$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: +gFiv1HjZpKn1HhMlyFZ/13IhJIW+k7KfW9zi6ubo8k= Subject key identifier: 8E:24:6B:E7:7B:9F:98:9B:6E:A9:C4:2D:87:98:FE:81:DA:0B:3C:83 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 5B22754B1B69FF4553BD6D943F7536E82D1697D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 0394 Signing time: Tue 04 Nov 2025 03:20:53 +0000 Manifest this update: Tue 04 Nov 2025 03:15:53 +0000 Manifest next update: Fri 07 Nov 2025 11:35:53 +0000 Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: coUHA4IIBSuP2Y0EZuKnRoonmuzBnw1YdxE1dfzSYmA=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:75:4b:1b:69:ff:45:53:bd:6d:94:3f:75:36:e8:2d:16:97:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Nov 4 03:15:53 2025 GMT Not After : Nov 7 11:35:53 2025 GMT Subject: CN=8E246BE77B9F989B6EA9C42D8798FE81DA0B3C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6a:3d:92:b8:57:9e:99:d4:1c:54:e5:8d:7d: 4d:ee:3e:32:24:36:4d:e8:ea:be:03:36:b9:5e:ef: 49:42:73:3f:64:bc:73:af:f9:9b:01:ac:9d:e5:73: 2a:2e:a3:76:e2:c0:14:b3:c0:29:b5:5e:6f:87:4b: fc:97:b5:cf:e3:32:28:7b:27:33:bb:9a:d3:26:f2: 90:a0:37:a2:fb:13:76:6b:de:e3:70:7d:b1:83:e2: 5e:e1:95:1d:ae:f2:7d:cd:3f:50:81:7e:34:78:eb: b9:28:ad:7e:c6:43:2a:e2:37:23:8a:c2:5d:6f:49: f1:6e:da:da:72:9a:29:37:a5:96:c0:94:97:cf:16: 37:b9:f8:0f:34:8a:64:e8:49:c7:e8:8d:bc:c7:26: d7:4b:af:c9:e6:a3:76:13:be:6f:41:4d:c2:57:3e: 7b:b4:94:a1:1d:ba:41:5a:18:91:9e:e2:e1:59:2a: 02:06:46:40:7e:dd:82:5c:73:9f:ab:5a:a5:a3:94: ce:e3:aa:9f:5f:4d:0f:e1:6a:ff:2c:f6:08:30:59: be:de:ee:32:3a:d5:8e:60:b9:ee:2d:71:6a:11:83: 47:12:65:0f:d6:21:2d:e4:b9:83:03:16:9f:c2:0d: 4d:8c:cc:ed:8f:cb:86:ec:fa:8b:e2:44:12:83:0d: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:24:6B:E7:7B:9F:98:9B:6E:A9:C4:2D:87:98:FE:81:DA:0B:3C:83 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:95:9c:cb:0d:56:5c:a4:8e:89:e1:bf:ec:b0:40:03:96: 22:b5:6d:1f:c5:f1:ac:e4:71:26:b6:5b:c1:f3:52:41:60:c6: a5:ab:66:8d:3e:d3:32:cc:82:66:58:eb:fd:ca:84:15:59:4a: 7e:9e:0e:2c:c1:8d:3a:aa:b4:22:a7:5b:b1:03:6c:da:5e:45: 12:b5:98:f1:6b:ec:d9:73:01:ed:25:37:33:c4:46:ab:05:0a: 37:a7:ec:22:4a:32:d5:14:c9:ef:11:0b:76:08:48:6c:96:fd: 64:55:74:6b:af:49:3d:85:67:7b:c0:f6:aa:f9:8a:cb:4b:80: e7:43:fa:ca:05:0f:13:3a:51:9b:d9:32:cd:7d:c7:e8:59:e4: 12:38:7c:8f:d9:cd:f1:6c:f7:bf:d9:08:64:9d:db:10:6b:d2: be:09:b2:da:c3:68:ef:56:0e:19:f4:bd:76:b1:6a:8e:82:34: 58:a9:d7:bb:a7:df:1d:13:3a:fd:63:fb:f0:b5:36:1e:59:34: 48:3e:7f:fd:e0:47:db:92:3b:3c:10:66:0a:81:1e:7e:89:32: 87:58:43:24:21:63:0c:67:5f:cc:be:46:79:e1:ae:79:19:89: e2:2a:53:2e:43:a6:d1:fe:d6:8b:42:2a:59:1c:93:58:e0:d9: cd:11:d4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyJ1Sxtp/0VTvW2UP3U26C0Wl9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTExMDQwMzE1NTNaFw0yNTExMDcxMTM1NTNaMDMxMTAvBgNV BAMTKDhFMjQ2QkU3N0I5Rjk4OUI2RUE5QzQyRDg3OThGRTgxREEwQjNDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1aj2SuFeemdQcVOWNfU3uPjIk Nk3o6r4DNrle70lCcz9kvHOv+ZsBrJ3lcyouo3biwBSzwCm1Xm+HS/yXtc/jMih7 JzO7mtMm8pCgN6L7E3Zr3uNwfbGD4l7hlR2u8n3NP1CBfjR467korX7GQyriNyOK wl1vSfFu2tpymik3pZbAlJfPFje5+A80imToScfojbzHJtdLr8nmo3YTvm9BTcJX Pnu0lKEdukFaGJGe4uFZKgIGRkB+3YJcc5+rWqWjlM7jqp9fTQ/hav8s9ggwWb7e 7jI61Y5gue4tcWoRg0cSZQ/WIS3kuYMDFp/CDU2MzO2Py4bs+oviRBKDDcLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiRr53ufmJtuqcQth5j+gdoLPIMwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH7lZzLDVZcpI6J4b/ssEADliK1bR/F8azk cSa2W8HzUkFgxqWrZo0+0zLMgmZY6/3KhBVZSn6eDizBjTqqtCKnW7EDbNpeRRK1 mPFr7NlzAe0lNzPERqsFCjen7CJKMtUUye8RC3YISGyW/WRVdGuvST2FZ3vA9qr5 istLgOdD+soFDxM6UZvZMs19x+hZ5BI4fI/ZzfFs97/ZCGSd2xBr0r4JstrDaO9W Dhn0vXaxao6CNFip17un3x0TOv1j+/C1Nh5ZNEg+f/3gR9uSOzwQZgqBHn6JModY QyQhYwxnX8y+RnnhrnkZieIqUy5DptH+1otCKlkck1jg2c0R1Lg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:28 2025 by rpki-client