$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: MGK9dHHFf0CPetXvHbio43cX0ayZbiEVVC5RozxMvS4= Subject key identifier: AB:7B:38:85:0F:64:AB:B9:C0:C4:38:EC:6B:9D:5C:39:20:52:23:B5 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 2960709799B50A739BD86D36E1BE5E01AED8032A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: E3 Signing time: Mon 03 Nov 2025 01:32:15 +0000 Manifest this update: Mon 03 Nov 2025 01:27:15 +0000 Manifest next update: Thu 06 Nov 2025 10:15:15 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: DXa3EPeFR96cjCj1FZpuVd5SczAwo8hfiqkUNan8RP4=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:60:70:97:99:b5:0a:73:9b:d8:6d:36:e1:be:5e:01:ae:d8:03:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Nov 3 01:27:15 2025 GMT Not After : Nov 6 10:15:15 2025 GMT Subject: CN=AB7B38850F64ABB9C0C438EC6B9D5C39205223B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:85:ae:5f:93:72:13:6f:8d:9c:ff:20:56: 67:db:1d:f2:39:06:1c:dd:f6:57:c6:83:2f:73:ed: e4:87:2e:1d:4a:e6:bb:2f:c5:af:34:9b:a6:7c:1f: 4b:ca:ec:a9:46:b1:9c:c3:91:6e:13:10:5e:fd:2e: cd:25:9d:4a:eb:97:7d:dc:e1:c6:e1:7e:d2:0e:ee: 68:4d:17:69:f9:c8:c7:64:1f:41:49:8b:e8:7b:a1: f4:8d:64:f9:1f:b1:26:e9:01:9b:fd:69:c7:ba:d5: 3d:43:53:92:c3:6f:a3:c8:bb:47:a1:90:cc:80:d3: b2:94:88:c5:1f:b0:44:d6:21:e1:8b:d2:d7:0e:34: 1a:e2:9a:14:57:46:23:11:18:a7:f3:bc:ad:a3:8f: d1:3f:8f:39:fe:6d:20:29:da:1e:9a:cc:d4:40:51: 64:ef:2c:a0:6f:9c:cf:aa:f2:ef:a3:ad:e2:99:92: e4:6e:23:59:a6:c8:4c:d4:0a:ee:01:c5:47:eb:03: 81:55:eb:ec:b9:cc:02:a9:d1:9b:15:ed:67:0c:f3: a1:c5:55:e3:b9:90:c5:59:20:f1:13:25:19:3e:4d: 32:87:23:aa:e8:0e:72:c2:af:f3:49:83:9e:fb:74: 73:8b:07:23:40:11:4d:59:00:2f:bc:51:c4:37:19: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7B:38:85:0F:64:AB:B9:C0:C4:38:EC:6B:9D:5C:39:20:52:23:B5 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3b:c7:4a:c2:6f:2a:6f:c8:f0:de:7f:ec:43:3d:ea:e5:c1: f8:1d:9b:e0:c1:79:e7:47:9f:f3:7e:7f:bb:45:24:5b:b5:a5: 7d:fe:ad:17:b2:aa:ed:8a:a6:9a:c1:74:3a:83:4e:31:ee:80: cc:e0:af:b5:91:95:0f:59:34:23:d6:c9:3e:e1:b5:a1:ab:26: 83:55:10:2d:9e:8d:58:54:85:79:0b:87:f5:62:dd:d3:21:18: b2:4e:21:a2:61:d9:ac:53:e6:86:87:72:85:2d:e8:93:23:ee: 9f:ec:43:99:65:fa:a3:c3:ed:e3:68:1f:af:c9:96:32:0b:af: 43:4a:37:a4:26:48:4b:2c:f1:aa:e6:ff:dc:da:20:71:3a:88: b0:76:ba:ab:56:79:0f:23:f8:18:9e:f1:a1:18:a8:87:26:50: b6:5c:46:e2:71:40:34:ed:a5:f6:a4:55:0a:43:e8:9d:33:4e: 5d:ba:4d:6d:3e:ca:95:ec:15:e1:3f:ea:b6:15:b6:7d:0f:d9: 4f:79:90:a4:cd:48:e1:7a:7c:9b:49:2c:75:56:95:21:82:bc: 62:3e:30:ee:58:f8:8b:04:62:63:b0:2e:8d:4f:f9:60:f4:c7: 2c:51:0d:e8:8b:95:94:cf:73:13:18:c0:36:4d:6c:34:db:07: b1:06:66:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWBwl5m1CnOb2G024b5eAa7YAyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTExMDMwMTI3MTVaFw0yNTExMDYxMDE1MTVaMDMxMTAvBgNV BAMTKEFCN0IzODg1MEY2NEFCQjlDMEM0MzhFQzZCOUQ1QzM5MjA1MjIzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+4WuX5NyE2+NnP8gVmfbHfI5 Bhzd9lfGgy9z7eSHLh1K5rsvxa80m6Z8H0vK7KlGsZzDkW4TEF79Ls0lnUrrl33c 4cbhftIO7mhNF2n5yMdkH0FJi+h7ofSNZPkfsSbpAZv9ace61T1DU5LDb6PIu0eh kMyA07KUiMUfsETWIeGL0tcONBrimhRXRiMRGKfzvK2jj9E/jzn+bSAp2h6azNRA UWTvLKBvnM+q8u+jreKZkuRuI1mmyEzUCu4BxUfrA4FV6+y5zAKp0ZsV7WcM86HF VeO5kMVZIPETJRk+TTKHI6roDnLCr/NJg577dHOLByNAEU1ZAC+8UcQ3Gd3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3s4hQ9kq7nAxDjsa51cOSBSI7UwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg7x0rCbypvyPDef+xDPerlwfgdm+DBeedH n/N+f7tFJFu1pX3+rReyqu2KpprBdDqDTjHugMzgr7WRlQ9ZNCPWyT7htaGrJoNV EC2ejVhUhXkLh/Vi3dMhGLJOIaJh2axT5oaHcoUt6JMj7p/sQ5ll+qPD7eNoH6/J ljILr0NKN6QmSEss8arm/9zaIHE6iLB2uqtWeQ8j+Bie8aEYqIcmULZcRuJxQDTt pfakVQpD6J0zTl26TW0+ypXsFeE/6rYVtn0P2U95kKTNSOF6fJtJLHVWlSGCvGI+ MO5Y+IsEYmOwLo1P+WD0xyxRDeiLlZTPcxMYwDZNbDTbB7EGZvk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:58 2025 by rpki-client