$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: 7Oum+v2YBmgrqVM5LnxLAAmXY+uI7zdSzZLugp2sShU= Subject key identifier: A1:E1:E2:01:2C:D3:1D:0F:7B:DE:04:3F:BE:98:62:BF:FD:AE:29:C7 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 44E849F3C4872269A48392CCF9CFC8E0B66FE48C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0223 Signing time: Mon 03 Nov 2025 12:01:04 +0000 Manifest this update: Mon 03 Nov 2025 11:56:04 +0000 Manifest next update: Thu 06 Nov 2025 22:13:04 +0000 Files and hashes: 1: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 2: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: veYca/ed5/VtKeuyKzkndx23Lno4CdO9c+AHZ0SSbp0=) 3: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 4: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 5: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 6: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 7: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 8: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 9: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 10: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e8:49:f3:c4:87:22:69:a4:83:92:cc:f9:cf:c8:e0:b6:6f:e4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Nov 3 11:56:04 2025 GMT Not After : Nov 6 22:13:04 2025 GMT Subject: CN=A1E1E2012CD31D0F7BDE043FBE9862BFFDAE29C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:b9:33:70:29:80:8e:e9:ac:46:35:5f:c1: 09:73:87:ca:8d:12:37:87:24:9e:d2:c8:c7:8b:07: 4a:60:dc:6f:b8:7d:98:60:78:b2:05:75:56:ff:44: 65:2d:55:83:2c:83:04:fb:bb:9f:08:e3:7e:85:0b: bf:93:56:0b:e8:77:b0:a3:87:7c:f3:b2:c1:ea:94: 7e:25:ba:2c:53:96:50:2d:c8:5d:e9:76:cd:3e:f0: 14:4d:42:ce:62:a8:7c:cf:9a:ef:f0:1a:b1:ce:09: 07:50:f4:de:1a:40:37:d1:b6:27:87:ea:4e:26:1b: c7:20:1a:c1:2e:cc:7d:76:32:6d:f5:2b:9b:a4:a4: af:ff:a0:a5:42:93:f6:ea:dc:aa:8c:1d:61:ec:3a: a6:b4:15:82:77:02:8b:31:eb:83:3f:46:50:94:56: 45:65:24:56:35:f1:c2:81:d7:61:d7:c5:16:5b:16: d5:b3:32:ec:fd:d7:89:28:38:09:08:90:3f:03:8e: ae:b7:4b:6d:88:0f:92:da:0b:b8:db:27:f5:f6:df: 69:29:8a:9d:36:41:4c:3a:db:59:38:95:28:6f:ca: aa:a4:d3:d3:99:9a:ed:48:bc:a3:76:4a:7f:ab:40: 09:e6:5e:64:97:60:07:f9:f5:9d:f1:aa:51:98:48: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E1:E2:01:2C:D3:1D:0F:7B:DE:04:3F:BE:98:62:BF:FD:AE:29:C7 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:e9:41:3f:6e:a6:57:9a:d6:c8:f6:5f:ca:17:91:8e:46: 53:6f:e4:33:b5:49:7b:4c:3d:a2:1d:d1:6a:c9:d0:4c:79:2c: 9d:ef:81:06:a7:02:07:c5:89:4b:6b:38:0b:45:b0:f3:a5:4c: b9:75:9e:bb:9b:39:18:b0:fd:9b:0f:9f:42:d8:05:ff:bd:b2: fe:35:a4:33:5b:8c:79:4d:1b:d1:57:0a:6d:2a:9f:c4:d9:41: 73:31:4b:7d:db:7a:96:86:f5:bc:ce:73:b1:f1:05:8e:fe:da: 0a:2f:80:fa:94:6a:00:01:26:94:39:ca:c7:4d:48:ed:d8:1a: 2d:00:22:93:30:20:4b:1f:9f:ca:98:ad:7a:98:3c:64:cd:29: a0:9a:e2:09:22:de:c6:67:be:e9:dd:dd:0b:d7:b8:1f:e1:48: d1:07:c6:c3:1c:a3:a4:5f:23:07:d1:af:6b:64:15:4a:f4:52: b8:d4:26:6e:f4:57:9e:d2:a9:f9:33:5e:55:1b:18:49:e3:ce: cd:76:68:cd:61:f6:3b:a4:5b:87:6f:42:0e:46:2f:b4:c7:96: c7:da:9f:12:c7:d1:45:b5:b6:70:51:38:e1:99:1c:14:99:17: 5e:f6:02:5b:e1:d7:2d:11:ab:fc:5e:b1:86:5a:a9:bb:95:34: 39:1e:57:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROhJ88SHImmkg5LM+c/I4LZv5IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTExMDMxMTU2MDRaFw0yNTExMDYyMjEzMDRaMDMxMTAvBgNV BAMTKEExRTFFMjAxMkNEMzFEMEY3QkRFMDQzRkJFOTg2MkJGRkRBRTI5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPobkzcCmAjumsRjVfwQlzh8qN EjeHJJ7SyMeLB0pg3G+4fZhgeLIFdVb/RGUtVYMsgwT7u58I436FC7+TVgvod7Cj h3zzssHqlH4luixTllAtyF3pds0+8BRNQs5iqHzPmu/wGrHOCQdQ9N4aQDfRtieH 6k4mG8cgGsEuzH12Mm31K5ukpK//oKVCk/bq3KqMHWHsOqa0FYJ3Aosx64M/RlCU VkVlJFY18cKB12HXxRZbFtWzMuz914koOAkIkD8Djq63S22ID5LaC7jbJ/X232kp ip02QUw621k4lShvyqqk09OZmu1IvKN2Sn+rQAnmXmSXYAf59Z3xqlGYSI7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoeHiASzTHQ973gQ/vphiv/2uKccwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcz6UE/bqZXmtbI9l/KF5GORlNv5DO1SXtM PaId0WrJ0Ex5LJ3vgQanAgfFiUtrOAtFsPOlTLl1nrubORiw/ZsPn0LYBf+9sv41 pDNbjHlNG9FXCm0qn8TZQXMxS33bepaG9bzOc7HxBY7+2govgPqUagABJpQ5ysdN SO3YGi0AIpMwIEsfn8qYrXqYPGTNKaCa4gki3sZnvund3QvXuB/hSNEHxsMco6Rf IwfRr2tkFUr0UrjUJm70V57SqfkzXlUbGEnjzs12aM1h9jukW4dvQg5GL7THlsfa nxLH0UW1tnBROOGZHBSZF172Alvh1y0Rq/xesYZaqbuVNDkeV+E= -----END CERTIFICATE-----Generated at Tue Nov 4 13:52:08 2025 by rpki-client