$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: GdqJjN2HEmDZKQVhe6b7F6pWkN96RM0ckowUar93Sdg= Subject key identifier: 68:2A:02:19:BE:D2:12:FD:E1:F7:9B:51:5C:C9:A8:10:93:D2:9F:98 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 49980ECDF167B3A99C78D4A73812EDAD0E3B0172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 038D Signing time: Sun 19 Oct 2025 04:50:53 +0000 Manifest this update: Sun 19 Oct 2025 04:45:53 +0000 Manifest next update: Wed 22 Oct 2025 15:57:53 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: hcTPaQInEw5csRfL86P2W2UQV+inXi9Q9+WHU4UP+sE=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:98:0e:cd:f1:67:b3:a9:9c:78:d4:a7:38:12:ed:ad:0e:3b:01:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Oct 19 04:45:53 2025 GMT Not After : Oct 22 15:57:53 2025 GMT Subject: CN=682A0219BED212FDE1F79B515CC9A81093D29F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:3d:a6:d4:0d:9e:4a:0e:69:f4:1b:0c:31: 1b:e2:9a:4e:89:fb:f4:e6:10:7b:c5:e9:9b:70:0e: ae:d4:7f:8d:aa:43:b5:94:21:06:8b:b3:91:a4:8c: 2b:5e:fe:3a:9c:87:62:c5:29:30:22:8f:3c:07:f5: e9:5c:05:1d:74:cf:fe:3a:fb:8b:c5:bc:80:d7:7d: ee:81:44:3e:4f:bc:8e:1e:60:3e:ba:9b:14:98:c7: 69:bc:c9:dc:5c:c5:70:fb:78:2d:35:7b:05:b6:b6: 72:3b:a0:6e:04:ba:c9:c9:99:f0:65:0a:cb:32:6e: b3:64:a6:7f:7a:a7:96:77:c3:8e:f2:35:3a:1f:9f: 31:4a:0a:03:95:51:73:8e:13:4b:d6:db:56:f6:60: d0:ca:6d:94:f9:5e:47:a0:30:d9:f9:94:0a:98:d1: ef:c8:dd:9f:a5:a8:06:74:58:1e:08:c7:06:aa:c3: ae:5f:99:03:10:03:90:52:62:de:e0:25:b0:dc:85: 54:c2:20:50:6d:ac:8f:99:e3:05:c7:4b:df:ff:f5: a5:76:74:d2:31:c1:16:16:4f:0a:62:57:bf:b1:1c: f1:8e:ef:0d:42:0d:94:cb:a6:ba:0f:cf:bd:c3:2a: 17:70:d9:5c:84:e7:41:47:8b:2f:64:a7:7d:97:ce: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2A:02:19:BE:D2:12:FD:E1:F7:9B:51:5C:C9:A8:10:93:D2:9F:98 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:77:ee:40:9e:0b:68:be:df:70:bc:3e:8c:e0:14:4b:9f: bc:ce:83:a7:db:59:24:8e:2c:6f:e9:04:28:ed:93:e1:51:0f: 5d:72:a4:2f:33:d4:d8:03:36:1c:50:ad:ff:26:f0:56:a3:c9: 43:65:12:70:5c:78:e6:fa:0e:e1:ba:f5:aa:47:f1:30:38:8d: e9:e4:76:b4:32:ab:3c:01:57:86:66:93:e3:cc:eb:fc:e5:ce: d8:9e:62:a3:9f:70:65:d8:f9:81:85:b3:51:8b:dc:b1:84:de: 77:44:6a:2a:46:63:b0:fa:4c:d8:e2:66:42:9b:a3:c2:c3:34: bd:f0:0f:f6:bc:24:27:af:f6:52:a1:4f:e8:e6:1e:2d:f2:3a: 08:93:94:49:3e:72:46:61:95:ef:6e:f6:df:d7:33:45:e0:1a: df:d1:ca:6a:fd:18:9a:07:2e:cb:d4:d7:40:08:61:b9:18:81: 22:4a:b9:43:67:9a:47:ca:05:60:ad:22:c2:cb:57:07:ec:9e: e4:fc:d0:d4:d6:2e:89:ea:0c:43:a4:f0:7f:7b:fa:4a:75:02: 88:0b:6e:a2:cb:d8:86:34:24:b7:72:c0:40:69:55:78:1a:3c: e0:42:80:88:d3:46:d1:e4:50:e4:9c:32:d9:8e:74:b8:6a:bd: 54:54:9e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZgOzfFns6mceNSnOBLtrQ47AXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTEwMTkwNDQ1NTNaFw0yNTEwMjIxNTU3NTNaMDMxMTAvBgNV BAMTKDY4MkEwMjE5QkVEMjEyRkRFMUY3OUI1MTVDQzlBODEwOTNEMjlGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSj2m1A2eSg5p9BsMMRvimk6J +/TmEHvF6ZtwDq7Uf42qQ7WUIQaLs5GkjCte/jqch2LFKTAijzwH9elcBR10z/46 +4vFvIDXfe6BRD5PvI4eYD66mxSYx2m8ydxcxXD7eC01ewW2tnI7oG4EusnJmfBl CssybrNkpn96p5Z3w47yNTofnzFKCgOVUXOOE0vW21b2YNDKbZT5XkegMNn5lAqY 0e/I3Z+lqAZ0WB4Ixwaqw65fmQMQA5BSYt7gJbDchVTCIFBtrI+Z4wXHS9//9aV2 dNIxwRYWTwpiV7+xHPGO7w1CDZTLproPz73DKhdw2VyE50FHiy9kp32XzrnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaCoCGb7SEv3h95tRXMmoEJPSn5gwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl9d+5Angtovt9wvD6M4BRLn7zOg6fbWSSO LG/pBCjtk+FRD11ypC8z1NgDNhxQrf8m8FajyUNlEnBceOb6DuG69apH8TA4jenk drQyqzwBV4Zmk+PM6/zlztieYqOfcGXY+YGFs1GL3LGE3ndEaipGY7D6TNjiZkKb o8LDNL3wD/a8JCev9lKhT+jmHi3yOgiTlEk+ckZhle9u9t/XM0XgGt/Rymr9GJoH LsvU10AIYbkYgSJKuUNnmkfKBWCtIsLLVwfsnuT80NTWLonqDEOk8H97+kp1AogL bqLL2IY0JLdywEBpVXgaPOBCgIjTRtHkUOScMtmOdLhqvVRUniI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:37 2025 by rpki-client