$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: xR8pNM2/B5Irl7IhpRPQOqb+EF2TDEq/JVkQopm6gGA= Subject key identifier: 5B:88:18:99:80:FF:B7:ED:44:1F:60:C7:B8:04:B9:7F:ED:08:C4:37 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 2C4B29F54AFEA4B47FBF960D6DDB66FC7480B8C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0523 Signing time: Fri 14 Nov 2025 22:30:01 +0000 Manifest this update: Fri 14 Nov 2025 22:25:01 +0000 Manifest next update: Mon 17 Nov 2025 23:01:01 +0000 Files and hashes: 1: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: olQmj1h3bqKZafl7498WV9r/qMPYgp62qrZOUSg2Hrs=) 2: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Nov 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4b:29:f5:4a:fe:a4:b4:7f:bf:96:0d:6d:db:66:fc:74:80:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Nov 14 22:25:01 2025 GMT Not After : Nov 17 23:01:01 2025 GMT Subject: CN=5B88189980FFB7ED441F60C7B804B97FED08C437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:32:20:51:2f:25:71:b6:1a:c8:a0:ad:10: cf:30:0e:1e:98:76:98:0e:97:af:e4:78:fb:da:a4: f8:f8:f0:54:99:73:3e:2e:96:8f:fc:a2:6f:22:68: d0:29:c5:94:36:39:81:5a:9b:79:4c:d6:06:3d:bc: 0c:88:83:75:5c:b8:c2:7d:da:f1:55:fe:b9:de:43: e7:e3:97:3a:09:97:de:b3:64:22:00:24:19:e8:2d: ac:4d:68:c6:06:8a:63:18:ea:ac:ec:6f:91:7c:95: f6:02:f4:ed:fa:7b:95:32:87:f8:54:d1:38:65:d8: 2e:e3:b3:ae:d9:1d:d9:24:c8:02:23:25:90:6a:4a: aa:2a:ea:f6:3c:c3:6c:08:38:3d:31:17:ed:ab:4a: 45:9c:6f:0e:0f:e6:2b:70:3a:d3:e0:21:97:09:10: 0a:35:42:d8:96:b5:0f:16:30:e1:04:a0:00:5c:f6: dc:ee:9f:d9:b4:5b:3e:31:f6:41:c5:d8:42:b6:6c: 39:ca:9e:f6:ce:da:40:fe:e3:db:1c:27:8c:ae:97: 9a:35:d6:5e:9d:01:36:81:38:c5:2b:72:ad:eb:1a: f3:71:88:7f:d4:b9:fe:84:bf:b5:e8:39:c0:65:d4: b0:2b:14:e9:08:5a:9e:a6:c5:b5:ab:18:fb:24:54: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:18:99:80:FF:B7:ED:44:1F:60:C7:B8:04:B9:7F:ED:08:C4:37 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2a:e1:75:44:14:58:84:67:29:88:04:95:ff:c8:eb:ed:3a: 80:99:ab:94:0e:d3:c9:cf:ca:15:66:98:fd:69:6b:7f:c1:8b: 7a:83:87:bf:ad:cb:c2:a0:37:2a:8c:e1:9f:b3:82:a0:c8:dc: 9a:5b:2b:f2:e5:32:a1:f4:33:de:cd:34:d9:8a:b8:af:67:f2: 5c:72:bf:15:07:5a:84:4b:bb:45:e8:ae:f0:cf:b2:a7:b1:9e: e3:fc:92:79:0f:bb:93:37:53:c7:ba:df:69:92:96:c4:6b:87: 5e:c3:a7:e3:f9:af:a7:b7:d6:87:b4:61:2e:27:2d:be:ea:69: 63:38:42:af:25:0d:3a:26:7a:b3:37:df:de:ee:b8:83:02:76: cf:03:b8:33:8e:57:da:a2:b6:d4:fa:1a:a0:e4:35:fe:b6:ea: 50:b7:6e:8d:78:2a:69:cd:ef:83:02:9c:19:26:92:1d:73:56: a4:79:d3:ff:ad:b9:64:53:3c:e0:a2:e6:34:87:b6:b9:cb:56: c6:80:c3:c4:74:6e:48:82:3b:9c:d4:20:7b:c5:89:0c:c6:df: 34:45:09:2f:e0:53:87:88:20:5d:20:c4:cc:a2:c3:27:f2:49: 5c:78:ab:70:e8:d7:3a:f8:f3:5b:13:00:91:e6:a0:31:d6:3c: 2b:7e:9f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEsp9Ur+pLR/v5YNbdtm/HSAuMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTExMTQyMjI1MDFaFw0yNTExMTcyMzAxMDFaMDMxMTAvBgNV BAMTKDVCODgxODk5ODBGRkI3RUQ0NDFGNjBDN0I4MDRCOTdGRUQwOEM0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvjIgUS8lcbYayKCtEM8wDh6Y dpgOl6/kePvapPj48FSZcz4ulo/8om8iaNApxZQ2OYFam3lM1gY9vAyIg3VcuMJ9 2vFV/rneQ+fjlzoJl96zZCIAJBnoLaxNaMYGimMY6qzsb5F8lfYC9O36e5Uyh/hU 0Thl2C7js67ZHdkkyAIjJZBqSqoq6vY8w2wIOD0xF+2rSkWcbw4P5itwOtPgIZcJ EAo1QtiWtQ8WMOEEoABc9tzun9m0Wz4x9kHF2EK2bDnKnvbO2kD+49scJ4yul5o1 1l6dATaBOMUrcq3rGvNxiH/Uuf6Ev7XoOcBl1LArFOkIWp6mxbWrGPskVGjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4gYmYD/t+1EH2DHuAS5f+0IxDcwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwq4XVEFFiEZymIBJX/yOvtOoCZq5QO08nP yhVmmP1pa3/Bi3qDh7+ty8KgNyqM4Z+zgqDI3JpbK/LlMqH0M97NNNmKuK9n8lxy vxUHWoRLu0XorvDPsqexnuP8knkPu5M3U8e632mSlsRrh17Dp+P5r6e31oe0YS4n Lb7qaWM4Qq8lDTomerM3397uuIMCds8DuDOOV9qittT6GqDkNf626lC3bo14KmnN 74MCnBkmkh1zVqR50/+tuWRTPOCi5jSHtrnLVsaAw8R0bkiCO5zUIHvFiQzG3zRF CS/gU4eIIF0gxMyiwyfySVx4q3Do1zr481sTAJHmoDHWPCt+nxg= -----END CERTIFICATE-----Generated at Sun Nov 16 13:18:28 2025 by rpki-client