$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: rhNeQp/gd4tD1TI/74MxC68ggfmPbX3zOOw6vMOII7w= Subject key identifier: C6:7A:9A:94:70:E0:4E:D0:82:0A:1E:9E:11:8B:27:98:6B:55:61:D7 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 678120D83DF68E47788BA5F43E7D8BF5A705EEE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 051C Signing time: Tue 04 Nov 2025 03:11:41 +0000 Manifest this update: Tue 04 Nov 2025 03:06:41 +0000 Manifest next update: Fri 07 Nov 2025 05:53:41 +0000 Files and hashes: 1: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 2: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: CRxoXGYOIu8NaZaYDW4EywJTkZTfDnCNYttMJTzr+Hs=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 4: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 5: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:81:20:d8:3d:f6:8e:47:78:8b:a5:f4:3e:7d:8b:f5:a7:05:ee:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Nov 4 03:06:41 2025 GMT Not After : Nov 7 05:53:41 2025 GMT Subject: CN=C67A9A9470E04ED0820A1E9E118B27986B5561D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:b9:3b:69:90:f6:9a:7a:f1:4e:9b:7f:4c: 34:e2:40:dd:ff:41:54:49:10:45:d5:75:08:32:38: a0:73:e0:93:d6:3b:aa:ad:21:1b:07:31:26:b4:a2: 61:5e:81:f2:ab:cd:d6:34:d5:eb:a0:77:2c:e3:93: b8:1d:d2:4a:a4:77:74:bb:f5:7c:77:6a:20:8c:4a: 26:08:e3:a1:cc:bb:44:af:ee:8e:fe:59:7c:18:7d: fa:44:ef:bc:09:58:03:b2:68:fc:64:7d:25:80:2c: 57:30:ed:98:f2:35:4c:c4:03:87:1f:8b:da:1b:7a: de:c9:ec:12:be:64:aa:e9:5c:58:a6:29:d0:42:8c: d0:8f:07:43:34:15:11:73:8a:51:1a:e5:27:09:3e: fa:c6:f5:7f:16:9e:98:f6:b0:21:aa:5e:ee:34:47: 54:71:f5:ef:6a:27:cf:64:25:46:6a:34:90:b7:2d: 01:f0:54:32:86:ae:6d:a2:51:4d:97:84:11:c2:60: d0:e8:88:45:be:47:74:76:d5:84:c6:85:f3:16:38: fd:f5:5e:3d:ab:52:e3:23:14:f4:d8:07:52:e0:41: e1:08:a1:97:39:93:2e:00:54:48:8b:fe:0e:72:46: 2d:77:5e:77:85:7e:6e:fb:08:e2:74:9b:d7:79:37: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7A:9A:94:70:E0:4E:D0:82:0A:1E:9E:11:8B:27:98:6B:55:61:D7 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3d:8e:1c:2a:45:3c:41:61:1a:57:ab:54:6a:03:94:4f:98: 88:47:ee:7a:65:e9:a5:89:74:18:88:33:6a:d2:4e:54:ad:c1: 92:39:17:83:44:da:70:99:33:c5:b5:cd:b1:e2:65:1d:1a:27: 84:57:98:ae:58:a3:c5:00:84:cc:48:0c:98:50:c8:ea:92:35: 53:2e:0d:b7:99:0d:d2:91:0f:5d:1c:8c:ef:db:96:3c:ca:bc: 9e:05:12:41:06:b0:e0:ae:df:5e:58:03:d9:4f:42:2d:5c:6f: 27:a5:10:77:94:98:97:fe:24:e7:c0:5a:47:c4:36:8d:eb:3f: fc:43:b4:fa:24:b9:f2:9b:82:df:68:30:c5:2b:8b:f0:fd:98: 6b:60:3c:42:29:ee:c8:d1:ec:17:02:ef:57:76:f6:d7:84:bb: 01:d1:1e:75:05:eb:6d:05:eb:8a:75:a2:3d:58:d1:03:7e:58: c4:55:86:66:8c:91:0a:2b:82:08:27:7f:42:b5:84:47:33:da: e4:48:1a:cf:97:1e:29:11:47:0f:7c:d7:26:28:26:e1:96:0a: dc:d0:6e:81:1f:65:91:13:89:31:dc:d4:08:7f:8f:a4:b0:31: 9a:c8:24:4a:49:97:d7:6c:9d:d4:22:b0:4d:4a:62:32:b0:60: dc:35:e6:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4Eg2D32jkd4i6X0Pn2L9acF7uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTExMDQwMzA2NDFaFw0yNTExMDcwNTUzNDFaMDMxMTAvBgNV BAMTKEM2N0E5QTk0NzBFMDRFRDA4MjBBMUU5RTExOEIyNzk4NkI1NTYxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVrk7aZD2mnrxTpt/TDTiQN3/ QVRJEEXVdQgyOKBz4JPWO6qtIRsHMSa0omFegfKrzdY01eugdyzjk7gd0kqkd3S7 9Xx3aiCMSiYI46HMu0Sv7o7+WXwYffpE77wJWAOyaPxkfSWALFcw7ZjyNUzEA4cf i9obet7J7BK+ZKrpXFimKdBCjNCPB0M0FRFzilEa5ScJPvrG9X8Wnpj2sCGqXu40 R1Rx9e9qJ89kJUZqNJC3LQHwVDKGrm2iUU2XhBHCYNDoiEW+R3R21YTGhfMWOP31 Xj2rUuMjFPTYB1LgQeEIoZc5ky4AVEiL/g5yRi13XneFfm77COJ0m9d5N+i9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnqalHDgTtCCCh6eEYsnmGtVYdcwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc9jhwqRTxBYRpXq1RqA5RPmIhH7npl6aWJ dBiIM2rSTlStwZI5F4NE2nCZM8W1zbHiZR0aJ4RXmK5Yo8UAhMxIDJhQyOqSNVMu DbeZDdKRD10cjO/bljzKvJ4FEkEGsOCu315YA9lPQi1cbyelEHeUmJf+JOfAWkfE No3rP/xDtPokufKbgt9oMMUri/D9mGtgPEIp7sjR7BcC71d29teEuwHRHnUF620F 64p1oj1Y0QN+WMRVhmaMkQorgggnf0K1hEcz2uRIGs+XHikRRw981yYoJuGWCtzQ boEfZZETiTHc1Ah/j6SwMZrIJEpJl9dsndQisE1KYjKwYNw15oA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:44 2025 by rpki-client