$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: FL8tfBKAF9/OCiJdRsv+XgP2c7T0a263VQPK8mIiAnI= Subject key identifier: 17:08:B5:5F:99:66:72:E8:E7:9C:CB:9F:06:06:7A:85:19:AE:DB:46 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 59BA6605EF98FDD751CBF7F833DB1C5F116573F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0522 Signing time: Mon 03 Nov 2025 03:32:02 +0000 Manifest this update: Mon 03 Nov 2025 03:27:02 +0000 Manifest next update: Thu 06 Nov 2025 03:35:02 +0000 Files and hashes: 1: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 3: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: epsELciJVh4f50xRBnDy8IaMDb0TaxnvTjk/70V/JYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ba:66:05:ef:98:fd:d7:51:cb:f7:f8:33:db:1c:5f:11:65:73:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Nov 3 03:27:02 2025 GMT Not After : Nov 6 03:35:02 2025 GMT Subject: CN=1708B55F996672E8E79CCB9F06067A8519AEDB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:84:f7:cc:b5:63:05:8b:1d:e7:15:26:59: e5:fc:6d:e5:28:6b:27:80:bc:02:30:9d:dd:87:9f: ac:cc:63:b9:19:3d:80:b7:0a:75:b6:50:92:e5:d3: 90:bd:94:f2:c9:c6:17:87:5d:5d:0d:76:cb:22:20: fa:9e:fd:2b:f1:7b:ad:df:3e:76:3f:87:7a:3f:ec: 93:ea:81:de:68:1a:13:3b:71:5e:09:db:b5:d6:9f: b4:c1:d4:e5:15:18:a4:90:7c:1e:01:ad:57:6a:1d: 84:c6:bb:b8:7d:54:65:4e:22:c9:ab:51:aa:15:78: 3d:72:d4:ea:93:0c:e9:c2:c0:40:b7:5e:a9:61:ec: dd:9b:25:d6:a2:78:15:f8:cb:c5:2c:28:59:aa:66: 9e:fb:0c:43:bd:15:76:53:59:45:6b:6c:68:76:c3: 2a:81:6a:45:ef:0e:85:c2:b0:49:47:b9:bf:72:79: 47:b5:75:b6:1c:3f:77:76:1a:ad:ee:e8:21:49:75: fa:f8:d9:cc:31:77:81:18:fc:63:e1:5f:a2:dc:47: d5:46:6e:87:63:70:f4:0c:67:55:be:a5:e7:ca:7e: 8a:d0:77:da:51:fe:f6:3d:29:6d:68:0f:fa:e1:36: 07:77:eb:9c:c2:ec:05:e0:de:01:35:a3:ce:0b:cd: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:B5:5F:99:66:72:E8:E7:9C:CB:9F:06:06:7A:85:19:AE:DB:46 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:fa:54:1e:f0:1f:6d:27:31:fc:76:41:a7:7d:88:a6:ee:9a: 24:11:67:df:00:cd:bf:f2:fd:c1:11:6a:fb:8e:82:1b:1c:b7: 34:12:6d:e3:22:c6:cf:fe:d6:34:fe:23:48:3b:3f:92:5a:51: cf:1b:c1:16:2c:20:18:fc:d9:2e:80:0b:19:88:5a:cf:e8:4d: 18:c8:16:de:d5:68:06:75:3c:c4:cf:ac:a5:48:a7:40:8c:4c: 49:93:a6:26:25:10:8d:8f:65:f3:8c:6f:5b:a0:8f:f7:bf:99: 74:e7:c0:79:34:a8:50:20:b8:fe:63:d1:21:4d:a9:d0:86:7f: 31:7e:7c:d4:ee:02:19:76:f5:dd:37:38:0a:11:aa:71:aa:ee: 36:13:a7:2b:8e:21:ae:7f:ce:b7:87:c4:cb:94:39:e3:2c:ac: fd:f3:e1:88:74:23:b8:52:78:52:5b:2d:80:cf:ef:99:a8:27: c1:86:c3:d8:85:28:2f:04:29:ed:71:f6:6c:70:b7:50:03:f3: a0:00:e9:b6:5d:fe:0e:20:d8:a7:56:d1:a1:2f:1b:f2:85:92: ab:bf:a3:ea:26:59:df:86:9f:f7:a3:0a:a9:56:e4:a7:48:ea: 78:8b:86:5e:1b:a6:ef:f3:61:2c:5f:ee:8b:97:f1:c3:c2:c1: 27:3b:3a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbpmBe+Y/ddRy/f4M9scXxFlc/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTExMDMwMzI3MDJaFw0yNTExMDYwMzM1MDJaMDMxMTAvBgNV BAMTKDE3MDhCNTVGOTk2NjcyRThFNzlDQ0I5RjA2MDY3QTg1MTlBRURCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiu4T3zLVjBYsd5xUmWeX8beUo ayeAvAIwnd2Hn6zMY7kZPYC3CnW2UJLl05C9lPLJxheHXV0NdssiIPqe/Svxe63f PnY/h3o/7JPqgd5oGhM7cV4J27XWn7TB1OUVGKSQfB4BrVdqHYTGu7h9VGVOIsmr UaoVeD1y1OqTDOnCwEC3Xqlh7N2bJdaieBX4y8UsKFmqZp77DEO9FXZTWUVrbGh2 wyqBakXvDoXCsElHub9yeUe1dbYcP3d2Gq3u6CFJdfr42cwxd4EY/GPhX6LcR9VG bodjcPQMZ1W+pefKforQd9pR/vY9KW1oD/rhNgd365zC7AXg3gE1o84Lzdv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwi1X5lmcujnnMufBgZ6hRmu20YwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMj6VB7wH20nMfx2Qad9iKbumiQRZ98Azb/y /cERavuOghsctzQSbeMixs/+1jT+I0g7P5JaUc8bwRYsIBj82S6ACxmIWs/oTRjI Ft7VaAZ1PMTPrKVIp0CMTEmTpiYlEI2PZfOMb1ugj/e/mXTnwHk0qFAguP5j0SFN qdCGfzF+fNTuAhl29d03OAoRqnGq7jYTpyuOIa5/zreHxMuUOeMsrP3z4Yh0I7hS eFJbLYDP75moJ8GGw9iFKC8EKe1x9mxwt1AD86AA6bZd/g4g2KdW0aEvG/KFkqu/ o+omWd+Gn/ejCqlW5KdI6niLhl4bpu/zYSxf7ouX8cPCwSc7OjQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:39 2025 by rpki-client