$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: TQUJ3YPC+dEV5Wr5/VkRiZpgSP3stoG/3kqse7w5e+o= Subject key identifier: 16:50:D4:36:03:F9:45:C7:F8:97:5D:DD:C3:AE:E4:AA:46:8F:58:CC Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 3CAF5CE2B4917F96341DAEBB193E82005C08C8A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 85 Signing time: Sun 19 Oct 2025 14:10:03 +0000 Manifest this update: Sun 19 Oct 2025 14:05:03 +0000 Manifest next update: Wed 22 Oct 2025 16:01:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: /wP5Eph/NLVO7Yx5n6OJQ938fMyV18nBT4+zkzULe1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:af:5c:e2:b4:91:7f:96:34:1d:ae:bb:19:3e:82:00:5c:08:c8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Oct 19 14:05:03 2025 GMT Not After : Oct 22 16:01:03 2025 GMT Subject: CN=1650D43603F945C7F8975DDDC3AEE4AA468F58CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:44:17:44:52:08:5f:41:08:22:9b:ca:21: 35:c1:7b:b5:0a:4c:69:cf:01:64:70:e2:a1:70:09: 08:7e:bc:ee:18:41:c9:05:a9:a1:63:8d:6f:6a:b1: 12:6a:1c:14:72:3a:65:de:9e:98:71:61:af:2b:1f: d9:ac:47:0f:8e:9b:4e:91:2b:cd:86:8a:e5:9c:80: f1:38:88:ba:0b:e1:db:6b:f5:fc:03:fd:b3:e9:11: 7a:59:e7:7a:8c:81:eb:ed:1c:40:42:4b:fb:16:ec: 86:73:f6:57:7c:c6:8f:8f:0b:94:bd:08:df:94:8f: d2:13:65:9e:2a:ea:23:88:e9:07:12:73:cf:85:f0: 4a:bd:b3:f5:ef:69:3c:2c:e6:5a:ca:52:04:d4:14: bc:ea:70:9d:1b:b0:03:4d:70:14:33:c4:ec:a8:76: 01:12:37:32:13:d5:62:cd:54:65:34:bf:7b:fd:bf: 66:a5:07:02:b0:f6:05:f5:8b:8f:ad:5e:97:b8:ec: 16:1a:f9:4d:4f:17:6f:ee:ce:bf:9d:14:63:52:56: dd:ae:94:d5:84:c3:97:4e:d0:1a:6f:7a:8e:8f:a6: 45:c3:e4:53:9b:4f:45:77:d2:7f:2d:e3:38:d2:10: d4:1e:80:b6:02:eb:4d:5b:bc:5c:c2:c3:a0:ac:8c: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:50:D4:36:03:F9:45:C7:F8:97:5D:DD:C3:AE:E4:AA:46:8F:58:CC X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:f8:ed:52:2c:73:02:06:f3:ab:2b:97:4e:ab:30:a3:cb: c3:ff:49:ae:4e:67:72:f3:9b:b3:9e:b1:6a:29:8c:d8:c8:87: 85:27:e2:37:60:a3:69:52:bb:ce:61:89:e3:a2:ba:4c:23:3e: 77:fd:67:a0:c5:83:ab:be:29:5a:4a:73:76:7f:8c:ba:39:d6: 33:02:ed:40:f3:b4:bc:ec:cf:d8:4e:2c:a1:2d:e2:c2:b9:7d: 51:93:a1:73:ae:94:0f:51:b7:d7:39:a8:de:9e:f4:0c:38:3c: 61:f2:72:f8:c3:4a:3d:f2:3d:f9:05:70:4b:b8:e7:b1:c1:f1: 5d:48:db:e6:34:da:bd:99:2e:34:73:b5:4a:b1:b7:bd:ff:c6: 60:fd:51:03:88:18:97:68:37:16:09:59:82:aa:1b:8d:cc:c9: ff:30:39:a6:65:21:31:03:d6:c7:6d:61:14:c1:d6:71:03:0e: 8a:bc:cb:25:4d:32:9d:0b:0d:1e:6b:bd:de:14:f8:02:bc:34: 65:64:26:69:54:52:bf:ce:9c:c5:45:8f:98:1d:83:51:f1:12: c5:a4:f4:d9:e2:fa:36:eb:34:2f:41:3e:c6:61:38:40:a6:0f: 51:9b:d8:e5:97:cc:f7:e6:ce:02:50:8f:f5:11:da:77:aa:88: 3a:0d:2d:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPK9c4rSRf5Y0Ha67GT6CAFwIyKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTEwMTkxNDA1MDNaFw0yNTEwMjIxNjAxMDNaMDMxMTAvBgNV BAMTKDE2NTBENDM2MDNGOTQ1QzdGODk3NUREREMzQUVFNEFBNDY4RjU4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykUQXRFIIX0EIIpvKITXBe7UK TGnPAWRw4qFwCQh+vO4YQckFqaFjjW9qsRJqHBRyOmXenphxYa8rH9msRw+Om06R K82GiuWcgPE4iLoL4dtr9fwD/bPpEXpZ53qMgevtHEBCS/sW7IZz9ld8xo+PC5S9 CN+Uj9ITZZ4q6iOI6QcSc8+F8Eq9s/XvaTws5lrKUgTUFLzqcJ0bsANNcBQzxOyo dgESNzIT1WLNVGU0v3v9v2alBwKw9gX1i4+tXpe47BYa+U1PF2/uzr+dFGNSVt2u lNWEw5dO0Bpveo6PpkXD5FObT0V30n8t4zjSENQegLYC601bvFzCw6CsjP1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFlDUNgP5Rcf4l13dw67kqkaPWMwwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtS+O1SLHMCBvOrK5dOqzCjy8P/Sa5OZ3Lz m7OesWopjNjIh4Un4jdgo2lSu85hieOiukwjPnf9Z6DFg6u+KVpKc3Z/jLo51jMC 7UDztLzsz9hOLKEt4sK5fVGToXOulA9Rt9c5qN6e9Aw4PGHycvjDSj3yPfkFcEu4 57HB8V1I2+Y02r2ZLjRztUqxt73/xmD9UQOIGJdoNxYJWYKqG43Myf8wOaZlITED 1sdtYRTB1nEDDoq8yyVNMp0LDR5rvd4U+AK8NGVkJmlUUr/OnMVFj5gdg1HxEsWk 9Nni+jbrNC9BPsZhOECmD1Gb2OWXzPfmzgJQj/UR2neqiDoNLeg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:53 2025 by rpki-client