$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: T0TdL2m7fcsT3th63aDif2n6xEMhKAmspRLuiMi4P+g= Subject key identifier: FC:D2:EE:BB:25:9B:68:5D:12:C6:51:99:11:4D:36:FC:C4:E9:03:CC Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 5D0D8DADE6BC8C425013C963D091E0F8EA320740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01D7 Signing time: Mon 20 Oct 2025 03:01:15 +0000 Manifest this update: Mon 20 Oct 2025 02:56:15 +0000 Manifest next update: Thu 23 Oct 2025 03:56:15 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 2: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: Pr9u+zdsauKmcQpMYAyasO5YkB6WXSmI17iREXE2O+Q=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0d:8d:ad:e6:bc:8c:42:50:13:c9:63:d0:91:e0:f8:ea:32:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Oct 20 02:56:15 2025 GMT Not After : Oct 23 03:56:15 2025 GMT Subject: CN=FCD2EEBB259B685D12C65199114D36FCC4E903CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:23:88:76:b8:83:cd:55:96:4b:d5:71:12: c8:33:4e:7f:51:bf:5e:45:9f:a0:51:9b:de:a4:cf: 8f:19:e0:6d:fa:d9:02:ac:ee:55:98:9f:51:83:b4: 5c:25:21:b5:0c:17:4c:d3:a6:fb:0d:4e:af:9f:86: f2:37:77:a7:2f:bf:c1:0f:bd:1b:2c:cf:3c:93:67: 0f:95:52:c9:6e:64:50:4f:2c:65:dd:9a:03:78:74: 30:fe:57:cf:3d:bd:52:c6:3f:4c:15:72:54:55:90: 5d:8b:72:a2:ed:b8:fc:81:e8:1e:35:22:da:1e:44: 06:f5:7f:76:16:88:59:75:4b:d2:04:88:2b:cc:93: 43:9e:a0:85:5f:90:4c:13:a7:3f:cd:73:38:50:55: e7:14:ef:2e:0a:20:8f:4e:53:09:4e:c4:d8:b7:93: bf:de:a4:67:c8:35:9e:22:7f:8e:d0:21:58:e3:ca: f8:ed:7c:d6:75:b6:61:b6:bc:bf:fe:1b:87:14:b2: ab:df:4a:06:90:fb:3f:02:23:a3:9e:43:4b:d9:d0: 74:35:ea:ff:0e:70:26:98:91:46:da:a4:2e:b0:97: fe:6f:51:68:b9:52:55:a3:56:15:1f:5c:bd:db:25: 62:4d:b3:93:0d:16:5b:30:c6:65:92:7d:f7:a1:af: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D2:EE:BB:25:9B:68:5D:12:C6:51:99:11:4D:36:FC:C4:E9:03:CC X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b2:a3:a3:7f:4f:38:38:a3:a2:53:3b:de:b5:cb:bb:54:d5: 2a:b9:a0:92:98:14:a0:b5:dc:63:66:38:fd:76:ea:44:09:26: 14:43:aa:be:79:dd:7b:6b:30:22:fa:d9:48:d3:e9:80:64:0c: 22:d2:ea:6f:5a:03:18:02:bf:ef:01:28:06:bb:7a:60:15:80: 7c:a4:b0:ea:26:e0:27:df:21:00:f5:f6:07:80:94:91:5e:c1: 7d:5e:3b:85:e8:a7:2c:04:96:f1:96:5f:83:80:71:3c:a5:72: be:8f:26:0e:a2:2a:36:72:82:15:51:1d:92:10:92:d9:09:4a: f2:ca:64:52:43:a2:be:f9:0d:7f:81:13:1e:61:73:b5:f3:88: f4:dd:70:44:c4:54:3d:a7:3e:7b:da:a6:24:0e:c2:78:be:57: 22:12:4c:e6:3a:d6:17:b0:a8:50:ef:19:ab:66:5a:0d:d7:ed: 6c:c4:1d:64:a1:c0:30:c5:0b:e8:29:32:c4:f6:41:c8:b1:75: 07:5f:1e:b0:c4:f0:3c:c3:db:ea:83:26:fa:10:d7:13:f2:4f: 6f:44:98:70:27:98:3b:4d:0b:1d:ba:c0:c0:50:ae:d2:88:4c: 2a:e7:b6:ec:d7:f5:fd:0d:26:a1:45:40:3e:ad:df:85:29:a3: 03:75:3b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQ2Nrea8jEJQE8lj0JHg+OoyB0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTEwMjAwMjU2MTVaFw0yNTEwMjMwMzU2MTVaMDMxMTAvBgNV BAMTKEZDRDJFRUJCMjU5QjY4NUQxMkM2NTE5OTExNEQzNkZDQzRFOTAzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTiOIdriDzVWWS9VxEsgzTn9R v15Fn6BRm96kz48Z4G362QKs7lWYn1GDtFwlIbUMF0zTpvsNTq+fhvI3d6cvv8EP vRsszzyTZw+VUsluZFBPLGXdmgN4dDD+V889vVLGP0wVclRVkF2LcqLtuPyB6B41 ItoeRAb1f3YWiFl1S9IEiCvMk0OeoIVfkEwTpz/NczhQVecU7y4KII9OUwlOxNi3 k7/epGfINZ4if47QIVjjyvjtfNZ1tmG2vL/+G4cUsqvfSgaQ+z8CI6OeQ0vZ0HQ1 6v8OcCaYkUbapC6wl/5vUWi5UlWjVhUfXL3bJWJNs5MNFlswxmWSffehr4hVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/NLuuyWbaF0SxlGZEU02/MTpA8wwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6yo6N/Tzg4o6JTO961y7tU1Sq5oJKYFKC1 3GNmOP126kQJJhRDqr553XtrMCL62UjT6YBkDCLS6m9aAxgCv+8BKAa7emAVgHyk sOom4CffIQD19geAlJFewX1eO4XopywElvGWX4OAcTylcr6PJg6iKjZyghVRHZIQ ktkJSvLKZFJDor75DX+BEx5hc7XziPTdcETEVD2nPnvapiQOwni+VyISTOY61hew qFDvGatmWg3X7WzEHWShwDDFC+gpMsT2QcixdQdfHrDE8DzD2+qDJvoQ1xPyT29E mHAnmDtNCx26wMBQrtKITCrntuzX9f0NJqFFQD6t34UpowN1O60= -----END CERTIFICATE-----Generated at Tue Oct 21 02:08:10 2025 by rpki-client