$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: Z0BRTKcQtrx9etdkdyKZL4v9jMyc8VUxdZxZAMdALcU= Subject key identifier: AF:39:78:09:65:A6:18:B5:86:BA:17:F6:08:D5:A9:EA:59:D1:25:2F Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 1CB0823B71E0AE63309AA3E0DB1AD8483410AB9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 021C Signing time: Sat 18 Oct 2025 13:41:03 +0000 Manifest this update: Sat 18 Oct 2025 13:36:03 +0000 Manifest next update: Tue 21 Oct 2025 14:47:03 +0000 Files and hashes: 1: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 3: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 4: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 5: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 6: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 7: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 8: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: MUsLaILjucOs0B75fJKFcpsNxRm/q08iKLVMq6SRAS8=) 9: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 10: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b0:82:3b:71:e0:ae:63:30:9a:a3:e0:db:1a:d8:48:34:10:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Oct 18 13:36:03 2025 GMT Not After : Oct 21 14:47:03 2025 GMT Subject: CN=AF39780965A618B586BA17F608D5A9EA59D1252F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:1b:c3:b7:74:c6:17:a7:f8:98:25:49:eb: 42:f4:01:a6:e9:76:f6:19:c0:e1:8d:9a:f0:7f:0d: 8d:1c:d0:c0:7b:42:63:e7:1c:75:4c:4f:7a:90:7d: be:4a:29:8f:e3:8e:c8:e6:8a:07:c4:48:2e:88:27: 96:8d:cd:c6:dc:4d:aa:bb:e3:54:33:31:4a:22:cc: fe:66:cb:72:2a:3b:83:46:07:89:ff:d8:95:d6:94: b7:d0:56:05:d1:58:ec:3a:cb:30:7d:0f:f4:a1:fb: af:c1:07:3e:f9:3b:c6:f5:d3:22:71:f5:4d:83:1c: 37:0d:7a:54:3b:44:67:b6:5c:59:69:a5:e5:02:b5: b1:ab:24:ee:a0:2e:f5:0c:a2:51:c2:a3:5e:8c:af: 2f:03:18:71:e2:6b:dd:7b:6d:03:6d:0f:0c:f2:9c: 3b:ff:9c:34:b7:76:f3:c6:13:70:0d:60:26:28:a0: 4c:f5:14:4c:63:5a:7f:6e:44:e3:f6:18:b5:1e:f8: ad:b6:9d:b6:a0:9b:19:ae:62:ee:a1:1d:43:50:fd: 88:07:68:7c:cb:fa:7e:4d:a4:26:9f:92:42:a7:14: 3d:9e:14:91:ec:6c:cd:6d:b8:fc:81:11:bd:bc:45: d6:9e:79:2b:23:51:23:6c:75:6e:f9:21:b9:ff:4b: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:78:09:65:A6:18:B5:86:BA:17:F6:08:D5:A9:EA:59:D1:25:2F X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:74:2a:dc:48:4a:59:f0:d9:2d:c4:0e:0a:25:1c:51:f3:36: 0c:d8:04:c6:42:59:f9:5c:3f:43:60:c4:52:49:3f:41:c2:08: 34:20:9d:e3:17:80:6b:b4:0e:b4:78:d2:0c:5c:0b:ab:42:c8: 30:b4:f6:cd:98:47:63:0f:ae:27:c6:84:8f:b0:68:f8:0c:cd: 34:e9:bb:cf:c7:05:de:3a:76:93:25:1d:84:e0:23:13:c7:f5: e3:d2:e1:52:9a:a8:76:aa:32:e2:ca:1c:f4:15:16:3f:3c:ae: e1:07:31:bb:ef:2c:92:45:89:93:71:d9:7a:91:cf:b9:9c:77: 43:fe:93:c1:6b:77:72:31:de:3c:aa:4c:5e:b2:54:d8:9c:1d: 22:b5:2a:34:a6:6d:80:45:cd:d3:11:79:b4:b2:9d:ff:11:33: 14:5a:71:dd:4c:8f:a2:04:03:4d:b0:27:c5:93:8f:bf:72:cc: 33:1b:95:20:3c:9a:77:7f:e5:1f:59:a3:45:fb:57:34:35:cb: 69:c4:49:15:45:90:8f:9e:bb:15:b4:ec:63:8f:ea:c1:36:3e: ce:28:31:3a:3e:9e:a8:4d:fb:61:44:8d:22:72:dd:91:9e:28: bc:e2:62:98:f2:7c:1d:9c:86:a1:7e:60:21:e0:19:6f:96:60: 0f:db:27:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLCCO3HgrmMwmqPg2xrYSDQQq50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTEwMTgxMzM2MDNaFw0yNTEwMjExNDQ3MDNaMDMxMTAvBgNV BAMTKEFGMzk3ODA5NjVBNjE4QjU4NkJBMTdGNjA4RDVBOUVBNTlEMTI1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyhvDt3TGF6f4mCVJ60L0Aabp dvYZwOGNmvB/DY0c0MB7QmPnHHVMT3qQfb5KKY/jjsjmigfESC6IJ5aNzcbcTaq7 41QzMUoizP5my3IqO4NGB4n/2JXWlLfQVgXRWOw6yzB9D/Sh+6/BBz75O8b10yJx 9U2DHDcNelQ7RGe2XFlppeUCtbGrJO6gLvUMolHCo16Mry8DGHHia917bQNtDwzy nDv/nDS3dvPGE3ANYCYooEz1FExjWn9uROP2GLUe+K22nbagmxmuYu6hHUNQ/YgH aHzL+n5NpCafkkKnFD2eFJHsbM1tuPyBEb28RdaeeSsjUSNsdW75Ibn/S0vLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzl4CWWmGLWGuhf2CNWp6lnRJS8wHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJx0KtxISlnw2S3EDgolHFHzNgzYBMZCWflc P0NgxFJJP0HCCDQgneMXgGu0DrR40gxcC6tCyDC09s2YR2MPrifGhI+waPgMzTTp u8/HBd46dpMlHYTgIxPH9ePS4VKaqHaqMuLKHPQVFj88ruEHMbvvLJJFiZNx2XqR z7mcd0P+k8Frd3Ix3jyqTF6yVNicHSK1KjSmbYBFzdMRebSynf8RMxRacd1Mj6IE A02wJ8WTj79yzDMblSA8mnd/5R9Zo0X7VzQ1y2nESRVFkI+euxW07GOP6sE2Ps4o MTo+nqhN+2FEjSJy3ZGeKLziYpjyfB2chqF+YCHgGW+WYA/bJ7o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:34 2025 by rpki-client