$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: sSDxnM2N5EU+mJFefmq6FUKCHbS+8LUbVJi1Y7axZgI= Subject key identifier: 6F:E0:3C:5D:7C:E5:1E:BB:8E:6B:4F:97:FF:3C:38:AE:95:37:74:9D Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 4AA12E0380FE3F07DAC282DF2845FC15E4FB5D2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 014D Signing time: Tue 04 Nov 2025 08:01:28 +0000 Manifest this update: Tue 04 Nov 2025 07:56:28 +0000 Manifest next update: Fri 07 Nov 2025 15:28:28 +0000 Files and hashes: 1: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=) 2: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=) 3: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=) 4: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=) 5: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=) 6: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: 04e2MjqjhHzuOy1n1b8K5CydGSMoPFMl8IOFp3nATWg=) 7: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a1:2e:03:80:fe:3f:07:da:c2:82:df:28:45:fc:15:e4:fb:5d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Nov 4 07:56:28 2025 GMT Not After : Nov 7 15:28:28 2025 GMT Subject: CN=6FE03C5D7CE51EBB8E6B4F97FF3C38AE9537749D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:34:6f:4d:bf:99:1c:2a:8c:75:d5:f9:cc: af:56:c9:cc:3f:dc:cd:0a:5c:86:38:d8:18:f2:61: 15:c7:0b:42:77:a0:84:d9:fa:0a:2f:d6:2c:df:55: 02:47:9e:c4:94:11:b6:86:67:93:fb:b7:0b:5a:c2: 02:ab:0c:5d:cd:c9:02:01:27:ae:d3:de:d9:83:05: 8e:55:d9:41:32:37:a6:71:de:8f:fa:8c:f7:ab:a5: c1:35:7f:3d:ac:ca:ab:1f:13:d2:3e:55:9f:23:38: 7c:27:ef:c2:d8:1b:08:b5:1f:c0:b1:1f:93:71:82: 7b:36:f0:a2:bd:8c:bc:38:e0:8e:ad:af:ce:39:91: 21:93:c7:4a:e1:61:84:f0:da:48:0c:9d:2c:d6:31: 00:7d:0f:6b:84:5e:e0:2a:47:05:3e:9b:52:e1:ce: a9:b4:5e:b3:54:1b:05:77:05:99:b7:8f:01:5b:ea: c5:10:04:06:4a:4f:fa:6c:22:fa:36:0b:fa:fa:ac: 26:dc:61:7c:b5:e0:a9:8e:65:ef:01:20:ac:13:51: 70:22:8f:45:74:6d:3e:b3:ce:8c:4f:ff:6b:a0:bb: e3:59:e3:a8:3a:a1:cf:9f:55:74:dd:4c:8a:9e:b7: 9e:a9:aa:19:5f:bc:27:de:49:e7:4e:1c:26:67:e9: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E0:3C:5D:7C:E5:1E:BB:8E:6B:4F:97:FF:3C:38:AE:95:37:74:9D X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:55:df:68:c9:40:31:cc:a5:6a:44:d2:c3:d7:4b:c4:7c:02: 9d:97:b1:bc:48:58:fe:55:ed:30:10:3a:f3:72:f9:c1:5b:70: 8f:65:4c:8e:39:c6:6e:a0:76:29:11:30:c6:d9:5e:f0:f8:c0: b0:91:2a:be:f7:24:2c:ff:5f:0b:d8:6a:50:a4:56:54:09:d6: 2d:74:3d:59:63:62:2c:cc:f9:c8:21:a9:cd:2a:b9:b2:d4:c6: ce:86:c9:ef:f1:5b:d4:0d:1e:76:6c:a1:77:4b:72:5b:70:54: a2:ec:cf:bf:6b:af:5d:8e:0c:d6:cb:44:0d:00:d1:2a:8c:fb: 8b:fd:9d:38:d1:29:af:19:bf:80:db:f2:3e:c9:57:ec:14:1a: 62:5a:d1:6e:91:93:71:5b:4e:a4:2f:d0:95:8d:2d:d7:7d:bd: 12:9b:e5:a5:f3:18:87:01:6d:61:1b:64:64:9c:c1:d0:86:1a: 0a:88:6c:db:e3:70:90:d0:a7:a5:6c:d0:52:83:f6:ff:60:d5: fd:f5:1e:d2:bd:a4:c6:a2:bc:1c:d0:58:87:e2:aa:08:19:86: 19:85:99:cb:eb:dd:19:fb:fd:25:a6:04:c3:63:c6:a5:84:a6: 1f:a2:c9:b5:ed:fc:3c:0b:4e:15:7d:9b:ca:40:78:3b:9b:e7: 5c:aa:c1:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqEuA4D+PwfawoLfKEX8FeT7XSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTExMDQwNzU2MjhaFw0yNTExMDcxNTI4MjhaMDMxMTAvBgNV BAMTKDZGRTAzQzVEN0NFNTFFQkI4RTZCNEY5N0ZGM0MzOEFFOTUzNzc0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+zRvTb+ZHCqMddX5zK9Wycw/ 3M0KXIY42BjyYRXHC0J3oITZ+gov1izfVQJHnsSUEbaGZ5P7twtawgKrDF3NyQIB J67T3tmDBY5V2UEyN6Zx3o/6jPerpcE1fz2syqsfE9I+VZ8jOHwn78LYGwi1H8Cx H5Nxgns28KK9jLw44I6tr845kSGTx0rhYYTw2kgMnSzWMQB9D2uEXuAqRwU+m1Lh zqm0XrNUGwV3BZm3jwFb6sUQBAZKT/psIvo2C/r6rCbcYXy14KmOZe8BIKwTUXAi j0V0bT6zzoxP/2ugu+NZ46g6oc+fVXTdTIqet56pqhlfvCfeSedOHCZn6blRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+A8XXzlHruOa0+X/zw4rpU3dJ0wHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1V32jJQDHMpWpE0sPXS8R8Ap2XsbxIWP5V 7TAQOvNy+cFbcI9lTI45xm6gdikRMMbZXvD4wLCRKr73JCz/XwvYalCkVlQJ1i10 PVljYizM+cghqc0qubLUxs6Gye/xW9QNHnZsoXdLcltwVKLsz79rr12ODNbLRA0A 0SqM+4v9nTjRKa8Zv4Db8j7JV+wUGmJa0W6Rk3FbTqQv0JWNLdd9vRKb5aXzGIcB bWEbZGScwdCGGgqIbNvjcJDQp6Vs0FKD9v9g1f31HtK9pMaivBzQWIfiqggZhhmF mcvr3Rn7/SWmBMNjxqWEph+iybXt/DwLThV9m8pAeDub51yqwfs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:13 2025 by rpki-client