$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: v58XKM1uRlh1SW6POEk9sFtyUYBNE34kZf8Zn6+KHR4= Subject key identifier: A0:53:01:33:8E:C1:EC:11:DE:89:B9:31:19:BE:B8:1C:88:22:2D:2C Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 148BF2DDB3B0AC05301073161F1DEEA0CCC90963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 029D Signing time: Sun 19 Oct 2025 22:50:39 +0000 Manifest this update: Sun 19 Oct 2025 22:45:39 +0000 Manifest next update: Thu 23 Oct 2025 07:01:39 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: 2PfbmpN/M7EV7/7Q8J1dmgUi6yslMFjAibUkEFGGWhg=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8b:f2:dd:b3:b0:ac:05:30:10:73:16:1f:1d:ee:a0:cc:c9:09:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Oct 19 22:45:39 2025 GMT Not After : Oct 23 07:01:39 2025 GMT Subject: CN=A05301338EC1EC11DE89B93119BEB81C88222D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:e8:f0:29:27:33:10:77:fb:4c:39:97:ce: 14:80:94:b4:68:1a:85:15:64:3e:b1:76:ed:5c:e0: a3:a5:24:59:7c:c0:3f:8e:69:9b:5a:1b:57:04:45: 39:ef:d4:7f:34:6b:ab:58:9c:fc:e3:88:02:3c:06: 82:91:4b:5b:b1:17:3a:91:d1:9f:ad:a8:a6:ec:1e: a5:ad:51:2f:da:f4:b5:b4:5e:fa:0e:e6:08:ff:36: ce:e2:75:f3:ae:b5:f8:99:f3:e9:c4:12:c5:76:1d: ae:52:2b:9b:a1:e7:aa:c8:ff:6b:1c:25:37:be:35: f0:26:11:11:f0:98:65:06:bf:58:81:c3:3e:aa:db: ff:88:dd:7f:5c:93:4b:40:56:e3:10:7c:4f:85:d2: a6:68:a2:32:de:4d:8a:a7:c7:2f:50:50:1f:bb:da: 23:be:00:da:cc:5f:90:7a:a9:48:03:d5:f2:0c:5d: c1:0c:ea:cc:5c:ce:24:f5:01:38:6b:36:6e:08:e5: bb:75:b2:e3:03:bf:90:9d:35:c8:11:48:4e:00:99: 85:b0:d7:5d:66:2a:2e:7c:9e:a9:d2:ee:96:af:0a: 94:31:2b:85:00:5b:6d:02:df:27:99:82:62:80:de: 2f:69:db:06:77:8c:d9:23:79:ba:3f:a2:be:3f:9b: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:53:01:33:8E:C1:EC:11:DE:89:B9:31:19:BE:B8:1C:88:22:2D:2C X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:28:dd:67:c2:3a:81:4e:d2:6f:d1:37:1e:5c:4b:4d:c5:2f: 0c:00:37:2d:49:10:db:f9:b0:20:b8:84:cd:af:36:ed:1b:20: bc:4f:77:d9:dc:75:b6:a6:87:bd:c0:dd:1d:51:89:84:10:7e: 71:04:8a:3d:1b:6e:ef:62:a3:e5:70:cf:b7:d4:b1:bb:e0:df: 04:51:12:9f:ed:b9:c7:eb:c1:75:a3:18:cd:9b:4a:fa:d9:6e: 43:77:89:0f:2b:d2:b7:7f:09:ed:51:d8:2d:57:cf:46:71:e1: d6:70:5a:90:66:5e:7d:7a:35:5a:eb:9e:25:e0:31:06:a1:56: 6b:d4:c8:fa:ef:fd:36:12:71:95:ff:e7:16:61:f9:d8:5a:eb: e6:6a:c0:0b:21:0f:02:0f:f3:f1:b2:74:1e:e3:92:00:03:cd: e0:b9:6a:67:f2:c2:24:ee:21:36:d7:48:78:cf:54:e2:ea:1e: 54:ef:08:c3:ad:31:3b:7c:52:02:e6:a3:5f:2d:22:a0:a2:a0: 9d:34:50:76:eb:74:62:62:5b:93:ab:8a:75:ff:4f:31:6f:e9: 6d:d4:14:4b:79:fb:41:3a:54:d6:cc:49:f8:02:25:17:0d:d3: 74:f9:30:a7:c4:2b:08:ad:c7:a1:2d:53:b2:98:26:42:f6:dc: 4e:aa:2b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIvy3bOwrAUwEHMWHx3uoMzJCWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTEwMTkyMjQ1MzlaFw0yNTEwMjMwNzAxMzlaMDMxMTAvBgNV BAMTKEEwNTMwMTMzOEVDMUVDMTFERTg5QjkzMTE5QkVCODFDODgyMjJEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83ejwKSczEHf7TDmXzhSAlLRo GoUVZD6xdu1c4KOlJFl8wD+OaZtaG1cERTnv1H80a6tYnPzjiAI8BoKRS1uxFzqR 0Z+tqKbsHqWtUS/a9LW0XvoO5gj/Ns7idfOutfiZ8+nEEsV2Ha5SK5uh56rI/2sc JTe+NfAmERHwmGUGv1iBwz6q2/+I3X9ck0tAVuMQfE+F0qZoojLeTYqnxy9QUB+7 2iO+ANrMX5B6qUgD1fIMXcEM6sxcziT1AThrNm4I5bt1suMDv5CdNcgRSE4AmYWw 111mKi58nqnS7pavCpQxK4UAW20C3yeZgmKA3i9p2wZ3jNkjebo/or4/m+wLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoFMBM47B7BHeibkxGb64HIgiLSwwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMo3WfCOoFO0m/RNx5cS03FLwwANy1JENv5 sCC4hM2vNu0bILxPd9ncdbamh73A3R1RiYQQfnEEij0bbu9io+Vwz7fUsbvg3wRR Ep/tucfrwXWjGM2bSvrZbkN3iQ8r0rd/Ce1R2C1Xz0Zx4dZwWpBmXn16NVrrniXg MQahVmvUyPrv/TYScZX/5xZh+dha6+ZqwAshDwIP8/GydB7jkgADzeC5amfywiTu ITbXSHjPVOLqHlTvCMOtMTt8UgLmo18tIqCioJ00UHbrdGJiW5OrinX/TzFv6W3U FEt5+0E6VNbMSfgCJRcN03T5MKfEKwitx6EtU7KYJkL23E6qKzU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:39 2025 by rpki-client