
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json)
Hash identifier: 2ANL9fHBC2/MhSBfk8gEWAnB+YIPeJF0MvdoGhnUYj4=
Subject key identifier: 33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial: 1686A0E49F9ADE1323CB60BAAC47138AD11F0660
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
Manifest number: 0211
Signing time: Mon 20 Oct 2025 15:21:51 +0000
Manifest this update: Mon 20 Oct 2025 15:16:50 +0000
Manifest next update: Fri 24 Oct 2025 02:41:50 +0000
Files and hashes: 1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=)
2: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=)
3: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=)
4: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=)
5: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=)
6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=)
7: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=)
8: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: VlqU+vZhYjQZF1JZPdWoo7tkxRBPwM7qc4jvLpSlRqU=)
9: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=)
10: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=)
11: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=)
12: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=)
13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=)
14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=)
15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=)
16: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=)
17: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 11:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:a0:e4:9f:9a:de:13:23:cb:60:ba:ac:47:13:8a:d1:1f:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Validity
Not Before: Oct 20 15:16:50 2025 GMT
Not After : Oct 24 02:41:50 2025 GMT
Subject: CN=33F21959967D77CEF32D9303E67777CB98F68285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:ec:7a:d8:8f:57:20:3a:dc:5a:ce:8f:23:
ca:d4:72:5f:97:f1:86:ae:80:24:fe:f7:cd:3c:a3:
d9:60:f3:8e:5b:b1:78:c0:57:4d:5d:8d:7a:f6:99:
6c:08:7a:99:e7:e9:f9:a5:6e:43:30:5c:b1:f7:24:
42:fe:e9:b3:4e:60:78:ff:7d:7a:0f:3e:0c:fe:16:
ca:a6:76:bd:51:bc:f1:9c:5a:23:07:81:e8:b8:08:
cf:ed:c9:bf:7e:d1:5a:e1:d8:20:a8:c9:30:ba:87:
63:cc:32:bc:64:b4:e2:d1:d4:00:b5:75:5c:a6:bd:
70:ba:94:bd:17:74:d4:54:20:79:61:1d:6b:55:53:
f5:26:44:bd:b0:d3:c7:12:08:cb:dd:70:c1:23:79:
d2:e2:fd:f5:bc:2f:d6:9c:82:c0:38:fb:13:46:c8:
09:05:b9:1c:33:98:b1:8d:9e:69:f6:d2:3c:56:7d:
5b:3f:8e:09:07:a3:df:0c:77:d7:58:dc:f9:78:84:
85:e6:5e:98:b7:33:00:8b:dc:a7:6c:f6:f9:1d:9e:
71:f4:a1:81:7b:f5:8b:43:f5:95:3e:e0:05:9c:d9:
d4:44:ea:77:a3:20:3e:6f:e9:5c:99:9d:d1:b5:aa:
a9:78:88:de:14:62:55:78:e2:97:0b:59:2b:fe:0e:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85
X509v3 Authority Key Identifier:
keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:52:c8:8e:09:94:b1:e6:c6:d2:17:e2:dd:99:71:4b:11:
b2:32:66:60:d5:58:06:21:4c:e8:d4:67:62:2a:0d:bb:00:7b:
6f:37:e2:81:37:03:29:b3:c0:8c:81:c0:12:21:0d:80:e7:68:
27:bf:72:70:84:1d:8b:34:16:a3:ac:a8:85:3e:91:b7:d5:cc:
93:80:af:cf:de:1e:48:cc:fc:f8:b1:71:50:7b:c4:94:f4:44:
b5:46:4b:ea:e6:ca:e9:09:85:34:61:68:16:c5:2d:2c:73:cb:
af:4c:a8:41:86:72:4b:0a:3a:16:22:cf:95:0a:b7:50:71:0b:
1f:c2:cc:3b:8c:80:fd:d4:a5:b0:c9:4a:06:1e:c7:06:b9:c8:
39:f8:b7:bf:8d:73:8c:f4:ef:a9:eb:9e:a1:dc:3c:48:d2:d1:
93:89:1a:b9:a5:43:e7:20:18:51:e1:65:ee:b1:ab:60:28:9e:
f1:5c:45:c0:e4:5c:95:df:b5:a5:87:d5:9f:0d:2d:7c:18:24:
a5:09:d5:03:db:64:a4:46:22:4e:67:57:e1:eb:fb:f0:41:69:
2a:39:1f:37:89:e3:ad:53:cb:c6:de:d3:0c:45:84:6f:8c:5d:
97:5a:6f:0f:ce:7d:10:9d:e7:b7:cf:97:44:d7:99:20:29:20:
c6:15:8c:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFoag5J+a3hMjy2C6rEcTitEfBmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz
RkJERjY1ODAeFw0yNTEwMjAxNTE2NTBaFw0yNTEwMjQwMjQxNTBaMDMxMTAvBgNV
BAMTKDMzRjIxOTU5OTY3RDc3Q0VGMzJEOTMwM0U2Nzc3N0NCOThGNjgyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjux62I9XIDrcWs6PI8rUcl+X
8YaugCT+9808o9lg845bsXjAV01djXr2mWwIepnn6fmlbkMwXLH3JEL+6bNOYHj/
fXoPPgz+Fsqmdr1RvPGcWiMHgei4CM/tyb9+0Vrh2CCoyTC6h2PMMrxktOLR1AC1
dVymvXC6lL0XdNRUIHlhHWtVU/UmRL2w08cSCMvdcMEjedLi/fW8L9acgsA4+xNG
yAkFuRwzmLGNnmn20jxWfVs/jgkHo98Md9dY3Pl4hIXmXpi3MwCL3Kds9vkdnnH0
oYF79YtD9ZU+4AWc2dRE6nejID5v6VyZndG1qql4iN4UYlV44pcLWSv+DnI/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUM/IZWZZ9d87zLZMD5nd3y5j2goUwHwYDVR0j
BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw
NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE
RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5
ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG
RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJcAUsiOCZSx5sbSF+LdmXFLEbIyZmDVWAYh
TOjUZ2IqDbsAe2834oE3AymzwIyBwBIhDYDnaCe/cnCEHYs0FqOsqIU+kbfVzJOA
r8/eHkjM/PixcVB7xJT0RLVGS+rmyukJhTRhaBbFLSxzy69MqEGGcksKOhYiz5UK
t1BxCx/CzDuMgP3UpbDJSgYexwa5yDn4t7+Nc4z076nrnqHcPEjS0ZOJGrmlQ+cg
GFHhZe6xq2AonvFcRcDkXJXftaWH1Z8NLXwYJKUJ1QPbZKRGIk5nV+Hr+/BBaSo5
HzeJ461Ty8be0wxFhG+MXZdabw/OfRCd57fPl0TXmSApIMYVjOM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:43 2025 by rpki-client