$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: TITbfY8PrMeFXt2qYkIkHNdUBNj6PDbDVU8lfl55ocI= Subject key identifier: B7:F5:B2:33:4D:D0:67:36:EA:F3:DD:7B:36:B4:DD:71:E3:41:50:E4 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 516CB8BE841D2B3CD15B992F991E4AE9085CB917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: DD Signing time: Tue 04 Nov 2025 12:11:19 +0000 Manifest this update: Tue 04 Nov 2025 12:06:19 +0000 Manifest next update: Fri 07 Nov 2025 18:27:19 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 2: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: 50u7Gtzp9KIumaAN4+f376iaYl3WYWNScUDx0Pbx7ls=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6c:b8:be:84:1d:2b:3c:d1:5b:99:2f:99:1e:4a:e9:08:5c:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Nov 4 12:06:19 2025 GMT Not After : Nov 7 18:27:19 2025 GMT Subject: CN=B7F5B2334DD06736EAF3DD7B36B4DD71E34150E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:23:2c:d8:38:cb:f0:5b:0f:52:21:11:92: e3:be:20:ca:be:cc:fe:45:40:15:c9:be:c8:25:6e: 72:44:e4:ad:1b:31:05:04:7d:d6:99:1e:1b:15:05: 74:0a:6f:98:b1:c6:f0:e9:02:77:70:ae:57:c5:91: 68:cc:12:b5:f0:67:34:3c:2a:7e:15:7d:02:fe:a5: 05:76:26:5c:2d:4e:9d:19:16:9c:37:92:77:2d:1b: 2a:9b:c4:33:01:ca:aa:be:88:fd:17:1e:4e:19:da: 68:c0:29:4d:52:0b:0e:6e:87:7f:26:66:b6:02:44: ed:b0:51:ae:ab:0a:3a:48:14:47:c9:8c:c1:c6:ae: a5:12:e6:de:bf:e1:6d:7a:d9:81:62:4f:8f:8b:a9: 10:2b:c2:13:99:49:72:fd:9c:85:6c:6b:05:15:30: a0:d9:02:a1:1a:e8:d0:34:5c:7b:d4:00:5f:ce:e8: df:df:2d:6d:62:d9:89:00:43:68:e7:a0:e5:30:53: 6b:34:21:66:54:48:7a:5d:f5:34:de:cb:3c:f6:26: db:48:7e:02:5d:61:b0:0d:d5:65:7e:20:62:20:19: 97:6b:71:da:f1:3e:c3:3c:e6:ef:88:c6:4b:21:d4: 69:18:b0:b2:89:56:11:6d:9a:c3:7b:3e:8c:ce:c3: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F5:B2:33:4D:D0:67:36:EA:F3:DD:7B:36:B4:DD:71:E3:41:50:E4 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a9:25:6f:df:0a:d5:7c:17:3b:47:4e:b6:7d:22:ba:01:80: e8:f4:41:ff:cd:91:b0:11:9b:13:79:76:7b:7a:6a:70:bb:9f: 7d:e7:ff:3a:b2:17:6b:5e:f2:73:2d:75:cd:0a:e1:4d:e4:b2: 7e:43:d2:81:37:e6:46:47:07:76:35:43:5f:0d:47:0a:0d:02: 4b:a4:13:73:d6:22:5a:07:68:8d:28:ef:10:5a:32:08:b6:40: 38:60:e2:0a:b0:d9:04:98:3d:a5:bb:f3:df:c2:9a:b2:ac:15: fb:81:85:b6:e4:41:74:2b:63:40:21:48:cb:69:a4:d1:2a:c2: cb:2a:22:58:dd:46:d4:3b:30:65:e3:8c:fa:e2:8d:65:1b:d0: c9:7f:ad:99:da:5b:d1:54:e2:7f:32:b1:a2:41:0b:14:1a:05: 89:b8:73:1e:a7:d0:8d:04:4a:91:54:8a:1d:3e:e6:58:27:25: 94:f7:a5:14:f2:38:3c:ba:8d:ac:d0:32:5b:55:41:1b:2d:e6: 3e:c3:b1:02:ed:d7:da:d4:07:f9:6b:9b:17:e0:d0:b3:4a:cd: 7c:17:af:2e:77:e5:d0:f2:5d:07:45:8d:54:aa:17:38:6e:0d: f9:fc:b1:ab:60:6b:4a:f4:42:db:4e:5f:0d:87:57:f8:e5:82: 29:e3:c7:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWy4voQdKzzRW5kvmR5K6QhcuRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTExMDQxMjA2MTlaFw0yNTExMDcxODI3MTlaMDMxMTAvBgNV BAMTKEI3RjVCMjMzNEREMDY3MzZFQUYzREQ3QjM2QjRERDcxRTM0MTUwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaCMs2DjL8FsPUiERkuO+IMq+ zP5FQBXJvsglbnJE5K0bMQUEfdaZHhsVBXQKb5ixxvDpAndwrlfFkWjMErXwZzQ8 Kn4VfQL+pQV2JlwtTp0ZFpw3knctGyqbxDMByqq+iP0XHk4Z2mjAKU1SCw5uh38m ZrYCRO2wUa6rCjpIFEfJjMHGrqUS5t6/4W162YFiT4+LqRArwhOZSXL9nIVsawUV MKDZAqEa6NA0XHvUAF/O6N/fLW1i2YkAQ2jnoOUwU2s0IWZUSHpd9TTeyzz2JttI fgJdYbAN1WV+IGIgGZdrcdrxPsM85u+Ixksh1GkYsLKJVhFtmsN7PozOw/oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/WyM03QZzbq8917NrTdceNBUOQwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmpJW/fCtV8FztHTrZ9IroBgOj0Qf/NkbAR mxN5dnt6anC7n33n/zqyF2te8nMtdc0K4U3ksn5D0oE35kZHB3Y1Q18NRwoNAkuk E3PWIloHaI0o7xBaMgi2QDhg4gqw2QSYPaW789/CmrKsFfuBhbbkQXQrY0AhSMtp pNEqwssqIljdRtQ7MGXjjPrijWUb0Ml/rZnaW9FU4n8ysaJBCxQaBYm4cx6n0I0E SpFUih0+5lgnJZT3pRTyODy6jazQMltVQRst5j7DsQLt19rUB/lrmxfg0LNKzXwX ry535dDyXQdFjVSqFzhuDfn8satga0r0QttOXw2HV/jlginjx88= -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:55 2025 by rpki-client