$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: 2DZnpzOnmfGtOr6/aNMyQTVtysZCNq8eo7XW/QVemyg= Subject key identifier: 9F:25:8D:99:A6:39:FD:63:46:E1:A1:5B:75:75:4C:79:50:9F:E3:22 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 7EC26366056F4ECF68336426726A1A135F622FE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 0203 Signing time: Mon 20 Oct 2025 07:12:03 +0000 Manifest this update: Mon 20 Oct 2025 07:07:03 +0000 Manifest next update: Thu 23 Oct 2025 13:34:03 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) 3: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: NSmgYkUBpRdiNFGi18IxaPbUHyPcuKPbWTcrjrB0Ruc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:63:66:05:6f:4e:cf:68:33:64:26:72:6a:1a:13:5f:62:2f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Oct 20 07:07:03 2025 GMT Not After : Oct 23 13:34:03 2025 GMT Subject: CN=9F258D99A639FD6346E1A15B75754C79509FE322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:83:45:3a:22:a4:e1:a9:04:e0:e2:52:a4: c4:b6:54:f1:de:14:c6:14:f4:94:2c:9d:42:d0:4b: c6:cc:bb:bf:3b:88:00:d3:51:27:7e:f7:df:17:a1: ac:e6:9a:46:6c:5e:c9:bd:7e:bf:4e:c4:be:6c:da: 9e:5e:21:75:89:35:ab:1e:2d:c4:b8:5b:fe:60:23: 54:ac:ae:b3:4d:cf:65:12:1f:92:c6:8a:59:90:b6: bb:7a:3f:16:b8:16:c3:c1:33:a9:1f:5a:5a:fd:f1: 05:30:f3:19:f4:a4:db:de:b5:64:7d:3c:9d:8f:dc: 9a:24:f1:e6:7d:19:43:7d:02:3a:75:79:18:e7:8b: 4c:08:ed:f5:77:64:3e:c9:7f:f7:f5:f8:c9:fd:1c: 11:5b:a5:a9:38:58:b0:6a:8c:c4:4f:1e:9f:5f:b1: 0b:3a:f7:a4:3a:c3:78:87:86:bc:bb:aa:5a:e3:8d: ef:8f:74:45:2b:34:6a:01:ce:84:a7:fa:97:3d:d5: 7d:8a:6b:a6:b7:95:79:e1:4c:2c:97:a3:ac:1e:6b: 75:29:98:ae:8c:c8:eb:bf:90:20:0a:f0:9c:9f:95: fa:16:85:f5:0e:a3:36:ce:67:d7:50:49:dd:1b:b1: 30:b2:fa:65:b7:0b:9e:9f:e0:08:29:ef:22:f0:56: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:25:8D:99:A6:39:FD:63:46:E1:A1:5B:75:75:4C:79:50:9F:E3:22 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3a:f3:ab:71:b3:de:4e:11:19:ee:bc:2f:a5:de:5c:87:eb: d2:13:cc:a7:87:60:89:74:73:3c:b2:a6:8e:2f:f4:da:c3:eb: e1:63:5a:3c:be:1e:67:23:47:0d:b0:6c:26:1f:46:7e:c4:5b: a9:0f:4f:d0:e4:ab:c7:64:1b:c6:11:03:4b:02:cd:a6:4f:b1: 8c:06:46:41:b5:65:83:e9:fc:30:68:15:a3:d5:a2:1b:ae:06: de:e7:dd:0e:5c:ef:bc:3c:5f:86:16:0c:d2:52:32:da:32:59: 67:4b:35:91:af:2f:34:a9:77:c4:66:b4:2d:ca:17:9b:ef:a2: fc:fe:d2:de:a1:f1:35:0b:a0:ea:51:bc:25:85:10:4c:b2:a0: 29:6b:79:f3:4d:ab:ed:52:30:c7:77:2f:d2:a6:a5:d1:cc:c4: 92:92:d8:6a:83:d3:e9:32:3e:40:55:53:ee:ee:7d:e7:a7:9b: 2f:e4:36:9b:37:a0:28:ce:d2:4a:c0:2b:6e:f9:77:6d:85:5f: cf:bd:77:66:10:fd:a2:38:1f:f9:a9:a7:ba:fd:f9:8b:2c:1f: eb:f1:20:66:1d:24:04:5e:95:f0:d3:22:0a:a8:f5:ec:24:08: f4:74:63:55:53:77:0a:54:dc:77:83:d6:b6:07:3f:76:ff:a2: c9:5e:11:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsJjZgVvTs9oM2QmcmoaE19iL+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTEwMjAwNzA3MDNaFw0yNTEwMjMxMzM0MDNaMDMxMTAvBgNV BAMTKDlGMjU4RDk5QTYzOUZENjM0NkUxQTE1Qjc1NzU0Qzc5NTA5RkUzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DYNFOiKk4akE4OJSpMS2VPHe FMYU9JQsnULQS8bMu787iADTUSd+998XoazmmkZsXsm9fr9OxL5s2p5eIXWJNase LcS4W/5gI1SsrrNNz2USH5LGilmQtrt6Pxa4FsPBM6kfWlr98QUw8xn0pNvetWR9 PJ2P3Jok8eZ9GUN9Ajp1eRjni0wI7fV3ZD7Jf/f1+Mn9HBFbpak4WLBqjMRPHp9f sQs696Q6w3iHhry7qlrjje+PdEUrNGoBzoSn+pc91X2Ka6a3lXnhTCyXo6wea3Up mK6MyOu/kCAK8JyflfoWhfUOozbOZ9dQSd0bsTCy+mW3C56f4Agp7yLwVqYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyWNmaY5/WNG4aFbdXVMeVCf4yIwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo686txs95OERnuvC+l3lyH69ITzKeHYIl0 czyypo4v9NrD6+FjWjy+HmcjRw2wbCYfRn7EW6kPT9Dkq8dkG8YRA0sCzaZPsYwG RkG1ZYPp/DBoFaPVohuuBt7n3Q5c77w8X4YWDNJSMtoyWWdLNZGvLzSpd8RmtC3K F5vvovz+0t6h8TULoOpRvCWFEEyyoClrefNNq+1SMMd3L9KmpdHMxJKS2GqD0+ky PkBVU+7ufeenmy/kNps3oCjO0krAK275d22FX8+9d2YQ/aI4H/mpp7r9+YssH+vx IGYdJARelfDTIgqo9ewkCPR0Y1VTdwpU3HeD1rYHP3b/osleESg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:03 2025 by rpki-client