$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: werCjceNso08WZwN+zRWFbjXUCIr3TmTWGZUdRnyfdc= Subject key identifier: 00:F3:17:B8:E1:C2:22:BE:99:34:76:FA:F4:28:59:16:83:78:B1:6D Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 30F6D8B6D31C0A0CFBCB912BB0723AEA6EF9AC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: 9B Signing time: Sun 19 Oct 2025 09:40:02 +0000 Manifest this update: Sun 19 Oct 2025 09:35:02 +0000 Manifest next update: Wed 22 Oct 2025 16:49:02 +0000 Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: DxrvBG2EwoDi5CWPRxZjQftZXgHK8QtqiBt20+LN2E8=) 2: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: eLoJQcRR7UviwY1rgXoVkCmTBMM5/WsPMnoDlvo+6Xo=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: MNszZnIoAzv/XRj5b4YuvVQ+VmFmnsG7kA5nvphcOpw=) 4: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: qEEiT/gDdkOcLq92D2nsUeDv/J2kJy2/WOmn0MpyYEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f6:d8:b6:d3:1c:0a:0c:fb:cb:91:2b:b0:72:3a:ea:6e:f9:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Oct 19 09:35:02 2025 GMT Not After : Oct 22 16:49:02 2025 GMT Subject: CN=00F317B8E1C222BE993476FAF42859168378B16D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:bc:59:d6:a8:b9:4d:b3:c0:3f:83:22:7a: 39:d0:e3:46:22:76:e7:fb:58:71:26:cb:01:60:e4: 66:df:61:21:e5:3a:f8:e0:03:57:79:65:d8:d9:62: 3f:14:87:90:21:ba:ae:fe:42:94:74:d4:16:96:90: f1:d2:5e:fc:50:da:e1:a4:bc:6c:0d:cd:cf:48:ef: 47:c1:f1:3e:6c:6f:65:45:5a:7d:c4:5c:a6:ae:6d: a4:e8:38:74:be:9d:ac:f3:70:25:2c:a5:d3:42:c3: e0:3a:1d:e4:1e:57:41:c0:e2:14:6f:19:06:72:0f: 39:33:4b:43:16:3b:68:ac:ca:4b:55:0b:c4:f8:c9: 51:a8:6a:04:3b:a6:be:91:b3:ad:16:87:c6:e4:2b: 41:ae:57:0d:99:2f:91:68:d2:ed:3d:0b:d5:c2:8f: ab:88:dc:c7:5b:86:38:8c:d2:65:a1:7d:01:b2:42: 9f:9e:49:e1:89:fe:31:d6:c5:f5:2e:40:a9:6d:be: a5:ed:b9:66:1e:86:ae:c4:cc:8d:c8:f5:18:b5:cd: 6c:45:f3:72:e5:4f:83:3a:9a:5d:94:4c:46:3a:54: b2:1f:41:c6:70:72:ce:3b:7a:36:f6:9a:67:8e:10: 06:b0:5a:53:33:39:47:c5:8a:ee:2f:e7:6a:ed:3f: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F3:17:B8:E1:C2:22:BE:99:34:76:FA:F4:28:59:16:83:78:B1:6D X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c3:29:50:b3:1b:93:54:85:84:a0:b9:25:62:1c:5e:b1:5b: 03:3c:49:b7:b8:4c:6d:fc:cc:e7:c2:db:9f:b1:85:2e:e2:cf: 9e:7f:b1:bd:79:fe:db:65:c2:93:ff:f4:e3:c3:94:57:91:28: 2b:5d:e0:63:7e:9d:15:bc:2f:b5:80:59:74:41:93:4a:0e:ae: 47:80:b1:88:ec:af:1e:86:40:29:14:a5:89:89:da:6a:38:93: 1d:7f:d1:b9:09:49:6e:61:ca:85:54:d9:c6:3f:49:4a:f5:c8: 36:94:c9:1a:57:50:9b:3a:e9:ee:c4:de:df:92:da:5a:e0:00: e2:ed:f9:84:76:b2:2b:21:88:98:69:d3:df:69:c5:b7:97:0c: 57:97:52:2b:ff:0f:0c:ad:89:11:00:9a:8c:be:36:92:89:95: b1:a5:a0:74:00:dd:03:82:a3:38:b7:db:11:6b:65:6f:6a:6c: 8f:15:11:7e:1f:06:8b:c4:6e:18:6c:79:94:c9:76:1a:8b:b7: 30:b6:e5:9b:4d:e0:70:35:49:7b:5f:4e:c4:d5:01:3c:84:2a: 02:b3:48:65:18:0d:cb:14:c2:74:ea:ce:c6:2a:7f:4d:9a:4d: 78:3e:5f:63:ce:53:71:a4:a8:bc:48:1e:dc:ec:e6:7d:93:2d: 1f:9c:16:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPbYttMcCgz7y5ErsHI66m75rEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTEwMTkwOTM1MDJaFw0yNTEwMjIxNjQ5MDJaMDMxMTAvBgNV BAMTKDAwRjMxN0I4RTFDMjIyQkU5OTM0NzZGQUY0Mjg1OTE2ODM3OEIxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfLxZ1qi5TbPAP4MiejnQ40Yi duf7WHEmywFg5GbfYSHlOvjgA1d5ZdjZYj8Uh5Ahuq7+QpR01BaWkPHSXvxQ2uGk vGwNzc9I70fB8T5sb2VFWn3EXKaubaToOHS+nazzcCUspdNCw+A6HeQeV0HA4hRv GQZyDzkzS0MWO2isyktVC8T4yVGoagQ7pr6Rs60Wh8bkK0GuVw2ZL5Fo0u09C9XC j6uI3MdbhjiM0mWhfQGyQp+eSeGJ/jHWxfUuQKltvqXtuWYehq7EzI3I9Ri1zWxF 83LlT4M6ml2UTEY6VLIfQcZwcs47ejb2mmeOEAawWlMzOUfFiu4v52rtP5ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPMXuOHCIr6ZNHb69ChZFoN4sW0wHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHDKVCzG5NUhYSguSViHF6xWwM8Sbe4TG38 zOfC25+xhS7iz55/sb15/ttlwpP/9OPDlFeRKCtd4GN+nRW8L7WAWXRBk0oOrkeA sYjsrx6GQCkUpYmJ2mo4kx1/0bkJSW5hyoVU2cY/SUr1yDaUyRpXUJs66e7E3t+S 2lrgAOLt+YR2sishiJhp099pxbeXDFeXUiv/DwytiREAmoy+NpKJlbGloHQA3QOC ozi32xFrZW9qbI8VEX4fBovEbhhseZTJdhqLtzC25ZtN4HA1SXtfTsTVATyEKgKz SGUYDcsUwnTqzsYqf02aTXg+X2POU3GkqLxIHtzs5n2TLR+cFgw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:43 2025 by rpki-client