$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: Ti93ijqDrazAvkoo5A13PboHagSBQUV7kf1T53lOU+0= Subject key identifier: 69:D7:90:EF:C3:50:1A:A1:CB:CA:A1:E8:76:E4:96:F1:1D:75:8A:7B Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 40A9ABC36E3AB158DDF2CFB6946ECD022EB78B4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 07:51:38 +0000 Manifest this update: Sun 19 Oct 2025 07:46:38 +0000 Manifest next update: Wed 22 Oct 2025 19:34:38 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: uS6lf5OUVNpslmQIppKGFSj/gN+eHovPs8IZy5zcWLY=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) 3: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 4: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a9:ab:c3:6e:3a:b1:58:dd:f2:cf:b6:94:6e:cd:02:2e:b7:8b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Oct 19 07:46:38 2025 GMT Not After : Oct 22 19:34:38 2025 GMT Subject: CN=69D790EFC3501AA1CBCAA1E876E496F11D758A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:92:e3:de:96:7d:ea:9d:56:bd:88:bf:2d: d7:c6:c0:f2:1a:b2:57:7a:d3:7f:e7:6c:50:ba:19: 46:33:df:b0:13:c0:59:5d:6f:8e:b4:d9:5b:1d:48: cf:e7:1b:fb:23:12:dc:bc:80:99:c6:69:70:a7:d4: e8:fe:0c:9a:f1:fc:ab:3c:ac:9f:a1:cf:de:52:0c: 89:2a:2a:c2:94:24:74:d0:bf:e2:6a:39:49:90:af: 4b:d6:93:e2:55:8b:86:08:2f:23:54:10:19:8d:22: 69:ea:e8:97:13:ae:2d:31:e1:9e:e6:58:da:d6:6a: 70:34:12:8d:65:46:30:f0:5b:61:96:cb:d4:ab:8c: 40:db:a8:16:48:19:65:2c:cc:41:1d:ce:27:63:6b: 86:b3:58:b2:b7:0b:1a:23:95:a7:1b:c5:d2:43:38: 95:44:6a:6f:bc:7b:8c:28:e3:c9:85:79:ab:bb:0b: e5:ba:a0:34:63:36:a4:9b:d9:23:8b:6b:90:b4:bb: e8:b6:dd:f5:10:d8:5c:81:87:5c:49:d6:d5:67:f3: a0:df:8a:aa:43:61:cd:9a:dc:1d:85:a0:a2:11:70: 9e:4b:bc:99:37:1e:a6:54:aa:2f:b2:d0:f3:4f:b5: ed:31:31:02:02:f4:1d:0d:76:7f:d0:dc:38:06:2e: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:90:EF:C3:50:1A:A1:CB:CA:A1:E8:76:E4:96:F1:1D:75:8A:7B X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0f:f0:b2:5c:ca:c8:0c:85:2e:d5:6d:17:ab:66:0e:9b:e9: 9c:49:fb:b0:b0:99:a8:a0:e3:35:02:96:87:10:1e:a2:67:2d: 15:d4:75:aa:5b:b9:c8:a8:48:e4:78:f7:d2:9c:6b:b9:b5:e6: 7b:45:ed:4a:a2:07:41:a8:57:9f:16:59:ff:1d:79:d0:fd:31: 50:ec:0a:82:83:de:0f:14:e2:ab:bd:08:67:93:f1:27:72:55: 47:4d:03:24:bd:ab:29:e7:95:b1:9b:4f:c2:05:e7:9d:b8:82: b6:4e:a0:5e:6e:e7:9e:b9:ab:7b:c3:1e:7b:a2:fb:b0:d4:e5: 3c:b2:e7:77:c9:8c:9d:0a:05:95:b8:be:5e:60:c8:6b:8b:4c: 02:cf:88:1d:7e:2c:ed:08:17:68:99:04:89:26:ae:3b:5b:ec: ea:82:99:e2:f3:d8:df:63:59:9d:5c:28:b1:a7:09:da:de:1c: 89:9f:ab:10:33:4e:95:22:06:94:bc:5a:0c:38:ea:cf:d8:a9: c1:bf:71:b8:04:e1:af:50:c0:9c:b2:1f:66:fa:06:bc:77:38: 9a:0c:86:25:f6:fc:de:44:ea:97:ac:3d:f3:0a:c8:a6:8c:11: cb:d6:88:fb:60:03:31:ac:77:29:76:fc:b0:ac:12:f3:7b:c5: a1:30:2c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKmrw246sVjd8s+2lG7NAi63i08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNTEwMTkwNzQ2MzhaFw0yNTEwMjIxOTM0MzhaMDMxMTAvBgNV BAMTKDY5RDc5MEVGQzM1MDFBQTFDQkNBQTFFODc2RTQ5NkYxMUQ3NThBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmZLj3pZ96p1WvYi/LdfGwPIa sld603/nbFC6GUYz37ATwFldb4602VsdSM/nG/sjEty8gJnGaXCn1Oj+DJrx/Ks8 rJ+hz95SDIkqKsKUJHTQv+JqOUmQr0vWk+JVi4YILyNUEBmNImnq6JcTri0x4Z7m WNrWanA0Eo1lRjDwW2GWy9SrjEDbqBZIGWUszEEdzidja4azWLK3CxojlacbxdJD OJVEam+8e4wo48mFeau7C+W6oDRjNqSb2SOLa5C0u+i23fUQ2FyBh1xJ1tVn86Df iqpDYc2a3B2FoKIRcJ5LvJk3HqZUqi+y0PNPte0xMQIC9B0Ndn/Q3DgGLgoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadeQ78NQGqHLyqHoduSW8R11inswHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMP8LJcysgMhS7VbRerZg6b6ZxJ+7Cwmaig 4zUClocQHqJnLRXUdapbucioSOR499Kca7m15ntF7UqiB0GoV58WWf8dedD9MVDs CoKD3g8U4qu9CGeT8SdyVUdNAyS9qynnlbGbT8IF5524grZOoF5u5565q3vDHnui +7DU5Tyy53fJjJ0KBZW4vl5gyGuLTALPiB1+LO0IF2iZBIkmrjtb7OqCmeLz2N9j WZ1cKLGnCdreHImfqxAzTpUiBpS8Wgw46s/YqcG/cbgE4a9QwJyyH2b6Brx3OJoM hiX2/N5E6pesPfMKyKaMEcvWiPtgAzGsdyl2/LCsEvN7xaEwLO4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:49:52 2025 by rpki-client