$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: YStogZwioKZ2Sgpn31ha04k/CCCh6Mw7I4rEyO3rMC4= Subject key identifier: 2A:6F:FA:EF:37:87:EB:53:F0:4C:32:55:74:B3:2F:B2:3D:EC:97:0B Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 2F113ADE67AEE947555DA106AD599449BAAD626D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 0396 Signing time: Sat 18 Oct 2025 07:21:18 +0000 Manifest this update: Sat 18 Oct 2025 07:16:18 +0000 Manifest next update: Tue 21 Oct 2025 11:23:18 +0000 Files and hashes: 1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) 2: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: jstedry2WjKih6I6ofJ6644FS+ClZ/E6Qg08tlX/8iY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:11:3a:de:67:ae:e9:47:55:5d:a1:06:ad:59:94:49:ba:ad:62:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Oct 18 07:16:18 2025 GMT Not After : Oct 21 11:23:18 2025 GMT Subject: CN=2A6FFAEF3787EB53F04C325574B32FB23DEC970B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:0a:3b:5f:05:59:08:21:9c:10:40:6f:d4: 70:98:5c:5f:53:43:c9:79:7b:87:93:21:4a:a4:b0: 8a:05:fe:34:50:8f:fe:34:83:bd:3a:5a:60:7b:3b: b0:4b:e8:fe:c2:3d:3e:26:8d:4f:f1:c6:49:e7:7c: 44:af:f8:4f:d9:a1:b1:e5:c8:78:b9:2e:1a:89:22: 6f:6f:25:f6:fc:d9:d5:56:bb:21:f5:bf:f0:e0:9b: 48:32:78:83:25:79:10:1a:1a:26:5c:26:ea:d3:ca: cd:7e:e1:c0:25:55:cf:a0:e6:b2:cc:d6:7a:88:6a: 98:fa:5e:c2:30:09:07:43:65:8c:c8:e3:7f:8e:c8: 5f:87:c3:d0:98:84:72:88:d9:03:b9:1f:f2:a5:b2: e2:08:1c:76:ed:53:31:2c:00:e7:f7:aa:9e:2c:d2: d9:4c:1a:d5:90:7a:ff:e4:fc:0d:0b:61:2c:dc:9c: a8:32:ff:1e:7f:5d:1f:43:e1:8b:1b:7c:a2:1c:41: 90:60:0d:63:5a:73:ea:22:06:98:42:ff:18:0f:b7: e4:16:db:ef:8a:05:18:bc:0d:0d:c1:28:68:0a:ba: 43:9b:ed:d5:90:15:15:82:34:11:24:5b:97:16:8b: f2:56:80:1a:b4:16:97:c7:73:6f:c1:fe:f1:4c:63: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6F:FA:EF:37:87:EB:53:F0:4C:32:55:74:B3:2F:B2:3D:EC:97:0B X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d9:e5:a3:2d:20:b9:ca:00:9e:88:4c:52:7b:72:f6:d0:a0: 1a:46:ca:28:da:75:c2:3f:e8:b2:08:6a:4b:6f:ad:dd:d8:3e: 13:a1:d0:66:2b:72:10:27:a9:3a:52:47:e2:e0:06:21:9c:b5: a1:bf:06:bd:e6:d9:b0:e2:27:cc:e7:ef:83:46:00:f9:fc:c9: 6b:86:6c:67:27:18:5d:94:bf:13:e3:b2:c6:c1:62:0e:6f:e9: 72:84:83:57:3e:46:ee:5c:e8:ab:83:e5:36:d9:eb:99:b5:be: 38:70:4c:74:ba:cf:65:e5:56:fc:3f:4e:03:90:fc:dc:43:bf: be:dd:02:53:19:bc:48:cb:15:ad:ee:22:cb:7d:34:db:07:48: 17:49:64:0a:a8:8c:68:bf:d8:8f:cb:fe:7f:06:ca:63:7d:ea: 66:50:01:15:b7:e9:82:6f:0b:8f:4b:07:bf:1c:37:b7:c6:2b: 9d:8c:17:5b:6a:67:3e:46:8e:4a:ee:b2:ef:32:3e:1d:3c:71: 9a:02:8d:f7:60:23:11:a8:7a:71:75:b2:dd:bb:72:ea:66:a4: b4:76:b6:c6:0c:6f:fe:54:58:fc:d5:3c:5b:c6:6f:60:de:0c: 6d:a4:e2:5c:12:72:cf:db:a4:04:27:da:f6:ad:d9:13:22:b5: d5:6c:b7:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxE63meu6UdVXaEGrVmUSbqtYm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTEwMTgwNzE2MThaFw0yNTEwMjExMTIzMThaMDMxMTAvBgNV BAMTKDJBNkZGQUVGMzc4N0VCNTNGMDRDMzI1NTc0QjMyRkIyM0RFQzk3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGgo7XwVZCCGcEEBv1HCYXF9T Q8l5e4eTIUqksIoF/jRQj/40g706WmB7O7BL6P7CPT4mjU/xxknnfESv+E/ZobHl yHi5LhqJIm9vJfb82dVWuyH1v/Dgm0gyeIMleRAaGiZcJurTys1+4cAlVc+g5rLM 1nqIapj6XsIwCQdDZYzI43+OyF+Hw9CYhHKI2QO5H/KlsuIIHHbtUzEsAOf3qp4s 0tlMGtWQev/k/A0LYSzcnKgy/x5/XR9D4YsbfKIcQZBgDWNac+oiBphC/xgPt+QW 2++KBRi8DQ3BKGgKukOb7dWQFRWCNBEkW5cWi/JWgBq0FpfHc2/B/vFMY769AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKm/67zeH61PwTDJVdLMvsj3slwswHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnZ5aMtILnKAJ6ITFJ7cvbQoBpGyijadcI/ 6LIIaktvrd3YPhOh0GYrchAnqTpSR+LgBiGctaG/Br3m2bDiJ8zn74NGAPn8yWuG bGcnGF2UvxPjssbBYg5v6XKEg1c+Ru5c6KuD5TbZ65m1vjhwTHS6z2XlVvw/TgOQ /NxDv77dAlMZvEjLFa3uIst9NNsHSBdJZAqojGi/2I/L/n8GymN96mZQARW36YJv C49LB78cN7fGK52MF1tqZz5Gjkrusu8yPh08cZoCjfdgIxGoenF1st27cupmpLR2 tsYMb/5UWPzVPFvGb2DeDG2k4lwScs/bpAQn2vat2RMitdVst44= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:36 2025 by rpki-client