$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: wGeyW6URluuE1xrJ/TlM3DKb92AlgrsE0NRb7qp6Mhk= Subject key identifier: E9:15:80:91:AC:2A:25:A5:EA:81:C1:DF:9C:52:FB:73:15:ED:B7:34 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 1F805FF4FD2D8FFF2D799E62DFAEE090E330ADCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 038C Signing time: Tue 04 Nov 2025 11:41:36 +0000 Manifest this update: Tue 04 Nov 2025 11:36:36 +0000 Manifest next update: Fri 07 Nov 2025 12:41:36 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: oTpGICIHPwUJ3QRbppRjY06F91kcoZL2Dat4CQeAmHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:80:5f:f4:fd:2d:8f:ff:2d:79:9e:62:df:ae:e0:90:e3:30:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Nov 4 11:36:36 2025 GMT Not After : Nov 7 12:41:36 2025 GMT Subject: CN=E9158091AC2A25A5EA81C1DF9C52FB7315EDB734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:0a:8d:49:94:11:c4:a6:77:3e:7e:85:ca: 9f:81:01:d2:57:4a:57:e0:29:cc:a4:ea:63:03:b1: ad:54:ce:0d:fa:21:3f:4f:38:c8:60:3c:d4:d6:b4: 17:44:94:c1:c5:b9:bf:ea:38:ca:53:7a:67:90:33: 32:ff:5c:e7:1d:72:56:92:a1:62:52:66:8a:59:ff: 6e:c4:3a:a7:56:c1:a5:de:e6:f7:50:a4:e2:02:e9: 60:da:50:3c:95:b8:84:0e:b8:c2:39:eb:af:20:e0: 01:3c:27:41:fb:0c:5e:f0:9c:5d:a5:e7:43:ff:16: c7:60:93:9d:30:6c:0d:70:4c:70:62:a6:25:a9:dd: 45:a9:00:30:d4:e0:38:ae:a7:c0:85:09:ba:7f:06: 37:18:83:13:88:bc:fa:0d:e1:ca:ea:fc:74:ca:4d: bf:54:63:85:da:70:67:9d:c1:7a:8f:06:a9:a9:39: f4:95:bf:90:2f:b9:de:48:47:2f:37:cf:fc:34:ed: 7f:b1:66:72:4d:c5:dc:9a:e6:b9:0a:13:94:9e:42: 47:8c:d4:d9:2d:96:ef:24:e2:a8:2d:a0:2c:f8:f9: 70:5d:53:5b:00:40:24:d5:cc:3d:a3:a6:74:85:27: 4b:c6:68:57:0c:71:f6:8e:0a:a0:f8:b2:1e:11:6e: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:80:91:AC:2A:25:A5:EA:81:C1:DF:9C:52:FB:73:15:ED:B7:34 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:59:7b:d5:11:78:89:e0:0b:e9:6a:3b:a6:78:e9:6a:a7:fa: f1:3c:f3:5b:4c:fc:ac:0a:47:0e:a6:cf:e7:b0:c5:43:f4:20: be:f1:84:d8:e6:b3:7b:e4:d0:a2:2b:f4:c2:de:12:22:36:9a: 09:81:5c:88:03:c0:b6:cb:74:9d:78:8c:71:8f:99:e5:9a:c1: 77:82:0b:8d:62:4c:f7:f5:82:43:90:0f:d8:84:2d:a1:8a:c1: 73:55:a5:13:c6:f4:32:50:3e:a3:2b:80:72:bc:7b:4b:b8:6f: e7:c6:38:c4:f2:03:95:22:ad:a5:88:5c:43:67:e4:14:d9:7d: a9:66:b1:ab:e5:a7:a4:3b:0f:70:92:db:79:99:74:91:4e:12: 6c:cd:ae:fa:6d:b6:b1:36:a9:9e:18:ac:fb:4f:b9:63:3a:b5: 11:77:cd:df:c1:4a:11:f8:be:6e:aa:9b:85:90:d7:3c:9e:a6: 91:19:68:f2:a0:e4:14:36:bf:ef:fc:ba:ce:0f:5f:96:c5:4d: 63:cc:a5:6d:0f:17:8b:80:d7:da:7d:ed:f0:da:fb:6c:07:db: 01:99:2b:a6:2c:9d:0c:56:9d:fc:58:47:f4:70:fc:df:c2:e9: 10:b5:5c:1a:31:52:59:4a:48:aa:00:3e:c5:fa:1a:af:8a:7d: fb:81:9b:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4Bf9P0tj/8teZ5i367gkOMwrcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTExMDQxMTM2MzZaFw0yNTExMDcxMjQxMzZaMDMxMTAvBgNV BAMTKEU5MTU4MDkxQUMyQTI1QTVFQTgxQzFERjlDNTJGQjczMTVFREI3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32wqNSZQRxKZ3Pn6Fyp+BAdJX SlfgKcyk6mMDsa1Uzg36IT9POMhgPNTWtBdElMHFub/qOMpTemeQMzL/XOcdclaS oWJSZopZ/27EOqdWwaXe5vdQpOIC6WDaUDyVuIQOuMI5668g4AE8J0H7DF7wnF2l 50P/Fsdgk50wbA1wTHBipiWp3UWpADDU4Diup8CFCbp/BjcYgxOIvPoN4crq/HTK Tb9UY4XacGedwXqPBqmpOfSVv5Avud5IRy83z/w07X+xZnJNxdya5rkKE5SeQkeM 1Nktlu8k4qgtoCz4+XBdU1sAQCTVzD2jpnSFJ0vGaFcMcfaOCqD4sh4RbiRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RWAkawqJaXqgcHfnFL7cxXttzQwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9Ze9UReIngC+lqO6Z46Wqn+vE881tM/KwK Rw6mz+ewxUP0IL7xhNjms3vk0KIr9MLeEiI2mgmBXIgDwLbLdJ14jHGPmeWawXeC C41iTPf1gkOQD9iELaGKwXNVpRPG9DJQPqMrgHK8e0u4b+fGOMTyA5UiraWIXENn 5BTZfalmsavlp6Q7D3CS23mZdJFOEmzNrvpttrE2qZ4YrPtPuWM6tRF3zd/BShH4 vm6qm4WQ1zyeppEZaPKg5BQ2v+/8us4PX5bFTWPMpW0PF4uA19p97fDa+2wH2wGZ K6YsnQxWnfxYR/Rw/N/C6RC1XBoxUllKSKoAPsX6Gq+KffuBm3c= -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:51 2025 by rpki-client