$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: 4R66oxEySN5oJv04CQfH3eepgMQGUdJuyN88ZYCNmMc= Subject key identifier: 21:DC:57:DC:96:AD:2C:6C:9E:41:43:A9:47:B5:D3:90:EE:E9:06:40 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 58BD8D8E6642105D5EFEE2A4E768B6D5FE662FED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: D8 Signing time: Sat 18 Oct 2025 23:00:37 +0000 Manifest this update: Sat 18 Oct 2025 22:55:37 +0000 Manifest next update: Wed 22 Oct 2025 03:07:37 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: xBS+NjNmgAEJguzJaAtFneJAgv3MsBQq36VbM/x7DMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bd:8d:8e:66:42:10:5d:5e:fe:e2:a4:e7:68:b6:d5:fe:66:2f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Oct 18 22:55:37 2025 GMT Not After : Oct 22 03:07:37 2025 GMT Subject: CN=21DC57DC96AD2C6C9E4143A947B5D390EEE90640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:df:3e:52:8a:30:90:37:48:93:16:9f:b8: 44:25:35:a8:6f:80:cd:d1:cc:90:7e:cc:62:1c:93: f6:51:38:ee:34:21:56:3e:95:7b:41:4e:20:c8:1e: fc:aa:71:80:3d:d8:da:d2:01:8e:4c:e4:e4:9d:8d: 79:5d:6d:bd:6e:55:f9:aa:61:8e:5f:b4:aa:06:1f: aa:57:e3:d0:d7:a6:4a:9a:3b:e4:a7:85:97:88:22: 79:2d:bf:f0:17:32:f9:fe:13:f0:cf:24:da:3d:f5: 00:40:e9:ea:01:45:72:f1:b0:3f:cb:6f:46:38:8c: 4c:93:2d:63:ab:c9:69:db:cb:21:7f:fb:50:21:83: 61:b5:79:19:9e:4d:04:50:74:e9:5c:17:85:62:71: 9a:7f:86:ce:48:d3:e8:6f:47:33:be:8a:86:9e:c7: 3d:2d:6b:70:34:f5:1c:ba:5d:2f:8e:51:f7:26:bb: 70:c6:08:eb:94:61:22:4f:3d:f1:37:77:f9:c8:6a: 09:82:fa:97:0e:e3:5c:b7:fe:98:59:dd:19:7e:61: 8d:5d:8f:8e:87:00:c9:3a:78:10:99:cc:82:35:9e: be:a1:e6:28:93:4e:fa:77:79:99:af:b6:c6:77:cb: 92:59:3e:52:d1:03:89:d6:da:16:d4:ab:88:c2:2b: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:57:DC:96:AD:2C:6C:9E:41:43:A9:47:B5:D3:90:EE:E9:06:40 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2a:33:8b:0c:e3:4c:a1:f2:49:79:9c:b1:c0:9b:25:14:7a: 19:8d:31:3c:26:4e:18:55:5e:3e:8a:48:e0:f7:cb:d1:d0:a1: 57:ba:dd:88:7b:06:78:41:1d:13:fb:11:dd:d0:70:0e:3f:e5: 18:ff:08:07:0e:e8:05:2e:f6:22:ec:75:29:71:af:8d:74:d3: 80:e2:88:c9:34:b8:62:79:8d:bd:8a:e7:9b:0f:be:fd:cf:5d: 74:b2:cf:34:08:8c:c3:c1:55:11:a0:ba:9e:9f:32:d8:81:22: 7a:f7:7b:af:47:00:1f:bd:f6:eb:f7:6e:b0:fc:bc:70:e1:b4: a7:d9:38:1e:d9:35:91:d6:f2:16:cd:d2:40:2e:26:de:c5:07: 48:d8:5c:c5:05:6a:cf:37:97:df:8a:61:41:76:8a:fa:5d:db: 82:aa:57:4e:59:04:20:f7:d5:4a:e7:47:a6:2f:c3:6a:a8:65: 0b:11:c7:a9:b9:82:41:10:0c:72:b0:97:32:5c:46:fa:67:b6: d7:22:69:ff:16:10:e6:8d:f9:a4:76:57:2a:cb:f2:b7:ac:8c: be:85:a8:06:80:9b:b8:99:c8:a9:9a:db:3f:8f:1e:4b:41:c5: 57:d1:f4:8a:a7:7d:84:a2:4b:ef:4b:7e:6c:fd:a8:ef:6d:6a: 47:b0:71:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWL2NjmZCEF1e/uKk52i21f5mL+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTEwMTgyMjU1MzdaFw0yNTEwMjIwMzA3MzdaMDMxMTAvBgNV BAMTKDIxREM1N0RDOTZBRDJDNkM5RTQxNDNBOTQ3QjVEMzkwRUVFOTA2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJt8+UoowkDdIkxafuEQlNahv gM3RzJB+zGIck/ZROO40IVY+lXtBTiDIHvyqcYA92NrSAY5M5OSdjXldbb1uVfmq YY5ftKoGH6pX49DXpkqaO+SnhZeIInktv/AXMvn+E/DPJNo99QBA6eoBRXLxsD/L b0Y4jEyTLWOryWnbyyF/+1Ahg2G1eRmeTQRQdOlcF4VicZp/hs5I0+hvRzO+ioae xz0ta3A09Ry6XS+OUfcmu3DGCOuUYSJPPfE3d/nIagmC+pcO41y3/phZ3Rl+YY1d j46HAMk6eBCZzII1nr6h5iiTTvp3eZmvtsZ3y5JZPlLRA4nW2hbUq4jCK7t9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdxX3JatLGyeQUOpR7XTkO7pBkAwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4qM4sM40yh8kl5nLHAmyUUehmNMTwmThhV Xj6KSOD3y9HQoVe63Yh7BnhBHRP7Ed3QcA4/5Rj/CAcO6AUu9iLsdSlxr41004Di iMk0uGJ5jb2K55sPvv3PXXSyzzQIjMPBVRGgup6fMtiBInr3e69HAB+99uv3brD8 vHDhtKfZOB7ZNZHW8hbN0kAuJt7FB0jYXMUFas83l9+KYUF2ivpd24KqV05ZBCD3 1UrnR6Yvw2qoZQsRx6m5gkEQDHKwlzJcRvpnttciaf8WEOaN+aR2VyrL8resjL6F qAaAm7iZyKma2z+PHktBxVfR9IqnfYSiS+9Lfmz9qO9takewcb8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:29 2025 by rpki-client