$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: p1mHxRbsCFSg6Q8dmSHAHIZYIaiqpR8Tkb64hJ8Iido= Subject key identifier: BB:37:42:08:A7:74:26:AB:53:5B:0B:E2:5A:62:77:82:06:CB:B9:01 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 11D6689F6AB83CD12D4DFA9ACDF6348E5F003E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: E4 Signing time: Sun 19 Oct 2025 14:02:08 +0000 Manifest this update: Sun 19 Oct 2025 13:57:08 +0000 Manifest next update: Wed 22 Oct 2025 15:27:08 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: HvC+adeVVM4Hlmgi9YjvWMSOHoFLJJe3sKw2zGXi+H0=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d6:68:9f:6a:b8:3c:d1:2d:4d:fa:9a:cd:f6:34:8e:5f:00:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Oct 19 13:57:08 2025 GMT Not After : Oct 22 15:27:08 2025 GMT Subject: CN=BB374208A77426AB535B0BE25A62778206CBB901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:ff:20:76:96:e3:98:c1:b7:08:06:e4:57: 6e:5c:3a:f8:6d:fe:70:3e:1c:e9:66:fc:dc:da:a0: c7:e9:00:1e:84:54:3f:95:a8:b8:c1:73:2b:0a:9a: 1f:0f:7e:8d:74:d2:1a:95:fa:b6:b6:d4:58:dd:31: 97:ac:32:c7:84:26:7c:e3:02:93:58:b7:3c:21:17: ec:01:58:87:e9:c9:aa:47:29:ac:f8:fd:d7:b7:89: f0:41:a4:ba:5e:c3:6d:3f:5f:f6:d2:1b:81:3c:08: 1b:fb:14:47:d1:14:1c:8e:86:96:97:8d:77:8e:1f: 14:c3:7d:48:12:a0:2c:e3:fb:ae:3b:05:39:96:d9: fb:27:e4:b2:ab:24:5b:50:6f:be:f2:4f:36:40:ff: 65:fe:18:f8:ff:4c:28:72:aa:36:ff:60:ec:f1:c8: d4:93:73:f0:d8:e1:07:83:60:26:c8:23:01:09:cc: 98:b9:07:bc:45:4d:b0:59:7c:80:e4:47:81:bd:97: f4:e3:95:8d:14:c3:0b:e7:22:03:25:c9:a9:eb:56: 95:11:14:87:7d:7f:40:77:ba:a8:1d:12:aa:b0:3c: 62:90:15:fc:d2:b7:9c:7a:87:28:8c:e3:d4:5d:0f: 15:c0:a0:07:a5:7d:6a:93:31:dc:ed:28:34:33:d9: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:37:42:08:A7:74:26:AB:53:5B:0B:E2:5A:62:77:82:06:CB:B9:01 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e8:53:ff:c5:48:cc:87:10:82:51:19:c5:67:c7:b0:5c:e4: b5:75:f1:ce:9c:d5:6f:b3:1f:f6:b9:f8:c7:d9:fc:f0:10:c2: dd:5d:4f:11:4b:58:8a:a6:20:16:50:51:b8:6a:7a:17:dd:d0: d3:1b:9b:d8:61:9c:6b:ef:42:34:30:25:bb:d7:9b:02:0d:3d: d6:45:5a:ed:a3:97:7c:9b:22:34:5d:d0:54:0b:ac:c3:1b:55: d5:ac:9c:32:1b:d3:39:d6:38:c5:7a:ff:03:29:7f:b2:33:7c: 84:0a:9d:4f:21:1c:64:ea:49:2e:97:13:7e:d7:b3:9e:a2:95: 15:07:18:e2:c6:11:26:35:4e:3f:25:84:e2:0e:a4:2d:2d:ce: e3:c1:8c:18:fd:b4:d1:b6:b6:51:63:46:16:04:d9:28:6d:ca: 74:7d:f6:27:d7:6a:d7:e3:7e:43:83:65:b9:c4:a0:d5:a4:3e: 02:10:fc:92:56:47:e9:c8:43:24:6b:91:c6:16:b5:55:94:84: 1a:2c:88:b4:37:77:1f:d8:93:a7:b5:3b:e5:b9:58:a0:1e:39: 95:d7:65:85:b2:2f:40:68:3d:4c:83:af:70:48:7c:11:da:be: c8:2c:ca:2b:91:ab:32:c0:3a:49:d4:f0:e3:c5:b3:b7:d9:8b: 3d:a0:45:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdZon2q4PNEtTfqazfY0jl8APogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTEwMTkxMzU3MDhaFw0yNTEwMjIxNTI3MDhaMDMxMTAvBgNV BAMTKEJCMzc0MjA4QTc3NDI2QUI1MzVCMEJFMjVBNjI3NzgyMDZDQkI5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEA/8gdpbjmMG3CAbkV25cOvht /nA+HOlm/NzaoMfpAB6EVD+VqLjBcysKmh8Pfo100hqV+ra21FjdMZesMseEJnzj ApNYtzwhF+wBWIfpyapHKaz4/de3ifBBpLpew20/X/bSG4E8CBv7FEfRFByOhpaX jXeOHxTDfUgSoCzj+647BTmW2fsn5LKrJFtQb77yTzZA/2X+GPj/TChyqjb/YOzx yNSTc/DY4QeDYCbIIwEJzJi5B7xFTbBZfIDkR4G9l/TjlY0UwwvnIgMlyanrVpUR FId9f0B3uqgdEqqwPGKQFfzSt5x6hyiM49RdDxXAoAelfWqTMdztKDQz2SrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuzdCCKd0JqtTWwviWmJ3ggbLuQEwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzoU//FSMyHEIJRGcVnx7Bc5LV18c6c1W+z H/a5+MfZ/PAQwt1dTxFLWIqmIBZQUbhqehfd0NMbm9hhnGvvQjQwJbvXmwINPdZF Wu2jl3ybIjRd0FQLrMMbVdWsnDIb0znWOMV6/wMpf7IzfIQKnU8hHGTqSS6XE37X s56ilRUHGOLGESY1Tj8lhOIOpC0tzuPBjBj9tNG2tlFjRhYE2ShtynR99ifXatfj fkODZbnEoNWkPgIQ/JJWR+nIQyRrkcYWtVWUhBosiLQ3dx/Yk6e1O+W5WKAeOZXX ZYWyL0BoPUyDr3BIfBHavsgsyiuRqzLAOknU8OPFs7fZiz2gRZo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:33 2025 by rpki-client