$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: xe6jEBFtUfeSSAL4y8oRw//8Bi97HzX5/R58Y6Wi4WA= Subject key identifier: F4:EC:16:6D:D2:EA:8F:D8:C2:A0:6B:FC:87:F5:C3:51:41:D0:8C:44 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 2D75D01FC2DC98D72F528DC6E38D37D073031969 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02CB Signing time: Sun 19 Oct 2025 14:22:00 +0000 Manifest this update: Sun 19 Oct 2025 14:17:00 +0000 Manifest next update: Wed 22 Oct 2025 18:21:00 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=) 2: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=) 4: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: 5rDsWoLlaCgcXV8zrxcqJYHwSHQ7Wf+kjumcWUJnNd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:75:d0:1f:c2:dc:98:d7:2f:52:8d:c6:e3:8d:37:d0:73:03:19:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Oct 19 14:17:00 2025 GMT Not After : Oct 22 18:21:00 2025 GMT Subject: CN=F4EC166DD2EA8FD8C2A06BFC87F5C35141D08C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:ed:56:10:8c:1c:32:64:fe:27:11:28:e9: 30:ec:e2:fd:46:70:82:40:40:2c:a0:8a:82:e9:a0: 46:97:ff:80:eb:35:05:e8:69:83:bb:5e:48:41:4a: 12:5e:e3:5a:01:3f:a4:37:1b:db:98:8f:2e:54:cb: d0:72:54:19:bf:a4:0f:a7:db:29:aa:18:5c:8f:1b: 33:0a:7a:77:3d:67:f3:8d:ec:8d:26:c7:ad:a3:36: 0d:7b:83:a7:28:67:89:6d:a2:1c:3b:29:44:4e:ca: 58:7e:0c:ac:12:01:3b:4f:c4:88:56:54:b5:c0:aa: ac:fa:66:8c:fc:8a:22:34:96:4c:20:9c:17:a0:4e: 61:19:78:7f:34:97:7a:3c:01:82:ec:18:d4:ff:39: 94:3d:06:21:ac:f4:d5:60:ed:7a:62:1a:73:3a:ae: 80:d6:dc:66:18:2e:69:ab:12:01:3c:2c:5b:10:bf: 80:8f:3b:fc:c4:e5:09:73:95:64:5e:55:fd:04:70: 38:d4:95:2b:21:ca:a8:f5:55:1f:ef:63:2b:fa:39: 8c:a8:15:6e:e2:14:d8:e3:81:b6:e7:a9:26:2b:1c: 6f:47:8d:e5:b6:7c:4f:38:01:9b:16:75:ef:cc:13: c9:77:fb:4a:73:be:fb:24:73:61:c0:1a:4b:a8:35: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EC:16:6D:D2:EA:8F:D8:C2:A0:6B:FC:87:F5:C3:51:41:D0:8C:44 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:82:6b:eb:a0:92:b4:7e:23:46:2f:f3:4c:95:f0:5c:f1:e5: a8:ae:82:fe:7e:91:c6:80:85:90:56:f8:ea:5c:10:56:86:90: 43:bb:b0:20:7c:1f:77:2e:bc:90:d4:a0:db:a9:1c:a2:28:8b: 62:d3:57:4a:ee:a5:dc:a1:70:fc:06:cc:58:27:de:d8:fe:ec: f5:25:50:52:56:4c:3c:da:2a:d9:28:22:ac:ff:11:65:f0:9d: 47:98:66:e7:46:bb:9b:1d:72:5b:08:97:ac:33:3d:ae:d0:18: 8b:a2:a3:80:6d:59:88:b6:64:19:67:c2:16:b2:ef:50:16:eb: bb:a7:0c:05:e2:94:66:a0:72:e0:05:fa:ee:f0:76:16:07:fb: e0:f4:c0:c3:f7:e8:72:04:59:e5:5a:4b:90:f3:9a:c4:72:8c: b1:18:45:42:3e:0e:9c:5a:3a:93:75:8e:1a:9b:ca:93:28:c6: 70:c1:8b:43:d2:aa:38:2d:36:bb:a7:98:17:de:62:d1:ae:58: a8:48:48:0b:0d:f2:e1:53:4b:e7:de:d2:37:99:fa:10:4b:ad: 34:24:3e:37:6c:00:93:16:20:51:90:0a:c4:11:e8:ed:fe:03: 96:96:44:15:0b:ea:11:c9:75:34:a3:e2:e7:0c:78:73:5d:02: a4:16:d6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXXQH8LcmNcvUo3G44030HMDGWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTEwMTkxNDE3MDBaFw0yNTEwMjIxODIxMDBaMDMxMTAvBgNV BAMTKEY0RUMxNjZERDJFQThGRDhDMkEwNkJGQzg3RjVDMzUxNDFEMDhDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvO1WEIwcMmT+JxEo6TDs4v1G cIJAQCygioLpoEaX/4DrNQXoaYO7XkhBShJe41oBP6Q3G9uYjy5Uy9ByVBm/pA+n 2ymqGFyPGzMKenc9Z/ON7I0mx62jNg17g6coZ4ltohw7KUROylh+DKwSATtPxIhW VLXAqqz6Zoz8iiI0lkwgnBegTmEZeH80l3o8AYLsGNT/OZQ9BiGs9NVg7XpiGnM6 roDW3GYYLmmrEgE8LFsQv4CPO/zE5QlzlWReVf0EcDjUlSshyqj1VR/vYyv6OYyo FW7iFNjjgbbnqSYrHG9HjeW2fE84AZsWde/ME8l3+0pzvvskc2HAGkuoNff3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9OwWbdLqj9jCoGv8h/XDUUHQjEQwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKCa+ugkrR+I0Yv80yV8Fzx5aiugv5+kcaA hZBW+OpcEFaGkEO7sCB8H3cuvJDUoNupHKIoi2LTV0rupdyhcPwGzFgn3tj+7PUl UFJWTDzaKtkoIqz/EWXwnUeYZudGu5sdclsIl6wzPa7QGIuio4BtWYi2ZBlnwhay 71AW67unDAXilGagcuAF+u7wdhYH++D0wMP36HIEWeVaS5DzmsRyjLEYRUI+Dpxa OpN1jhqbypMoxnDBi0PSqjgtNrunmBfeYtGuWKhISAsN8uFTS+fe0jeZ+hBLrTQk PjdsAJMWIFGQCsQR6O3+A5aWRBUL6hHJdTSj4ucMeHNdAqQW1vk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:46 2025 by rpki-client