$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: NYg86BXoz82lgMl2HYh7KJ1LDhFAyBhWTeTGtiPdsdc= Subject key identifier: 59:A9:C1:59:20:25:FC:86:36:EB:18:13:B0:34:C6:91:9D:1B:82:37 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 462E439611A5B3FAA5CC6D3FB1608B084371FF2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0522 Signing time: Thu 13 Nov 2025 07:31:12 +0000 Manifest this update: Thu 13 Nov 2025 07:26:12 +0000 Manifest next update: Sun 16 Nov 2025 08:55:12 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: GT43jfbcm95kvuLgyD9PU7wnsqIYZ3AoYjWlCh1gNug=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 08:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2e:43:96:11:a5:b3:fa:a5:cc:6d:3f:b1:60:8b:08:43:71:ff:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Nov 13 07:26:12 2025 GMT Not After : Nov 16 08:55:12 2025 GMT Subject: CN=59A9C1592025FC8636EB1813B034C6919D1B8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:97:a7:5b:d8:73:6a:46:b2:96:b2:d4:b4: 22:8f:9e:ac:e0:ee:0f:4b:09:e1:e9:5c:b2:7f:95: d5:b2:3d:dc:7e:37:9e:22:fc:15:98:51:40:83:18: 5d:92:ac:07:7f:0f:f3:10:0e:60:ee:a9:61:75:cf: a6:91:61:33:5e:a9:20:51:76:41:2f:0d:d6:70:bf: 5c:f7:64:5f:63:cb:4e:f4:81:15:87:b1:90:30:36: 35:ef:d5:1d:e2:63:7d:9c:99:c0:ba:69:f9:5d:df: 4e:b0:ff:a9:ea:5e:62:a9:4f:f1:f7:a7:22:6f:fd: cc:66:0d:57:b9:03:36:cb:9e:53:b5:ed:db:fa:a8: f9:8f:99:de:1c:99:0e:8e:39:56:aa:07:47:50:28: 95:4e:f9:3a:97:1b:ce:77:69:d0:95:8b:51:9d:a6: a2:13:47:51:ec:6c:d2:c3:bc:45:9e:ba:14:29:b5: fb:78:37:37:1c:c5:5f:51:8e:49:eb:7e:d6:0d:8f: cc:86:25:af:a3:e9:2a:dd:69:0f:f1:f3:09:0e:80: 0b:ce:49:c6:a5:aa:7a:dd:e6:83:1b:1b:cf:7b:1c: 36:a4:8b:9f:a8:f2:ee:96:c7:03:48:4d:7b:74:3b: 08:42:9a:3b:57:ea:a0:91:10:70:83:06:89:8c:2e: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A9:C1:59:20:25:FC:86:36:EB:18:13:B0:34:C6:91:9D:1B:82:37 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1f:da:2d:8f:a8:a2:47:95:ca:f2:9c:8b:09:09:f2:da:37: 47:88:2c:ae:6e:e0:e7:e9:50:d6:48:94:ec:c4:37:9a:57:0f: bb:dd:14:9d:c2:2c:ef:2a:72:d7:c6:81:19:bb:12:28:f3:a8: 9c:d5:79:3a:78:20:a1:73:44:0f:f6:70:25:22:e7:4b:80:4a: 7c:ca:85:9f:5b:ac:74:5b:c0:bf:d7:1b:84:b6:e1:3e:dd:08: f9:5b:1c:cf:81:34:49:bb:db:a8:c9:1c:e7:b1:d7:73:bd:aa: 8c:b1:5a:e5:ca:0d:68:9d:ac:fb:b3:12:61:e7:1e:3b:10:b1: 6e:47:1d:30:db:c9:3f:de:67:64:61:d8:30:d7:69:91:67:ef: 2a:6f:ae:88:09:fb:62:41:a6:61:97:5d:d1:1b:c4:62:c0:2f: b6:95:ca:cd:6b:0c:22:ec:1e:a6:4e:a6:33:1e:26:cf:06:ef: d3:5d:f2:35:a9:cc:26:1c:c8:83:a9:8d:15:b0:2a:85:6b:aa: 9f:6d:2c:ad:80:29:f0:4a:b5:34:cb:57:26:e8:a5:d8:04:a4: 59:65:4b:48:5d:3d:ac:ec:37:8b:d1:e1:9c:ce:f3:43:ea:ab: bc:f6:7a:f9:d4:6d:25:0f:b5:62:30:e4:ae:58:9d:91:40:69: 71:e4:6d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURi5DlhGls/qlzG0/sWCLCENx/yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTExMTMwNzI2MTJaFw0yNTExMTYwODU1MTJaMDMxMTAvBgNV BAMTKDU5QTlDMTU5MjAyNUZDODYzNkVCMTgxM0IwMzRDNjkxOUQxQjgyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBpenW9hzakaylrLUtCKPnqzg 7g9LCeHpXLJ/ldWyPdx+N54i/BWYUUCDGF2SrAd/D/MQDmDuqWF1z6aRYTNeqSBR dkEvDdZwv1z3ZF9jy070gRWHsZAwNjXv1R3iY32cmcC6afld306w/6nqXmKpT/H3 pyJv/cxmDVe5AzbLnlO17dv6qPmPmd4cmQ6OOVaqB0dQKJVO+TqXG853adCVi1Gd pqITR1HsbNLDvEWeuhQptft4NzccxV9RjknrftYNj8yGJa+j6SrdaQ/x8wkOgAvO Scalqnrd5oMbG897HDaki5+o8u6WxwNITXt0OwhCmjtX6qCREHCDBomMLlHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWanBWSAl/IY26xgTsDTGkZ0bgjcwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcf2i2PqKJHlcrynIsJCfLaN0eILK5u4Ofp UNZIlOzEN5pXD7vdFJ3CLO8qctfGgRm7EijzqJzVeTp4IKFzRA/2cCUi50uASnzK hZ9brHRbwL/XG4S24T7dCPlbHM+BNEm726jJHOex13O9qoyxWuXKDWidrPuzEmHn HjsQsW5HHTDbyT/eZ2Rh2DDXaZFn7ypvrogJ+2JBpmGXXdEbxGLAL7aVys1rDCLs HqZOpjMeJs8G79Nd8jWpzCYcyIOpjRWwKoVrqp9tLK2AKfBKtTTLVybopdgEpFll S0hdPazsN4vR4ZzO80Pqq7z2evnUbSUPtWIw5K5YnZFAaXHkbdA= -----END CERTIFICATE-----Generated at Thu Nov 13 09:36:00 2025 by rpki-client