$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: mGZ2j3QxgTZUSAusgu8A7444R20KyTHXfdQ31VfVWKY= Subject key identifier: 87:BC:A8:E7:99:A2:29:4D:90:5C:43:EB:0A:FC:FB:D3:1C:7E:FC:1F Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 608AB8879AAD37E5FF755799ADE62EDC64283748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 017B Signing time: Mon 03 Nov 2025 19:02:17 +0000 Manifest this update: Mon 03 Nov 2025 18:57:17 +0000 Manifest next update: Fri 07 Nov 2025 06:44:17 +0000 Files and hashes: 1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: mgCHSjNjgpUlyoGhZOj425uUxXZ28JpTR8I90vslzx0=) 2: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) 3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) 4: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8a:b8:87:9a:ad:37:e5:ff:75:57:99:ad:e6:2e:dc:64:28:37:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Nov 3 18:57:17 2025 GMT Not After : Nov 7 06:44:17 2025 GMT Subject: CN=87BCA8E799A2294D905C43EB0AFCFBD31C7EFC1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:57:c1:89:cb:37:47:03:41:f4:83:44:51: f1:b0:97:01:2b:58:16:43:97:bc:48:e7:62:d5:b9: 02:63:c5:bd:0d:2e:59:cc:f4:52:b5:e1:58:b5:51: 88:4f:03:73:38:d7:53:b7:4c:87:2f:e4:61:da:61: fc:b6:f6:35:9d:2d:25:96:98:47:8c:e4:d8:4f:b5: 1a:30:f2:28:bc:be:de:42:69:de:75:59:0b:00:15: 9c:4b:47:0b:67:a6:2c:98:63:07:c0:53:7e:bc:ab: ae:8f:4b:cb:24:ff:3a:2a:5b:64:b3:33:4c:e8:df: 22:01:89:2f:0a:75:6b:e0:b3:63:9d:51:ae:29:29: af:0c:f0:43:8a:41:91:d0:8b:b4:16:0f:50:6d:61: c7:2e:cc:45:f2:b2:3e:cd:65:8f:56:e4:f9:92:84: 69:d9:9d:29:7f:4c:02:8c:e0:55:d4:cc:27:50:b0: 10:52:bb:c3:4c:e0:63:f5:e1:1e:a7:15:45:95:a1: 02:28:76:a0:5c:ae:12:72:04:4b:98:ad:4b:62:8f: 78:db:9c:d4:09:ac:b4:04:6f:e1:bb:3d:eb:25:e4: fa:3b:9c:89:5d:66:76:75:a5:98:b1:b8:66:b1:59: 7d:9a:3b:74:04:e0:44:a4:15:37:87:b2:4e:dd:1b: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:A8:E7:99:A2:29:4D:90:5C:43:EB:0A:FC:FB:D3:1C:7E:FC:1F X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:77:b4:12:57:88:03:a7:51:93:1f:0d:3a:1f:67:00:bd:f9: ab:9d:3b:97:aa:ec:e1:4c:de:5b:c6:ce:42:57:b8:44:99:6e: 7b:ea:14:e5:e4:84:52:90:d5:e2:73:4c:d6:cf:74:fe:fc:c1: 15:d9:67:b3:8c:d0:29:be:9c:99:a4:3e:cb:f0:0d:f3:d2:9a: da:53:4b:cb:ba:a0:12:c5:60:b4:83:67:1d:82:f6:4d:1f:9e: a8:26:70:39:0a:1e:b3:20:4f:d8:cb:21:a6:1b:c4:76:a2:c9: 6a:08:7d:d9:a6:a2:46:00:6e:b6:7e:18:f8:67:b9:8f:67:69: d8:0a:db:ef:55:58:8e:8b:84:f8:2a:cb:74:c0:2e:23:ed:e7: a8:d2:bc:13:3f:80:47:de:9c:11:85:ad:24:82:1d:00:9d:45: 90:ad:26:67:6e:be:84:8b:d9:a3:f2:6f:ec:76:d7:66:18:2a: db:3d:b0:86:05:8a:a7:13:30:93:88:24:16:19:14:2c:29:28: 0e:9a:a2:d5:4d:ba:28:39:d8:dc:c5:c0:e2:95:32:ef:79:e8: b6:fc:bd:f8:37:4a:01:dc:29:e1:8f:f7:42:0d:fc:6c:ef:cd: 4b:0c:c5:63:1d:f5:5d:44:75:bf:bc:59:2c:bb:1b:1e:7e:fb: 70:b2:0c:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIq4h5qtN+X/dVeZreYu3GQoN0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTExMDMxODU3MTdaFw0yNTExMDcwNjQ0MTdaMDMxMTAvBgNV BAMTKDg3QkNBOEU3OTlBMjI5NEQ5MDVDNDNFQjBBRkNGQkQzMUM3RUZDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi31fBics3RwNB9INEUfGwlwEr WBZDl7xI52LVuQJjxb0NLlnM9FK14Vi1UYhPA3M411O3TIcv5GHaYfy29jWdLSWW mEeM5NhPtRow8ii8vt5Cad51WQsAFZxLRwtnpiyYYwfAU368q66PS8sk/zoqW2Sz M0zo3yIBiS8KdWvgs2OdUa4pKa8M8EOKQZHQi7QWD1BtYccuzEXysj7NZY9W5PmS hGnZnSl/TAKM4FXUzCdQsBBSu8NM4GP14R6nFUWVoQIodqBcrhJyBEuYrUtij3jb nNQJrLQEb+G7Pesl5Po7nIldZnZ1pZixuGaxWX2aO3QE4ESkFTeHsk7dG/ojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7yo55miKU2QXEPrCvz70xx+/B8wHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKl3tBJXiAOnUZMfDTofZwC9+audO5eq7OFM 3lvGzkJXuESZbnvqFOXkhFKQ1eJzTNbPdP78wRXZZ7OM0Cm+nJmkPsvwDfPSmtpT S8u6oBLFYLSDZx2C9k0fnqgmcDkKHrMgT9jLIaYbxHaiyWoIfdmmokYAbrZ+GPhn uY9nadgK2+9VWI6LhPgqy3TALiPt56jSvBM/gEfenBGFrSSCHQCdRZCtJmduvoSL 2aPyb+x212YYKts9sIYFiqcTMJOIJBYZFCwpKA6aotVNuig52NzFwOKVMu956Lb8 vfg3SgHcKeGP90IN/GzvzUsMxWMd9V1Edb+8WSy7Gx5++3CyDOk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:27 2025 by rpki-client