$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: DClA9LOFEV8LskSyomOkPj1HuDeNmsoAapsYWj/uZeQ= Subject key identifier: 29:7E:00:57:D0:CD:05:53:2E:B8:6A:7F:B3:C1:AB:39:D2:99:D0:98 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 2F449FA23D9B54D0A5FC2CEE967BB1C7F72AF785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 031F Signing time: Sat 18 Oct 2025 16:31:41 +0000 Manifest this update: Sat 18 Oct 2025 16:26:41 +0000 Manifest next update: Tue 21 Oct 2025 18:17:41 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 3: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) 4: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: clCkWy8qf5m0b/F6S8cqYirEInB2Y/fN4d02I54L4BQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:44:9f:a2:3d:9b:54:d0:a5:fc:2c:ee:96:7b:b1:c7:f7:2a:f7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Oct 18 16:26:41 2025 GMT Not After : Oct 21 18:17:41 2025 GMT Subject: CN=297E0057D0CD05532EB86A7FB3C1AB39D299D098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:a4:d6:aa:22:d8:b1:28:69:86:f3:38:87: f3:89:01:20:9f:95:2d:3f:9b:cc:2c:d7:87:cf:7d: e0:02:82:3b:db:21:be:a5:6b:6f:af:2d:c9:d8:74: fa:a7:21:2c:13:f5:6f:d7:bf:91:fc:8c:8d:51:c6: 0b:32:7b:15:dd:c8:61:48:29:b8:ec:a7:2d:c8:54: a5:ae:93:19:d4:e7:c1:29:84:e3:47:42:f3:29:e7: 5c:df:ae:af:62:22:e9:71:4f:b8:e4:53:aa:2d:69: fb:c2:18:a4:cb:96:92:0f:5e:36:62:9d:6a:f8:7c: 28:dd:20:7e:de:85:d6:6f:fa:3a:14:ef:cd:16:d0: 6b:55:d1:76:6a:19:23:73:1a:a2:a9:03:56:fa:b8: 81:7a:5c:17:2c:a3:9d:c4:4b:60:aa:f6:97:54:6f: cb:4c:22:ea:f1:1f:5c:7d:1d:85:07:cd:b8:0a:02: f1:df:9d:85:0e:46:7b:df:51:b7:b1:34:c9:27:f9: 94:64:8c:59:87:e1:48:95:c7:3a:62:7e:31:b9:8b: 31:42:0c:6c:c1:8f:71:23:10:26:c1:af:68:7a:42: 3c:08:4a:d0:c4:3c:a1:c4:49:c0:fb:bd:47:e7:50: c3:4e:0c:4f:b5:ae:20:e7:99:d5:a4:5a:d4:72:97: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:00:57:D0:CD:05:53:2E:B8:6A:7F:B3:C1:AB:39:D2:99:D0:98 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:de:c9:7e:e0:5b:93:e6:d6:9b:ad:9e:2d:66:56:b7:8d: 22:70:d1:40:0a:cc:91:6d:c4:fc:6c:02:7f:5b:0d:c2:eb:b8: a4:f0:1c:cf:93:37:8d:00:de:73:54:cc:9e:c4:51:40:bf:d6: 2d:0e:8a:1d:41:0f:70:d0:b4:46:a0:ba:b5:86:12:2f:41:a8: 94:9b:69:f9:eb:0a:d0:fa:22:88:6f:4c:61:7c:92:1b:e2:e9: 46:81:aa:4f:d6:9f:56:2f:63:60:05:e3:71:98:d5:6b:63:fc: 6e:aa:44:59:12:26:a2:4f:51:7b:3d:72:9a:89:94:73:cd:a6: f1:43:d6:f5:7a:8f:a7:5a:38:2b:32:65:2f:08:90:0e:71:ec: 36:5a:7e:e5:05:2c:4d:32:2f:ed:95:30:10:1c:b4:6f:1e:83: bf:2f:c4:b6:55:14:cf:be:52:1e:2e:78:93:03:93:93:ef:af: 4c:d7:85:dd:29:66:37:57:d7:0a:47:5c:78:7f:f3:18:11:25: 99:76:a2:2f:aa:b4:6a:14:d1:ac:c9:04:d4:a5:3f:43:2a:d2: 0b:62:7b:96:93:93:eb:75:f6:72:f4:cb:15:27:43:a4:e1:b2: 9f:16:31:1b:e2:ff:1d:26:39:be:44:d1:bb:ac:ca:97:24:9b: ba:83:00:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0Sfoj2bVNCl/Czulnuxx/cq94UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTEwMTgxNjI2NDFaFw0yNTEwMjExODE3NDFaMDMxMTAvBgNV BAMTKDI5N0UwMDU3RDBDRDA1NTMyRUI4NkE3RkIzQzFBQjM5RDI5OUQwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FKTWqiLYsShphvM4h/OJASCf lS0/m8ws14fPfeACgjvbIb6la2+vLcnYdPqnISwT9W/Xv5H8jI1RxgsyexXdyGFI Kbjspy3IVKWukxnU58EphONHQvMp51zfrq9iIulxT7jkU6otafvCGKTLlpIPXjZi nWr4fCjdIH7ehdZv+joU780W0GtV0XZqGSNzGqKpA1b6uIF6XBcso53ES2Cq9pdU b8tMIurxH1x9HYUHzbgKAvHfnYUORnvfUbexNMkn+ZRkjFmH4UiVxzpifjG5izFC DGzBj3EjECbBr2h6QjwIStDEPKHEScD7vUfnUMNODE+1riDnmdWkWtRylzx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKX4AV9DNBVMuuGp/s8GrOdKZ0JgwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTH3sl+4FuT5tabrZ4tZla3jSJw0UAKzJFt xPxsAn9bDcLruKTwHM+TN40A3nNUzJ7EUUC/1i0Oih1BD3DQtEagurWGEi9BqJSb afnrCtD6IohvTGF8khvi6UaBqk/Wn1YvY2AF43GY1Wtj/G6qRFkSJqJPUXs9cpqJ lHPNpvFD1vV6j6daOCsyZS8IkA5x7DZafuUFLE0yL+2VMBActG8eg78vxLZVFM++ Uh4ueJMDk5Pvr0zXhd0pZjdX1wpHXHh/8xgRJZl2oi+qtGoU0azJBNSlP0Mq0gti e5aTk+t19nL0yxUnQ6Thsp8WMRvi/x0mOb5E0busypckm7qDABE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:52 2025 by rpki-client