$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: v3pqcLd04uxLXq8ofcn/43Dx9TKx9vUqaZXCa2K8o5U= Subject key identifier: DD:14:B9:49:53:AB:C4:B4:60:A5:9E:65:F0:F2:A3:14:38:4D:32:C6 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 66E42EC5F3845D912550A672539DAAAAC0C1BE24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 01:41:57 +0000 Manifest this update: Mon 03 Nov 2025 01:36:57 +0000 Manifest next update: Thu 06 Nov 2025 06:31:57 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: JC6xjXVJwH0xRKZfHaEam5b32swHkd6oizDQG9DIYms=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:2e:c5:f3:84:5d:91:25:50:a6:72:53:9d:aa:aa:c0:c1:be:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Nov 3 01:36:57 2025 GMT Not After : Nov 6 06:31:57 2025 GMT Subject: CN=DD14B94953ABC4B460A59E65F0F2A314384D32C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:67:16:9b:d8:93:b3:1a:19:3e:12:a2:b7: 4b:66:59:61:ae:62:a4:a9:3c:5c:4d:de:7a:75:42: eb:90:fe:bc:45:42:7d:43:2e:1e:6e:f0:d3:90:19: 97:b1:7f:35:98:c6:72:b4:12:65:9c:42:bb:f7:b2: 38:6c:ac:87:20:7a:cc:d7:6f:40:9a:dc:55:51:fd: 5f:69:50:25:a6:7a:3f:e6:cc:94:fc:f2:b4:14:37: 96:bc:db:bb:45:ce:b1:9c:f5:2e:cb:11:6b:20:c9: 12:bb:be:49:26:54:d9:ee:3c:7d:e3:46:1f:7c:2c: 75:9a:d1:ab:6e:fc:5b:b7:32:22:da:0e:84:0f:ff: e5:ca:3f:db:f0:52:65:f7:73:f0:45:22:28:5c:28: 54:1d:78:f6:ff:b3:1e:e4:3e:4c:04:7f:fb:79:c3: 7f:64:1a:de:20:14:57:f0:31:41:4d:de:67:a3:f8: 76:69:57:8a:63:35:f9:d5:7e:73:6c:7b:c8:0a:80: 4d:54:f8:65:86:fb:85:01:40:a5:d0:36:4e:87:6a: 30:76:74:94:4c:13:df:c7:c6:33:78:e4:e6:80:d4: 4e:08:bc:8e:ca:55:12:18:f8:b5:10:05:c6:6d:81: b2:f2:10:6b:ad:4d:55:72:79:3a:9b:c4:4e:7b:97: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:B9:49:53:AB:C4:B4:60:A5:9E:65:F0:F2:A3:14:38:4D:32:C6 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c8:b0:53:37:07:b1:63:7b:6d:08:d1:75:20:f2:d8:b9:2b: 29:f7:86:e8:9e:51:81:a8:86:e1:d1:28:2d:0f:de:10:da:29: 27:e9:85:92:9c:75:03:a3:0e:51:d3:cf:ff:de:0b:25:8f:24: 60:6c:ba:a1:f7:5e:b5:1e:cd:dc:41:1c:43:c2:93:0d:63:d6: c4:a0:b3:e8:86:a7:9b:96:43:36:85:0f:0d:18:0f:c8:de:26: b0:b8:d8:00:e8:86:79:4c:59:a1:c8:20:7c:55:83:9a:a2:69: ca:67:55:0f:0f:39:b9:b9:55:1c:3b:49:de:98:33:e0:64:e8: c3:38:af:f7:53:3b:d5:47:27:e9:63:fd:f7:39:dc:d4:8c:79: 5b:c6:27:3b:73:f5:ec:a4:a7:bb:35:14:c4:b1:ff:07:22:0c: e3:70:14:f6:05:3c:53:94:23:21:5e:44:2a:af:5f:c1:34:48: f0:68:2c:9e:63:60:f9:63:6e:b9:b7:ac:c5:c6:29:3c:49:e8: 95:d7:65:ab:9c:4c:49:db:fb:34:04:d7:65:34:e9:b3:b7:f5: 48:06:8f:1b:33:2e:b6:37:3b:00:ca:ff:1a:54:9b:0a:73:d0: 99:46:d0:71:94:1a:ad:b7:b5:c3:22:7c:61:74:8a:12:b1:b7: fd:a6:0b:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuQuxfOEXZElUKZyU52qqsDBviQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTExMDMwMTM2NTdaFw0yNTExMDYwNjMxNTdaMDMxMTAvBgNV BAMTKEREMTRCOTQ5NTNBQkM0QjQ2MEE1OUU2NUYwRjJBMzE0Mzg0RDMyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWGcWm9iTsxoZPhKit0tmWWGu YqSpPFxN3np1QuuQ/rxFQn1DLh5u8NOQGZexfzWYxnK0EmWcQrv3sjhsrIcgeszX b0Ca3FVR/V9pUCWmej/mzJT88rQUN5a827tFzrGc9S7LEWsgyRK7vkkmVNnuPH3j Rh98LHWa0atu/Fu3MiLaDoQP/+XKP9vwUmX3c/BFIihcKFQdePb/sx7kPkwEf/t5 w39kGt4gFFfwMUFN3mej+HZpV4pjNfnVfnNse8gKgE1U+GWG+4UBQKXQNk6HajB2 dJRME9/HxjN45OaA1E4IvI7KVRIY+LUQBcZtgbLyEGutTVVyeTqbxE57l7b3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3RS5SVOrxLRgpZ5l8PKjFDhNMsYwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7IsFM3B7Fje20I0XUg8ti5Kyn3huieUYGo huHRKC0P3hDaKSfphZKcdQOjDlHTz//eCyWPJGBsuqH3XrUezdxBHEPCkw1j1sSg s+iGp5uWQzaFDw0YD8jeJrC42ADohnlMWaHIIHxVg5qiacpnVQ8PObm5VRw7Sd6Y M+Bk6MM4r/dTO9VHJ+lj/fc53NSMeVvGJztz9eykp7s1FMSx/wciDONwFPYFPFOU IyFeRCqvX8E0SPBoLJ5jYPljbrm3rMXGKTxJ6JXXZaucTEnb+zQE12U06bO39UgG jxszLrY3OwDK/xpUmwpz0JlG0HGUGq23tcMifGF0ihKxt/2mC2c= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:23 2025 by rpki-client