$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: 2ANL9fHBC2/MhSBfk8gEWAnB+YIPeJF0MvdoGhnUYj4= Subject key identifier: 33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 1686A0E49F9ADE1323CB60BAAC47138AD11F0660 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0211 Signing time: Mon 20 Oct 2025 15:21:51 +0000 Manifest this update: Mon 20 Oct 2025 15:16:50 +0000 Manifest next update: Fri 24 Oct 2025 02:41:50 +0000 Files and hashes: 1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 2: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 3: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 4: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 5: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 7: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 8: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: VlqU+vZhYjQZF1JZPdWoo7tkxRBPwM7qc4jvLpSlRqU=) 9: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 10: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 11: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 12: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) 15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 16: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 17: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:86:a0:e4:9f:9a:de:13:23:cb:60:ba:ac:47:13:8a:d1:1f:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Oct 20 15:16:50 2025 GMT Not After : Oct 24 02:41:50 2025 GMT Subject: CN=33F21959967D77CEF32D9303E67777CB98F68285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:ec:7a:d8:8f:57:20:3a:dc:5a:ce:8f:23: ca:d4:72:5f:97:f1:86:ae:80:24:fe:f7:cd:3c:a3: d9:60:f3:8e:5b:b1:78:c0:57:4d:5d:8d:7a:f6:99: 6c:08:7a:99:e7:e9:f9:a5:6e:43:30:5c:b1:f7:24: 42:fe:e9:b3:4e:60:78:ff:7d:7a:0f:3e:0c:fe:16: ca:a6:76:bd:51:bc:f1:9c:5a:23:07:81:e8:b8:08: cf:ed:c9:bf:7e:d1:5a:e1:d8:20:a8:c9:30:ba:87: 63:cc:32:bc:64:b4:e2:d1:d4:00:b5:75:5c:a6:bd: 70:ba:94:bd:17:74:d4:54:20:79:61:1d:6b:55:53: f5:26:44:bd:b0:d3:c7:12:08:cb:dd:70:c1:23:79: d2:e2:fd:f5:bc:2f:d6:9c:82:c0:38:fb:13:46:c8: 09:05:b9:1c:33:98:b1:8d:9e:69:f6:d2:3c:56:7d: 5b:3f:8e:09:07:a3:df:0c:77:d7:58:dc:f9:78:84: 85:e6:5e:98:b7:33:00:8b:dc:a7:6c:f6:f9:1d:9e: 71:f4:a1:81:7b:f5:8b:43:f5:95:3e:e0:05:9c:d9: d4:44:ea:77:a3:20:3e:6f:e9:5c:99:9d:d1:b5:aa: a9:78:88:de:14:62:55:78:e2:97:0b:59:2b:fe:0e: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:00:52:c8:8e:09:94:b1:e6:c6:d2:17:e2:dd:99:71:4b:11: b2:32:66:60:d5:58:06:21:4c:e8:d4:67:62:2a:0d:bb:00:7b: 6f:37:e2:81:37:03:29:b3:c0:8c:81:c0:12:21:0d:80:e7:68: 27:bf:72:70:84:1d:8b:34:16:a3:ac:a8:85:3e:91:b7:d5:cc: 93:80:af:cf:de:1e:48:cc:fc:f8:b1:71:50:7b:c4:94:f4:44: b5:46:4b:ea:e6:ca:e9:09:85:34:61:68:16:c5:2d:2c:73:cb: af:4c:a8:41:86:72:4b:0a:3a:16:22:cf:95:0a:b7:50:71:0b: 1f:c2:cc:3b:8c:80:fd:d4:a5:b0:c9:4a:06:1e:c7:06:b9:c8: 39:f8:b7:bf:8d:73:8c:f4:ef:a9:eb:9e:a1:dc:3c:48:d2:d1: 93:89:1a:b9:a5:43:e7:20:18:51:e1:65:ee:b1:ab:60:28:9e: f1:5c:45:c0:e4:5c:95:df:b5:a5:87:d5:9f:0d:2d:7c:18:24: a5:09:d5:03:db:64:a4:46:22:4e:67:57:e1:eb:fb:f0:41:69: 2a:39:1f:37:89:e3:ad:53:cb:c6:de:d3:0c:45:84:6f:8c:5d: 97:5a:6f:0f:ce:7d:10:9d:e7:b7:cf:97:44:d7:99:20:29:20: c6:15:8c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoag5J+a3hMjy2C6rEcTitEfBmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTEwMjAxNTE2NTBaFw0yNTEwMjQwMjQxNTBaMDMxMTAvBgNV BAMTKDMzRjIxOTU5OTY3RDc3Q0VGMzJEOTMwM0U2Nzc3N0NCOThGNjgyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjux62I9XIDrcWs6PI8rUcl+X 8YaugCT+9808o9lg845bsXjAV01djXr2mWwIepnn6fmlbkMwXLH3JEL+6bNOYHj/ fXoPPgz+Fsqmdr1RvPGcWiMHgei4CM/tyb9+0Vrh2CCoyTC6h2PMMrxktOLR1AC1 dVymvXC6lL0XdNRUIHlhHWtVU/UmRL2w08cSCMvdcMEjedLi/fW8L9acgsA4+xNG yAkFuRwzmLGNnmn20jxWfVs/jgkHo98Md9dY3Pl4hIXmXpi3MwCL3Kds9vkdnnH0 oYF79YtD9ZU+4AWc2dRE6nejID5v6VyZndG1qql4iN4UYlV44pcLWSv+DnI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/IZWZZ9d87zLZMD5nd3y5j2goUwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcAUsiOCZSx5sbSF+LdmXFLEbIyZmDVWAYh TOjUZ2IqDbsAe2834oE3AymzwIyBwBIhDYDnaCe/cnCEHYs0FqOsqIU+kbfVzJOA r8/eHkjM/PixcVB7xJT0RLVGS+rmyukJhTRhaBbFLSxzy69MqEGGcksKOhYiz5UK t1BxCx/CzDuMgP3UpbDJSgYexwa5yDn4t7+Nc4z076nrnqHcPEjS0ZOJGrmlQ+cg GFHhZe6xq2AonvFcRcDkXJXftaWH1Z8NLXwYJKUJ1QPbZKRGIk5nV+Hr+/BBaSo5 HzeJ461Ty8be0wxFhG+MXZdabw/OfRCd57fPl0TXmSApIMYVjOM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:43 2025 by rpki-client