$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: tzklqRGCHJkigtj0qEMpEK9uCMSm6a8hUyDRbgiUKcs= Subject key identifier: A3:57:25:77:93:12:2C:09:84:C6:77:14:12:DD:E0:23:4F:79:CF:6F Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 7EA0C8F30D389D1A415FAB4564AE9543BE19CBF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 04:41:24 +0000 Manifest this update: Sun 19 Oct 2025 04:36:24 +0000 Manifest next update: Wed 22 Oct 2025 14:07:24 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: p6aU+LnX0dsqG8xUMLTwPRXLPut2qchV1IyyJBE5lyo=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a0:c8:f3:0d:38:9d:1a:41:5f:ab:45:64:ae:95:43:be:19:cb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Oct 19 04:36:24 2025 GMT Not After : Oct 22 14:07:24 2025 GMT Subject: CN=A357257793122C0984C6771412DDE0234F79CF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:a8:fb:2b:90:2c:38:13:ac:b0:ff:29:d2: 56:c4:c9:47:d6:6c:7e:f9:d8:84:8c:df:03:86:b5: 00:89:ff:40:ac:6c:1c:66:7e:a9:f7:c0:b2:87:31: 4d:59:8c:5c:e3:f3:c9:0a:75:ac:66:d6:52:37:e4: 35:e8:01:06:1c:78:61:aa:be:fb:16:4a:2a:0f:14: 31:1c:6c:50:43:fc:98:b6:91:36:87:78:d9:e4:54: f8:bd:ce:40:6f:07:5a:c0:d1:93:95:72:2c:00:dd: 47:7a:b7:5b:aa:0f:4d:61:3f:92:87:c0:79:b0:ef: 95:ae:a5:31:b5:32:c9:80:3d:7d:c7:09:79:b1:9d: 25:6a:9e:4b:1b:3f:d0:41:ba:b2:ac:93:ef:58:ec: a8:1d:2e:df:b9:f4:6d:3a:40:5d:43:18:6d:68:0a: d1:bd:6b:ae:ae:eb:81:a1:2a:3e:3d:b9:bb:5a:34: 71:93:03:1a:bf:99:1c:3c:e0:43:b5:f6:b3:37:46: 3b:6d:25:71:b5:a5:23:46:56:76:09:9c:8e:df:33: fd:41:58:fd:19:a2:d9:55:14:14:c3:7f:ee:70:10: 07:6b:11:4f:46:a0:44:e3:24:1e:e7:60:9b:08:92: 6b:07:05:6e:4c:b4:5d:19:39:c0:8e:cc:6f:65:08: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:57:25:77:93:12:2C:09:84:C6:77:14:12:DD:E0:23:4F:79:CF:6F X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5a:4d:59:9b:ff:49:88:11:23:8c:25:68:16:5b:5e:05:b7: 61:a1:d5:7a:2c:27:77:cb:28:e8:aa:f2:bd:fc:52:1d:38:99: 30:12:ed:d6:9b:2d:8f:f9:d5:79:85:54:51:8b:f0:1f:da:fd: 2c:d2:09:bb:ee:a9:57:bb:2c:7a:c4:72:6b:57:6d:15:03:50: 9a:06:4c:27:74:5d:a4:bb:33:73:f5:c4:6c:89:49:6b:84:28: a5:b5:da:cc:9e:8c:60:4c:79:3d:f3:a4:c4:d1:aa:c9:53:b2: c9:2d:c9:a3:cb:9f:4c:6b:b1:16:34:f2:f2:56:6a:63:aa:bc: 94:25:e1:42:0e:de:a2:14:37:1c:31:fb:6c:45:fc:16:49:dd: 2d:4f:aa:e7:e5:82:93:23:aa:c6:68:24:a9:30:df:62:98:ee: 5f:69:dc:51:97:e2:5b:5d:f7:0e:d9:b7:a4:4a:98:5c:45:62: 49:7f:40:0b:7f:8c:a6:cd:c9:31:1a:d7:ef:34:6f:3d:95:79: c1:d5:d3:35:86:57:de:58:ed:c4:ad:74:42:b3:36:18:89:48: d7:63:c2:19:5d:8c:69:6f:0b:f7:b1:ec:a1:b1:5f:79:cd:1b: 96:66:c5:a0:11:39:f5:a9:96:08:03:7b:78:c4:d1:79:c9:29: df:88:3f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqDI8w04nRpBX6tFZK6VQ74Zy/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTEwMTkwNDM2MjRaFw0yNTEwMjIxNDA3MjRaMDMxMTAvBgNV BAMTKEEzNTcyNTc3OTMxMjJDMDk4NEM2NzcxNDEyRERFMDIzNEY3OUNGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49aj7K5AsOBOssP8p0lbEyUfW bH752ISM3wOGtQCJ/0CsbBxmfqn3wLKHMU1ZjFzj88kKdaxm1lI35DXoAQYceGGq vvsWSioPFDEcbFBD/Ji2kTaHeNnkVPi9zkBvB1rA0ZOVciwA3Ud6t1uqD01hP5KH wHmw75WupTG1MsmAPX3HCXmxnSVqnksbP9BBurKsk+9Y7KgdLt+59G06QF1DGG1o CtG9a66u64GhKj49ubtaNHGTAxq/mRw84EO19rM3RjttJXG1pSNGVnYJnI7fM/1B WP0ZotlVFBTDf+5wEAdrEU9GoETjJB7nYJsIkmsHBW5MtF0ZOcCOzG9lCOxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1cld5MSLAmExncUEt3gI095z28wHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1aTVmb/0mIESOMJWgWW14Ft2Gh1XosJ3fL KOiq8r38Uh04mTAS7dabLY/51XmFVFGL8B/a/SzSCbvuqVe7LHrEcmtXbRUDUJoG TCd0XaS7M3P1xGyJSWuEKKW12syejGBMeT3zpMTRqslTssktyaPLn0xrsRY08vJW amOqvJQl4UIO3qIUNxwx+2xF/BZJ3S1PquflgpMjqsZoJKkw32KY7l9p3FGX4ltd 9w7Zt6RKmFxFYkl/QAt/jKbNyTEa1+80bz2VecHV0zWGV95Y7cStdEKzNhiJSNdj whldjGlvC/ex7KGxX3nNG5ZmxaAROfWplggDe3jE0XnJKd+IP+w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:42 2025 by rpki-client