$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: +UklMt2U791FlbYuZhswaAoebyfqGRy6zuz1RLzKnB4= Subject key identifier: 14:17:56:56:9B:49:AC:AF:86:FE:A5:04:1B:26:FD:AE:38:7F:EE:80 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 6D553D7948ED2E5F12A45D768253EA83C05FEF32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0492 Signing time: Sat 18 Oct 2025 07:11:28 +0000 Manifest this update: Sat 18 Oct 2025 07:06:28 +0000 Manifest next update: Tue 21 Oct 2025 14:28:28 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 2: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: 9PqtzcVkX4fnFFUNuudW0D92q3GNsAy+5Yb+yREoTNk=) 3: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) 4: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:55:3d:79:48:ed:2e:5f:12:a4:5d:76:82:53:ea:83:c0:5f:ef:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Oct 18 07:06:28 2025 GMT Not After : Oct 21 14:28:28 2025 GMT Subject: CN=141756569B49ACAF86FEA5041B26FDAE387FEE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:e9:52:09:c3:b3:45:13:ff:73:7d:c5:5b: ea:80:3e:8a:57:a7:ff:ed:f6:11:24:57:eb:09:62: 31:1a:55:34:fa:8e:54:df:7e:13:a1:99:75:cf:1a: ef:0c:09:1e:96:c3:2a:78:02:0b:5d:c1:fb:a7:4b: ce:65:c0:d4:79:02:36:ec:17:ae:79:cb:8d:fe:fd: 55:d0:be:5d:4e:19:a2:86:7d:f7:d4:0a:c4:d9:15: 17:f6:b2:a2:96:9d:c6:0b:66:cf:da:61:93:b2:d1: 09:09:78:5d:ff:0d:be:c7:d8:4f:eb:24:00:4b:97: d1:9b:4f:a4:ea:b8:f1:57:73:1f:82:8b:9e:a0:a2: d4:af:ac:7e:cc:15:68:29:a2:d9:1b:91:91:78:56: 10:8e:90:08:43:b8:ff:78:bb:a2:00:b8:e4:ff:65: 29:b4:9f:d4:18:a5:da:00:c4:ac:7d:cd:6b:91:55: dd:32:5d:f2:2c:7b:3a:bd:b7:f7:e9:52:d2:81:fb: e0:06:2e:05:c9:af:fe:69:29:4f:9b:3c:e4:71:e3: 4a:01:d3:86:55:96:6c:56:a4:87:ed:45:55:99:b8: 08:c5:35:d6:94:d3:8d:17:dd:2a:84:fb:52:06:c2: 58:1f:16:98:72:5c:35:5f:35:a0:bf:fc:da:e7:29: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:56:56:9B:49:AC:AF:86:FE:A5:04:1B:26:FD:AE:38:7F:EE:80 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:25:b4:c0:24:48:9e:85:da:4e:62:2c:bd:f5:55:81:97:8e: f5:6f:93:0d:fb:38:b1:52:8e:29:5e:6e:ed:b6:77:e7:9c:6c: 72:89:20:97:ca:eb:b5:dd:53:b0:f0:a0:19:a8:5c:f4:e3:5b: 1c:95:fa:3e:6a:a6:88:cc:48:88:ac:b7:2f:af:fa:38:8d:0c: c6:a9:b1:8f:1c:56:cf:9a:db:39:35:f1:ba:93:ba:c3:b0:33: ad:f8:d3:ec:ee:fb:68:50:5a:bd:e7:81:0e:87:d1:28:7d:9c: 94:38:6b:91:c1:ac:66:83:d0:d4:33:b1:86:09:79:7e:28:2b: 19:7f:22:d9:4a:ad:f8:33:1f:7a:d0:1b:bb:e8:52:9b:20:5f: a9:b1:82:58:2a:39:b9:f5:25:9d:d7:09:d2:46:dc:43:c1:3c: 1f:fd:56:5c:23:ed:32:6c:13:cc:d2:b0:7a:db:d8:cb:7f:a4: 9f:63:3e:0a:1d:09:01:11:43:00:73:c1:19:3b:be:0e:31:93: 63:31:88:68:fa:2d:37:bc:35:5c:62:e8:00:a2:ff:82:f6:63: 38:e7:74:b0:f4:2d:ab:11:01:07:5b:ea:61:b1:28:4b:3a:80: a0:2f:73:96:fe:bc:c3:71:59:6a:2b:0c:83:bf:65:40:98:83: 85:6e:60:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVU9eUjtLl8SpF12glPqg8Bf7zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTEwMTgwNzA2MjhaFw0yNTEwMjExNDI4MjhaMDMxMTAvBgNV BAMTKDE0MTc1NjU2OUI0OUFDQUY4NkZFQTUwNDFCMjZGREFFMzg3RkVFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKelSCcOzRRP/c33FW+qAPopX p//t9hEkV+sJYjEaVTT6jlTffhOhmXXPGu8MCR6Wwyp4AgtdwfunS85lwNR5Ajbs F655y43+/VXQvl1OGaKGfffUCsTZFRf2sqKWncYLZs/aYZOy0QkJeF3/Db7H2E/r JABLl9GbT6TquPFXcx+Ci56gotSvrH7MFWgpotkbkZF4VhCOkAhDuP94u6IAuOT/ ZSm0n9QYpdoAxKx9zWuRVd0yXfIsezq9t/fpUtKB++AGLgXJr/5pKU+bPORx40oB 04ZVlmxWpIftRVWZuAjFNdaU040X3SqE+1IGwlgfFphyXDVfNaC//NrnKfmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBdWVptJrK+G/qUEGyb9rjh/7oAwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMltMAkSJ6F2k5iLL31VYGXjvVvkw37OLFS jilebu22d+ecbHKJIJfK67XdU7DwoBmoXPTjWxyV+j5qpojMSIisty+v+jiNDMap sY8cVs+a2zk18bqTusOwM6340+zu+2hQWr3ngQ6H0Sh9nJQ4a5HBrGaD0NQzsYYJ eX4oKxl/ItlKrfgzH3rQG7voUpsgX6mxglgqObn1JZ3XCdJG3EPBPB/9Vlwj7TJs E8zSsHrb2Mt/pJ9jPgodCQERQwBzwRk7vg4xk2MxiGj6LTe8NVxi6ACi/4L2Yzjn dLD0LasRAQdb6mGxKEs6gKAvc5b+vMNxWWorDIO/ZUCYg4VuYB4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:21 2025 by rpki-client