$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: LsT4K3PdMTEXruIhUQTaBSY3Oz//VJssUSrHRtC1ris= Subject key identifier: 6B:FB:70:AF:C2:E1:14:F1:A1:0D:D6:6B:9A:70:05:CE:65:54:73:F4 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 6467F894758E3047EBC57C26D3CEA8EC309D0127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: D6 Signing time: Sun 26 Oct 2025 02:30:05 +0000 Manifest this update: Sun 26 Oct 2025 02:25:05 +0000 Manifest next update: Wed 29 Oct 2025 05:03:05 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 2: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 3: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 4: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 5: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: gU+kYiqJjJn5XMln7rN5PG5siN0N1dimCpblw2IEJAQ=) 6: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 7: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 05:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:67:f8:94:75:8e:30:47:eb:c5:7c:26:d3:ce:a8:ec:30:9d:01:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Oct 26 02:25:05 2025 GMT Not After : Oct 29 05:03:05 2025 GMT Subject: CN=6BFB70AFC2E114F1A10DD66B9A7005CE655473F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:f5:c2:ac:64:3f:43:e5:8f:da:39:a8:7f: 62:f2:7e:13:2f:75:ef:0f:5f:0b:1e:97:98:ed:28: ed:11:1a:c4:bc:46:67:03:35:1a:71:d1:be:d4:6a: 49:08:d2:6d:62:f4:5d:8e:18:98:8f:c0:96:a3:d1: b2:54:cc:3e:dd:2c:e0:14:5a:c0:48:63:2d:41:83: 2d:16:d2:81:f8:e7:47:f6:d0:f9:d1:88:4e:70:f4: 9a:06:4f:3c:e7:e4:25:b8:65:28:ae:48:ad:8e:ee: 4d:8b:ca:90:cb:e9:f9:7e:5a:94:27:09:33:f6:00: f9:df:30:fb:0b:ea:bf:7f:31:9a:4d:f9:34:42:a8: af:13:b4:0d:d0:81:07:90:37:8b:f0:10:f8:f5:25: 6e:a1:56:1b:6b:e8:fa:47:7c:0a:d7:b0:14:f6:df: cd:10:be:fa:57:8f:6b:56:dd:da:6a:3e:d9:0f:5a: 8b:86:32:83:89:02:26:5d:58:60:37:8d:7b:f6:10: c8:b7:a1:53:47:10:85:d7:f0:e8:89:ac:e0:11:bf: bf:33:96:5e:38:a5:6f:67:da:d6:ac:05:22:53:82: c9:8f:0b:b4:43:ce:5f:d1:a1:d5:ae:54:15:e8:3d: 0e:3f:2c:cc:dd:70:ab:dc:68:0b:4b:d5:63:85:0c: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:70:AF:C2:E1:14:F1:A1:0D:D6:6B:9A:70:05:CE:65:54:73:F4 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:33:78:ca:ec:82:29:d4:16:99:c1:2e:16:05:74:49:27:25: 7a:a7:09:e7:03:fe:0b:aa:6f:5c:85:00:df:28:c3:61:ed:14: 75:2c:20:75:62:93:30:68:d4:b8:a4:2a:cf:02:8d:cf:93:5b: a7:bc:9d:f9:6e:05:8d:d4:82:6c:cb:61:fa:9c:38:12:e5:2e: 0f:b5:28:24:0b:9e:56:c2:21:bb:41:04:ef:2c:85:f0:75:ac: 5e:1f:fe:09:11:47:2f:48:e3:29:25:4e:11:4a:1e:52:18:e9: 0f:52:ac:d5:a5:40:49:e1:01:00:18:04:de:55:f4:0e:ec:9a: 6a:a6:21:f6:12:a7:ed:73:b4:95:ad:58:8e:78:ed:8b:fb:73: 44:73:dd:65:d6:46:1d:61:34:0d:59:40:6f:e6:9c:cd:df:c5: be:3f:e2:2b:3d:7e:9d:90:f9:e3:fe:71:22:ed:1b:33:51:34: e3:61:e7:13:97:4e:9e:1a:69:78:0d:95:f1:c4:d5:55:9d:7c: 74:43:ab:19:41:7b:e2:fc:5f:39:c5:2a:ca:b0:d1:03:90:c1: f7:aa:2e:05:e9:f4:ec:3a:fd:60:59:a0:87:61:89:16:48:5c: 88:dd:30:f0:5d:fc:86:cb:e7:c0:82:d3:a3:3c:f9:ed:c7:26: 02:c6:c6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGf4lHWOMEfrxXwm086o7DCdAScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTEwMjYwMjI1MDVaFw0yNTEwMjkwNTAzMDVaMDMxMTAvBgNV BAMTKDZCRkI3MEFGQzJFMTE0RjFBMTBERDY2QjlBNzAwNUNFNjU1NDczRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUvXCrGQ/Q+WP2jmof2LyfhMv de8PXwsel5jtKO0RGsS8RmcDNRpx0b7UakkI0m1i9F2OGJiPwJaj0bJUzD7dLOAU WsBIYy1Bgy0W0oH450f20PnRiE5w9JoGTzzn5CW4ZSiuSK2O7k2LypDL6fl+WpQn CTP2APnfMPsL6r9/MZpN+TRCqK8TtA3QgQeQN4vwEPj1JW6hVhtr6PpHfArXsBT2 380QvvpXj2tW3dpqPtkPWouGMoOJAiZdWGA3jXv2EMi3oVNHEIXX8OiJrOARv78z ll44pW9n2tasBSJTgsmPC7RDzl/RodWuVBXoPQ4/LMzdcKvcaAtL1WOFDJtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/twr8LhFPGhDdZrmnAFzmVUc/QwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQzeMrsginUFpnBLhYFdEknJXqnCecD/guq b1yFAN8ow2HtFHUsIHVikzBo1LikKs8Cjc+TW6e8nfluBY3UgmzLYfqcOBLlLg+1 KCQLnlbCIbtBBO8shfB1rF4f/gkRRy9I4yklThFKHlIY6Q9SrNWlQEnhAQAYBN5V 9A7smmqmIfYSp+1ztJWtWI547Yv7c0Rz3WXWRh1hNA1ZQG/mnM3fxb4/4is9fp2Q +eP+cSLtGzNRNONh5xOXTp4aaXgNlfHE1VWdfHRDqxlBe+L8XznFKsqw0QOQwfeq LgXp9Ow6/WBZoIdhiRZIXIjdMPBd/IbL58CC06M8+e3HJgLGxtc= -----END CERTIFICATE-----Generated at Mon Oct 27 13:26:18 2025 by rpki-client