$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: qWcst6ZLP4p638uqsaDRFo+bS3OL8kSZbWeNsVs3cVY= Subject key identifier: C8:82:8E:40:95:39:C4:09:2D:9A:D4:11:DD:F8:63:59:8F:F7:63:34 Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 64F51365D44515B12CAA25290EFE403DF6719575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: C7 Signing time: Mon 20 Oct 2025 05:11:09 +0000 Manifest this update: Mon 20 Oct 2025 05:06:09 +0000 Manifest next update: Thu 23 Oct 2025 16:21:09 +0000 Files and hashes: 1: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: YJUJaoZ5VSRa8qugRrlEazUA9f4DUSenAKrFJLSJyks=) 2: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f5:13:65:d4:45:15:b1:2c:aa:25:29:0e:fe:40:3d:f6:71:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Oct 20 05:06:09 2025 GMT Not After : Oct 23 16:21:09 2025 GMT Subject: CN=C8828E409539C4092D9AD411DDF863598FF76334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:2e:bd:02:10:e4:06:c4:8d:16:b9:ea:63: d4:54:f0:7e:71:6e:1a:b5:c3:58:8c:f6:94:4b:7f: a9:0a:e6:90:13:16:e9:c5:63:be:a4:9c:8c:ce:18: 6b:03:2f:c5:25:2d:5d:ad:e3:31:dc:93:a7:d1:e0: 20:54:03:32:55:14:a4:c7:86:41:db:77:53:96:66: c7:73:85:bd:da:08:fa:6f:92:39:cd:35:c7:4e:86: 93:86:66:08:e0:19:2e:65:9b:2b:2b:70:6a:f7:a2: e5:ea:14:10:23:c9:f9:98:95:74:2a:26:cf:a0:60: db:2f:ce:d2:ce:7d:23:51:d8:01:d3:59:ad:87:db: 8f:4f:a9:ba:a0:27:ac:99:7e:b7:34:0d:8e:60:21: 0a:a7:f7:cf:4f:a0:f3:bd:ad:18:e3:72:23:cc:c0: 78:3d:57:6e:83:3f:70:82:b5:14:92:16:ce:c3:65: 71:a1:26:2f:de:df:e4:b5:4e:ae:42:68:3f:f5:f3: ee:0f:61:12:74:4b:d3:53:39:a8:06:d4:b9:2f:e4: d3:8e:27:04:52:95:42:f0:b5:3d:e6:d8:5e:31:c1: a0:00:33:8f:a7:dd:cf:a4:74:33:73:1d:97:25:97: 72:6a:39:6f:e3:bb:0c:33:19:0b:1f:e2:99:98:00: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:82:8E:40:95:39:C4:09:2D:9A:D4:11:DD:F8:63:59:8F:F7:63:34 X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ee:e6:b9:6d:14:32:e6:0b:3b:0a:27:75:7e:99:4e:15:20: 14:22:b3:97:04:40:04:d8:ab:fe:49:b0:84:66:d3:e3:7f:6c: 38:1b:76:f1:a1:17:b5:d3:23:33:70:0a:22:5f:2b:e0:0a:c7: bf:6a:40:ae:9d:67:d2:c5:7f:30:70:7a:34:cf:43:13:c2:f8: 38:93:9d:81:6f:ab:a0:6d:1e:de:59:1e:b8:22:ae:67:62:82: ed:0d:42:1b:9f:33:c4:f9:92:5b:3b:6a:b6:d4:97:43:1f:37: a1:16:99:28:e1:5e:71:32:2c:01:60:5a:c0:2d:ca:97:76:f3: bd:7a:a7:e4:08:f6:ba:11:74:28:f6:f7:a6:c4:90:76:1d:bc: 7c:29:b0:88:f7:71:6b:75:2d:4d:a4:ab:c2:7a:9e:d1:a2:c0: af:76:09:f3:90:ac:04:47:5f:2c:a6:b6:46:d6:f2:29:bc:cb: ce:e2:3a:10:b2:42:1b:47:f5:88:3f:7b:4b:bb:64:43:f5:5b: 9c:45:6d:b9:fc:43:f4:7d:a4:23:d5:ab:d5:27:f7:20:d4:d4: d1:f8:af:c1:04:09:f3:72:9f:18:44:f2:4f:c5:8b:c1:d5:5d: 96:d5:c3:3b:2a:0f:42:29:a0:89:df:d0:78:29:f8:84:e0:97: 3e:cc:14:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPUTZdRFFbEsqiUpDv5APfZxlXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTEwMjAwNTA2MDlaFw0yNTEwMjMxNjIxMDlaMDMxMTAvBgNV BAMTKEM4ODI4RTQwOTUzOUM0MDkyRDlBRDQxMURERjg2MzU5OEZGNzYzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwy69AhDkBsSNFrnqY9RU8H5x bhq1w1iM9pRLf6kK5pATFunFY76knIzOGGsDL8UlLV2t4zHck6fR4CBUAzJVFKTH hkHbd1OWZsdzhb3aCPpvkjnNNcdOhpOGZgjgGS5lmysrcGr3ouXqFBAjyfmYlXQq Js+gYNsvztLOfSNR2AHTWa2H249PqbqgJ6yZfrc0DY5gIQqn989PoPO9rRjjciPM wHg9V26DP3CCtRSSFs7DZXGhJi/e3+S1Tq5CaD/18+4PYRJ0S9NTOagG1Lkv5NOO JwRSlULwtT3m2F4xwaAAM4+n3c+kdDNzHZcll3JqOW/juwwzGQsf4pmYANBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIKOQJU5xAktmtQR3fhjWY/3YzQwHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHu5rltFDLmCzsKJ3V+mU4VIBQis5cEQATY q/5JsIRm0+N/bDgbdvGhF7XTIzNwCiJfK+AKx79qQK6dZ9LFfzBwejTPQxPC+DiT nYFvq6BtHt5ZHrgirmdigu0NQhufM8T5kls7arbUl0MfN6EWmSjhXnEyLAFgWsAt ypd28716p+QI9roRdCj296bEkHYdvHwpsIj3cWt1LU2kq8J6ntGiwK92CfOQrARH XyymtkbW8im8y87iOhCyQhtH9Yg/e0u7ZEP1W5xFbbn8Q/R9pCPVq9Un9yDU1NH4 r8EECfNynxhE8k/Fi8HVXZbVwzsqD0IpoInf0Hgp+ITglz7MFP0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:18 2025 by rpki-client