$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: M0JP6hL0mhXijg4eweIb0KgJXo8l0MSpYc802p1uFSg= Subject key identifier: F1:72:48:2A:25:CE:E1:20:18:B4:74:81:23:A6:78:E8:94:9B:1B:CC Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 33136A20E296BC796C1D1B21503EA42C7EF52F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 01F0 Signing time: Sun 19 Oct 2025 00:41:05 +0000 Manifest this update: Sun 19 Oct 2025 00:36:05 +0000 Manifest next update: Wed 22 Oct 2025 03:59:05 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: zbzsigdo7XRARLWRvxUfqwxEriVzUBs33OCB1wnncEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:6a:20:e2:96:bc:79:6c:1d:1b:21:50:3e:a4:2c:7e:f5:2f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Oct 19 00:36:05 2025 GMT Not After : Oct 22 03:59:05 2025 GMT Subject: CN=F172482A25CEE12018B4748123A678E8949B1BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:0e:dd:3c:39:25:53:93:3f:12:56:f4:7c: 17:51:2e:bc:70:0b:d1:b0:c2:a2:ca:5a:e0:c9:0d: d7:4b:fd:21:b5:3c:4e:08:67:70:54:4f:59:8f:01: d3:d5:64:e0:ca:d0:e7:22:12:af:0e:2b:98:e9:f5: d2:3a:76:48:d2:b3:14:cb:d9:f0:42:90:ef:2c:39: 19:d3:47:a6:65:82:7c:f2:13:d0:71:8a:be:1b:d0: 9d:56:75:0a:82:8b:57:7a:03:31:e2:8b:a5:98:3e: 08:e1:6d:2f:76:34:ed:83:6c:2d:df:2a:27:32:bd: ea:21:cc:b9:26:b1:29:42:1c:63:03:8d:22:04:d4: 01:97:88:ca:3a:fd:4e:fd:2d:3b:72:2b:49:91:6a: bc:a5:8f:97:79:e0:05:a2:8c:3e:16:26:d8:0e:e0: 77:c3:f0:33:58:2e:a3:e8:f3:39:10:6c:01:db:2b: 55:10:91:db:3c:42:49:80:17:3c:c8:be:95:85:03: 92:37:ff:4c:5c:c3:64:45:d8:70:92:fc:71:93:70: 1a:46:28:eb:bb:17:5b:c7:e4:50:52:06:74:d1:75: 57:f6:8c:89:a4:8c:65:94:b9:46:87:d4:ae:f3:13: 7f:05:fd:4e:86:f6:f1:76:d9:7f:c9:41:69:cc:c0: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:72:48:2A:25:CE:E1:20:18:B4:74:81:23:A6:78:E8:94:9B:1B:CC X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6c:20:c4:bf:51:59:05:1c:cf:aa:7d:e8:34:24:b9:16:5e: 4d:6d:3e:44:04:d3:65:61:fd:ff:fd:ed:db:c6:fd:92:97:36: 5c:53:c9:8b:1f:6f:e3:35:96:c6:d1:bd:77:4d:fd:8d:69:56: 57:df:75:39:31:5b:0b:7e:5f:46:9c:e8:5e:9b:84:d2:e2:e9: f9:07:77:4b:fa:19:5e:85:42:15:a2:08:99:38:86:af:5d:70: 9a:39:bd:50:fc:77:ad:69:fa:43:5e:e1:14:19:a3:49:27:b7: 5e:71:20:bb:28:d4:7d:bf:ac:40:9b:ed:ca:47:0d:01:b5:48: 3d:ec:06:e5:92:f9:a7:f7:11:e6:e0:4e:55:9f:bc:35:ce:7f: 0d:22:62:a3:10:4d:f1:cc:ec:9b:1d:72:09:89:11:84:e9:1b: 91:7f:96:f4:46:21:bc:e1:1e:6a:3a:f0:d2:fa:46:ce:48:95: a7:26:2a:8a:f3:c5:45:30:23:5f:a2:00:ea:0f:68:31:49:69: 23:7e:4c:14:c7:92:08:82:b9:59:bf:d5:56:66:da:5a:c9:b1: 4a:91:a8:48:98:5b:d9:c7:f1:c6:91:0e:04:f4:3f:a1:9d:21: b5:a8:50:1c:09:dc:55:db:8f:d8:36:81:70:b3:eb:59:e9:41: 7b:91:1a:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxNqIOKWvHlsHRshUD6kLH71L3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTEwMTkwMDM2MDVaFw0yNTEwMjIwMzU5MDVaMDMxMTAvBgNV BAMTKEYxNzI0ODJBMjVDRUUxMjAxOEI0NzQ4MTIzQTY3OEU4OTQ5QjFCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMng7dPDklU5M/Elb0fBdRLrxw C9GwwqLKWuDJDddL/SG1PE4IZ3BUT1mPAdPVZODK0OciEq8OK5jp9dI6dkjSsxTL 2fBCkO8sORnTR6ZlgnzyE9Bxir4b0J1WdQqCi1d6AzHii6WYPgjhbS92NO2DbC3f KicyveohzLkmsSlCHGMDjSIE1AGXiMo6/U79LTtyK0mRarylj5d54AWijD4WJtgO 4HfD8DNYLqPo8zkQbAHbK1UQkds8QkmAFzzIvpWFA5I3/0xcw2RF2HCS/HGTcBpG KOu7F1vH5FBSBnTRdVf2jImkjGWUuUaH1K7zE38F/U6G9vF22X/JQWnMwNzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XJIKiXO4SAYtHSBI6Z46JSbG8wwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxsIMS/UVkFHM+qfeg0JLkWXk1tPkQE02Vh /f/97dvG/ZKXNlxTyYsfb+M1lsbRvXdN/Y1pVlffdTkxWwt+X0ac6F6bhNLi6fkH d0v6GV6FQhWiCJk4hq9dcJo5vVD8d61p+kNe4RQZo0knt15xILso1H2/rECb7cpH DQG1SD3sBuWS+af3EebgTlWfvDXOfw0iYqMQTfHM7JsdcgmJEYTpG5F/lvRGIbzh Hmo68NL6Rs5IlacmKorzxUUwI1+iAOoPaDFJaSN+TBTHkgiCuVm/1VZm2lrJsUqR qEiYW9nH8caRDgT0P6GdIbWoUBwJ3FXbj9g2gXCz61npQXuRGv8= -----END CERTIFICATE-----Generated at Mon Oct 20 22:28:16 2025 by rpki-client