$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json) Hash identifier: hnZ7VsxeBQNTnzPdvNHUsfB+tdwfJduN4PrBzGy/dhc= Subject key identifier: 92:01:6E:BC:0F:9E:10:A0:49:A3:B9:A5:D6:88:A5:0D:C9:0F:36:E1 Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F Certificate serial: 72881EDCB762D3E5F7EAAC86303504DA9AFB7937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft Manifest number: 01EC Signing time: Mon 03 Nov 2025 07:11:36 +0000 Manifest this update: Mon 03 Nov 2025 07:06:36 +0000 Manifest next update: Thu 06 Nov 2025 10:19:36 +0000 Files and hashes: 1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=) 2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: tWp/fwe/eKy+WmY903dyD+2ZPEiRy+DuSMrys5G7eeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:88:1e:dc:b7:62:d3:e5:f7:ea:ac:86:30:35:04:da:9a:fb:79:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F Validity Not Before: Nov 3 07:06:36 2025 GMT Not After : Nov 6 10:19:36 2025 GMT Subject: CN=92016EBC0F9E10A049A3B9A5D688A50DC90F36E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c4:6e:bd:d5:4b:da:2b:5e:98:c3:f3:d1:72: 76:5b:85:4c:39:91:da:a5:c8:a8:7b:9a:b6:08:72: 3a:74:c8:91:87:5d:f5:b2:96:4a:8d:04:36:d1:24: 82:6f:62:23:fa:0f:5d:31:55:ec:2e:69:de:8f:d4: 63:fb:95:bc:a7:9f:80:b7:31:93:48:cb:08:38:f0: ab:7e:ec:51:15:43:f9:c9:34:21:77:5d:46:10:ae: a2:19:3d:8c:a5:09:9e:0e:a7:0c:38:8d:41:b3:3f: c7:32:b6:db:e9:b0:9d:82:3b:0e:25:93:bd:23:44: c4:f1:87:ce:0f:39:a5:d1:9d:78:00:c9:b4:55:07: e0:6e:5e:cb:b6:be:d1:0a:0b:87:ee:3e:ed:07:ac: b7:91:f5:b9:1c:3c:01:f9:ae:61:84:96:a7:d7:63: 1a:11:cf:9c:b9:62:47:88:07:67:5d:61:b4:9e:88: 99:86:12:a5:21:57:56:7a:05:0c:d9:f1:b7:b8:04: 9a:d9:84:e5:04:a3:56:94:f7:a7:cc:7b:e8:65:d1: 16:72:37:fd:75:93:d3:8d:7b:e1:53:bd:63:ab:e7: 89:04:55:4b:73:a0:32:97:e3:6b:fe:d6:91:8c:ff: 3a:74:cd:f6:a2:a8:4d:e8:fa:d2:3b:9b:c4:31:bc: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:6E:BC:0F:9E:10:A0:49:A3:B9:A5:D6:88:A5:0D:C9:0F:36:E1 X509v3 Authority Key Identifier: keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:59:54:07:b3:95:35:ec:98:31:1d:23:36:75:ab:d8:bd:8b: 64:e7:09:8c:d8:d8:89:b2:0f:f5:56:fe:d4:09:99:b6:a6:d3: f6:cd:44:64:ec:3d:98:31:99:4e:70:2f:96:cc:b6:36:04:8d: f4:90:e3:89:e1:38:d2:54:20:7f:4e:d4:9e:0a:93:0b:b5:ce: a3:ab:cb:5e:04:c1:2c:65:d9:84:50:68:83:12:6f:3e:da:f7: ac:06:e1:a7:80:e7:fb:21:78:13:07:f3:ed:7b:44:81:86:8f: a6:23:1d:f5:c1:e3:85:00:7a:45:4e:98:1e:88:ca:22:6b:f0: 03:15:b8:2f:a0:0c:d5:aa:b2:de:02:aa:af:65:3e:b7:fd:37: 61:4e:d4:33:31:21:96:16:19:55:5c:3e:3b:09:fd:24:d8:9b: 52:69:43:76:9d:6d:db:12:bd:68:8a:84:f6:e4:5f:2d:ed:44: 49:b0:29:6f:da:87:0d:5b:fc:8f:c8:58:4a:fc:8e:58:13:bf: 34:bb:42:d7:f0:99:70:f8:c2:1f:79:f8:86:c6:d1:0a:7e:e8: 07:27:0f:fa:dd:59:6b:7f:f7:1e:d8:fe:30:f7:bb:e6:d9:5b: c6:be:91:55:10:0b:5d:2b:28:06:4b:1c:06:9b:f3:9f:cb:e8: 9c:ba:26:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoge3Ldi0+X36qyGMDUE2pr7eTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3 NDgxRjE2RjAeFw0yNTExMDMwNzA2MzZaFw0yNTExMDYxMDE5MzZaMDMxMTAvBgNV BAMTKDkyMDE2RUJDMEY5RTEwQTA0OUEzQjlBNUQ2ODhBNTBEQzkwRjM2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxG691UvaK16Yw/PRcnZbhUw5 kdqlyKh7mrYIcjp0yJGHXfWylkqNBDbRJIJvYiP6D10xVewuad6P1GP7lbynn4C3 MZNIywg48Kt+7FEVQ/nJNCF3XUYQrqIZPYylCZ4Opww4jUGzP8cyttvpsJ2COw4l k70jRMTxh84POaXRnXgAybRVB+BuXsu2vtEKC4fuPu0HrLeR9bkcPAH5rmGElqfX YxoRz5y5YkeIB2ddYbSeiJmGEqUhV1Z6BQzZ8be4BJrZhOUEo1aU96fMe+hl0RZy N/11k9ONe+FTvWOr54kEVUtzoDKX42v+1pGM/zp0zfaiqE3o+tI7m8QxvOkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgFuvA+eEKBJo7ml1oilDckPNuEwHwYDVR0j BBgwFoAU+c9YFACrfuU6uROyVWHtAHSB8W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjBiOWE4Ny04MDU4LTQ2NmYtYjRhOS1hNzc3YjQ2ODFhZTEvMC9GOUNGNTgxNDAw QUI3RUU1M0FCOTEzQjI1NTYxRUQwMDc0ODFGMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVEMDA3NDgx RjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYwYjlhODctODA1OC00NjZmLWI0 YTktYTc3N2I0NjgxYWUxLzAvRjlDRjU4MTQwMEFCN0VFNTNBQjkxM0IyNTU2MUVE MDA3NDgxRjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtZVAezlTXsmDEdIzZ1q9i9i2TnCYzY2Imy D/VW/tQJmbam0/bNRGTsPZgxmU5wL5bMtjYEjfSQ44nhONJUIH9O1J4Kkwu1zqOr y14EwSxl2YRQaIMSbz7a96wG4aeA5/sheBMH8+17RIGGj6YjHfXB44UAekVOmB6I yiJr8AMVuC+gDNWqst4Cqq9lPrf9N2FO1DMxIZYWGVVcPjsJ/STYm1JpQ3adbdsS vWiKhPbkXy3tREmwKW/ahw1b/I/IWEr8jlgTvzS7QtfwmXD4wh95+IbG0Qp+6Acn D/rdWWt/9x7Y/jD3u+bZW8a+kVUQC10rKAZLHAab85/L6Jy6Jh8= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:25 2025 by rpki-client