:d3:22:50:ca:e8:b7:84:2c:73:79:da:5f:09:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Oct 26 22:26:20 2025 GMT Not After : Oct 30 03:10:20 2025 GMT Subject: CN=B9A8DE6A8C1235CB2C8A20481342DC3E900FF904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:86:b7:42:c0:fe:bb:cc:66:48:60:dd:92: 4d:d6:cf:44:bb:bd:cf:11:b3:b4:8f:a6:a5:2e:8e: 28:75:88:3a:00:c8:9b:e7:8b:f4:35:0d:98:16:91: 30:cb:d2:3e:49:46:5d:e4:6b:37:8d:b3:1b:c5:4a: 88:d6:e6:e7:65:f9:d7:46:fa:71:c0:fe:7e:e3:c3: a5:93:5a:5f:8e:42:c3:0c:9a:b0:2c:dd:de:98:d0: 37:02:53:ba:6e:dc:c1:57:14:d0:7d:44:60:0f:d7: 9f:68:e4:b0:89:f4:6c:73:e4:b5:13:58:67:c2:56: d6:be:57:61:5b:a4:a4:bb:a4:24:d2:bc:87:9e:3d: a6:f6:d0:27:b4:20:17:f1:f5:85:47:a7:58:fe:7c: 41:e7:32:8b:a5:a8:30:70:28:7b:5f:40:61:6b:66: 50:08:1a:31:99:6c:4c:c8:ac:cf:8c:d7:a0:2d:9c: 3f:4e:e7:3d:e5:4c:79:83:6d:ab:88:c7:98:a2:02: 0f:b8:e3:bf:35:17:6d:3a:97:78:6e:7a:29:d2:c1: e8:e7:fc:46:6e:d7:40:e1:a6:1e:da:10:3b:7b:dd: 2d:b0:2a:ad:4f:56:2b:66:e2:3c:30:d9:a1:57:e5: 82:fc:d7:58:5d:18:73:c8:94:72:c8:5e:75:9a:37: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A8:DE:6A:8C:12:35:CB:2C:8A:20:48:13:42:DC:3E:90:0F:F9:04 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:56:ed:bb:e4:74:74:94:61:eb:d5:11:51:3d:0a:d3:5f:fe: 22:21:98:d7:40:6d:85:cf:8b:59:91:ff:1d:34:bb:79:bd:f3: b6:c5:bd:05:f9:9f:02:f8:ff:fc:b2:e6:19:37:5f:75:c0:6c: 5d:4f:81:8c:f7:fa:c6:25:e2:b1:8b:67:8d:e0:b2:94:6c:a2: eb:bc:14:dc:f0:b2:82:d2:65:98:0f:e2:22:68:61:4b:11:55: 55:ed:03:5d:98:76:c5:bd:2d:e8:5c:2f:c7:97:99:16:8b:5a: 70:32:40:55:55:a7:97:74:c8:b8:3a:bd:dc:9e:fe:a4:9a:47: da:87:34:6f:e5:eb:b2:90:7a:42:32:53:03:60:5e:57:d9:23: c1:b3:df:9c:b5:a4:2c:0d:76:d7:74:b6:2b:81:ce:e1:a1:5c: 59:aa:a8:fa:ec:27:63:e9:1b:e9:1d:58:84:2f:66:40:a1:ca: 95:18:95:e1:ba:1c:51:79:9a:89:bf:05:ca:fd:cd:f6:47:3f: 6c:bd:4a:4e:bd:16:88:8c:c9:63:76:c8:b8:fb:a5:48:1b:f5: 8d:a9:dd:aa:a8:5e:33:67:2b:a6:2d:a6:88:fa:04:ab:2d:c1: c5:a0:bf:b5:35:87:cc:0a:6e:25:e7:cd:23:98:af:35:6e:65: 75:90:40:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaz8r54A0yJQyui3hCxzedpfCfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTEwMjYyMjI2MjBaFw0yNTEwMzAwMzEwMjBaMDMxMTAvBgNV BAMTKEI5QThERTZBOEMxMjM1Q0IyQzhBMjA0ODEzNDJEQzNFOTAwRkY5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWH4a3QsD+u8xmSGDdkk3Wz0S7 vc8Rs7SPpqUujih1iDoAyJvni/Q1DZgWkTDL0j5JRl3kazeNsxvFSojW5udl+ddG +nHA/n7jw6WTWl+OQsMMmrAs3d6Y0DcCU7pu3MFXFNB9RGAP159o5LCJ9Gxz5LUT WGfCVta+V2FbpKS7pCTSvIeePab20Ce0IBfx9YVHp1j+fEHnMoulqDBwKHtfQGFr ZlAIGjGZbEzIrM+M16AtnD9O5z3lTHmDbauIx5iiAg+44781F206l3hueinSwejn /EZu10Dhph7aEDt73S2wKq1PVitm4jww2aFX5YL811hdGHPIlHLIXnWaN3t1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuajeaowSNcssiiBIE0LcPpAP+QQwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItW7bvkdHSUYevVEVE9CtNf/iIhmNdAbYXP i1mR/x00u3m987bFvQX5nwL4//yy5hk3X3XAbF1PgYz3+sYl4rGLZ43gspRsouu8 FNzwsoLSZZgP4iJoYUsRVVXtA12YdsW9LehcL8eXmRaLWnAyQFVVp5d0yLg6vdye /qSaR9qHNG/l67KQekIyUwNgXlfZI8Gz35y1pCwNdtd0tiuBzuGhXFmqqPrsJ2Pp G+kdWIQvZkChypUYleG6HFF5mom/Bcr9zfZHP2y9Sk69FoiMyWN2yLj7pUgb9Y2p 3aqoXjNnK6Ytpoj6BKstwcWgv7U1h8wKbiXnzSOYrzVuZXWQQOA= -----END CERTIFICATE-----Generated at Mon Oct 27 12:42:42 2025 by rpki-client