$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: Be7oBpfUIUcbB3PBkVDgcqMft9nLUEsw1WZk3XU+nms= Subject key identifier: 4D:AD:87:61:EF:36:12:83:44:24:E5:E8:AF:93:C8:82:F0:03:75:74 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 08C86703B76B4172806E6EEEAE8459EEB17E0B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0526 Signing time: Wed 12 Nov 2025 04:22:41 +0000 Manifest this update: Wed 12 Nov 2025 04:17:41 +0000 Manifest next update: Sat 15 Nov 2025 11:43:41 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 3: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: no51B8hF6Q8w4lEvLSW9Gw/41HdTrmI/OZq1CnJcSWo=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 11:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c8:67:03:b7:6b:41:72:80:6e:6e:ee:ae:84:59:ee:b1:7e:0b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Nov 12 04:17:41 2025 GMT Not After : Nov 15 11:43:41 2025 GMT Subject: CN=4DAD8761EF3612834424E5E8AF93C882F0037574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:9f:3f:ff:e8:f2:89:96:a5:7d:15:c4:ee: f3:67:3f:c8:22:19:00:c3:5c:66:45:8c:22:df:39: 02:b5:94:84:9a:e9:60:fd:96:3b:a8:ef:49:6e:1f: 4a:33:22:e7:49:4c:76:b9:3a:de:e0:16:71:81:22: e0:0f:50:cc:2a:0a:10:41:32:a1:61:76:45:e7:d9: cc:34:7d:25:79:19:ac:64:bf:ae:3d:59:7a:d6:b4: 1e:e8:97:c2:c9:76:76:0e:07:b8:a5:00:be:3b:76: 94:0d:4e:ab:41:a1:d0:7b:d4:66:5d:27:33:b4:aa: 39:00:e3:33:41:cd:b7:46:9f:bd:5c:d7:66:48:0f: 00:38:39:76:de:c8:9a:67:7c:00:c4:a3:d6:d1:80: ad:4d:ae:87:f8:0d:9a:9f:a8:0e:95:3e:2b:17:88: 7b:10:7d:bf:92:56:46:31:38:7e:17:fa:bb:a0:ac: 7e:42:e0:b8:bd:53:a6:b8:0b:f5:de:b0:29:e3:9c: 6e:84:24:d7:04:03:5f:7e:e6:69:a0:3b:58:94:c9: 76:bd:30:93:5a:d8:97:49:69:ff:64:6c:3d:77:16: b9:46:63:3e:b5:e1:ef:58:b9:36:1a:9f:5e:d3:d0: 1b:a3:ae:b6:a3:72:08:80:1b:b0:15:9e:53:0b:da: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:87:61:EF:36:12:83:44:24:E5:E8:AF:93:C8:82:F0:03:75:74 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:75:af:92:56:65:b1:bb:d3:47:8e:af:c8:17:67:c7:11: b8:e4:2b:5a:b4:5f:85:3b:9c:79:64:53:0f:e0:b6:ea:a3:08: e8:ec:ad:13:75:f6:91:c0:b8:2c:dc:0f:33:ba:21:f2:21:80: ba:88:7a:14:45:b5:95:46:aa:b0:31:2d:e4:dd:12:d0:66:16: d3:56:c1:7a:12:1a:57:1e:8a:34:c4:a4:72:8b:9e:4c:a2:e6: f0:c2:b4:4f:f5:90:f3:b2:5c:6d:40:05:32:ae:77:be:bf:ed: 6f:80:04:cc:29:82:5d:bb:a7:71:70:d1:60:5f:8b:76:57:9b: 66:2a:0e:ab:d3:f5:93:80:d8:b9:57:c9:b6:cd:2b:7d:85:9d: e7:5e:34:ab:df:f0:29:13:84:a9:a1:06:22:24:aa:26:3a:9c: 58:61:07:5c:fc:c1:d5:dc:7e:1e:d4:81:2f:53:79:5b:7f:9c: 72:e9:40:f4:f5:d3:6a:2e:cb:d0:f3:08:8c:0f:b5:0b:21:c8: 8a:d5:a3:e6:d9:d6:4f:da:63:b0:2a:13:ec:7b:19:c6:17:8d: b0:1d:6b:75:0a:ef:0d:97:3e:1c:32:b4:1d:f6:e4:f3:ab:e0: fd:6a:8b:4c:5f:e3:f0:c3:ed:12:33:52:64:4d:6d:06:49:6e: 7d:cb:5d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMhnA7drQXKAbm7uroRZ7rF+CwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTExMTIwNDE3NDFaFw0yNTExMTUxMTQzNDFaMDMxMTAvBgNV BAMTKDREQUQ4NzYxRUYzNjEyODM0NDI0RTVFOEFGOTNDODgyRjAwMzc1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBf58//+jyiZalfRXE7vNnP8gi GQDDXGZFjCLfOQK1lISa6WD9ljuo70luH0ozIudJTHa5Ot7gFnGBIuAPUMwqChBB MqFhdkXn2cw0fSV5Gaxkv649WXrWtB7ol8LJdnYOB7ilAL47dpQNTqtBodB71GZd JzO0qjkA4zNBzbdGn71c12ZIDwA4OXbeyJpnfADEo9bRgK1Nrof4DZqfqA6VPisX iHsQfb+SVkYxOH4X+rugrH5C4Li9U6a4C/XesCnjnG6EJNcEA19+5mmgO1iUyXa9 MJNa2JdJaf9kbD13FrlGYz614e9YuTYan17T0BujrrajcgiAG7AVnlML2mcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTa2HYe82EoNEJOXor5PIgvADdXQwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwMda+SVmWxu9NHjq/IF2fHEbjkK1q0X4U7 nHlkUw/gtuqjCOjsrRN19pHAuCzcDzO6IfIhgLqIehRFtZVGqrAxLeTdEtBmFtNW wXoSGlceijTEpHKLnkyi5vDCtE/1kPOyXG1ABTKud76/7W+ABMwpgl27p3Fw0WBf i3ZXm2YqDqvT9ZOA2LlXybbNK32FnedeNKvf8CkThKmhBiIkqiY6nFhhB1z8wdXc fh7UgS9TeVt/nHLpQPT102ouy9DzCIwPtQshyIrVo+bZ1k/aY7AqE+x7GcYXjbAd a3UK7w2XPhwytB325POr4P1qi0xf4/DD7RIzUmRNbQZJbn3LXVM= -----END CERTIFICATE-----Generated at Thu Nov 13 09:24:54 2025 by rpki-client