$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: +3e2U0U6FpnmRofPyXlA8a2Vtnif3KNxczzLG6pPCko= Subject key identifier: A5:99:33:26:95:D8:0E:68:41:39:5F:B0:CE:BE:EA:11:B6:D6:AC:31 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 5D5DBF75ACEAD69F2647ECE02902CE61F39C1223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02A4 Signing time: Tue 04 Nov 2025 06:30:40 +0000 Manifest this update: Tue 04 Nov 2025 06:25:40 +0000 Manifest next update: Fri 07 Nov 2025 11:06:40 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) 2: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: CQdhKBOvrJ4aOLF9O1lGZPUTkME2NOr/DhQQcldl4wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5d:bf:75:ac:ea:d6:9f:26:47:ec:e0:29:02:ce:61:f3:9c:12:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Nov 4 06:25:40 2025 GMT Not After : Nov 7 11:06:40 2025 GMT Subject: CN=A599332695D80E6841395FB0CEBEEA11B6D6AC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:fc:a7:16:bb:79:2f:61:03:a8:2a:81:2a: 3d:8c:9a:57:89:31:82:6d:7a:16:d1:eb:bf:94:02: 99:0a:71:58:e8:69:3a:b0:ec:57:22:15:56:f5:04: b5:d6:79:15:d7:74:53:bb:c1:7a:d5:46:e6:4a:0c: 10:e4:b3:e6:1c:a7:9a:a5:24:35:d4:0c:ae:2f:20: be:02:b0:0d:f5:c3:c0:d5:17:58:dc:6e:2a:35:1c: 4a:f6:b2:54:c0:94:cb:90:76:6d:19:15:ad:a2:6f: 79:ff:a6:65:cf:d2:51:3c:0d:6b:08:a8:2a:fd:ab: a4:52:e1:79:d7:dd:e7:91:94:1a:06:e1:b2:73:44: 6b:d4:52:c0:4a:b9:8b:73:0d:3c:f7:d7:aa:13:57: cb:e6:07:ce:b1:67:1a:58:15:54:93:b1:e8:51:d4: 33:d7:7d:28:42:5e:50:da:7e:69:a7:f2:bd:1f:92: c7:4e:20:02:ea:ff:84:b9:4d:51:30:a5:18:44:5d: d6:94:30:7c:4e:2e:52:a6:d2:87:7b:c8:28:4f:92: 88:f0:05:a6:ef:79:6c:ca:f6:71:2e:ea:94:d6:fc: 9a:41:cf:cf:82:49:5b:65:34:e2:54:38:3e:63:b0: a2:21:38:68:18:fd:74:5b:9e:4b:15:f2:81:a2:56: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:99:33:26:95:D8:0E:68:41:39:5F:B0:CE:BE:EA:11:B6:D6:AC:31 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bb:25:3d:dd:fa:99:1f:8d:61:8d:b4:61:da:79:82:64:74: 1a:60:39:d4:fb:5a:b8:3f:e7:36:ca:01:4e:8a:3f:78:64:72: 23:b9:64:6a:da:0f:db:b7:5e:a7:5b:ae:86:e8:a6:ab:61:cc: d4:6f:ce:ef:d7:5c:fe:bd:00:9a:e8:8d:8c:76:88:a7:9f:a5: 0b:2c:62:12:ff:a7:0e:a6:ed:8d:a2:f4:20:58:99:de:9c:fe: 54:a5:ca:20:f2:1c:a9:7f:d4:ca:b2:86:78:97:83:b4:92:cd: e8:04:ff:1d:2d:20:f8:5c:d2:b7:3d:57:16:86:c4:bc:70:a9: 73:06:62:03:12:bd:c2:0b:7d:df:98:21:2d:19:6f:e8:6d:5f: 86:bb:bd:bf:3a:c9:55:a8:88:fe:d0:94:71:28:40:a7:e1:74: f7:c1:1a:28:5e:ff:01:b2:a2:1a:76:f0:5e:54:de:d3:03:50: a6:f2:79:13:28:40:43:75:79:58:57:bf:da:84:47:60:df:90: 74:3f:da:23:bf:10:0c:52:fd:49:24:59:b8:b2:d6:0b:b8:89: 24:c8:28:17:27:bd:f7:a2:78:04:0b:d8:f8:f6:09:f9:d2:67: d4:7d:aa:1e:f7:a7:39:fc:96:70:5c:03:b9:5e:b6:f8:c6:d5: 10:52:0e:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXV2/dazq1p8mR+zgKQLOYfOcEiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTExMDQwNjI1NDBaFw0yNTExMDcxMTA2NDBaMDMxMTAvBgNV BAMTKEE1OTkzMzI2OTVEODBFNjg0MTM5NUZCMENFQkVFQTExQjZENkFDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTx/ynFrt5L2EDqCqBKj2MmleJ MYJtehbR67+UApkKcVjoaTqw7FciFVb1BLXWeRXXdFO7wXrVRuZKDBDks+Ycp5ql JDXUDK4vIL4CsA31w8DVF1jcbio1HEr2slTAlMuQdm0ZFa2ib3n/pmXP0lE8DWsI qCr9q6RS4XnX3eeRlBoG4bJzRGvUUsBKuYtzDTz316oTV8vmB86xZxpYFVSTsehR 1DPXfShCXlDafmmn8r0fksdOIALq/4S5TVEwpRhEXdaUMHxOLlKm0od7yChPkojw BabveWzK9nEu6pTW/JpBz8+CSVtlNOJUOD5jsKIhOGgY/XRbnksV8oGiVpmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZkzJpXYDmhBOV+wzr7qEbbWrDEwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK7JT3d+pkfjWGNtGHaeYJkdBpgOdT7Wrg/ 5zbKAU6KP3hkciO5ZGraD9u3XqdbrobopqthzNRvzu/XXP69AJrojYx2iKefpQss YhL/pw6m7Y2i9CBYmd6c/lSlyiDyHKl/1MqyhniXg7SSzegE/x0tIPhc0rc9VxaG xLxwqXMGYgMSvcILfd+YIS0Zb+htX4a7vb86yVWoiP7QlHEoQKfhdPfBGihe/wGy ohp28F5U3tMDUKbyeRMoQEN1eVhXv9qER2DfkHQ/2iO/EAxS/UkkWbiy1gu4iSTI KBcnvfeieAQL2Pj2CfnSZ9R9qh73pzn8lnBcA7letvjG1RBSDp4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:21 2025 by rpki-client