$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: 4TSPo6sUlqWpcNE6wzxkxSRoSOtaUJ3iYh6BCqDol5A= Subject key identifier: 4B:F2:96:77:16:F9:9B:30:87:76:D3:3B:70:7F:52:34:1E:B8:D2:5B Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 27DEE19FBDBB30B444E75F0459145B694AA38CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01DA Signing time: Mon 27 Oct 2025 00:21:17 +0000 Manifest this update: Mon 27 Oct 2025 00:16:17 +0000 Manifest next update: Thu 30 Oct 2025 11:07:17 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 2: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: 635J3Na7lzN8uGs2H1rYD6CDlfmrZk3r3PPt80KnLmc=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 11:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:de:e1:9f:bd:bb:30:b4:44:e7:5f:04:59:14:5b:69:4a:a3:8c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Oct 27 00:16:17 2025 GMT Not After : Oct 30 11:07:17 2025 GMT Subject: CN=4BF2967716F99B308776D33B707F52341EB8D25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:27:af:09:bb:f1:a3:94:3b:4f:23:0b:50: 2b:21:e3:e0:a5:cf:10:6a:53:9e:0a:5d:0e:25:b9: 8d:35:e8:1b:11:2d:2e:99:b2:aa:c4:53:6f:68:ee: d1:ee:f9:73:ed:48:e9:ba:c5:94:0a:b7:e6:59:42: 70:99:d2:ee:c2:da:c6:0f:e1:24:bf:b3:c7:f0:cb: dd:ef:c3:7c:1c:b0:0e:7a:a8:f7:b1:a0:b4:78:27: 02:31:e1:b2:25:d1:14:e0:3b:7b:ab:46:1b:1d:21: a9:af:ab:50:13:8a:89:dc:7b:3c:af:bb:5e:a5:b6: 03:9e:e2:31:e5:ed:d9:b2:8c:d0:78:58:68:38:d1: 6e:d2:de:51:63:48:87:38:7c:0d:14:7b:c4:cb:d8: 8d:e8:39:5f:c9:a1:b9:0a:48:11:23:ca:4d:f1:7b: 77:68:0e:1d:61:3c:d3:4b:16:02:cb:28:df:e7:a2: a7:55:34:ba:6b:22:36:0f:68:b8:71:cd:ec:16:8b: a5:63:4b:59:8c:d4:49:04:3d:9b:33:6e:39:80:fb: 2c:d4:55:fe:b8:9c:c7:31:27:60:ec:96:26:1d:b7: 75:c5:9f:2e:e7:24:43:ea:50:82:3c:05:ed:61:17: ee:87:62:0e:7c:06:98:d8:9f:56:35:d0:dc:f3:81: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:96:77:16:F9:9B:30:87:76:D3:3B:70:7F:52:34:1E:B8:D2:5B X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:49:e7:78:d3:8e:a6:30:0f:e4:9a:c7:e7:11:dc:96:c2:a8: cd:22:55:8a:1b:a5:2f:17:f4:e9:ee:01:a8:20:83:ea:9b:52: d2:14:a9:5c:59:ff:be:be:4f:5f:fc:3d:43:c2:7e:20:bc:5f: 66:89:0f:1e:35:80:b6:e7:91:fe:0d:ed:d2:a2:4b:37:c2:51: 15:a5:aa:7c:7d:94:c0:6b:af:d2:4d:d3:3c:a2:a6:84:2f:3d: d3:c8:79:b0:9a:ab:06:1f:8d:1c:96:6f:52:36:11:58:4b:8d: 70:2c:d9:8d:26:c7:e6:d6:f2:60:98:2a:8e:0f:81:5e:30:cb: 4c:c7:93:8d:d6:f5:2c:a5:2b:bb:98:d5:40:a6:01:08:d3:50: 80:47:79:d2:5b:29:20:c5:40:19:37:41:17:c7:5b:50:9c:0b: 52:6b:e6:e6:ec:c4:98:57:5e:48:ef:a2:dd:a7:5a:f9:6b:ad: ec:10:1d:52:16:19:a9:c6:29:2e:2d:a6:c8:51:cd:c7:c4:43: b3:50:b4:2e:00:dd:a5:ac:d0:5f:68:70:73:62:90:c2:93:ea: 33:92:71:a3:8d:90:43:2a:93:c4:74:e6:5c:8e:82:a5:42:96: c6:12:26:ee:c1:8f:0b:88:5a:fd:3c:7f:b6:87:4b:b8:24:dd: 8b:e3:35:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ97hn727MLRE518EWRRbaUqjjP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTEwMjcwMDE2MTdaFw0yNTEwMzAxMTA3MTdaMDMxMTAvBgNV BAMTKDRCRjI5Njc3MTZGOTlCMzA4Nzc2RDMzQjcwN0Y1MjM0MUVCOEQyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3yevCbvxo5Q7TyMLUCsh4+Cl zxBqU54KXQ4luY016BsRLS6ZsqrEU29o7tHu+XPtSOm6xZQKt+ZZQnCZ0u7C2sYP 4SS/s8fwy93vw3wcsA56qPexoLR4JwIx4bIl0RTgO3urRhsdIamvq1ATioncezyv u16ltgOe4jHl7dmyjNB4WGg40W7S3lFjSIc4fA0Ue8TL2I3oOV/JobkKSBEjyk3x e3doDh1hPNNLFgLLKN/noqdVNLprIjYPaLhxzewWi6VjS1mM1EkEPZszbjmA+yzU Vf64nMcxJ2DsliYdt3XFny7nJEPqUII8Be1hF+6HYg58BpjYn1Y10NzzgbXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/KWdxb5mzCHdtM7cH9SNB640lswHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVJ53jTjqYwD+Sax+cR3JbCqM0iVYobpS8X 9OnuAaggg+qbUtIUqVxZ/76+T1/8PUPCfiC8X2aJDx41gLbnkf4N7dKiSzfCURWl qnx9lMBrr9JN0zyipoQvPdPIebCaqwYfjRyWb1I2EVhLjXAs2Y0mx+bW8mCYKo4P gV4wy0zHk43W9SylK7uY1UCmAQjTUIBHedJbKSDFQBk3QRfHW1CcC1Jr5ubsxJhX Xkjvot2nWvlrrewQHVIWGanGKS4tpshRzcfEQ7NQtC4A3aWs0F9ocHNikMKT6jOS caONkEMqk8R05lyOgqVClsYSJu7BjwuIWv08f7aHS7gk3YvjNaY= -----END CERTIFICATE-----Generated at Wed Oct 29 11:26:09 2025 by rpki-client