$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: U+Fr/5Oe/hClDW05hzRcr0HxGAqhoFL8Q4qAClQPrio= Subject key identifier: BE:AF:F7:E1:35:41:E9:F0:B1:0C:C4:10:0A:D6:2C:6C:6D:D9:BE:EA Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 36A275A7E0979EF98FA7F399F942A45BA1E15BB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 8C Signing time: Tue 04 Nov 2025 05:40:03 +0000 Manifest this update: Tue 04 Nov 2025 05:35:03 +0000 Manifest next update: Fri 07 Nov 2025 06:36:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: qemwZoUahFWUmExbyeOSqmpCeTHH8ojNCTkslFH7FTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a2:75:a7:e0:97:9e:f9:8f:a7:f3:99:f9:42:a4:5b:a1:e1:5b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Nov 4 05:35:03 2025 GMT Not After : Nov 7 06:36:03 2025 GMT Subject: CN=BEAFF7E13541E9F0B10CC4100AD62C6C6DD9BEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:d8:94:b7:43:d0:c6:e3:48:03:42:87:5e: 93:f5:d8:cd:f8:7b:c0:08:cc:26:61:cd:dd:95:ee: 7e:72:d5:a3:00:01:0f:76:55:72:de:8e:26:1b:6c: 3f:8f:b5:fe:81:ad:a2:77:87:3d:d3:cc:8d:3e:08: b5:e3:fa:71:32:a9:f0:a9:dd:f9:3d:55:3c:90:ec: cd:ab:31:ea:f0:87:ae:8a:2f:80:10:80:7d:e9:3a: 42:7d:16:29:e1:1e:ef:eb:98:3e:65:a9:e9:b1:89: a6:e4:28:54:74:e7:46:67:11:f8:0a:2e:d2:fd:f8: 1a:04:ce:5f:a2:30:f9:82:ba:bd:4e:a7:24:3e:87: 0f:5b:30:09:56:d6:7c:27:3b:37:3e:a0:12:c3:5f: c3:95:da:d6:e9:d3:79:1c:10:e3:76:cc:cd:5a:4b: 0d:9a:7a:1b:73:c1:51:bf:63:71:2e:0b:b6:0a:36: 28:f1:ec:9a:0e:2a:d8:6f:ae:37:8b:88:69:c4:4e: f6:2f:d3:dd:49:65:8c:36:52:db:fc:22:7c:75:04: 4f:28:f7:37:32:58:0f:0a:9b:f7:0a:26:c8:97:89: 6f:c4:e1:e4:91:ef:60:fb:21:44:7b:69:69:4c:fa: 36:da:c9:5a:90:f7:52:e3:81:2c:50:fe:fb:bd:16: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:F7:E1:35:41:E9:F0:B1:0C:C4:10:0A:D6:2C:6C:6D:D9:BE:EA X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:28:d4:d6:af:67:b5:26:3f:d7:ea:6b:c5:aa:4f:4d:67:9f: b7:6c:a2:dd:5c:e8:93:62:6f:28:bc:3c:7d:1b:33:1d:72:57: 7b:ae:49:1f:df:17:b6:05:23:80:dc:d2:fd:5b:77:22:59:a2: ba:fa:3a:39:56:3d:e3:f1:0d:e2:a7:17:3b:31:39:8f:5b:07: 5d:45:b2:ee:68:46:76:60:eb:1a:47:b7:e8:85:fe:61:21:33: 4e:ab:25:7c:8e:6e:64:01:bb:23:84:c6:0f:b4:54:1d:64:2e: fc:07:63:f9:1a:8d:ed:3a:ff:ad:84:5e:7c:cc:c9:d2:7f:45: 45:48:ac:37:d6:4a:ab:0c:7c:6d:88:4f:9f:f5:9d:60:b4:a5: de:19:fb:32:e6:cb:a1:1b:1b:cb:3c:4c:36:d7:48:73:31:c1: 14:d2:fa:0f:8a:5d:42:c9:22:69:94:90:5f:33:b1:0d:52:59: c0:ea:da:82:17:e5:67:5d:f2:2e:f1:50:d3:7e:1a:e7:ed:3b: 1a:f8:df:a9:a8:bf:29:6c:5a:8b:3b:87:2d:b9:ba:62:1c:56: cb:da:f3:42:7f:29:34:9c:92:87:78:f3:44:c8:9f:6c:54:11: ad:15:39:6c:a9:4a:c6:81:4f:cd:86:bf:a6:58:62:07:ba:6d: 3c:49:b6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqJ1p+CXnvmPp/OZ+UKkW6HhW7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTExMDQwNTM1MDNaFw0yNTExMDcwNjM2MDNaMDMxMTAvBgNV BAMTKEJFQUZGN0UxMzU0MUU5RjBCMTBDQzQxMDBBRDYyQzZDNkREOUJFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeNiUt0PQxuNIA0KHXpP12M34 e8AIzCZhzd2V7n5y1aMAAQ92VXLejiYbbD+Ptf6BraJ3hz3TzI0+CLXj+nEyqfCp 3fk9VTyQ7M2rMerwh66KL4AQgH3pOkJ9FinhHu/rmD5lqemxiabkKFR050ZnEfgK LtL9+BoEzl+iMPmCur1OpyQ+hw9bMAlW1nwnOzc+oBLDX8OV2tbp03kcEON2zM1a Sw2aehtzwVG/Y3EuC7YKNijx7JoOKthvrjeLiGnETvYv091JZYw2Utv8Inx1BE8o 9zcyWA8Km/cKJsiXiW/E4eSR72D7IUR7aWlM+jbayVqQ91LjgSxQ/vu9FtqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvq/34TVB6fCxDMQQCtYsbG3ZvuowHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwo1NavZ7UmP9fqa8WqT01nn7dsot1c6JNi byi8PH0bMx1yV3uuSR/fF7YFI4Dc0v1bdyJZorr6OjlWPePxDeKnFzsxOY9bB11F su5oRnZg6xpHt+iF/mEhM06rJXyObmQBuyOExg+0VB1kLvwHY/kaje06/62EXnzM ydJ/RUVIrDfWSqsMfG2IT5/1nWC0pd4Z+zLmy6EbG8s8TDbXSHMxwRTS+g+KXULJ ImmUkF8zsQ1SWcDq2oIX5Wdd8i7xUNN+GuftOxr436movylsWos7hy25umIcVsva 80J/KTSckod480TIn2xUEa0VOWypSsaBT82Gv6ZYYge6bTxJtj4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:51 2025 by rpki-client