$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: J1HEOFZtE8EAQ5iNEWcinEuYzaAIl6FqkdMfNz3NwCE= Subject key identifier: D9:33:A0:F2:65:A5:15:1E:82:44:8E:F8:92:6E:06:A7:A4:D8:5C:98 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 027ACE34717132AFF42B67ED2EF1A4210D8BA0D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 0272 Signing time: Mon 03 Nov 2025 19:31:42 +0000 Manifest this update: Mon 03 Nov 2025 19:26:42 +0000 Manifest next update: Fri 07 Nov 2025 00:59:42 +0000 Files and hashes: 1: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) 2: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: p20m1k//52p+gy6/myqsnf4Lw8L9c0FDTxuilhSz0TI=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7a:ce:34:71:71:32:af:f4:2b:67:ed:2e:f1:a4:21:0d:8b:a0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Nov 3 19:26:42 2025 GMT Not After : Nov 7 00:59:42 2025 GMT Subject: CN=D933A0F265A5151E82448EF8926E06A7A4D85C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:a9:c7:01:1b:86:24:9d:3a:08:5c:51:e0: 3c:9c:b7:17:49:04:4d:4d:8e:0a:6d:86:fa:68:6d: 31:da:1c:19:79:9d:cd:95:45:b2:23:6d:e4:59:45: 8c:5b:b3:44:05:b9:dd:68:a8:ff:49:e1:b0:45:a2: 6c:0a:89:1e:95:16:cd:00:c2:12:71:19:0b:93:27: 3f:75:96:a0:f1:cd:72:22:58:34:e3:ff:0b:39:94: bc:bf:7c:49:53:1d:73:70:8d:b1:e5:fb:02:ed:67: ab:74:27:a9:e5:de:59:2a:89:8e:a2:fd:b8:a7:29: 3a:bb:d1:6c:f0:4d:96:28:d0:ee:24:aa:a2:b4:1d: 1e:a3:5c:d3:2e:7f:9e:0a:07:b0:df:7e:79:9c:47: 80:bb:2b:9d:5d:41:2d:43:87:48:12:68:20:ef:80: a0:ca:23:cf:71:df:5c:a0:b3:ea:6f:2d:4d:6e:76: b6:3f:3c:54:68:f6:77:8a:1c:c4:d0:6c:ea:4e:93: 5b:fe:6c:e9:8b:cf:b7:84:99:8a:9e:bc:a7:13:a9: 92:dd:50:8d:e2:6b:42:7b:b3:28:8c:86:a3:10:72: aa:59:c7:32:98:4a:ed:81:af:5c:50:1a:41:79:82: 60:f4:61:33:8f:18:6b:fb:3a:a2:77:5e:35:3e:7a: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:A0:F2:65:A5:15:1E:82:44:8E:F8:92:6E:06:A7:A4:D8:5C:98 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6e:6b:13:b8:1f:45:fc:50:fd:1b:b9:d5:73:f2:d8:50:ec: 70:ed:68:5f:1b:63:72:02:2d:a0:77:3b:af:0e:e0:4b:f7:03: 3a:e4:74:c2:41:63:81:db:f4:a6:6f:4b:34:a5:84:96:38:4f: 0e:b8:28:ec:60:54:1f:30:3b:07:cb:dc:29:b4:ac:19:8c:79: 71:4e:1f:9b:c3:be:a2:22:40:01:1d:bd:83:df:48:cb:cc:f1: 0e:3c:5b:09:68:c7:54:19:e1:5c:04:b9:36:c0:f0:03:18:04: 46:a1:d6:24:28:67:79:f6:f0:ee:1b:e3:90:8b:ec:3c:97:f2: 25:4c:17:bf:2c:ef:69:66:54:e1:e8:71:5f:b5:ba:de:89:d0: 14:b5:9b:9e:7e:6b:89:c5:fb:5d:34:23:76:5b:16:f2:d9:9a: 21:6e:a7:1b:c9:23:89:a9:eb:1d:90:1b:77:bf:1d:f2:c6:4f: a6:b0:1f:05:54:08:59:6a:35:73:86:4a:aa:cf:f0:de:c4:de: 7c:6f:c8:e9:3c:b0:61:f2:28:89:71:19:18:99:bc:ce:27:ab: 65:ea:ca:64:cc:73:22:e2:1a:7d:44:f2:c3:38:6d:0d:d2:fe: 55:fe:43:7e:d9:42:ea:85:c3:b0:88:5b:51:48:53:0b:86:7e: 7e:9d:61:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnrONHFxMq/0K2ftLvGkIQ2LoNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTExMDMxOTI2NDJaFw0yNTExMDcwMDU5NDJaMDMxMTAvBgNV BAMTKEQ5MzNBMEYyNjVBNTE1MUU4MjQ0OEVGODkyNkUwNkE3QTREODVDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFianHARuGJJ06CFxR4DyctxdJ BE1NjgpthvpobTHaHBl5nc2VRbIjbeRZRYxbs0QFud1oqP9J4bBFomwKiR6VFs0A whJxGQuTJz91lqDxzXIiWDTj/ws5lLy/fElTHXNwjbHl+wLtZ6t0J6nl3lkqiY6i /binKTq70WzwTZYo0O4kqqK0HR6jXNMuf54KB7DffnmcR4C7K51dQS1Dh0gSaCDv gKDKI89x31ygs+pvLU1udrY/PFRo9neKHMTQbOpOk1v+bOmLz7eEmYqevKcTqZLd UI3ia0J7syiMhqMQcqpZxzKYSu2Br1xQGkF5gmD0YTOPGGv7OqJ3XjU+emYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TOg8mWlFR6CRI74km4Gp6TYXJgwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRuaxO4H0X8UP0budVz8thQ7HDtaF8bY3IC LaB3O68O4Ev3AzrkdMJBY4Hb9KZvSzSlhJY4Tw64KOxgVB8wOwfL3Cm0rBmMeXFO H5vDvqIiQAEdvYPfSMvM8Q48Wwlox1QZ4VwEuTbA8AMYBEah1iQoZ3n28O4b45CL 7DyX8iVMF78s72lmVOHocV+1ut6J0BS1m55+a4nF+100I3ZbFvLZmiFupxvJI4mp 6x2QG3e/HfLGT6awHwVUCFlqNXOGSqrP8N7E3nxvyOk8sGHyKIlxGRiZvM4nq2Xq ymTMcyLiGn1E8sM4bQ3S/lX+Q37ZQuqFw7CIW1FIUwuGfn6dYRk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:23 2025 by rpki-client