$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: rrV2KTxpLJ8tHSJe7KlvG1jYfxNKONdoKQzMA3QOZ14= Subject key identifier: 5A:47:D5:EC:FB:E9:78:50:CD:8A:72:97:96:C3:FA:93:05:8E:5A:56 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: F33285899B7E448F880DA69FA73EFF983E6978 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01E8 Signing time: Sat 18 Oct 2025 16:11:45 +0000 Manifest this update: Sat 18 Oct 2025 16:06:45 +0000 Manifest next update: Wed 22 Oct 2025 01:41:45 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 2: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: BFBf3pYpMROMktEqsp+eRRZNwOhw9HYVOTpGwws8fd4=) 3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f3:32:85:89:9b:7e:44:8f:88:0d:a6:9f:a7:3e:ff:98:3e:69:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Oct 18 16:06:45 2025 GMT Not After : Oct 22 01:41:45 2025 GMT Subject: CN=5A47D5ECFBE97850CD8A729796C3FA93058E5A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:00:83:c3:da:e8:fb:07:f5:64:bf:5f:e3:d3: 8a:0e:c5:fe:ff:42:a5:4b:d1:10:2f:a0:11:31:e9: 92:f2:38:c1:76:5f:f5:1f:8e:05:8a:9f:d9:37:4d: 37:06:c2:45:2e:04:5f:0a:c1:c5:13:ed:1f:44:07: b2:0e:16:04:b5:b9:ed:81:0e:8d:b5:5a:cf:f9:51: f0:b8:96:15:2f:33:19:37:8f:52:65:27:6a:e5:81: 03:76:5c:0e:b4:3e:22:e9:ce:c3:63:4c:84:35:12: f7:af:1e:6a:1f:70:f0:b1:ca:28:07:9e:65:78:b0: 97:95:4c:b1:06:0a:d2:89:eb:83:e4:af:cb:bd:45: d6:b4:75:5a:00:81:a9:a9:0c:d4:14:0d:b5:20:27: 49:77:ce:d3:8e:f0:34:d7:10:eb:49:3c:dd:c8:66: 71:52:45:1d:d5:a4:cc:0a:aa:fb:12:99:0e:8e:64: d0:0f:34:63:75:47:01:c8:ed:5e:4a:cf:54:04:e8: 31:eb:38:d6:b7:c9:e3:1a:1c:8f:cc:5d:e0:74:b5: a1:ad:a5:d2:04:ca:f2:a9:d7:f5:23:a3:50:db:26: d6:cd:9f:92:33:34:41:41:d1:d1:0d:7b:79:f0:d3: df:a2:b5:2f:ee:6f:ce:03:0a:06:b0:34:07:7c:f8: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:47:D5:EC:FB:E9:78:50:CD:8A:72:97:96:C3:FA:93:05:8E:5A:56 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ab:3e:b7:f2:66:5d:2b:07:47:eb:8d:8d:dc:ac:88:84:93: 59:d1:97:64:34:02:b0:d2:15:d7:f0:77:fc:81:96:f6:70:aa: b1:51:f1:d3:03:a9:be:6e:0e:d8:8f:8c:ee:6c:3c:ad:be:26: 89:9f:8b:68:b6:29:fb:66:f2:69:4e:72:40:f1:89:53:e2:fa: cc:c9:ff:8c:33:ce:a4:d8:96:35:83:c9:22:f7:d6:a9:bb:87: af:69:fc:46:82:d4:33:90:53:70:17:83:5e:3e:5e:83:e1:68: bb:41:d4:5f:26:92:9d:48:5d:40:9d:9b:69:18:c3:55:58:b7: 57:81:d9:d6:1d:cf:12:7b:90:44:ea:11:b7:de:13:b3:50:c6: e4:6f:ad:c0:92:7a:34:3d:d0:1b:26:56:a3:0b:26:96:c8:ad: e3:cd:98:3c:97:ad:d4:13:66:3e:72:d4:20:7c:14:49:7a:21: 33:73:b5:de:5d:7e:20:e0:5c:b0:8e:70:f1:1f:46:5a:37:33: fc:28:72:88:4f:a6:bc:07:18:83:3a:c7:69:65:4d:a2:2d:44: 26:55:ce:78:13:e9:52:12:32:79:c9:39:93:d4:5b:54:8d:de: 84:13:eb:70:57:31:7e:4b:30:2d:c6:db:ee:05:89:88:f5:ee: e5:4b:af:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPMyhYmbfkSPiA2mn6c+/5g+aXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTEwMTgxNjA2NDVaFw0yNTEwMjIwMTQxNDVaMDMxMTAvBgNV BAMTKDVBNDdENUVDRkJFOTc4NTBDRDhBNzI5Nzk2QzNGQTkzMDU4RTVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuAIPD2uj7B/Vkv1/j04oOxf7/ QqVL0RAvoBEx6ZLyOMF2X/UfjgWKn9k3TTcGwkUuBF8KwcUT7R9EB7IOFgS1ue2B Do21Ws/5UfC4lhUvMxk3j1JlJ2rlgQN2XA60PiLpzsNjTIQ1EvevHmofcPCxyigH nmV4sJeVTLEGCtKJ64Pkr8u9Rda0dVoAgampDNQUDbUgJ0l3ztOO8DTXEOtJPN3I ZnFSRR3VpMwKqvsSmQ6OZNAPNGN1RwHI7V5Kz1QE6DHrONa3yeMaHI/MXeB0taGt pdIEyvKp1/Ujo1DbJtbNn5IzNEFB0dENe3nw09+itS/ub84DCgawNAd8+LdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkfV7PvpeFDNinKXlsP6kwWOWlYwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2rPrfyZl0rB0frjY3crIiEk1nRl2Q0ArDS Fdfwd/yBlvZwqrFR8dMDqb5uDtiPjO5sPK2+Jomfi2i2Kftm8mlOckDxiVPi+szJ /4wzzqTYljWDySL31qm7h69p/EaC1DOQU3AXg14+XoPhaLtB1F8mkp1IXUCdm2kY w1VYt1eB2dYdzxJ7kETqEbfeE7NQxuRvrcCSejQ90BsmVqMLJpbIrePNmDyXrdQT Zj5y1CB8FEl6ITNztd5dfiDgXLCOcPEfRlo3M/wocohPprwHGIM6x2llTaItRCZV zngT6VISMnnJOZPUW1SN3oQT63BXMX5LMC3G2+4FiYj17uVLrx0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:31 2025 by rpki-client