$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: muWU18axVEr5a9bvCQDB6lrL0v8kl50m7p+7Folm0tY= Subject key identifier: 4B:65:66:03:11:CD:DA:02:C7:58:29:5C:6D:50:5C:1D:D1:97:EF:FC Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 1ED04E832D43CACF0AD553F0FB6BE1A8ED77141F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: C7 Signing time: Sat 18 Oct 2025 17:41:28 +0000 Manifest this update: Sat 18 Oct 2025 17:36:28 +0000 Manifest next update: Wed 22 Oct 2025 00:52:28 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: eoheP2PVxOz9etgw0K+GFx6kv6kwoKnPLnSqn7ced/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d0:4e:83:2d:43:ca:cf:0a:d5:53:f0:fb:6b:e1:a8:ed:77:14:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Oct 18 17:36:28 2025 GMT Not After : Oct 22 00:52:28 2025 GMT Subject: CN=4B65660311CDDA02C758295C6D505C1DD197EFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:39:48:84:b2:3d:a2:39:74:11:3b:1f:88: ee:f2:58:28:54:ad:37:9b:d9:e4:05:f5:f8:56:9b: a8:10:fe:30:58:d1:71:b6:08:8c:42:3a:bd:40:7c: 75:bf:c2:5d:22:cd:0b:8c:a2:ce:dc:a0:5f:3f:bb: 45:57:96:ed:3a:c9:00:bb:24:80:fa:56:8a:1e:f8: 98:ca:a0:98:ae:8b:89:b1:a9:72:d7:52:a8:30:94: a9:c0:6d:6e:c2:f9:9f:01:18:7b:10:e4:d1:23:19: eb:a6:9f:ed:fd:0b:bd:d5:d9:bc:52:e3:71:2f:48: 1c:8e:3a:24:6a:9d:8d:5d:6e:b7:fd:a9:27:cd:d2: eb:d7:f6:82:8c:03:4c:36:80:1c:a9:31:c0:b5:42: 6e:17:4f:89:ac:ca:bf:44:87:9f:81:3d:bf:ad:58: 30:4a:06:d9:cb:a1:27:44:27:78:c8:99:8a:50:fe: be:7b:5e:d2:d3:c4:cb:4c:33:b7:98:17:c7:de:b4: 7c:c4:8e:81:32:3a:7a:29:8f:7b:ce:a2:88:ba:e2: 23:55:90:62:fc:34:b1:14:0e:fe:7c:63:60:a2:25: 89:d8:af:d5:e0:1b:a3:d0:cc:ae:9d:ec:57:e9:58: f0:d8:74:ad:f5:fb:9b:93:0b:a3:c5:d3:90:f2:9c: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:66:03:11:CD:DA:02:C7:58:29:5C:6D:50:5C:1D:D1:97:EF:FC X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:04:da:b6:f6:29:c1:61:78:09:12:f7:95:0c:11:2f:e1:a4: d2:ae:ac:79:b3:6c:59:04:9b:fc:35:98:17:97:90:15:96:e5: cc:5e:d5:92:7d:2c:02:9f:de:1e:c9:89:eb:51:04:f2:62:14: 11:45:ce:f0:fa:16:5c:62:5d:84:d3:eb:49:4b:8a:37:f7:0e: 09:55:e2:9a:ec:9a:c0:7a:44:95:9d:6c:f4:46:fe:eb:04:b9: e8:46:bb:61:c7:51:14:59:2f:56:75:97:3a:64:71:3f:c0:d2: 80:1b:04:fc:38:43:2f:41:cf:56:af:fc:f3:dd:3f:b6:e3:80: dd:78:1d:51:f8:fc:93:fb:f4:8c:26:86:98:f2:5b:4a:fb:e9: 60:c3:32:a9:ae:dc:6d:a9:95:09:9a:9a:b3:57:1b:bb:9e:0e: 5d:c0:9f:c9:56:3c:c7:af:f2:b2:09:ed:97:ed:4c:54:05:ed: ed:e5:9c:2b:ce:74:ee:56:18:c3:47:d6:e0:04:01:4d:eb:d8: cb:9f:f7:4d:e4:a1:68:ad:15:d6:fa:b8:25:01:73:96:64:44: 1e:5a:03:08:39:63:2c:fd:5a:a8:79:ee:b7:bf:45:a9:c3:67: dc:ee:70:4b:5e:2f:a2:fb:60:93:b6:ba:ba:6b:13:c9:ca:0c: 17:0b:27:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtBOgy1Dys8K1VPw+2vhqO13FB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTEwMTgxNzM2MjhaFw0yNTEwMjIwMDUyMjhaMDMxMTAvBgNV BAMTKDRCNjU2NjAzMTFDRERBMDJDNzU4Mjk1QzZENTA1QzFERDE5N0VGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6jlIhLI9ojl0ETsfiO7yWChU rTeb2eQF9fhWm6gQ/jBY0XG2CIxCOr1AfHW/wl0izQuMos7coF8/u0VXlu06yQC7 JID6Vooe+JjKoJiui4mxqXLXUqgwlKnAbW7C+Z8BGHsQ5NEjGeumn+39C73V2bxS 43EvSByOOiRqnY1dbrf9qSfN0uvX9oKMA0w2gBypMcC1Qm4XT4msyr9Eh5+BPb+t WDBKBtnLoSdEJ3jImYpQ/r57XtLTxMtMM7eYF8fetHzEjoEyOnopj3vOooi64iNV kGL8NLEUDv58Y2CiJYnYr9XgG6PQzK6d7FfpWPDYdK31+5uTC6PF05DynG1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2VmAxHN2gLHWClcbVBcHdGX7/wwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUE2rb2KcFheAkS95UMES/hpNKurHmzbFkE m/w1mBeXkBWW5cxe1ZJ9LAKf3h7JietRBPJiFBFFzvD6FlxiXYTT60lLijf3DglV 4prsmsB6RJWdbPRG/usEuehGu2HHURRZL1Z1lzpkcT/A0oAbBPw4Qy9Bz1av/PPd P7bjgN14HVH4/JP79IwmhpjyW0r76WDDMqmu3G2plQmamrNXG7ueDl3An8lWPMev 8rIJ7ZftTFQF7e3lnCvOdO5WGMNH1uAEAU3r2Muf903koWitFdb6uCUBc5ZkRB5a Awg5Yyz9Wqh57re/RanDZ9zucEteL6L7YJO2urprE8nKDBcLJ5Q= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:10 2025 by rpki-client