$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: U6Pm7KPhzF2wNYEkkGmg9bTfM5/B73DyHJajC+TmRPA= Subject key identifier: DC:F0:B3:36:D5:88:B0:94:F1:DA:B5:88:C9:F6:0D:EA:94:76:97:B4 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 616F556C9CCCF0D524008EEF278B947B49E70AA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 011A Signing time: Mon 20 Oct 2025 17:01:57 +0000 Manifest this update: Mon 20 Oct 2025 16:56:57 +0000 Manifest next update: Fri 24 Oct 2025 01:37:57 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) 2: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: IZ4WWEDU+ZkpyGt5iNZ6jmCfAW5vUeqJL/o+zBaqUhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6f:55:6c:9c:cc:f0:d5:24:00:8e:ef:27:8b:94:7b:49:e7:0a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Oct 20 16:56:57 2025 GMT Not After : Oct 24 01:37:57 2025 GMT Subject: CN=DCF0B336D588B094F1DAB588C9F60DEA947697B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:c7:65:30:fb:66:01:43:d6:17:33:8c:ae: 75:f9:23:79:6c:28:d8:30:5a:34:0d:7a:8f:ae:21: 59:90:50:20:40:f8:7f:cd:97:83:54:bf:e3:46:e5: 2b:52:c3:76:d1:2a:97:72:45:1b:c9:35:eb:4a:bd: 2c:7a:d6:ea:d7:f2:8f:53:ad:78:c8:a1:4f:d0:48: ad:1a:e9:f7:5d:26:42:86:7d:8e:ba:17:07:7b:7e: d1:38:8d:d2:6c:9c:d1:7c:57:2c:72:62:f8:47:77: a4:58:85:84:db:7c:93:69:bf:5d:a4:e3:73:72:e1: 6e:67:25:88:c3:73:1e:41:6d:0d:d2:f5:39:ac:de: 4c:30:ea:2f:b5:9f:17:d8:c5:db:b1:1f:ea:9a:9f: d2:37:f1:bb:8d:e5:c7:46:2a:73:d7:87:37:ca:e6: d4:01:7e:cc:66:29:62:44:13:c2:89:9a:75:75:7e: 10:03:22:e5:c7:3d:b4:19:43:9c:7b:cd:52:39:d3: 70:77:36:34:da:fe:52:64:cb:65:b8:a8:1f:52:36: 1b:ef:fb:a9:1a:79:3e:fa:22:78:00:95:7b:92:af: db:9c:bf:93:7a:5e:f6:c0:82:df:bb:5a:8b:25:72: 09:9b:76:0d:32:49:d8:70:1c:e4:11:90:01:47:2e: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:B3:36:D5:88:B0:94:F1:DA:B5:88:C9:F6:0D:EA:94:76:97:B4 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c1:99:d8:b8:4d:42:49:c3:22:40:46:05:77:40:9f:d2:7c: 58:61:c0:3c:2b:09:68:67:ff:b4:aa:3d:64:f0:42:6b:0a:5d: 8b:73:4d:25:bb:15:e9:6a:40:e2:f6:d8:d1:80:13:6d:92:77: ee:7e:35:1a:0e:13:10:e5:94:34:c8:bb:9b:1b:a5:98:77:f3: 9d:db:ed:ee:30:83:3b:cb:f3:ef:cd:f7:8a:b9:4a:c4:a3:1b: 38:f9:7e:00:19:6b:c7:03:e2:90:e5:9c:84:e9:3e:e1:38:96: 62:b3:a4:9a:a9:39:ab:05:9e:4b:59:b3:c6:04:2a:eb:6b:fc: e2:a9:62:4e:ce:a4:f5:fd:53:e6:a4:dc:b3:f0:24:5e:07:0f: 75:2c:67:06:cb:f2:00:99:9b:68:a8:c5:0b:5a:08:c8:1e:32: 78:38:5e:47:e7:97:6b:30:88:6f:57:8f:60:32:6c:08:99:bc: cd:d0:23:a0:2c:cd:a0:bb:92:6b:11:5a:9c:04:47:8c:96:94: d9:a1:2b:35:b0:41:c6:65:5b:91:8f:66:50:c2:82:ce:e3:15: e3:55:da:78:fc:03:c2:2d:4a:05:cd:5b:93:dd:f9:cf:12:37: 13:ca:ef:c3:fb:c7:4a:3b:ed:b9:85:31:89:66:b3:81:c6:c7: 92:07:8f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYW9VbJzM8NUkAI7vJ4uUe0nnCqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTEwMjAxNjU2NTdaFw0yNTEwMjQwMTM3NTdaMDMxMTAvBgNV BAMTKERDRjBCMzM2RDU4OEIwOTRGMURBQjU4OEM5RjYwREVBOTQ3Njk3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxMdlMPtmAUPWFzOMrnX5I3ls KNgwWjQNeo+uIVmQUCBA+H/Nl4NUv+NG5StSw3bRKpdyRRvJNetKvSx61urX8o9T rXjIoU/QSK0a6fddJkKGfY66Fwd7ftE4jdJsnNF8VyxyYvhHd6RYhYTbfJNpv12k 43Ny4W5nJYjDcx5BbQ3S9Tms3kww6i+1nxfYxduxH+qan9I38buN5cdGKnPXhzfK 5tQBfsxmKWJEE8KJmnV1fhADIuXHPbQZQ5x7zVI503B3NjTa/lJky2W4qB9SNhvv +6kaeT76IngAlXuSr9ucv5N6XvbAgt+7Woslcgmbdg0ySdhwHOQRkAFHLtcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3PCzNtWIsJTx2rWIyfYN6pR2l7QwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbBmdi4TUJJwyJARgV3QJ/SfFhhwDwrCWhn /7SqPWTwQmsKXYtzTSW7FelqQOL22NGAE22Sd+5+NRoOExDllDTIu5sbpZh3853b 7e4wgzvL8+/N94q5SsSjGzj5fgAZa8cD4pDlnITpPuE4lmKzpJqpOasFnktZs8YE Kutr/OKpYk7OpPX9U+ak3LPwJF4HD3UsZwbL8gCZm2ioxQtaCMgeMng4Xkfnl2sw iG9Xj2AybAiZvM3QI6AszaC7kmsRWpwER4yWlNmhKzWwQcZlW5GPZlDCgs7jFeNV 2nj8A8ItSgXNW5Pd+c8SNxPK78P7x0o77bmFMYlms4HGx5IHj1A= -----END CERTIFICATE-----Generated at Tue Oct 21 06:33:29 2025 by rpki-client