$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: /23+IUBub5YVvWM/fAssexrOZxtsmVP8Kk/hmCWMhVQ= Subject key identifier: 12:C0:20:E6:AA:25:8C:01:CC:20:9B:2A:48:D2:26:22:CB:7D:BD:B0 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 17C209310866109AD7174C99969BB557914AD8E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: D6 Signing time: Mon 20 Oct 2025 13:11:18 +0000 Manifest this update: Mon 20 Oct 2025 13:06:18 +0000 Manifest next update: Thu 23 Oct 2025 14:36:18 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: DWmNmg2jTJwSeyViFQAc8DZ74pKkTi6BONlkXD1z4tg=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c2:09:31:08:66:10:9a:d7:17:4c:99:96:9b:b5:57:91:4a:d8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Oct 20 13:06:18 2025 GMT Not After : Oct 23 14:36:18 2025 GMT Subject: CN=12C020E6AA258C01CC209B2A48D22622CB7DBDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:83:6a:61:f8:29:65:14:00:7d:78:4f:cb: b4:dc:ff:0f:be:73:dd:0f:d0:0e:fe:f6:6f:6d:18: 9b:2f:98:39:70:1c:4e:fc:0f:a0:f3:9c:4b:ed:79: b5:c4:1f:6f:3f:25:49:3a:6c:e7:3c:09:52:c4:08: 13:4a:0c:49:7d:ab:aa:d3:8c:d9:82:e7:0c:73:94: d7:9e:6d:8e:3e:2f:1d:21:8c:6f:10:15:7b:b4:3f: da:60:c3:fc:d6:fc:4f:9b:c5:b4:33:9b:95:1d:a4: 49:51:9a:c1:a0:a7:db:3e:f5:f4:de:32:34:38:a8: 32:dd:2e:e1:e8:92:a7:b9:18:a1:4b:07:8e:0b:16: 36:92:26:98:76:35:97:c9:74:88:0d:be:a5:de:30: f0:8b:1a:8e:dd:03:2c:fd:e8:84:5d:00:fd:8f:21: d8:88:0b:81:93:0a:ed:e2:c9:e2:25:3d:c4:9b:ed: e0:c9:82:2c:48:36:65:b5:0e:97:3b:7c:bf:32:93: 09:ce:c2:1f:e4:93:58:71:95:1b:92:08:60:2f:b4: 17:02:c1:89:45:12:c6:b6:4e:60:11:16:c7:6c:4c: e4:3d:d6:b8:b0:59:d1:91:f8:1d:ef:01:63:a3:cd: 23:01:6d:4c:a1:27:93:4c:29:42:94:3a:6b:56:12: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:20:E6:AA:25:8C:01:CC:20:9B:2A:48:D2:26:22:CB:7D:BD:B0 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:00:97:10:3b:29:65:f1:79:5c:13:7d:67:10:4b:ea:5d:61: 37:1d:a3:59:5d:8f:87:1e:81:bd:d3:0d:85:61:39:58:5f:df: 11:46:ac:e8:8d:05:75:67:9c:3f:36:23:7c:e5:85:67:59:be: 40:22:03:46:37:fb:18:91:20:1a:15:ce:91:0c:65:49:ac:60: 20:75:18:b0:ea:c4:58:0c:77:d1:d1:79:77:d5:77:8b:e1:74: ba:67:46:0b:b5:3d:6b:bd:00:ca:4d:f3:0e:ab:24:e9:d8:2c: 06:eb:7c:1c:df:81:a4:ee:67:10:e8:3e:9e:11:dd:7e:4d:0e: 2b:fc:c7:58:f2:c2:5b:9c:e3:98:b7:e9:e0:7d:e7:69:f7:63: 0f:19:fa:1e:82:33:9e:4c:ff:f6:14:bc:17:53:dc:f8:fa:12: b0:89:84:24:65:20:f3:ef:d0:5f:49:78:7a:c1:82:ff:cf:f8: 8b:40:cd:d3:35:a3:08:93:5c:c3:ec:53:95:a0:83:1d:2d:cd: 8f:a6:95:81:21:e7:d0:d3:48:77:22:b9:6c:a2:ce:e5:5b:ee: 0f:47:61:6b:ee:cc:73:18:5c:b0:8f:12:1d:a7:4e:07:b4:31: 67:47:c2:46:fe:cb:f9:20:6b:60:56:a9:bf:d5:d4:5a:a5:d8: 1c:85:bb:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8IJMQhmEJrXF0yZlpu1V5FK2OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTEwMjAxMzA2MThaFw0yNTEwMjMxNDM2MThaMDMxMTAvBgNV BAMTKDEyQzAyMEU2QUEyNThDMDFDQzIwOUIyQTQ4RDIyNjIyQ0I3REJEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoINqYfgpZRQAfXhPy7Tc/w++ c90P0A7+9m9tGJsvmDlwHE78D6DznEvtebXEH28/JUk6bOc8CVLECBNKDEl9q6rT jNmC5wxzlNeebY4+Lx0hjG8QFXu0P9pgw/zW/E+bxbQzm5UdpElRmsGgp9s+9fTe MjQ4qDLdLuHokqe5GKFLB44LFjaSJph2NZfJdIgNvqXeMPCLGo7dAyz96IRdAP2P IdiIC4GTCu3iyeIlPcSb7eDJgixINmW1Dpc7fL8ykwnOwh/kk1hxlRuSCGAvtBcC wYlFEsa2TmARFsdsTOQ91riwWdGR+B3vAWOjzSMBbUyhJ5NMKUKUOmtWEoU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsAg5qoljAHMIJsqSNImIst9vbAwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEAlxA7KWXxeVwTfWcQS+pdYTcdo1ldj4ce gb3TDYVhOVhf3xFGrOiNBXVnnD82I3zlhWdZvkAiA0Y3+xiRIBoVzpEMZUmsYCB1 GLDqxFgMd9HReXfVd4vhdLpnRgu1PWu9AMpN8w6rJOnYLAbrfBzfgaTuZxDoPp4R 3X5NDiv8x1jywluc45i36eB952n3Yw8Z+h6CM55M//YUvBdT3Pj6ErCJhCRlIPPv 0F9JeHrBgv/P+ItAzdM1owiTXMPsU5Wggx0tzY+mlYEh59DTSHciuWyizuVb7g9H YWvuzHMYXLCPEh2nTge0MWdHwkb+y/kga2BWqb/V1Fql2ByFu8Q= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:39 2025 by rpki-client