$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: kdaTk1eVuN0HUESTml8twlocbWJuf/uz8uxmEMl/gLA= Subject key identifier: 82:41:D1:08:3A:D6:BF:39:8B:B2:F8:4D:77:36:94:20:16:9E:8E:0B Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 14A66AF02D288A47DCD7F304B28F16F30C27C380 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: DF Signing time: Tue 04 Nov 2025 01:40:39 +0000 Manifest this update: Tue 04 Nov 2025 01:35:39 +0000 Manifest next update: Fri 07 Nov 2025 06:28:39 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: GZtU/8yeDuMwxJeCISkW8Q5loMT9kRkqT5IqkZiaoa8=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a6:6a:f0:2d:28:8a:47:dc:d7:f3:04:b2:8f:16:f3:0c:27:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Nov 4 01:35:39 2025 GMT Not After : Nov 7 06:28:39 2025 GMT Subject: CN=8241D1083AD6BF398BB2F84D77369420169E8E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:57:97:d8:f8:17:0b:7b:18:fb:f1:4b:64: ad:56:20:97:68:10:b0:73:9b:40:9b:45:91:ff:d9: 59:f3:ab:f4:c4:e3:77:ae:34:f5:64:1b:00:70:1c: 21:32:b1:2e:cd:be:bf:12:7c:4a:5e:e6:ae:36:0b: 35:59:36:70:74:f5:33:94:89:f2:fb:49:af:06:5c: 8e:d0:44:29:a5:2e:b5:30:59:f5:74:46:c0:77:72: 8d:89:fa:51:bf:d7:81:f3:bc:6e:7b:8e:91:02:0e: e8:83:9a:c4:e9:56:fe:5d:94:4d:f1:be:3f:fe:55: 6f:2d:a3:7d:88:a0:36:47:89:44:7e:4b:a8:fc:25: 56:e9:b0:d6:bb:7e:f7:97:3c:8a:e6:14:94:34:a3: 83:5b:d4:84:cc:fb:fc:98:fe:6f:c1:67:d6:f5:e7: 30:29:cc:0e:d8:6a:8c:93:04:03:71:fb:a4:45:15: 60:08:1b:2a:19:48:ae:ba:7f:04:24:76:e8:a5:60: a2:07:da:73:c3:85:2f:fc:b2:18:be:1f:13:ae:32: 86:d5:35:e5:3d:cf:b9:64:cb:4f:ca:2b:e7:d4:d5: 28:33:13:74:de:9c:76:e9:73:b3:b1:9b:fb:3c:c1: c4:54:b3:6a:c4:2b:b7:54:fc:e1:6d:c8:4c:87:8f: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:D1:08:3A:D6:BF:39:8B:B2:F8:4D:77:36:94:20:16:9E:8E:0B X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:11:f8:b1:b9:76:21:a1:77:59:60:79:1c:a3:5c:e5:4d: 3f:66:5d:90:3e:66:ac:74:80:bf:f4:ca:53:23:f1:01:cf:e6: ac:55:f0:fe:3a:07:28:04:30:ec:9b:83:fd:9a:b8:c4:92:97: 67:61:1e:e0:09:ac:6a:f5:23:3e:fd:e0:50:50:96:3c:3c:5f: 0a:4f:3f:b7:b0:fe:b2:17:c4:75:9a:4a:ea:6b:64:49:d0:d3: b4:3a:9f:b9:1e:3b:cd:77:bf:7c:f9:ae:79:74:8e:68:5a:a1: ce:2a:c3:38:16:86:12:c6:7a:d9:e3:e8:96:c1:81:ad:39:91: 18:0e:62:ba:cd:05:89:14:27:f1:96:7c:04:f3:9a:51:1d:58: b8:99:66:60:3b:b7:db:fe:19:43:d3:b1:22:d9:18:43:3d:6b: 8f:21:2e:e4:db:3f:cb:33:ea:5c:d9:6c:96:46:1b:98:48:ba: 16:ad:21:18:37:13:85:61:2d:d8:6b:d1:aa:93:4a:da:ea:ea: 01:24:d3:23:20:60:33:47:43:ad:15:b4:cc:71:d1:64:8f:fa: 93:f4:69:84:72:0b:f2:1c:5f:e6:c7:ec:2c:b5:e7:6b:8f:d1: c2:7a:50:3e:50:b1:49:40:43:2d:fb:b4:b5:c8:69:8d:8f:ef: 66:02:d2:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKZq8C0oikfc1/MEso8W8wwnw4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTExMDQwMTM1MzlaFw0yNTExMDcwNjI4MzlaMDMxMTAvBgNV BAMTKDgyNDFEMTA4M0FENkJGMzk4QkIyRjg0RDc3MzY5NDIwMTY5RThFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzVeX2PgXC3sY+/FLZK1WIJdo ELBzm0CbRZH/2Vnzq/TE43euNPVkGwBwHCEysS7Nvr8SfEpe5q42CzVZNnB09TOU ifL7Sa8GXI7QRCmlLrUwWfV0RsB3co2J+lG/14HzvG57jpECDuiDmsTpVv5dlE3x vj/+VW8to32IoDZHiUR+S6j8JVbpsNa7fveXPIrmFJQ0o4Nb1ITM+/yY/m/BZ9b1 5zApzA7YaoyTBANx+6RFFWAIGyoZSK66fwQkduilYKIH2nPDhS/8shi+HxOuMobV NeU9z7lky0/KK+fU1SgzE3TenHbpc7Oxm/s8wcRUs2rEK7dU/OFtyEyHj1knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkHRCDrWvzmLsvhNdzaUIBaejgswHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcSEfixuXYhoXdZYHkco1zlTT9mXZA+Zqx0 gL/0ylMj8QHP5qxV8P46BygEMOybg/2auMSSl2dhHuAJrGr1Iz794FBQljw8XwpP P7ew/rIXxHWaSuprZEnQ07Q6n7keO813v3z5rnl0jmhaoc4qwzgWhhLGetnj6JbB ga05kRgOYrrNBYkUJ/GWfATzmlEdWLiZZmA7t9v+GUPTsSLZGEM9a48hLuTbP8sz 6lzZbJZGG5hIuhatIRg3E4VhLdhr0aqTStrq6gEk0yMgYDNHQ60VtMxx0WSP+pP0 aYRyC/IcX+bH7Cy152uP0cJ6UD5QsUlAQy37tLXIaY2P72YC0io= -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:21 2025 by rpki-client