$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: ZEtbnR1gNlr/DhyFyXZTKycYPmLc3Q1A1x5pzH6IiSw= Subject key identifier: B5:28:DC:AE:75:58:BB:F7:85:81:B1:86:B3:A0:6B:63:A8:C4:8B:50 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 17A85D45B1C4069EA9774328F3BDC66B25BA4E60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0218 Signing time: Mon 03 Nov 2025 08:00:46 +0000 Manifest this update: Mon 03 Nov 2025 07:55:46 +0000 Manifest next update: Thu 06 Nov 2025 13:13:46 +0000 Files and hashes: 1: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 2: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 3: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 4: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 5: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 6: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 7: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 8: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 9: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 10: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 11: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 12: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 13: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: Yjm71DLOBJ4EJH9WJ2pqZb2wjKccQKuFHRl664jeRh0=) 14: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 16: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 17: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a8:5d:45:b1:c4:06:9e:a9:77:43:28:f3:bd:c6:6b:25:ba:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Nov 3 07:55:46 2025 GMT Not After : Nov 6 13:13:46 2025 GMT Subject: CN=B528DCAE7558BBF78581B186B3A06B63A8C48B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:4b:cf:d2:bc:8c:79:08:54:82:e4:e5:19: fd:42:b0:5f:9f:a1:c9:b7:a3:07:04:19:21:d2:39: 27:3f:7c:d8:eb:32:a3:88:48:df:ff:27:c0:bb:44: d4:0f:1f:78:63:5d:dc:f4:49:89:39:e1:d5:c6:56: fb:1d:5d:aa:0d:1a:55:82:36:f1:b3:a5:e2:48:42: d0:6c:93:3c:37:af:52:62:3e:b9:0a:c7:0c:d4:7f: f8:af:1a:51:a7:d1:a4:ba:61:02:5b:fc:16:6b:c1: 8a:36:4c:85:64:4b:f8:fc:d8:33:24:3d:29:11:f4: 7c:a0:28:7b:e6:1b:21:c2:90:e8:88:0b:b3:13:27: a6:1b:7f:9e:02:94:e4:6e:19:2e:9e:75:2e:68:d2: 56:29:96:22:c3:32:b5:ae:71:f5:b8:5f:bd:05:c7: a6:ca:4f:c9:78:fc:e6:c7:64:b7:89:f1:6f:49:fe: ac:4e:27:ae:f0:62:3b:b4:17:fa:35:cd:0f:31:41: 2f:71:ee:66:fb:8b:4b:e0:9c:f5:4a:01:25:96:9f: f4:c7:87:74:4b:e7:ab:89:81:79:05:22:4c:d9:23: 30:01:ce:ec:84:63:d6:e4:d5:4c:83:5f:fd:44:25: 1a:00:49:9d:13:b6:f5:00:eb:52:f3:7b:13:39:06: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:28:DC:AE:75:58:BB:F7:85:81:B1:86:B3:A0:6B:63:A8:C4:8B:50 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a7:79:4c:e5:45:8b:db:47:ac:3b:fb:ba:8d:6e:c8:e3:cc: a5:8f:b9:b4:eb:01:62:6e:4c:2f:59:cc:b1:14:95:c4:d9:d4: 62:07:aa:e2:47:5f:09:a6:d1:22:dc:d3:7d:0e:32:93:3b:b2: 3b:82:a9:0c:61:be:05:12:f4:40:8b:2b:b5:aa:c0:f5:3b:d5: 6d:f7:e0:f6:93:12:54:32:87:df:8c:9b:4f:29:69:29:24:7f: 6a:4e:93:54:41:bd:49:90:61:f4:a7:0c:5e:26:68:26:af:dd: fa:57:c3:65:cc:37:91:c9:16:e5:46:58:3e:dd:de:e0:31:6c: 3c:00:1d:51:bd:7d:63:0a:d9:e7:a3:4d:56:09:7d:58:bc:ab: 00:3a:8e:c5:43:1d:2a:d8:29:3c:3e:eb:c0:ef:42:d0:0c:72: 91:18:11:e4:3e:a1:8f:ba:58:f4:94:33:62:db:2c:3b:82:d4: 36:eb:1a:98:8e:c8:e3:36:47:5f:f8:25:cf:f2:50:b3:48:37: 81:50:50:c2:c2:0f:05:09:b1:a7:c5:39:ca:f6:c6:08:a9:3d: 87:71:3d:6a:da:72:73:1a:c8:d4:aa:79:cf:14:e1:4f:f1:d8: 8c:3f:3b:2d:c1:b5:91:b4:0c:28:de:c3:67:8f:8f:b1:35:65: 8e:74:29:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6hdRbHEBp6pd0Mo873GayW6TmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTExMDMwNzU1NDZaFw0yNTExMDYxMzEzNDZaMDMxMTAvBgNV BAMTKEI1MjhEQ0FFNzU1OEJCRjc4NTgxQjE4NkIzQTA2QjYzQThDNDhCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8UvP0ryMeQhUguTlGf1CsF+f ocm3owcEGSHSOSc/fNjrMqOISN//J8C7RNQPH3hjXdz0SYk54dXGVvsdXaoNGlWC NvGzpeJIQtBskzw3r1JiPrkKxwzUf/ivGlGn0aS6YQJb/BZrwYo2TIVkS/j82DMk PSkR9HygKHvmGyHCkOiIC7MTJ6Ybf54ClORuGS6edS5o0lYpliLDMrWucfW4X70F x6bKT8l4/ObHZLeJ8W9J/qxOJ67wYju0F/o1zQ8xQS9x7mb7i0vgnPVKASWWn/TH h3RL56uJgXkFIkzZIzABzuyEY9bk1UyDX/1EJRoASZ0TtvUA61LzexM5BmdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSjcrnVYu/eFgbGGs6BrY6jEi1AwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKneUzlRYvbR6w7+7qNbsjjzKWPubTrAWJu TC9ZzLEUlcTZ1GIHquJHXwmm0SLc030OMpM7sjuCqQxhvgUS9ECLK7WqwPU71W33 4PaTElQyh9+Mm08paSkkf2pOk1RBvUmQYfSnDF4maCav3fpXw2XMN5HJFuVGWD7d 3uAxbDwAHVG9fWMK2eejTVYJfVi8qwA6jsVDHSrYKTw+68DvQtAMcpEYEeQ+oY+6 WPSUM2LbLDuC1DbrGpiOyOM2R1/4Jc/yULNIN4FQUMLCDwUJsafFOcr2xgipPYdx PWracnMayNSqec8U4U/x2Iw/Oy3BtZG0DCjew2ePj7E1ZY50Kao= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:05 2025 by rpki-client