$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: +kmI189yaLmTaz5WoOj43elimJMbNq7X2ceB5NAYBNA= Subject key identifier: E1:74:7A:59:CA:14:E1:D7:CE:02:94:8E:96:A9:22:B1:38:EC:C9:94 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 591FE46226F7F287695748DB5B682B931F4A865E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02D4 Signing time: Tue 04 Nov 2025 02:22:01 +0000 Manifest this update: Tue 04 Nov 2025 02:17:01 +0000 Manifest next update: Fri 07 Nov 2025 08:18:01 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) 3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: z9XdXGyKZHzTUOnyymTczXCT5jYQFXIa5PrOrrXNvKY=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1f:e4:62:26:f7:f2:87:69:57:48:db:5b:68:2b:93:1f:4a:86:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Nov 4 02:17:01 2025 GMT Not After : Nov 7 08:18:01 2025 GMT Subject: CN=E1747A59CA14E1D7CE02948E96A922B138ECC994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:40:7b:96:01:0a:91:87:fc:69:e9:89:54: cd:00:a5:7f:1d:d6:44:76:76:aa:7f:55:6d:27:38: ca:43:7f:e1:56:43:37:8e:e0:02:77:a6:70:d9:ae: 74:0c:a8:40:63:ad:19:1b:f3:80:f1:cc:7e:42:74: 19:39:70:88:0f:e1:b4:63:55:cf:50:ae:c4:fc:a7: d8:1a:20:64:c5:ba:d1:9b:da:93:b8:11:87:ef:a9: ca:dd:eb:14:ae:f2:ad:62:82:0e:e9:ad:b1:9c:1c: e0:e6:cf:58:f2:4b:fb:4d:7a:bd:bc:0d:e6:ee:02: e5:3e:91:99:98:a1:e8:db:f1:4d:dc:cf:b4:d8:5a: 28:64:13:bb:32:56:eb:18:05:65:e4:0d:89:1e:6f: 04:c8:10:ef:91:da:8a:7b:35:f7:95:6b:13:ef:80: 16:5d:b4:3b:25:31:8f:ce:2f:f5:de:5d:4d:be:36: aa:5e:6d:67:de:6f:aa:a9:18:d3:19:06:77:d9:86: 5b:85:c3:fa:49:47:72:43:c2:fc:c8:0a:ef:e2:4a: 9d:cd:f4:37:a0:ed:d9:80:2d:0c:b9:f8:c0:69:a4: 31:a4:08:87:27:21:2f:f3:d5:50:28:7a:d9:53:03: 9f:31:28:d0:33:4d:9c:08:93:6d:6e:4c:4d:35:39: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:7A:59:CA:14:E1:D7:CE:02:94:8E:96:A9:22:B1:38:EC:C9:94 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:73:e0:b9:8f:61:af:c7:6d:ae:8a:11:bd:aa:8e:f4:92:58: bc:7c:c3:95:0a:6c:2c:02:40:9a:49:56:ac:86:06:b0:6b:51: c6:65:46:f1:47:f8:8b:33:d0:a4:dd:27:1b:bc:a4:33:fc:00: fe:e6:77:dd:e3:27:36:2f:1d:86:9c:2d:36:89:61:8c:2e:dd: d7:27:aa:26:08:fe:2c:7c:30:93:d2:cf:b0:8c:e6:55:2a:cc: 9b:33:b6:86:e3:ff:8e:e4:ec:8b:67:d1:dd:7d:c3:b8:1f:23: 99:ec:da:95:12:4d:b2:53:3e:aa:d8:57:9a:a0:a2:ba:47:8d: 22:91:1d:b0:bb:f2:80:00:a1:83:5f:86:68:ad:6c:85:6b:ba: 9f:63:33:ab:31:e8:62:d1:06:b7:0a:04:a6:d5:23:70:c5:4a: 7a:b3:83:45:d2:ff:1b:7f:8e:20:37:b9:94:aa:22:e8:0f:22: 11:b2:b9:4f:8f:7e:a0:be:82:7b:87:c0:5f:e3:61:62:f4:9a: f4:1b:23:89:09:0f:b7:ce:37:7e:b3:87:63:36:31:91:48:b4: 8d:16:be:9c:ab:30:e0:4d:ba:4a:be:57:93:1c:7a:ba:08:27: e6:80:9a:41:9e:b1:3b:a0:08:97:11:04:c9:8a:1c:b8:ae:af: 7e:8f:e0:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWR/kYib38odpV0jbW2grkx9Khl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTExMDQwMjE3MDFaFw0yNTExMDcwODE4MDFaMDMxMTAvBgNV BAMTKEUxNzQ3QTU5Q0ExNEUxRDdDRTAyOTQ4RTk2QTkyMkIxMzhFQ0M5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRkB7lgEKkYf8aemJVM0ApX8d 1kR2dqp/VW0nOMpDf+FWQzeO4AJ3pnDZrnQMqEBjrRkb84DxzH5CdBk5cIgP4bRj Vc9QrsT8p9gaIGTFutGb2pO4EYfvqcrd6xSu8q1igg7prbGcHODmz1jyS/tNer28 DebuAuU+kZmYoejb8U3cz7TYWihkE7syVusYBWXkDYkebwTIEO+R2op7NfeVaxPv gBZdtDslMY/OL/XeXU2+NqpebWfeb6qpGNMZBnfZhluFw/pJR3JDwvzICu/iSp3N 9Deg7dmALQy5+MBppDGkCIcnIS/z1VAoetlTA58xKNAzTZwIk21uTE01OSw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XR6WcoU4dfOApSOlqkisTjsyZQwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlz4LmPYa/Hba6KEb2qjvSSWLx8w5UKbCwC QJpJVqyGBrBrUcZlRvFH+Isz0KTdJxu8pDP8AP7md93jJzYvHYacLTaJYYwu3dcn qiYI/ix8MJPSz7CM5lUqzJsztobj/47k7Itn0d19w7gfI5ns2pUSTbJTPqrYV5qg orpHjSKRHbC78oAAoYNfhmitbIVrup9jM6sx6GLRBrcKBKbVI3DFSnqzg0XS/xt/ jiA3uZSqIugPIhGyuU+PfqC+gnuHwF/jYWL0mvQbI4kJD7fON36zh2M2MZFItI0W vpyrMOBNukq+V5MceroIJ+aAmkGesTugCJcRBMmKHLiur36P4Ig= -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:06 2025 by rpki-client