$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: KK7OCuY4fDxgyqIbiOepyB7iJ8sFFIturPxAuZMwTQs= Subject key identifier: 75:58:79:9C:FB:FD:A8:EC:5C:72:4B:60:2D:50:ED:DF:E7:E2:BD:4B Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 21F8E08C044C73E93287765D2B805E0EE356DE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 17:01:07 +0000 Manifest this update: Sun 19 Oct 2025 16:56:07 +0000 Manifest next update: Wed 22 Oct 2025 22:33:07 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: +8YXFPlEZCXG7YR72BhiFU7jHZjbuHLaewHgs1KFefk=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f8:e0:8c:04:4c:73:e9:32:87:76:5d:2b:80:5e:0e:e3:56:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Oct 19 16:56:07 2025 GMT Not After : Oct 22 22:33:07 2025 GMT Subject: CN=7558799CFBFDA8EC5C724B602D50EDDFE7E2BD4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:8e:76:30:e3:fa:cf:36:d1:12:ff:d9:ff: 3e:3e:51:d4:c3:92:6c:b7:d0:cf:fb:a8:ca:b1:90: 16:11:91:ce:b2:e5:bc:72:1b:d7:d5:04:ed:e4:e3: c0:ae:e9:61:15:5f:76:36:55:02:06:0a:51:0d:7d: 2e:bc:d1:09:8c:de:51:8c:fb:3a:32:19:01:d1:0d: bf:7d:8b:17:76:cf:0f:b8:4d:26:46:23:51:0a:6d: 0e:03:c5:7d:e8:7b:99:83:a7:8b:82:e1:62:a2:b2: 1a:f1:61:7a:7d:53:1b:d9:9d:80:7a:66:4d:f6:a1: 87:ed:28:62:e9:78:e9:29:52:f9:0e:43:c4:1a:f1: 14:a0:3a:7b:2b:0e:14:1a:8a:2a:02:a3:16:e4:33: 15:1d:91:34:51:79:54:77:0d:75:f7:17:de:a3:0a: ea:00:e6:0f:2d:00:34:3a:ef:44:27:5e:88:f3:af: 66:64:d4:be:15:0c:52:16:ce:f0:d7:ff:c2:1f:46: 47:2d:3c:94:d4:aa:a4:4d:4d:dd:91:5e:02:87:76: 0f:6d:4d:6c:1e:92:c3:d6:e7:44:01:22:f5:a7:31: ea:c6:af:64:12:e6:35:07:61:0a:62:e1:72:a4:a3: 5c:fc:9a:58:bf:13:8a:16:05:7b:8b:d5:51:ef:00: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:58:79:9C:FB:FD:A8:EC:5C:72:4B:60:2D:50:ED:DF:E7:E2:BD:4B X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:8f:8f:e6:88:a3:4b:ee:68:34:0a:02:60:b1:0c:75:23: 0d:a5:e8:55:1b:38:68:a0:1a:07:da:cd:71:f6:12:e9:ae:da: f3:b0:34:24:92:51:33:b9:ac:4c:62:0e:79:1e:ef:55:b5:90: 4c:3e:a2:b4:e6:22:50:f6:f9:ad:85:2d:86:76:96:78:ce:6a: 15:3a:56:1e:16:5a:61:77:1b:45:ee:ca:b9:79:7b:a2:96:78: 46:50:b0:8e:9e:28:f2:6b:34:b9:31:04:12:47:53:b4:7c:ce: f2:2c:a0:52:df:56:63:b9:d5:95:7a:b2:5b:21:c9:c2:b4:4a: c2:69:43:35:c7:92:9f:c4:6a:78:90:42:52:25:00:08:3a:5f: f7:44:83:78:bb:b1:a2:0b:9d:87:1a:8b:41:e4:ee:05:de:2c: 8c:80:4a:4e:81:08:f0:96:cd:49:51:00:ae:6e:33:8c:04:cc: 78:40:e5:16:a6:de:ca:f2:b3:38:b6:71:3f:18:04:38:f2:0a: d9:de:ae:1e:95:87:ee:e0:7e:69:16:6f:68:7a:0f:59:71:44: 1d:78:4a:d5:0c:db:af:23:0b:2a:ba:cc:3a:e7:5f:a4:e4:85: 62:c1:91:dc:81:b4:d3:e1:53:bb:9f:65:50:88:a6:84:bb:56: 02:95:09:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfjgjARMc+kyh3ZdK4BeDuNW3hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTEwMTkxNjU2MDdaFw0yNTEwMjIyMjMzMDdaMDMxMTAvBgNV BAMTKDc1NTg3OTlDRkJGREE4RUM1QzcyNEI2MDJENTBFRERGRTdFMkJENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XY52MOP6zzbREv/Z/z4+UdTD kmy30M/7qMqxkBYRkc6y5bxyG9fVBO3k48Cu6WEVX3Y2VQIGClENfS680QmM3lGM +zoyGQHRDb99ixd2zw+4TSZGI1EKbQ4DxX3oe5mDp4uC4WKishrxYXp9UxvZnYB6 Zk32oYftKGLpeOkpUvkOQ8Qa8RSgOnsrDhQaiioCoxbkMxUdkTRReVR3DXX3F96j CuoA5g8tADQ670QnXojzr2Zk1L4VDFIWzvDX/8IfRkctPJTUqqRNTd2RXgKHdg9t TWweksPW50QBIvWnMerGr2QS5jUHYQpi4XKko1z8mli/E4oWBXuL1VHvAOu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdVh5nPv9qOxccktgLVDt3+fivUswHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqMj4/miKNL7mg0CgJgsQx1Iw2l6FUbOGig GgfazXH2Eumu2vOwNCSSUTO5rExiDnke71W1kEw+orTmIlD2+a2FLYZ2lnjOahU6 Vh4WWmF3G0Xuyrl5e6KWeEZQsI6eKPJrNLkxBBJHU7R8zvIsoFLfVmO51ZV6slsh ycK0SsJpQzXHkp/EaniQQlIlAAg6X/dEg3i7saILnYcai0Hk7gXeLIyASk6BCPCW zUlRAK5uM4wEzHhA5Ram3sryszi2cT8YBDjyCtnerh6Vh+7gfmkWb2h6D1lxRB14 StUM268jCyq6zDrnX6TkhWLBkdyBtNPhU7ufZVCIpoS7VgKVCT0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:25:30 2025 by rpki-client