$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: QMdWwPamwPoiqRasZTFp+BXEvLliz3RDqpjomEAbjZ8= Subject key identifier: 75:38:30:47:FE:A5:13:6F:03:7D:D7:C6:0F:9E:72:DF:06:25:22:5F Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 5F02C2983CEFEE4C63C6740BB44EC8D1A8CBE5BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: 0106 Signing time: Tue 04 Nov 2025 10:13:57 +0000 Manifest this update: Tue 04 Nov 2025 10:08:57 +0000 Manifest next update: Fri 07 Nov 2025 11:27:57 +0000 Files and hashes: 1: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) 2: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: q3ZyPmJPLm65AszrnarVLzTVMa/a6p9YkRQhgURJXhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:02:c2:98:3c:ef:ee:4c:63:c6:74:0b:b4:4e:c8:d1:a8:cb:e5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Nov 4 10:08:57 2025 GMT Not After : Nov 7 11:27:57 2025 GMT Subject: CN=75383047FEA5136F037DD7C60F9E72DF0625225F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:a6:e9:63:c4:1a:b7:10:9d:a8:9a:a1:24: 4d:d1:29:ca:21:c7:93:39:6d:90:da:78:b2:01:51: 13:7a:12:ca:d1:39:70:a0:b2:bd:dd:9a:a5:45:19: 61:0c:d5:9e:9d:f8:61:4f:fa:33:db:bb:2e:bf:0e: 65:8f:4d:26:a0:84:42:bf:f0:4d:e5:8a:34:f0:4b: b5:f2:3e:21:b5:da:78:4f:78:d3:bd:97:56:1b:25: 65:9b:a8:1d:98:ce:3f:58:ac:d3:e7:39:95:7d:81: a1:5a:10:c2:18:5c:cb:fa:31:8d:0e:c0:c7:1a:4c: d6:31:e5:c2:16:0d:c6:c0:1f:b4:1d:93:9c:20:eb: 13:17:5e:00:5c:23:bd:e1:86:7d:09:94:50:90:85: d6:00:9d:79:1a:1c:c0:04:f2:51:cc:48:b3:a3:ed: 7d:34:00:73:a6:64:37:97:06:3a:84:78:ad:c0:16: d4:4a:8a:ca:34:9f:73:d6:df:bc:fb:19:48:b8:80: a7:69:6e:91:75:01:27:e4:41:5f:45:3c:00:ed:82: d1:10:fe:bd:a7:a1:5e:db:9f:f1:90:4b:c2:1a:bf: 69:46:61:90:bd:aa:02:4a:5d:2f:76:a0:6c:66:f8: ba:31:52:0b:77:f0:f5:9e:7c:3a:46:c3:7c:1e:ea: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:38:30:47:FE:A5:13:6F:03:7D:D7:C6:0F:9E:72:DF:06:25:22:5F X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:f3:6f:99:53:06:6d:5d:38:95:f0:82:9b:29:ef:b6:68: e0:d4:fe:1c:02:ec:4f:9f:b1:f2:68:fd:5b:ee:c6:ad:95:93: da:ea:4f:8f:a9:d6:7c:28:31:3d:78:be:de:bb:8f:47:e3:d6: 71:46:f5:d1:7b:b7:6e:9e:01:55:fe:44:15:5c:f4:75:6c:2c: 41:4a:56:05:f3:61:c1:92:86:93:e6:3f:af:aa:7e:6f:6d:33: 17:4b:d6:41:df:c4:ba:58:e9:0a:5e:f4:09:b4:5e:05:b9:c0: 81:19:d7:ad:d1:64:41:57:78:7a:24:04:5a:19:9c:f0:9f:1b: 52:4a:6b:23:07:00:25:a2:52:56:82:00:6d:91:62:34:ab:16: 78:12:a6:d0:2c:58:a8:bb:d2:27:ef:11:94:da:92:73:e5:7a: 14:f9:94:74:ff:a6:f6:47:9e:2e:66:ff:8c:8a:99:d2:33:de: 78:ca:d5:10:32:15:82:a0:df:5a:43:f5:44:d9:20:4d:17:6a: 55:2a:95:fb:3f:c8:c3:1d:77:65:da:9b:8b:93:a2:eb:3d:2f: 5f:02:66:68:8d:52:40:4a:f8:79:f3:a5:83:56:43:22:50:24: 75:da:30:d0:1f:9c:f3:ca:93:8c:d3:00:8c:7f:48:39:d8:36: eb:6a:ed:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwLCmDzv7kxjxnQLtE7I0ajL5bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTExMDQxMDA4NTdaFw0yNTExMDcxMTI3NTdaMDMxMTAvBgNV BAMTKDc1MzgzMDQ3RkVBNTEzNkYwMzdERDdDNjBGOUU3MkRGMDYyNTIyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyqqbpY8QatxCdqJqhJE3RKcoh x5M5bZDaeLIBURN6EsrROXCgsr3dmqVFGWEM1Z6d+GFP+jPbuy6/DmWPTSaghEK/ 8E3lijTwS7XyPiG12nhPeNO9l1YbJWWbqB2Yzj9YrNPnOZV9gaFaEMIYXMv6MY0O wMcaTNYx5cIWDcbAH7Qdk5wg6xMXXgBcI73hhn0JlFCQhdYAnXkaHMAE8lHMSLOj 7X00AHOmZDeXBjqEeK3AFtRKiso0n3PW37z7GUi4gKdpbpF1ASfkQV9FPADtgtEQ /r2noV7bn/GQS8Iav2lGYZC9qgJKXS92oGxm+LoxUgt38PWefDpGw3we6h7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdTgwR/6lE28DfdfGD55y3wYlIl8wHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAni82+ZUwZtXTiV8IKbKe+2aODU/hwC7E+f sfJo/Vvuxq2Vk9rqT4+p1nwoMT14vt67j0fj1nFG9dF7t26eAVX+RBVc9HVsLEFK VgXzYcGShpPmP6+qfm9tMxdL1kHfxLpY6Qpe9Am0XgW5wIEZ163RZEFXeHokBFoZ nPCfG1JKayMHACWiUlaCAG2RYjSrFngSptAsWKi70ifvEZTaknPlehT5lHT/pvZH ni5m/4yKmdIz3njK1RAyFYKg31pD9UTZIE0XalUqlfs/yMMdd2Xam4uTous9L18C ZmiNUkBK+HnzpYNWQyJQJHXaMNAfnPPKk4zTAIx/SDnYNutq7fA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:35 2025 by rpki-client