$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: rq8I7uiq82ZpFuVasUwQOkoNrDPQmQ9VuvTSSfrNjqo= Subject key identifier: 47:94:B8:24:31:34:D5:60:74:84:7D:7E:0E:F3:DC:A7:83:60:EE:92 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 4D9C239CBB7904640A79E0206C81BEA0DD00702B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: DA Signing time: Mon 03 Nov 2025 14:20:05 +0000 Manifest this update: Mon 03 Nov 2025 14:15:05 +0000 Manifest next update: Thu 06 Nov 2025 14:20:05 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 2: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 3: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 4: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 5: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) 6: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 7: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 8: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: mP0i2UJMP0p2h8aRpiUxjIFZdGEHKo0ZTtLQ5wCsSyE=) 9: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:23:9c:bb:79:04:64:0a:79:e0:20:6c:81:be:a0:dd:00:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Nov 3 14:15:05 2025 GMT Not After : Nov 6 14:20:05 2025 GMT Subject: CN=4794B8243134D56074847D7E0EF3DCA78360EE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:fc:8a:ff:cd:83:6d:13:5c:2d:10:61:e7: b9:e0:b1:5e:c1:2c:f9:f6:de:70:90:7b:04:f0:9f: 1c:29:81:1a:5c:f0:ec:6a:91:3a:b7:36:35:a7:5b: ca:df:1d:8c:e2:ef:4a:08:bb:e1:11:c4:43:08:ca: 2a:5c:e7:a7:74:ec:04:0b:0f:59:f7:23:26:c5:c1: 95:43:49:5f:94:f2:32:a7:28:db:6c:81:c2:3b:b8: 60:5e:66:21:29:5a:6e:20:71:01:47:72:ea:0f:11: 93:87:01:f9:a0:d4:f1:a1:bd:72:f8:8f:ab:ad:68: 17:56:c0:bd:36:df:70:3b:87:30:12:34:87:90:93: 2f:7e:f3:56:14:8d:19:6f:f0:a7:f0:bd:a2:46:3a: 96:f0:48:45:c9:10:06:76:0a:ea:a7:f9:4d:89:2d: de:6b:31:ae:65:e5:1b:ee:ed:aa:04:a2:70:87:cd: 4e:ff:7c:aa:13:64:1b:58:5d:57:e1:a3:2e:4b:15: d3:d7:34:8e:93:27:6e:c1:5b:f9:17:c5:da:f1:e6: 93:09:87:dd:ff:91:a8:32:f2:56:96:14:8a:f6:17: 77:13:b9:d9:78:36:2f:53:9b:90:8d:05:9a:9f:a2: 7b:f1:cc:bc:39:9e:4d:eb:14:9f:8c:8d:0b:a9:70: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:B8:24:31:34:D5:60:74:84:7D:7E:0E:F3:DC:A7:83:60:EE:92 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:4d:e3:c6:40:65:b3:66:5e:fa:39:a8:a3:e1:0f:57:7f: f8:de:75:32:eb:45:b6:a3:4f:dc:bf:0b:bd:c2:be:84:33:e5: bc:bc:b3:cb:f7:e1:97:a1:9e:b1:06:6e:d0:df:be:1d:25:18: 4d:0a:9f:ba:52:8f:cc:4b:39:1b:bc:19:6f:97:9d:c8:ac:c7: b5:e4:94:ca:5f:90:4e:bc:00:e5:8c:7e:e1:d3:5b:75:5c:ee: 29:22:c8:63:a8:6c:27:19:f0:84:18:3d:1c:43:8c:63:c5:a5: 3d:67:86:ab:83:e8:84:b8:c1:cc:ad:89:27:68:b4:0f:ff:45: 99:88:cb:93:bc:00:bb:4f:73:54:b1:c1:5d:6b:f9:dd:b0:1d: 59:96:93:a6:96:ad:39:0b:08:fe:fb:8f:bb:3f:73:19:43:2b: 2f:f1:47:3e:5f:cb:76:01:7a:9e:eb:e2:25:d1:9b:ee:89:54: 44:30:ff:c2:41:1f:00:20:7c:8b:88:8f:5b:4e:d1:74:8a:26: 11:22:51:b6:e3:cc:6c:91:cd:20:0f:bf:03:40:0f:25:e2:b3: b7:8c:b3:f7:87:d0:a4:22:ae:bc:ff:e0:60:8f:e7:9d:c4:8b: 44:d8:e6:28:03:4b:cc:eb:e5:ca:b4:4c:07:c1:08:b7:5f:5d: 68:bd:c7:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZwjnLt5BGQKeeAgbIG+oN0AcCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTExMDMxNDE1MDVaFw0yNTExMDYxNDIwMDVaMDMxMTAvBgNV BAMTKDQ3OTRCODI0MzEzNEQ1NjA3NDg0N0Q3RTBFRjNEQ0E3ODM2MEVFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCPyK/82DbRNcLRBh57ngsV7B LPn23nCQewTwnxwpgRpc8OxqkTq3NjWnW8rfHYzi70oIu+ERxEMIyipc56d07AQL D1n3IybFwZVDSV+U8jKnKNtsgcI7uGBeZiEpWm4gcQFHcuoPEZOHAfmg1PGhvXL4 j6utaBdWwL0233A7hzASNIeQky9+81YUjRlv8KfwvaJGOpbwSEXJEAZ2Cuqn+U2J Ld5rMa5l5Rvu7aoEonCHzU7/fKoTZBtYXVfhoy5LFdPXNI6TJ27BW/kXxdrx5pMJ h93/kagy8laWFIr2F3cTudl4Ni9Tm5CNBZqfonvxzLw5nk3rFJ+MjQupcCUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5S4JDE01WB0hH1+DvPcp4Ng7pIwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEArTePGQGWzZl76Oaij4Q9Xf/jedTLrRbaj T9y/C73CvoQz5by8s8v34ZehnrEGbtDfvh0lGE0Kn7pSj8xLORu8GW+Xncisx7Xk lMpfkE68AOWMfuHTW3Vc7ikiyGOobCcZ8IQYPRxDjGPFpT1nhquD6IS4wcytiSdo tA//RZmIy5O8ALtPc1SxwV1r+d2wHVmWk6aWrTkLCP77j7s/cxlDKy/xRz5fy3YB ep7r4iXRm+6JVEQw/8JBHwAgfIuIj1tO0XSKJhEiUbbjzGyRzSAPvwNADyXis7eM s/eH0KQirrz/4GCP553Ei0TY5igDS8zr5cq0TAfBCLdfXWi9x24= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:00 2025 by rpki-client