$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: BJtkV8HUdtk6+Y3wZiL0BkizQuuU+txdCXQWmhT9kcE= Subject key identifier: 89:3C:51:CA:8B:AE:7B:B6:ED:5A:A6:21:F3:1A:25:99:BD:AB:72:C9 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 5B0F16E86F852DE6F23D7793F99EF132F8E47565 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: E6 Signing time: Mon 20 Oct 2025 02:02:20 +0000 Manifest this update: Mon 20 Oct 2025 01:57:20 +0000 Manifest next update: Thu 23 Oct 2025 13:54:20 +0000 Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: 51i7HKsPagJRVg6SRp6wMobeT+jcMxHqW6ba+F2LhhI=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0f:16:e8:6f:85:2d:e6:f2:3d:77:93:f9:9e:f1:32:f8:e4:75:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Oct 20 01:57:20 2025 GMT Not After : Oct 23 13:54:20 2025 GMT Subject: CN=893C51CA8BAE7BB6ED5AA621F31A2599BDAB72C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:92:0f:3c:24:20:a7:7a:39:6e:47:e1:0b: 3a:07:9d:f8:32:da:3c:1c:be:7b:f9:46:81:40:49: 88:80:41:50:8a:f7:51:6b:7f:93:62:87:ad:8a:68: b7:54:0a:76:22:cd:ed:84:f8:1f:31:20:90:6a:3d: 8c:25:3a:e5:a4:22:32:44:8b:9b:b5:54:87:41:19: 02:87:fc:e7:22:49:99:f2:f5:6c:80:df:1b:d3:68: 43:44:1a:d2:b0:d8:78:be:97:b9:2d:0f:67:65:08: 23:9e:8f:e1:42:57:7f:9e:eb:2f:71:55:5d:0b:b7: ac:6b:5d:89:b4:d8:14:3c:c4:98:6f:a4:8a:28:02: aa:0f:e1:53:6e:22:a8:3e:d4:83:9b:ba:ac:79:04: ac:e3:66:ae:da:d6:9e:72:2d:83:0e:82:99:b8:ed: 7f:88:07:30:0f:0e:61:0b:05:0b:ea:24:6c:1e:59: 95:36:af:d4:a5:13:1b:78:17:6d:4d:08:cc:6b:18: b7:47:57:17:de:7b:be:63:7d:82:24:9f:be:01:72: 33:89:4b:d9:94:6d:ce:b3:b7:4d:48:97:34:f4:d5: 3f:ce:5d:d1:61:b6:f2:92:79:41:08:78:b3:7b:08: b6:c1:c3:6f:c7:a2:f0:b3:1d:8f:58:cc:80:a3:69: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3C:51:CA:8B:AE:7B:B6:ED:5A:A6:21:F3:1A:25:99:BD:AB:72:C9 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:23:54:af:76:af:19:3d:45:b4:61:72:d3:71:c1:e6:7f:91: fe:d6:a2:98:d1:23:82:04:db:bd:f0:c5:cd:10:a9:32:d7:ef: a8:e9:5e:f6:49:ee:ba:2c:d9:a8:d3:0e:25:18:32:39:d2:3b: b4:47:36:88:c5:b3:bd:83:bd:25:9c:db:8a:2f:81:98:2a:eb: 65:25:f0:7a:c1:e1:0f:b7:19:7f:e6:04:a0:ad:fd:91:bd:aa: 6b:73:67:60:ca:90:76:de:17:47:7c:47:4a:99:54:62:85:7e: 69:25:d4:64:2d:d2:83:f3:36:0c:21:70:1d:c2:58:da:f7:f1: ba:83:a6:fb:eb:30:0d:8a:6d:96:9d:2b:c0:81:bf:7e:c3:a1: 3b:a4:cf:6b:fa:13:ef:6e:90:96:9d:00:41:db:f3:08:04:16: 76:ef:d2:71:2e:ea:8f:99:66:8b:57:d6:cf:12:af:f1:51:9c: c2:0e:b6:4a:5a:61:d6:10:04:21:11:df:67:5a:8d:86:2b:b9: 11:1b:68:07:22:69:87:d3:2c:fb:81:fa:8a:d7:9b:d6:12:f4: 6b:9f:ec:a1:2f:cc:87:c5:ab:1e:bf:d0:2b:a8:c9:4e:49:22: de:78:94:4e:89:fe:57:89:dd:79:91:79:f8:fd:d8:ff:6b:33: 55:4f:35:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWw8W6G+FLebyPXeT+Z7xMvjkdWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTEwMjAwMTU3MjBaFw0yNTEwMjMxMzU0MjBaMDMxMTAvBgNV BAMTKDg5M0M1MUNBOEJBRTdCQjZFRDVBQTYyMUYzMUEyNTk5QkRBQjcyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkJIPPCQgp3o5bkfhCzoHnfgy 2jwcvnv5RoFASYiAQVCK91Frf5Nih62KaLdUCnYize2E+B8xIJBqPYwlOuWkIjJE i5u1VIdBGQKH/OciSZny9WyA3xvTaENEGtKw2Hi+l7ktD2dlCCOej+FCV3+e6y9x VV0Lt6xrXYm02BQ8xJhvpIooAqoP4VNuIqg+1IObuqx5BKzjZq7a1p5yLYMOgpm4 7X+IBzAPDmELBQvqJGweWZU2r9SlExt4F21NCMxrGLdHVxfee75jfYIkn74BcjOJ S9mUbc6zt01IlzT01T/OXdFhtvKSeUEIeLN7CLbBw2/HovCzHY9YzICjaRqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTxRyouue7btWqYh8xolmb2rcskwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkjVK92rxk9RbRhctNxweZ/kf7WopjRI4IE 273wxc0QqTLX76jpXvZJ7ros2ajTDiUYMjnSO7RHNojFs72DvSWc24ovgZgq62Ul 8HrB4Q+3GX/mBKCt/ZG9qmtzZ2DKkHbeF0d8R0qZVGKFfmkl1GQt0oPzNgwhcB3C WNr38bqDpvvrMA2KbZadK8CBv37DoTukz2v6E+9ukJadAEHb8wgEFnbv0nEu6o+Z ZotX1s8Sr/FRnMIOtkpaYdYQBCER32dajYYruREbaAciaYfTLPuB+orXm9YS9Guf 7KEvzIfFqx6/0CuoyU5JIt54lE6J/leJ3XmRefj92P9rM1VPNY4= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:32 2025 by rpki-client