$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: ZqmtpdBT/DhaYkHbqjmZLQvWqybm/FTuY1eFzg9SiBU= Subject key identifier: 73:EF:5D:74:68:9C:05:E1:BE:AE:1E:2B:A7:49:2E:81:18:7D:9F:D8 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 3CAC68795F4DC1322611A7F8B3FB1FB2BB83752A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 09:00:01 +0000 Manifest this update: Sun 19 Oct 2025 08:55:01 +0000 Manifest next update: Wed 22 Oct 2025 11:03:01 +0000 Files and hashes: 1: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: th40Nv6DgdbcAhRRSrJWAzvIKOZQuqdJbcof2KWCSQ8=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ac:68:79:5f:4d:c1:32:26:11:a7:f8:b3:fb:1f:b2:bb:83:75:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Oct 19 08:55:01 2025 GMT Not After : Oct 22 11:03:01 2025 GMT Subject: CN=73EF5D74689C05E1BEAE1E2BA7492E81187D9FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:6d:6d:82:49:e8:e8:24:29:e4:f8:21:8c: 4d:10:1e:10:4f:98:2b:25:fe:61:54:b2:4c:ca:05: 5f:f9:f3:03:a0:d4:3a:f1:27:4f:6e:fa:a2:dd:ca: a0:4d:80:53:7c:b8:9f:b1:06:27:b8:75:63:95:1d: cf:17:67:0d:74:c9:59:27:68:a0:36:cc:a2:f9:e1: f3:cd:b8:b3:94:cf:7f:ea:ef:61:92:2e:88:ab:21: ff:5c:38:e4:a2:62:22:0b:f1:c5:64:58:18:23:c5: b8:98:0d:72:52:8c:04:c4:fa:85:a9:30:ec:cf:76: 65:a0:3a:a8:23:f4:14:98:de:71:15:d8:27:a5:49: 28:3e:61:87:59:2b:9c:37:77:37:f7:69:a3:00:e6: 2e:a0:13:84:46:e9:4b:5a:64:6e:f9:a3:a6:ff:58: df:16:3c:c9:8c:e6:74:2f:22:f6:aa:cd:b6:ea:c4: 1f:a8:70:ff:c4:ac:6d:99:0f:2c:72:e8:34:31:18: 28:02:e2:93:f8:0a:9e:e9:ae:a3:cd:61:3f:02:07: 49:41:d2:69:af:8e:b2:0a:ca:72:32:bf:18:c6:5a: 2e:e2:01:91:48:5b:34:e0:2e:2e:03:f0:1e:f0:1b: f8:31:d6:9f:c9:cb:b1:33:c4:fc:59:c5:11:e8:57: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:5D:74:68:9C:05:E1:BE:AE:1E:2B:A7:49:2E:81:18:7D:9F:D8 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:24:15:f8:16:c8:6c:63:94:70:f3:05:cd:98:b3:1b:d2:8c: 91:89:d1:35:e3:8d:b0:29:f3:42:38:b4:bb:0a:38:0b:c5:d9: 3d:f6:a6:99:48:f4:c8:74:aa:dc:bb:1f:c9:e6:16:a0:ac:14: 6a:00:2b:9d:6d:75:61:62:eb:88:73:08:7d:9d:23:87:93:14: bc:d1:62:ac:6f:80:17:1c:b5:91:66:46:e8:38:e9:16:45:ed: 1a:e9:a2:fd:d7:53:03:76:3d:c1:b9:f6:b0:96:8c:11:49:7f: fe:9b:85:3b:de:a7:22:bc:6f:e0:df:5a:46:fb:3e:ba:9c:09: 16:df:65:f9:58:2a:21:14:56:07:2f:f0:6b:3e:d4:0e:61:7d: 02:96:4d:64:dc:de:65:13:12:8d:e8:cc:a1:c2:fb:15:9e:23: b3:7d:49:14:d4:09:6c:c6:ca:39:42:22:3b:f7:b4:50:8a:64: 2c:5b:67:88:5a:fb:79:5e:dc:2e:2b:92:75:1b:de:ff:64:23: 3a:35:52:67:0f:25:07:2e:31:8b:10:4a:5b:8d:92:87:cd:ad: 34:fa:25:1f:c6:e2:6d:e9:a9:7e:06:fe:56:e3:df:bd:09:c5: 50:f7:13:0c:3f:b2:60:b1:6b:32:da:bb:5f:73:ea:96:1d:4d: 3b:38:16:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKxoeV9NwTImEaf4s/sfsruDdSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTEwMTkwODU1MDFaFw0yNTEwMjIxMTAzMDFaMDMxMTAvBgNV BAMTKDczRUY1RDc0Njg5QzA1RTFCRUFFMUUyQkE3NDkyRTgxMTg3RDlGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPI21tgkno6CQp5PghjE0QHhBP mCsl/mFUskzKBV/58wOg1DrxJ09u+qLdyqBNgFN8uJ+xBie4dWOVHc8XZw10yVkn aKA2zKL54fPNuLOUz3/q72GSLoirIf9cOOSiYiIL8cVkWBgjxbiYDXJSjATE+oWp MOzPdmWgOqgj9BSY3nEV2CelSSg+YYdZK5w3dzf3aaMA5i6gE4RG6UtaZG75o6b/ WN8WPMmM5nQvIvaqzbbqxB+ocP/ErG2ZDyxy6DQxGCgC4pP4Cp7prqPNYT8CB0lB 0mmvjrIKynIyvxjGWi7iAZFIWzTgLi4D8B7wG/gx1p/Jy7EzxPxZxRHoVx+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+9ddGicBeG+rh4rp0kugRh9n9gwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIkFfgWyGxjlHDzBc2YsxvSjJGJ0TXjjbAp 80I4tLsKOAvF2T32pplI9Mh0qty7H8nmFqCsFGoAK51tdWFi64hzCH2dI4eTFLzR YqxvgBcctZFmRug46RZF7Rrpov3XUwN2PcG59rCWjBFJf/6bhTvepyK8b+DfWkb7 PrqcCRbfZflYKiEUVgcv8Gs+1A5hfQKWTWTc3mUTEo3ozKHC+xWeI7N9SRTUCWzG yjlCIjv3tFCKZCxbZ4ha+3le3C4rknUb3v9kIzo1UmcPJQcuMYsQSluNkofNrTT6 JR/G4m3pqX4G/lbj370JxVD3Eww/smCxazLau19z6pYdTTs4Fkw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:38 2025 by rpki-client