$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: BuIal+0dr2mCsx+8z5fJXKfHdcWZM0FUIH1VcbpX+iM= Subject key identifier: 32:B1:42:02:81:26:F6:09:E4:03:75:7F:A6:01:0A:18:75:0E:37:4A Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 4FA5530F6BF1FE586BC73F94507B3BAE4B09CF66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 16:52:01 +0000 Manifest this update: Sat 18 Oct 2025 16:47:01 +0000 Manifest next update: Tue 21 Oct 2025 18:45:01 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 2: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: pI36m1vNPtiNEZxUuxpLclimaAl/8rJAcP3olBuhlus=) 3: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a5:53:0f:6b:f1:fe:58:6b:c7:3f:94:50:7b:3b:ae:4b:09:cf:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Oct 18 16:47:01 2025 GMT Not After : Oct 21 18:45:01 2025 GMT Subject: CN=32B142028126F609E403757FA6010A18750E374A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:6a:00:2d:b6:22:2a:8b:ac:cd:35:6d:4b: 6e:0f:36:f3:fd:54:aa:e4:3a:78:2e:4a:1d:d7:e6: d5:13:8b:6e:79:88:16:02:b2:ff:59:8a:3b:ec:90: b6:7b:e3:70:d6:d6:a8:3c:2b:c6:f4:a5:3f:0e:89: 3f:7f:89:7c:62:05:26:29:2d:1b:c8:9c:bd:97:93: 54:f3:9f:db:93:31:af:7a:c7:34:e6:8f:a6:e8:ac: 7d:d8:0f:1d:bf:db:f3:43:a0:5d:86:6e:07:c9:46: a4:fd:08:4f:97:00:42:a8:0a:55:e3:86:5f:eb:ea: e3:43:af:c4:3a:20:ca:70:ba:32:fd:f4:04:26:63: 07:6e:d9:79:15:43:f5:09:e4:b5:d1:3e:4e:00:3a: 4f:42:ca:fc:fa:66:00:09:a9:57:22:a4:91:f6:af: ad:23:fc:09:45:1d:32:49:8d:22:7b:a0:0f:a0:e2: 92:94:a4:ce:69:72:38:97:80:70:3b:5c:2a:78:51: d6:cd:29:c9:ea:0b:51:53:0b:58:8a:05:b2:2c:27: 4a:34:9f:20:10:47:ed:ed:88:7f:04:3b:ee:35:1e: b4:90:c2:66:d2:a4:19:fa:19:82:dc:22:81:2a:e0: 2c:ef:ce:c3:95:e4:57:6f:44:a9:d0:dc:55:5e:16: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B1:42:02:81:26:F6:09:E4:03:75:7F:A6:01:0A:18:75:0E:37:4A X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d1:e0:81:12:e4:2a:a7:e7:aa:37:2a:0b:92:9f:94:24:23: 92:96:50:20:43:23:b2:a0:83:82:24:e6:eb:4f:0a:ed:e9:49: ee:d3:7c:5b:5e:0f:4e:aa:69:96:c1:84:d6:35:02:3d:5f:aa: 2c:76:0d:1f:ab:a9:0d:a5:d9:bf:1e:d5:d8:37:a8:10:b4:2a: 5f:16:ca:af:d9:f8:0e:02:8f:92:ec:83:4c:40:48:90:54:81: d5:fe:ed:d3:5c:f8:6b:18:d7:91:8f:c9:c4:86:2c:66:85:b6: 18:1e:c0:4c:a0:c2:3a:c8:df:8d:19:e5:b6:32:dc:58:26:1c: 88:da:f2:20:f0:d6:56:3c:24:2c:ee:95:fb:0d:10:06:5a:27: d3:c1:82:83:d8:05:cb:69:44:78:96:3f:b1:bf:3e:35:46:b7: d5:8a:19:67:68:d2:e6:83:6c:28:4a:e3:cf:3f:d0:61:62:a9: 29:90:57:08:a1:b2:87:73:1d:01:99:97:cb:0a:82:db:86:00: 41:7a:58:1b:35:e6:7f:ca:b4:3b:1c:b3:91:63:58:c1:55:9a: 0f:fe:80:5e:a2:0d:39:3a:80:60:0e:f2:07:4f:2d:e9:04:c4: dc:eb:08:eb:bf:21:76:3d:8d:ff:03:06:53:96:4e:0e:37:af: e7:b0:d7:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6VTD2vx/lhrxz+UUHs7rksJz2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTEwMTgxNjQ3MDFaFw0yNTEwMjExODQ1MDFaMDMxMTAvBgNV BAMTKDMyQjE0MjAyODEyNkY2MDlFNDAzNzU3RkE2MDEwQTE4NzUwRTM3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCGoALbYiKouszTVtS24PNvP9 VKrkOnguSh3X5tUTi255iBYCsv9ZijvskLZ743DW1qg8K8b0pT8OiT9/iXxiBSYp LRvInL2Xk1Tzn9uTMa96xzTmj6borH3YDx2/2/NDoF2GbgfJRqT9CE+XAEKoClXj hl/r6uNDr8Q6IMpwujL99AQmYwdu2XkVQ/UJ5LXRPk4AOk9Cyvz6ZgAJqVcipJH2 r60j/AlFHTJJjSJ7oA+g4pKUpM5pcjiXgHA7XCp4UdbNKcnqC1FTC1iKBbIsJ0o0 nyAQR+3tiH8EO+41HrSQwmbSpBn6GYLcIoEq4CzvzsOV5FdvRKnQ3FVeFrj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrFCAoEm9gnkA3V/pgEKGHUON0owHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/R4IES5Cqn56o3KguSn5QkI5KWUCBDI7Kg g4Ik5utPCu3pSe7TfFteD06qaZbBhNY1Aj1fqix2DR+rqQ2l2b8e1dg3qBC0Kl8W yq/Z+A4Cj5Lsg0xASJBUgdX+7dNc+GsY15GPycSGLGaFthgewEygwjrI340Z5bYy 3FgmHIja8iDw1lY8JCzulfsNEAZaJ9PBgoPYBctpRHiWP7G/PjVGt9WKGWdo0uaD bChK488/0GFiqSmQVwihsodzHQGZl8sKgtuGAEF6WBs15n/KtDscs5FjWMFVmg/+ gF6iDTk6gGAO8gdPLekExNzrCOu/IXY9jf8DBlOWTg43r+ew1yI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:05 2025 by rpki-client