$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: 9XDat4d0zqerV6ceHICDlKNYXm8DfAzBKPGCPjR867U= Subject key identifier: F2:C6:80:75:60:3A:E9:36:43:7B:DE:A1:FD:5B:8C:AF:3C:F7:33:6D Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 2EE11F7D00B9853658A46954F4DFB61BD210A463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 0269 Signing time: Sun 19 Oct 2025 02:51:40 +0000 Manifest this update: Sun 19 Oct 2025 02:46:40 +0000 Manifest next update: Wed 22 Oct 2025 06:15:40 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: gCRey7H0WuLQ5jvLBDXZ5wwXnH0rsBf/nIIyx9ZAH4w=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WhL0uuz/He2Qtlqt0PLq8M7v44zvLbVytZ/ZdCqKzhs=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: y11xdr66zpXanICDTD0h0l+8FhlMcSW84VAZEHqoz7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e1:1f:7d:00:b9:85:36:58:a4:69:54:f4:df:b6:1b:d2:10:a4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Oct 19 02:46:40 2025 GMT Not After : Oct 22 06:15:40 2025 GMT Subject: CN=F2C68075603AE936437BDEA1FD5B8CAF3CF7336D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:45:da:cd:b1:e2:d4:94:17:f6:8b:82:09: a9:27:1a:7e:b1:3b:f1:8f:a7:bb:e0:4a:40:67:49: 2f:d5:8e:1b:17:c1:f6:02:bb:7c:e7:d4:b0:22:94: 3e:fe:e2:11:f2:09:33:73:9c:4c:49:01:0f:4c:ca: c6:f5:87:b7:c4:38:d6:17:83:86:bd:c6:65:6f:cd: d0:d1:64:59:45:c2:4c:1f:da:32:1b:99:64:56:88: ee:c3:50:d3:ef:e9:93:e9:0d:4c:13:2d:2d:f1:c0: c5:a2:1c:b0:a0:8d:52:0c:d9:3b:73:f5:47:49:ce: 82:ee:7c:43:d0:70:50:1b:e0:8c:f1:ce:42:de:0b: 49:1a:98:38:49:4a:ae:94:8c:a5:b3:0e:27:d3:16: 6d:cb:a1:c3:4d:1a:6e:09:eb:40:a5:93:44:ea:26: ce:ad:b3:34:80:c3:db:07:73:24:a7:a4:70:65:8a: 00:d0:42:04:c5:94:c3:5e:34:17:6f:84:32:e8:77: 25:18:da:fe:16:be:8d:d7:f2:95:5a:ae:e0:9e:85: 5e:13:3f:07:95:c0:19:a4:f1:fd:43:cc:f7:f4:d0: 7e:61:18:23:f7:d3:0d:63:fe:60:7b:df:40:91:e8: 4b:34:2e:c1:9f:10:ae:b5:d6:cd:6b:55:5f:7b:12: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C6:80:75:60:3A:E9:36:43:7B:DE:A1:FD:5B:8C:AF:3C:F7:33:6D X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:3c:fb:8e:87:bf:83:84:86:85:dc:de:62:43:54:0f:ad:2e: b6:0c:bd:b6:3b:80:2d:3a:37:d1:d7:e6:7e:8d:16:67:c0:3a: 25:51:9b:7b:42:bd:36:1d:cb:a2:2d:e2:77:bd:a5:05:33:3f: 65:94:2a:53:90:7c:c1:52:c2:d5:c5:2d:9d:64:87:cd:1a:65: 3f:60:1c:a0:23:5d:62:22:1a:71:83:b6:57:67:40:80:d6:b3: 69:72:d8:83:91:52:a1:7a:72:50:c2:8f:28:b2:31:de:c9:19: 77:90:ca:ca:ff:52:44:6a:c0:57:2c:48:6e:77:18:d0:1a:70: ad:6a:13:3b:3f:fe:af:cf:c2:b5:3b:4d:0a:9c:90:96:14:5e: c8:c8:1e:77:f0:2c:34:1d:ba:6f:dc:18:64:ec:3f:08:3c:01: a5:28:e3:f5:ff:c7:a7:e2:79:9f:9c:40:16:28:fb:df:e7:6c: 35:1e:7a:e0:80:a6:9d:73:af:6f:a8:56:3f:f4:a5:30:89:f5: bc:77:d7:88:2a:a7:d8:37:81:0a:79:86:d6:1d:75:fc:c1:c0: 20:3f:f8:9a:cf:f6:af:60:47:cf:03:1a:b9:aa:40:0e:be:40: 54:dc:ee:94:d7:ef:db:1e:46:a9:81:ca:8c:f7:38:77:1c:85: 7b:0f:7f:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuEffQC5hTZYpGlU9N+2G9IQpGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTEwMTkwMjQ2NDBaFw0yNTEwMjIwNjE1NDBaMDMxMTAvBgNV BAMTKEYyQzY4MDc1NjAzQUU5MzY0MzdCREVBMUZENUI4Q0FGM0NGNzMzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb0XazbHi1JQX9ouCCaknGn6x O/GPp7vgSkBnSS/VjhsXwfYCu3zn1LAilD7+4hHyCTNznExJAQ9Mysb1h7fEONYX g4a9xmVvzdDRZFlFwkwf2jIbmWRWiO7DUNPv6ZPpDUwTLS3xwMWiHLCgjVIM2Ttz 9UdJzoLufEPQcFAb4IzxzkLeC0kamDhJSq6UjKWzDifTFm3LocNNGm4J60Clk0Tq Js6tszSAw9sHcySnpHBligDQQgTFlMNeNBdvhDLodyUY2v4Wvo3X8pVaruCehV4T PweVwBmk8f1DzPf00H5hGCP30w1j/mB730CR6Es0LsGfEK611s1rVV97ErThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8saAdWA66TZDe96h/VuMrzz3M20wHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALY8+46Hv4OEhoXc3mJDVA+tLrYMvbY7gC06 N9HX5n6NFmfAOiVRm3tCvTYdy6It4ne9pQUzP2WUKlOQfMFSwtXFLZ1kh80aZT9g HKAjXWIiGnGDtldnQIDWs2ly2IORUqF6clDCjyiyMd7JGXeQysr/UkRqwFcsSG53 GNAacK1qEzs//q/PwrU7TQqckJYUXsjIHnfwLDQdum/cGGTsPwg8AaUo4/X/x6fi eZ+cQBYo+9/nbDUeeuCApp1zr2+oVj/0pTCJ9bx314gqp9g3gQp5htYddfzBwCA/ +JrP9q9gR88DGrmqQA6+QFTc7pTX79seRqmByoz3OHcchXsPf9k= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:13 2025 by rpki-client