$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: tvdv0NKnvPSdJbspwSKbSyXB8DbTgEFOYWrXExITE2g= Subject key identifier: 89:D5:09:FC:E7:75:37:45:60:24:AE:AC:CE:3D:CC:57:2F:6A:9C:98 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 5C2504DD3E79CD1ADEE20E76D925CED5E43B7554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01EA Signing time: Mon 03 Nov 2025 16:31:58 +0000 Manifest this update: Mon 03 Nov 2025 16:26:58 +0000 Manifest next update: Fri 07 Nov 2025 00:50:58 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: yru9QrN0naq58YlqR9jpdyWO507aKW5I48Fa9OfQ7Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:25:04:dd:3e:79:cd:1a:de:e2:0e:76:d9:25:ce:d5:e4:3b:75:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Nov 3 16:26:58 2025 GMT Not After : Nov 7 00:50:58 2025 GMT Subject: CN=89D509FCE77537456024AEACCE3DCC572F6A9C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:a8:5b:0a:3a:a0:a9:df:14:ce:1f:ed:5c: 14:e1:ca:69:c0:7a:bb:3e:5e:c7:c6:b5:14:1d:ce: 5d:2b:28:c5:38:e2:9d:1f:7b:14:24:7d:93:2e:55: 76:2b:2e:c9:80:08:54:e5:15:93:9e:96:77:b7:7e: f7:f1:27:f3:bb:25:b6:ec:69:4a:7f:41:94:2c:ad: e8:44:2a:f8:35:79:4a:15:c4:e4:aa:c0:c7:66:0f: 23:18:fc:4e:30:eb:73:e1:b9:dc:09:69:de:ed:97: 04:3a:ee:8f:dc:38:00:75:90:a9:da:c2:94:ce:17: 8e:42:41:0c:26:66:fe:c5:21:28:75:4e:a0:b0:54: cb:b9:35:81:e2:38:9a:c9:5e:7b:43:0d:7a:85:05: 08:c1:ee:d8:42:de:5a:c7:08:ff:1d:51:c3:d3:c2: 3f:3b:28:75:ae:84:1d:3b:e1:10:a5:1e:ed:c8:42: 12:46:aa:f3:2a:2b:d5:a7:b4:87:cf:4a:62:2c:38: a1:a8:e5:d4:13:b9:e5:56:e5:b8:dc:6c:37:95:93: 5d:d4:e0:4a:c5:92:0e:7a:09:70:46:26:49:5a:47: 54:bb:ff:0a:9a:ee:1e:08:47:8f:e9:c1:ba:1e:36: c7:f4:60:06:6c:7c:8d:7c:ee:46:30:74:b4:0a:df: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D5:09:FC:E7:75:37:45:60:24:AE:AC:CE:3D:CC:57:2F:6A:9C:98 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:92:ee:bd:1d:a0:ff:5e:29:96:d2:0e:99:2f:f9:5c:1b:cd: ab:d0:95:60:6e:70:4a:62:ae:f2:ab:fa:80:07:83:5c:20:72: 53:54:df:0b:38:74:2a:16:76:a9:48:3e:7d:0a:b4:0f:a1:2d: fc:56:cc:7a:d0:6b:4f:62:21:c3:f4:17:b7:70:0e:e2:b4:ca: 54:4c:60:50:f7:eb:85:de:a5:b2:6f:20:da:a9:79:a4:a0:56: 39:d2:80:50:a6:e8:26:91:00:90:f8:6a:ed:a8:09:49:c4:27: 40:9c:24:a2:d6:c3:23:62:b7:62:d6:41:a2:3d:06:7d:7b:3a: 18:d9:76:6c:eb:dd:14:fa:39:af:c1:1b:d8:3a:3f:76:34:c9: b8:f3:ee:05:d7:9c:c0:2b:e0:aa:5c:fd:66:7a:4a:24:5c:b6: 2d:bd:61:58:4c:63:4a:f5:3e:a4:d8:46:ed:d6:f0:6a:44:fb: bf:ab:ca:e4:2f:d9:bf:2d:53:19:54:09:ad:03:e7:98:77:cd: 28:79:47:26:4f:56:cf:d1:9c:d5:b3:79:a1:a7:b1:bb:4a:86: 1e:5d:63:68:c5:ef:3c:2d:49:67:c8:86:43:6e:91:f3:00:11: 99:e2:11:97:29:cb:d0:19:fe:5b:37:11:96:eb:fe:3a:f3:ac: 07:57:c8:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCUE3T55zRre4g522SXO1eQ7dVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTExMDMxNjI2NThaFw0yNTExMDcwMDUwNThaMDMxMTAvBgNV BAMTKDg5RDUwOUZDRTc3NTM3NDU2MDI0QUVBQ0NFM0RDQzU3MkY2QTlDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCf6hbCjqgqd8Uzh/tXBThymnA ers+XsfGtRQdzl0rKMU44p0fexQkfZMuVXYrLsmACFTlFZOelne3fvfxJ/O7Jbbs aUp/QZQsrehEKvg1eUoVxOSqwMdmDyMY/E4w63PhudwJad7tlwQ67o/cOAB1kKna wpTOF45CQQwmZv7FISh1TqCwVMu5NYHiOJrJXntDDXqFBQjB7thC3lrHCP8dUcPT wj87KHWuhB074RClHu3IQhJGqvMqK9WntIfPSmIsOKGo5dQTueVW5bjcbDeVk13U 4ErFkg56CXBGJklaR1S7/wqa7h4IR4/pwboeNsf0YAZsfI187kYwdLQK33GJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUidUJ/Od1N0VgJK6szj3MVy9qnJgwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGS7r0doP9eKZbSDpkv+VwbzavQlWBucEpi rvKr+oAHg1wgclNU3ws4dCoWdqlIPn0KtA+hLfxWzHrQa09iIcP0F7dwDuK0ylRM YFD364XepbJvINqpeaSgVjnSgFCm6CaRAJD4au2oCUnEJ0CcJKLWwyNit2LWQaI9 Bn17OhjZdmzr3RT6Oa/BG9g6P3Y0ybjz7gXXnMAr4Kpc/WZ6SiRcti29YVhMY0r1 PqTYRu3W8GpE+7+ryuQv2b8tUxlUCa0D55h3zSh5RyZPVs/RnNWzeaGnsbtKhh5d Y2jF7zwtSWfIhkNukfMAEZniEZcpy9AZ/ls3EZbr/jrzrAdXyDI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:16 2025 by rpki-client