$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: dIac5hymoZVPx+9d9zept59zbtz/Mzt52WLiEeKpiGU= Subject key identifier: 08:05:C5:E1:2F:C0:06:D4:0A:4F:EA:6D:D0:97:83:30:D6:8E:83:AF Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 580353D55120504B8219BA3A90A651A92CE5E82E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: D3 Signing time: Sun 19 Oct 2025 17:20:05 +0000 Manifest this update: Sun 19 Oct 2025 17:15:05 +0000 Manifest next update: Wed 22 Oct 2025 19:17:05 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 2: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 3: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 4: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 5: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 6: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) 7: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 9: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: 77CQ6uNCqGdv0M3sUc0SLFpPfscOH3oxCIGVQOAPCcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:03:53:d5:51:20:50:4b:82:19:ba:3a:90:a6:51:a9:2c:e5:e8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Oct 19 17:15:05 2025 GMT Not After : Oct 22 19:17:05 2025 GMT Subject: CN=0805C5E12FC006D40A4FEA6DD0978330D68E83AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:6a:ab:03:c7:3b:cb:85:64:2a:2d:25:de: 37:b8:5b:7e:fc:18:28:fa:bf:13:97:08:f3:ca:51: 75:c5:e1:7c:b8:54:4e:e2:36:f1:dc:4c:6e:52:24: ab:e6:6e:31:94:3d:67:0f:8e:7e:e3:9f:7b:9d:d1: 79:93:38:eb:77:c1:e5:46:95:77:47:7a:db:68:ba: 61:97:dc:ff:dd:58:51:93:7b:c6:7f:0f:80:29:8c: cb:5a:99:0f:93:e2:6d:fc:8a:ad:3d:85:32:ec:35: 69:e8:3f:5d:d7:0c:31:15:d7:ea:85:8a:2a:8a:9f: cd:b0:99:3d:11:f2:25:90:f9:80:eb:b5:aa:94:4d: da:92:cd:17:e8:12:7f:f8:17:b6:cd:3b:a6:47:db: 78:c2:ee:c0:39:c3:57:f4:92:44:dc:f6:87:d1:98: 12:74:e7:53:4e:9c:4e:66:56:0d:8c:3c:63:e0:17: 40:cb:57:10:e2:20:ba:8d:7b:e7:42:76:4d:0f:10: 92:96:23:ca:a2:29:d2:37:f7:fa:2e:60:ab:89:a8: 93:9a:75:68:03:c0:7c:f1:27:2b:a3:20:7b:70:6b: 1d:49:4c:bb:63:d1:d8:70:8d:65:bf:1d:69:f6:14: 6f:ed:da:3f:9f:e0:98:73:c6:7d:06:47:57:35:06: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:C5:E1:2F:C0:06:D4:0A:4F:EA:6D:D0:97:83:30:D6:8E:83:AF X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:27:52:0e:04:f1:2e:dd:43:ff:da:5d:a6:b6:f1:62:bd:bf: 4e:fe:d6:39:38:bc:7e:91:a1:36:81:82:1c:b7:9a:3e:75:24: de:7e:3d:72:9a:a3:f7:6e:2b:73:80:8c:fa:92:56:58:7e:7a: 11:31:be:8f:56:f6:56:b1:1b:29:be:cb:0e:ed:83:c3:d4:7b: a6:20:f8:d6:5f:2c:98:5e:7b:aa:11:15:0d:e6:35:4d:46:36: 88:08:0e:59:94:7f:d2:d2:2f:2d:29:ed:07:ac:35:f2:24:84: bf:ff:a1:78:1c:37:82:8b:58:8a:9d:6d:2d:14:25:78:39:72: 55:8e:60:41:72:1e:2b:c9:5c:3a:e6:2d:3f:39:df:51:57:e4: 23:f5:d0:3c:f9:73:e7:07:2d:e4:3b:ea:de:9c:02:98:90:3a: a6:f3:22:f9:91:d8:6e:4b:d9:29:b9:c1:fe:36:da:a9:fd:9c: 77:f5:2e:a9:c4:e3:3d:e5:1d:cf:a2:79:4d:3d:56:6c:5d:92: bf:31:12:33:39:ac:f0:14:e4:d8:6a:65:4f:f8:9f:4e:e5:19: e1:7c:ff:8e:4a:15:74:23:b6:08:f8:ef:58:06:cc:53:e7:34: 11:7a:f9:55:f0:0b:7e:3a:f4:22:e3:2c:c9:48:87:80:52:57: 81:c9:e5:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWANT1VEgUEuCGbo6kKZRqSzl6C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTEwMTkxNzE1MDVaFw0yNTEwMjIxOTE3MDVaMDMxMTAvBgNV BAMTKDA4MDVDNUUxMkZDMDA2RDQwQTRGRUE2REQwOTc4MzMwRDY4RTgzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eGqrA8c7y4VkKi0l3je4W378 GCj6vxOXCPPKUXXF4Xy4VE7iNvHcTG5SJKvmbjGUPWcPjn7jn3ud0XmTOOt3weVG lXdHettoumGX3P/dWFGTe8Z/D4ApjMtamQ+T4m38iq09hTLsNWnoP13XDDEV1+qF iiqKn82wmT0R8iWQ+YDrtaqUTdqSzRfoEn/4F7bNO6ZH23jC7sA5w1f0kkTc9ofR mBJ051NOnE5mVg2MPGPgF0DLVxDiILqNe+dCdk0PEJKWI8qiKdI39/ouYKuJqJOa dWgDwHzxJyujIHtwax1JTLtj0dhwjWW/HWn2FG/t2j+f4Jhzxn0GR1c1BlDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAXF4S/ABtQKT+pt0JeDMNaOg68wHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAnUg4E8S7dQ//aXaa28WK9v07+1jk4vH6R oTaBghy3mj51JN5+PXKao/duK3OAjPqSVlh+ehExvo9W9laxGym+yw7tg8PUe6Yg +NZfLJhee6oRFQ3mNU1GNogIDlmUf9LSLy0p7QesNfIkhL//oXgcN4KLWIqdbS0U JXg5clWOYEFyHivJXDrmLT8531FX5CP10Dz5c+cHLeQ76t6cApiQOqbzIvmR2G5L 2Sm5wf422qn9nHf1LqnE4z3lHc+ieU09Vmxdkr8xEjM5rPAU5NhqZU/4n07lGeF8 /45KFXQjtgj471gGzFPnNBF6+VXwC3469CLjLMlIh4BSV4HJ5YM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:19 2025 by rpki-client