$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: bzQGPnJstYzmr3nYQAPeJ1vAfcoMMHpzZ18F6UxhkEk= Subject key identifier: 7C:6E:C1:97:70:F2:BE:A3:78:40:15:F5:D1:B4:B8:61:73:03:63:D0 Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 44F8FFF381F832AB48D7E831C28AF9FB7932EFFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 0146 Signing time: Sun 19 Oct 2025 09:11:26 +0000 Manifest this update: Sun 19 Oct 2025 09:06:26 +0000 Manifest next update: Wed 22 Oct 2025 21:04:26 +0000 Files and hashes: 1: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=) 2: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=) 3: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=) 4: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=) 5: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: 33mdQ/jeijAK//rMr7s3zEcqIi6hDOhiebYQCjA+DoY=) 6: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=) 7: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f8:ff:f3:81:f8:32:ab:48:d7:e8:31:c2:8a:f9:fb:79:32:ef:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Oct 19 09:06:26 2025 GMT Not After : Oct 22 21:04:26 2025 GMT Subject: CN=7C6EC19770F2BEA3784015F5D1B4B861730363D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:1c:0b:ee:33:e1:72:06:89:38:0f:8b:a5: ac:64:16:af:e0:bb:20:b7:ec:a7:7f:78:6c:42:f6: 29:53:7a:35:82:37:b8:66:b8:ab:0f:fc:d9:1e:f8: 06:7f:0f:ac:f7:02:54:b4:de:7a:7e:b8:81:d2:85: 53:5e:e2:32:4d:94:1c:38:04:3b:62:d3:f0:bc:d2: 61:15:6b:b9:56:07:7a:f2:6e:53:3f:95:b7:68:b3: e0:fe:a3:0e:01:13:58:db:72:55:83:d8:23:88:b9: 8e:9b:3d:cc:a6:5c:dc:ea:43:f5:dc:8f:d3:ed:ac: 6b:47:e8:88:73:75:9d:8d:25:5e:c9:04:7f:cc:a7: 05:34:06:66:ed:ca:39:a2:d1:ba:27:38:e9:96:83: af:9a:78:24:f9:2c:62:08:45:58:a9:40:78:0a:81: b4:df:5b:5d:6d:07:a8:fa:11:76:9f:c3:46:73:99: 72:95:f3:c6:2f:ad:a8:23:40:d9:2e:ab:44:79:a5: 4e:89:fc:d8:37:32:98:7e:c6:5c:73:2f:f4:b5:c9: c8:ee:c2:8b:d3:ec:63:55:04:46:f5:e1:34:f7:1b: dd:94:3c:2e:49:49:1e:ce:6f:ac:7e:9d:45:82:c4: c2:f2:70:79:d1:71:36:de:8b:5d:a0:91:70:b1:2b: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6E:C1:97:70:F2:BE:A3:78:40:15:F5:D1:B4:B8:61:73:03:63:D0 X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:20:80:72:74:cb:6c:2f:15:bd:7c:07:a6:e1:ed:45:b2:80: 43:5d:63:89:14:cf:d0:99:49:a6:2a:84:9c:01:2d:0d:06:ed: b1:f8:2a:76:20:84:86:d3:7a:05:f8:70:6d:e1:30:ee:d9:61: af:20:fb:10:af:7f:82:00:0a:58:34:60:1b:c8:29:6a:b0:07: 3a:f3:a0:d9:e3:6e:00:e2:50:39:f8:5d:53:27:aa:bc:2e:14: 83:74:9a:c8:d5:b9:65:f9:98:ff:ea:c7:be:e6:fa:d3:60:38: 66:13:f9:5c:dd:1e:71:23:b6:36:ba:c8:f8:b3:03:92:c8:fe: 4a:e5:60:dc:98:32:26:93:d9:71:34:de:44:1a:ac:1d:9d:41: bc:84:1f:e9:6f:01:ea:1d:73:09:3b:9e:ab:ad:dc:f1:d8:77: e6:f7:ac:34:cd:e6:33:c3:01:d9:9d:50:19:b5:92:a7:78:59: f8:69:f7:38:53:16:5c:f7:52:64:a1:85:02:12:a1:8d:93:a1: 33:a7:0f:c8:4d:f2:65:95:54:f5:d2:b0:b5:96:f9:dc:14:99: 8e:e6:83:eb:6a:31:21:e1:7f:ea:3a:18:91:d6:b7:da:36:1c: ae:e3:50:5d:c2:83:13:78:56:35:9c:30:73:78:26:82:41:c2: 52:b1:4d:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPj/84H4MqtI1+gxwor5+3ky7/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTEwMTkwOTA2MjZaFw0yNTEwMjIyMTA0MjZaMDMxMTAvBgNV BAMTKDdDNkVDMTk3NzBGMkJFQTM3ODQwMTVGNUQxQjRCODYxNzMwMzYzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdBwL7jPhcgaJOA+LpaxkFq/g uyC37Kd/eGxC9ilTejWCN7hmuKsP/Nke+AZ/D6z3AlS03np+uIHShVNe4jJNlBw4 BDti0/C80mEVa7lWB3ryblM/lbdos+D+ow4BE1jbclWD2COIuY6bPcymXNzqQ/Xc j9PtrGtH6IhzdZ2NJV7JBH/MpwU0Bmbtyjmi0bonOOmWg6+aeCT5LGIIRVipQHgK gbTfW11tB6j6EXafw0ZzmXKV88YvragjQNkuq0R5pU6J/Ng3Mph+xlxzL/S1ycju wovT7GNVBEb14TT3G92UPC5JSR7Ob6x+nUWCxMLycHnRcTbei12gkXCxK4MJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfG7Bl3DyvqN4QBX10bS4YXMDY9AwHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgggHJ0y2wvFb18B6bh7UWygENdY4kUz9CZ SaYqhJwBLQ0G7bH4KnYghIbTegX4cG3hMO7ZYa8g+xCvf4IAClg0YBvIKWqwBzrz oNnjbgDiUDn4XVMnqrwuFIN0msjVuWX5mP/qx77m+tNgOGYT+VzdHnEjtja6yPiz A5LI/krlYNyYMiaT2XE03kQarB2dQbyEH+lvAeodcwk7nqut3PHYd+b3rDTN5jPD AdmdUBm1kqd4Wfhp9zhTFlz3UmShhQISoY2ToTOnD8hN8mWVVPXSsLWW+dwUmY7m g+tqMSHhf+o6GJHWt9o2HK7jUF3CgxN4VjWcMHN4JoJBwlKxTQs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:09 2025 by rpki-client