$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: 1Q+FcuvfvNnwd70sc4La1fK4cvBGBGns5HZXaxIN5ZU= Subject key identifier: AD:D7:89:B6:BE:6F:D1:9C:A8:AD:E4:68:26:58:C1:1C:0B:E9:AB:17 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 4DD61014D5CEBE1F5D683585EAF41BA9C838A1AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 029B Signing time: Mon 03 Nov 2025 12:01:28 +0000 Manifest this update: Mon 03 Nov 2025 11:56:28 +0000 Manifest next update: Thu 06 Nov 2025 22:27:28 +0000 Files and hashes: 1: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: BB0NUk2FZYeOXVX1ylH5UJOrBeqQqGq2trrf4dzvE0E=) 2: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: GwLSbTnQeuh0a53ovkV2iGQ8IVBTUAVLDO4WWZFmNyc=) 3: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d6:10:14:d5:ce:be:1f:5d:68:35:85:ea:f4:1b:a9:c8:38:a1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Nov 3 11:56:28 2025 GMT Not After : Nov 6 22:27:28 2025 GMT Subject: CN=ADD789B6BE6FD19CA8ADE4682658C11C0BE9AB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:58:5a:b5:cd:46:17:10:1b:8f:56:b5:67: 17:51:23:28:47:17:78:75:3e:c7:39:a9:86:89:35: 46:10:69:53:a2:0a:48:e6:88:1d:83:bb:df:07:17: 7b:da:94:31:47:31:f1:3e:8d:f5:a0:ec:fa:7a:61: f1:7c:2e:6a:89:cf:63:50:4e:a9:85:6a:03:ea:1e: 86:38:c5:1c:59:57:64:9e:0a:61:62:7e:60:d1:ad: 24:48:26:39:35:15:a7:7e:d4:eb:4b:af:c4:e1:00: d4:f2:eb:2f:73:06:58:c3:87:cf:71:40:fa:78:db: da:c1:2a:ed:ed:ba:bd:b2:cb:1b:f9:ce:30:3e:30: 17:0d:60:a5:3e:23:d5:70:2c:ef:55:d7:46:7f:57: b2:dc:6f:6e:8b:22:86:b7:68:d5:ff:be:52:5b:30: 1a:e5:77:48:1e:ce:fb:14:b7:5d:e6:a4:b7:43:b1: 4c:cb:58:b8:06:65:94:a3:2d:62:e4:d1:a9:cb:e7: f7:eb:11:37:1e:e9:ab:b2:98:42:93:20:a7:3d:a6: 95:ef:66:28:59:db:24:94:ce:88:73:ab:24:b9:2c: 00:55:02:08:c1:bd:15:79:5c:44:7a:e5:04:8d:83: b6:95:c4:f1:ba:b2:db:f2:4f:22:96:b3:c3:60:62: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:89:B6:BE:6F:D1:9C:A8:AD:E4:68:26:58:C1:1C:0B:E9:AB:17 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f1:e3:f6:f4:1c:47:5d:4b:29:54:98:51:a0:1a:9c:cf:07: 53:98:b8:f0:cb:33:09:6e:27:a1:53:08:b4:c5:39:eb:4a:73: ea:ba:11:87:d0:c6:83:30:31:0e:e9:06:93:84:e3:ea:76:35: 37:5a:b1:ac:01:1d:66:87:a1:b7:12:a8:0c:f1:b8:97:92:06: 29:d0:72:66:de:1f:71:35:a6:d8:35:26:0e:fe:ff:1b:f5:33: a4:b2:ac:aa:9b:1f:58:5b:22:e3:66:35:ab:7f:6d:d5:5d:26: c1:32:4a:8a:ba:42:8d:2d:ab:1e:f5:9b:03:3a:51:e7:d0:33: 2b:ff:7b:b9:63:a3:77:75:42:8e:5f:ed:26:f0:f7:ff:79:fd: f6:8b:1c:b6:35:75:63:26:9b:1a:1d:6b:74:2f:a9:9d:2a:46: 2c:9a:5d:93:1c:0d:f0:19:c1:d9:77:ce:94:af:4f:d0:9f:e2: a6:6c:9e:b8:30:11:0c:82:4f:34:89:5d:5d:2d:4c:56:d1:b6: 43:4d:e5:5c:95:90:c4:f2:42:28:57:1d:89:cc:86:aa:ac:8d: 88:5a:8f:e8:24:41:af:3d:bb:e8:0b:06:bf:1d:93:b1:a3:e5: 77:11:45:8f:b3:17:8c:a6:4d:97:26:88:39:74:8b:3b:1a:37: 8a:a9:70:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdYQFNXOvh9daDWF6vQbqcg4oaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTExMDMxMTU2MjhaFw0yNTExMDYyMjI3MjhaMDMxMTAvBgNV BAMTKEFERDc4OUI2QkU2RkQxOUNBOEFERTQ2ODI2NThDMTFDMEJFOUFCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9lhatc1GFxAbj1a1ZxdRIyhH F3h1Psc5qYaJNUYQaVOiCkjmiB2Du98HF3valDFHMfE+jfWg7Pp6YfF8LmqJz2NQ TqmFagPqHoY4xRxZV2SeCmFifmDRrSRIJjk1Fad+1OtLr8ThANTy6y9zBljDh89x QPp429rBKu3tur2yyxv5zjA+MBcNYKU+I9VwLO9V10Z/V7Lcb26LIoa3aNX/vlJb MBrld0gezvsUt13mpLdDsUzLWLgGZZSjLWLk0anL5/frETce6auymEKTIKc9ppXv ZihZ2ySUzohzqyS5LABVAgjBvRV5XER65QSNg7aVxPG6stvyTyKWs8NgYoiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdeJtr5v0ZyoreRoJljBHAvpqxcwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHx4/b0HEddSylUmFGgGpzPB1OYuPDLMwlu J6FTCLTFOetKc+q6EYfQxoMwMQ7pBpOE4+p2NTdasawBHWaHobcSqAzxuJeSBinQ cmbeH3E1ptg1Jg7+/xv1M6SyrKqbH1hbIuNmNat/bdVdJsEySoq6Qo0tqx71mwM6 UefQMyv/e7ljo3d1Qo5f7Sbw9/95/faLHLY1dWMmmxoda3QvqZ0qRiyaXZMcDfAZ wdl3zpSvT9Cf4qZsnrgwEQyCTzSJXV0tTFbRtkNN5VyVkMTyQihXHYnMhqqsjYha j+gkQa89u+gLBr8dk7Gj5XcRRY+zF4ymTZcmiDl0izsaN4qpcCg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:13 2025 by rpki-client