$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: V+cElZYbGvM4zIsSqwjxH88BduQpTLytFmq8l3NYtEw= Subject key identifier: 76:1A:E7:36:B4:C5:1A:61:59:99:96:DC:33:FE:CF:5A:DA:6C:C8:D4 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 436D0414892FCB6CAEF83AE10CAEB5A7E90F65B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: B9 Signing time: Sat 18 Oct 2025 08:51:21 +0000 Manifest this update: Sat 18 Oct 2025 08:46:21 +0000 Manifest next update: Tue 21 Oct 2025 13:34:21 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: lbpLo63dXmQfyaIGz9G8nVAgqPlr7F16mw31pYcdKG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6d:04:14:89:2f:cb:6c:ae:f8:3a:e1:0c:ae:b5:a7:e9:0f:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Oct 18 08:46:21 2025 GMT Not After : Oct 21 13:34:21 2025 GMT Subject: CN=761AE736B4C51A61599996DC33FECF5ADA6CC8D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:b3:53:5e:fb:32:4e:dd:1a:47:9c:df:51: 8f:56:09:52:02:5c:1b:98:32:68:d9:d8:47:5b:93: 6f:6f:cd:1c:66:17:65:c5:0e:34:8c:56:26:d3:7d: 99:71:9f:7d:6f:80:d4:97:b3:fa:3c:ec:d4:54:b0: 52:34:6a:3a:af:8b:fe:16:d3:7c:5c:87:45:21:29: 58:38:d9:a6:18:de:af:67:2c:04:18:07:af:61:2f: ab:5b:eb:63:b9:9a:68:9b:65:63:3a:ef:3d:9a:98: 39:ad:05:bd:4e:da:77:80:14:13:78:0a:05:d5:b2: b5:52:74:9c:14:2a:90:3f:29:cd:72:2d:0f:a3:1b: 1f:9a:6e:45:55:2f:a3:e3:0f:e8:a7:f6:92:d0:6c: aa:b3:22:69:1b:6c:cc:af:73:0b:4b:9c:db:49:c6: 45:65:14:df:a2:d5:0c:bd:ad:2b:83:2e:09:1b:58: 70:51:4c:1c:47:95:60:a9:9a:75:0c:a8:53:9f:a9: 86:2c:71:a4:da:63:2f:82:d0:72:69:1e:17:07:77: 8b:aa:fe:00:c8:cf:77:9c:a3:54:43:7c:7a:ee:b4: 3d:17:17:84:45:0a:d5:46:14:88:88:f0:44:b7:1c: d5:6c:4b:94:3d:6f:f2:8d:18:de:39:95:5b:77:08: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:E7:36:B4:C5:1A:61:59:99:96:DC:33:FE:CF:5A:DA:6C:C8:D4 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:a9:a8:02:e9:03:6d:c1:2d:76:dc:b6:67:4e:51:13:f8: 31:82:0e:97:89:29:bc:bd:0e:c6:85:73:94:e8:d2:49:55:29: 8d:fb:01:fa:86:a9:67:98:06:9b:b7:81:ee:06:f6:a5:5a:d6: 21:2a:87:c2:ec:a4:fa:6a:8e:34:b7:99:04:07:e4:8a:06:f6: 33:80:35:09:4c:3e:49:ca:eb:2f:37:a1:1b:27:11:71:80:7b: b9:2d:88:1e:f1:f6:fc:29:da:00:11:28:90:74:53:44:a9:ec: 37:7a:14:0d:65:b3:69:22:88:40:34:8a:58:ff:c6:27:d4:24: 3c:67:07:c2:0b:72:cc:5b:e3:07:5f:58:5d:4d:e9:cf:8a:c2: 41:90:c4:b2:6d:ef:91:7d:76:b8:91:21:34:c0:93:39:eb:a8: 29:5b:c6:fe:67:b3:7d:e2:74:e3:8a:50:da:32:45:31:3e:b6: 9f:bb:b9:93:a3:7a:52:4d:e7:77:c5:01:72:6a:04:02:fd:18: b8:db:b7:c3:87:53:87:8f:4b:93:09:b6:c1:b2:4b:92:92:1a: 1c:ec:50:6b:93:10:34:ef:09:d4:57:98:53:82:80:88:5e:eb: 50:0e:13:2e:62:66:ab:64:03:73:62:5e:1b:0f:94:aa:5a:47: 24:8c:4f:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ20EFIkvy2yu+DrhDK61p+kPZbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTEwMTgwODQ2MjFaFw0yNTEwMjExMzM0MjFaMDMxMTAvBgNV BAMTKDc2MUFFNzM2QjRDNTFBNjE1OTk5OTZEQzMzRkVDRjVBREE2Q0M4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVbNTXvsyTt0aR5zfUY9WCVIC XBuYMmjZ2Edbk29vzRxmF2XFDjSMVibTfZlxn31vgNSXs/o87NRUsFI0ajqvi/4W 03xch0UhKVg42aYY3q9nLAQYB69hL6tb62O5mmibZWM67z2amDmtBb1O2neAFBN4 CgXVsrVSdJwUKpA/Kc1yLQ+jGx+abkVVL6PjD+in9pLQbKqzImkbbMyvcwtLnNtJ xkVlFN+i1Qy9rSuDLgkbWHBRTBxHlWCpmnUMqFOfqYYscaTaYy+C0HJpHhcHd4uq /gDIz3eco1RDfHrutD0XF4RFCtVGFIiI8ES3HNVsS5Q9b/KNGN45lVt3CEiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhrnNrTFGmFZmZbcM/7PWtpsyNQwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE/qagC6QNtwS123LZnTlET+DGCDpeJKby9 DsaFc5To0klVKY37AfqGqWeYBpu3ge4G9qVa1iEqh8LspPpqjjS3mQQH5IoG9jOA NQlMPknK6y83oRsnEXGAe7ktiB7x9vwp2gARKJB0U0Sp7Dd6FA1ls2kiiEA0ilj/ xifUJDxnB8ILcsxb4wdfWF1N6c+KwkGQxLJt75F9driRITTAkznrqClbxv5ns33i dOOKUNoyRTE+tp+7uZOjelJN53fFAXJqBAL9GLjbt8OHU4ePS5MJtsGyS5KSGhzs UGuTEDTvCdRXmFOCgIhe61AOEy5iZqtkA3NiXhsPlKpaRySMTzU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:19 2025 by rpki-client