$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: EJENwXHR39rnRXMaplQd2rLtdXwQD9DbyDOrnPCprso= Subject key identifier: CB:E7:EB:CE:85:BA:13:8C:6E:01:B5:84:B2:89:55:59:FA:EC:22:B0 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 5D695ABF2CA15AA72A30290D4152587303B31B23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01DD Signing time: Mon 03 Nov 2025 01:21:18 +0000 Manifest this update: Mon 03 Nov 2025 01:16:18 +0000 Manifest next update: Thu 06 Nov 2025 10:18:18 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 2: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: N7Oq0z6yMxklKdgAmyVD/pUkyjApyqCU7X37MQhjq6o=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:5a:bf:2c:a1:5a:a7:2a:30:29:0d:41:52:58:73:03:b3:1b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Nov 3 01:16:18 2025 GMT Not After : Nov 6 10:18:18 2025 GMT Subject: CN=CBE7EBCE85BA138C6E01B584B2895559FAEC22B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:bc:1f:13:b4:c6:e9:48:d0:74:0b:a5:7e: 3d:dd:3f:b4:b3:a8:89:60:7a:15:5a:83:4d:60:42: 45:d1:74:d0:2f:01:a9:0f:17:14:02:86:cf:ae:3d: 49:c4:01:97:7a:1d:1b:b9:a7:b5:05:c0:a6:ce:ca: 90:18:2b:26:39:4a:79:a1:72:f7:f8:ea:10:35:5a: 8f:89:7d:ac:bb:25:3c:09:75:4e:c3:0a:6a:f6:90: 36:91:5b:fa:30:32:71:95:c0:b0:db:40:53:cd:95: 33:c8:f6:29:e2:38:69:ae:cd:55:b0:8f:03:20:9c: 68:9e:4f:ad:4a:28:68:6b:9f:04:0b:eb:d0:f1:1b: 0a:d1:a8:a5:5b:eb:a4:d8:2c:e4:a4:cb:6f:45:d7: 18:7f:60:85:b1:55:d2:10:75:99:f3:1f:6d:27:d8: 68:f4:ec:03:26:9a:1a:04:b4:c0:33:7f:1c:59:02: c1:a5:58:a8:38:e3:2a:88:07:1f:04:00:63:42:cc: 82:59:8c:9b:85:19:0c:ae:e9:a6:aa:d1:a7:9a:77: d9:58:aa:9a:2a:d2:a3:15:d2:27:c8:6d:eb:0b:84: cc:2f:1a:62:5d:c3:c6:d3:86:60:19:b2:47:58:6f: 6a:a4:dd:33:aa:3c:83:5c:16:19:46:8d:c3:e3:a9: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E7:EB:CE:85:BA:13:8C:6E:01:B5:84:B2:89:55:59:FA:EC:22:B0 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:24:69:59:b7:70:66:ff:83:f0:88:7a:0e:13:53:a6:9e:4e: 9a:ac:08:dc:91:4a:49:cb:ac:d9:eb:37:e7:62:ae:45:bb:88: eb:15:68:74:1a:39:ed:0d:f2:5c:1c:e4:74:74:5d:6e:0c:d6: 07:7a:0c:45:46:74:55:cd:a8:e2:ae:26:08:ad:1a:10:8a:18: 73:ed:33:fe:34:68:b4:cd:78:55:35:e3:48:37:39:72:19:3e: 1f:e5:73:20:c5:fa:0d:f6:38:1d:e6:ee:cf:ca:98:9b:ce:81: 3f:4b:80:e1:57:26:a4:0a:d0:0c:9d:40:8e:cf:a2:d4:4f:ea: 4e:91:2a:0e:dd:57:c5:4e:6f:1c:79:d6:de:49:25:6f:92:f0: c8:ed:0b:09:1b:63:ed:96:92:2f:33:c7:59:da:28:85:1f:06: e7:98:88:26:a9:59:f9:ba:5a:bc:b4:63:18:60:e5:40:43:1d: 97:23:74:c1:b4:17:f4:d0:ce:eb:25:b7:0a:21:41:ac:c9:87: 25:8e:ef:85:dc:91:0d:ca:e7:ac:06:60:99:e1:2b:00:ba:4f: 2c:bc:1b:35:f5:9a:27:55:40:6a:37:56:67:e9:9b:9d:df:a7: b1:a8:26:59:66:36:bf:f0:86:4f:25:b2:96:07:bd:5f:7b:63: 58:1f:5d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWlavyyhWqcqMCkNQVJYcwOzGyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTExMDMwMTE2MThaFw0yNTExMDYxMDE4MThaMDMxMTAvBgNV BAMTKENCRTdFQkNFODVCQTEzOEM2RTAxQjU4NEIyODk1NTU5RkFFQzIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7LwfE7TG6UjQdAulfj3dP7Sz qIlgehVag01gQkXRdNAvAakPFxQChs+uPUnEAZd6HRu5p7UFwKbOypAYKyY5Snmh cvf46hA1Wo+Jfay7JTwJdU7DCmr2kDaRW/owMnGVwLDbQFPNlTPI9iniOGmuzVWw jwMgnGieT61KKGhrnwQL69DxGwrRqKVb66TYLOSky29F1xh/YIWxVdIQdZnzH20n 2Gj07AMmmhoEtMAzfxxZAsGlWKg44yqIBx8EAGNCzIJZjJuFGQyu6aaq0aead9lY qpoq0qMV0ifIbesLhMwvGmJdw8bThmAZskdYb2qk3TOqPINcFhlGjcPjqbIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+frzoW6E4xuAbWEsolVWfrsIrAwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4kaVm3cGb/g/CIeg4TU6aeTpqsCNyRSknL rNnrN+dirkW7iOsVaHQaOe0N8lwc5HR0XW4M1gd6DEVGdFXNqOKuJgitGhCKGHPt M/40aLTNeFU140g3OXIZPh/lcyDF+g32OB3m7s/KmJvOgT9LgOFXJqQK0AydQI7P otRP6k6RKg7dV8VObxx51t5JJW+S8MjtCwkbY+2Wki8zx1naKIUfBueYiCapWfm6 Wry0Yxhg5UBDHZcjdMG0F/TQzusltwohQazJhyWO74XckQ3K56wGYJnhKwC6Tyy8 GzX1midVQGo3Vmfpm53fp7GoJllmNr/whk8lspYHvV97Y1gfXRU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:35 2025 by rpki-client