$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: Da8MfdgZ5ehVfoudTpnbxZtTFRhQpPEVzLM2++pHbHE= Subject key identifier: F6:65:4B:B5:23:9D:F1:28:33:3C:F0:D2:C6:AB:BB:57:89:C9:2C:DC Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 066DD8EA5E179ECB461F1CC4793ABC3BA763CF20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 0395 Signing time: Thu 06 Nov 2025 11:40:54 +0000 Manifest this update: Thu 06 Nov 2025 11:35:54 +0000 Manifest next update: Sun 09 Nov 2025 23:26:54 +0000 Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: NWyozAc8i2Itz5pmkfydNyO2cFCEsZA8oTUfL6DSjO4=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6d:d8:ea:5e:17:9e:cb:46:1f:1c:c4:79:3a:bc:3b:a7:63:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Nov 6 11:35:54 2025 GMT Not After : Nov 9 23:26:54 2025 GMT Subject: CN=F6654BB5239DF128333CF0D2C6ABBB5789C92CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:0b:0d:04:45:8e:38:74:bb:db:fb:61:99: 30:a9:f3:22:15:e0:b5:43:64:ba:5d:41:4b:76:bf: 6c:9d:14:8a:ed:b3:51:61:18:ff:52:22:e3:ea:8d: 23:91:d7:91:ef:50:93:41:c1:7d:5f:ad:cf:89:12: a3:10:dd:e2:e0:c5:37:aa:31:94:70:24:c4:2f:91: 24:c5:6a:69:bc:31:7a:52:12:24:7f:8d:77:2e:f8: 22:b6:1a:bf:5d:24:c8:27:fc:6c:bd:1e:22:22:f1: 0f:11:98:9a:e0:fe:b3:d2:c8:2a:95:2c:ed:d2:b3: c1:72:98:0e:39:a2:c3:77:b6:ec:42:6d:f9:80:3b: 22:57:40:e9:61:ad:85:09:cd:3b:0d:3f:ff:a9:61: d4:29:e6:1a:a4:f0:e5:80:2e:6f:fd:f5:6d:3c:d0: 92:78:cb:31:0d:34:67:7b:e4:99:80:35:d1:b2:d4: 66:dc:67:e3:52:f3:d5:33:41:29:15:0b:ac:26:b8: 6d:84:a4:8c:da:20:9e:ee:d9:12:c0:75:21:6f:c0: df:74:18:97:24:fb:6f:19:eb:63:58:06:6a:fb:ca: 79:10:79:c5:ba:7d:07:37:60:6d:61:6c:16:0a:a1: f8:ba:76:3e:43:45:74:2c:4e:0a:2a:26:19:52:30: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:4B:B5:23:9D:F1:28:33:3C:F0:D2:C6:AB:BB:57:89:C9:2C:DC X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2d:48:ca:cc:e8:ec:94:26:d4:f9:93:19:10:45:60:48:91: 53:af:5e:90:4e:a8:31:50:b4:68:4f:0c:0f:49:00:38:1e:c5: 4b:f9:31:fa:b4:2a:96:da:98:08:62:4b:5a:0e:59:99:53:73: 71:57:3e:9a:84:37:6e:22:02:2e:36:11:56:2f:36:01:18:58: 92:d7:6a:25:b1:6b:0b:0d:b0:04:78:57:e6:a5:49:cf:b0:7e: 38:9e:98:29:90:57:b7:17:e9:a9:07:50:38:b1:49:2e:12:d5: 0a:80:85:e2:9a:68:e2:0c:6a:d7:ef:f6:32:77:cd:e0:77:ae: e3:c6:35:04:86:c4:6d:2a:18:25:d9:2b:92:df:c3:70:22:98: cd:57:00:86:44:57:79:1d:db:c8:bb:75:55:15:3a:5b:c0:85: f2:49:96:8c:2a:09:bc:fa:5b:b3:8b:c2:fe:e7:e3:6b:2a:f8: 68:b1:7d:71:61:78:85:c8:a9:67:8b:8b:46:55:c0:36:0c:ea: 67:38:71:8b:75:6f:76:07:b2:00:a7:29:cd:89:e6:d0:e6:2d: be:ba:1f:00:3f:91:13:bf:0d:a8:86:e3:a3:b0:ba:00:df:55: 20:ee:e9:97:32:ff:73:66:ad:66:bf:df:fd:38:7d:6a:17:b8: 03:b1:d2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBm3Y6l4XnstGHxzEeTq8O6djzyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTExMDYxMTM1NTRaFw0yNTExMDkyMzI2NTRaMDMxMTAvBgNV BAMTKEY2NjU0QkI1MjM5REYxMjgzMzNDRjBEMkM2QUJCQjU3ODlDOTJDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WgsNBEWOOHS72/thmTCp8yIV 4LVDZLpdQUt2v2ydFIrts1FhGP9SIuPqjSOR15HvUJNBwX1frc+JEqMQ3eLgxTeq MZRwJMQvkSTFamm8MXpSEiR/jXcu+CK2Gr9dJMgn/Gy9HiIi8Q8RmJrg/rPSyCqV LO3Ss8FymA45osN3tuxCbfmAOyJXQOlhrYUJzTsNP/+pYdQp5hqk8OWALm/99W08 0JJ4yzENNGd75JmANdGy1GbcZ+NS89UzQSkVC6wmuG2EpIzaIJ7u2RLAdSFvwN90 GJck+28Z62NYBmr7ynkQecW6fQc3YG1hbBYKofi6dj5DRXQsTgoqJhlSMKvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mVLtSOd8SgzPPDSxqu7V4nJLNwwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAtSMrM6OyUJtT5kxkQRWBIkVOvXpBOqDFQ tGhPDA9JADgexUv5Mfq0KpbamAhiS1oOWZlTc3FXPpqEN24iAi42EVYvNgEYWJLX aiWxawsNsAR4V+alSc+wfjiemCmQV7cX6akHUDixSS4S1QqAheKaaOIMatfv9jJ3 zeB3ruPGNQSGxG0qGCXZK5Lfw3AimM1XAIZEV3kd28i7dVUVOlvAhfJJlowqCbz6 W7OLwv7n42sq+GixfXFheIXIqWeLi0ZVwDYM6mc4cYt1b3YHsgCnKc2J5tDmLb66 HwA/kRO/DaiG46OwugDfVSDu6Zcy/3NmrWa/3/04fWoXuAOx0p8= -----END CERTIFICATE-----Generated at Sat Nov 8 21:46:28 2025 by rpki-client