$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: ubcWWPCyF6wpudY8EzV109K8nWmudgN1s0R+7xoQyfo= Subject key identifier: F2:9B:E6:A5:A8:C1:01:DD:EF:3C:52:B8:21:99:F1:D1:9E:99:1F:54 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 3A9DC84F884A08176094C242BB843C5EC2ABD0B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 05:21:08 +0000 Manifest this update: Sun 02 Nov 2025 05:16:08 +0000 Manifest next update: Wed 05 Nov 2025 15:27:08 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: aHADXd0TVWAc5+VDLkXw4FU9Z49e/kuwdJsERxtfKV0=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9d:c8:4f:88:4a:08:17:60:94:c2:42:bb:84:3c:5e:c2:ab:d0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Nov 2 05:16:08 2025 GMT Not After : Nov 5 15:27:08 2025 GMT Subject: CN=F29BE6A5A8C101DDEF3C52B82199F1D19E991F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:4b:9a:9e:53:f4:61:99:d1:19:4a:35:c0: ae:62:91:4a:05:3f:45:4c:7a:7d:ee:5f:69:94:3c: 16:76:65:81:61:ad:16:f3:76:25:5b:8d:61:7d:34: d2:01:9a:8f:4c:3b:fb:ec:6a:74:d5:d1:20:70:2d: e5:b6:db:28:40:bd:af:cb:4b:72:eb:4c:af:f6:89: 58:d7:27:cc:1f:07:3c:a7:70:fb:0d:6f:3b:0c:97: 92:6e:d9:cc:06:32:79:fa:03:16:9b:47:6a:cc:69: cb:60:61:22:fb:71:ab:10:36:42:fe:0a:47:7c:88: cc:3e:c3:16:e8:5c:03:5a:2e:07:17:a5:aa:6c:4c: 40:7d:31:ec:b3:18:dd:67:c8:31:ad:68:55:8a:cf: d1:48:f3:4e:b7:79:12:9b:f1:bb:b6:81:3c:d8:a4: 0d:1e:48:7c:4e:33:97:94:89:82:b0:f7:d8:91:8e: 4d:b4:ce:44:1d:e2:8f:89:9d:72:8c:f6:cb:3d:97: 2d:ae:1f:f7:09:ff:ab:92:ec:b9:ef:1a:c8:69:35: bc:57:b4:57:32:63:b2:34:8a:ca:2b:4c:26:99:a3: a3:9a:3d:2d:94:28:8b:c6:c0:b8:90:2a:a1:5d:dc: 3b:cd:58:73:70:3c:20:07:2c:01:be:b8:d6:e2:77: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9B:E6:A5:A8:C1:01:DD:EF:3C:52:B8:21:99:F1:D1:9E:99:1F:54 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9e:01:f6:36:6b:6d:a3:7f:dc:38:d3:a2:5f:47:7a:da:c0: 04:7a:9f:33:8f:59:88:be:ca:92:d6:fd:7f:9a:d7:e2:83:86: ec:c2:24:e8:49:a4:2c:ce:68:53:c4:57:cd:e9:4e:79:4e:52: e5:9f:88:29:c7:d5:96:fe:1c:38:52:9d:f9:5d:d3:22:3b:d7: 0d:d4:05:70:75:6a:d7:4c:25:b9:f5:1f:98:6f:8c:4b:b5:48: c6:de:d1:da:f8:d5:fc:f4:67:dc:bd:ff:66:2a:16:f7:2e:f7: f3:fb:14:18:4a:88:9d:4d:e2:b6:a9:cc:16:d2:b9:70:db:d5: 0c:05:c5:20:df:29:d5:9d:56:78:96:52:f1:5d:d9:37:a7:cb: 37:78:ba:84:be:7c:9d:8a:c5:8a:24:7c:44:a8:ca:61:95:12: 9d:76:f6:fe:31:09:9a:f3:38:ec:a2:18:a3:7f:38:e6:72:f2: 7c:8f:81:bc:8e:af:a8:57:83:cf:6e:34:fa:b9:de:c2:71:31: de:3f:76:63:76:08:11:48:21:36:ae:84:2e:70:7a:ab:2b:99: 2c:3e:aa:e6:0f:3b:2a:77:47:84:8c:c7:c7:bc:3e:fe:e8:6d: 15:79:e2:85:af:0c:e0:75:3b:7a:67:3b:73:03:5c:55:15:76: b8:85:af:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOp3IT4hKCBdglMJCu4Q8XsKr0LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTExMDIwNTE2MDhaFw0yNTExMDUxNTI3MDhaMDMxMTAvBgNV BAMTKEYyOUJFNkE1QThDMTAxRERFRjNDNTJCODIxOTlGMUQxOUU5OTFGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w0uanlP0YZnRGUo1wK5ikUoF P0VMen3uX2mUPBZ2ZYFhrRbzdiVbjWF9NNIBmo9MO/vsanTV0SBwLeW22yhAva/L S3LrTK/2iVjXJ8wfBzyncPsNbzsMl5Ju2cwGMnn6AxabR2rMactgYSL7casQNkL+ Ckd8iMw+wxboXANaLgcXpapsTEB9MeyzGN1nyDGtaFWKz9FI8063eRKb8bu2gTzY pA0eSHxOM5eUiYKw99iRjk20zkQd4o+JnXKM9ss9ly2uH/cJ/6uS7LnvGshpNbxX tFcyY7I0isorTCaZo6OaPS2UKIvGwLiQKqFd3DvNWHNwPCAHLAG+uNbid/5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8pvmpajBAd3vPFK4IZnx0Z6ZH1QwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKeAfY2a22jf9w406JfR3rawAR6nzOPWYi+ ypLW/X+a1+KDhuzCJOhJpCzOaFPEV83pTnlOUuWfiCnH1Zb+HDhSnfld0yI71w3U BXB1atdMJbn1H5hvjEu1SMbe0dr41fz0Z9y9/2YqFvcu9/P7FBhKiJ1N4rapzBbS uXDb1QwFxSDfKdWdVniWUvFd2Tenyzd4uoS+fJ2KxYokfESoymGVEp129v4xCZrz OOyiGKN/OOZy8nyPgbyOr6hXg89uNPq53sJxMd4/dmN2CBFIITauhC5weqsrmSw+ quYPOyp3R4SMx8e8Pv7obRV54oWvDOB1O3pnO3MDXFUVdriFrxY= -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:01 2025 by rpki-client