$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: UejX5Yj4fsG3lro2qs530RH3S90k5cAw7Usd5z+t0us= Subject key identifier: 9A:FD:AB:77:9E:78:C9:E2:B0:75:67:EC:41:E6:FC:4D:D4:84:06:20 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 6E8C365D86B091FEDADFBB4867FDC6ADD532AE1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0237 Signing time: Mon 20 Oct 2025 10:31:08 +0000 Manifest this update: Mon 20 Oct 2025 10:26:08 +0000 Manifest next update: Thu 23 Oct 2025 11:34:08 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: yGJhG2kEk63lD6KB4GzJAetg2w8m7rr5GWVlopugJgk=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8c:36:5d:86:b0:91:fe:da:df:bb:48:67:fd:c6:ad:d5:32:ae:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Oct 20 10:26:08 2025 GMT Not After : Oct 23 11:34:08 2025 GMT Subject: CN=9AFDAB779E78C9E2B07567EC41E6FC4DD4840620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:56:1e:e7:5d:3d:20:d2:30:ca:ba:da:d8: 33:c9:98:46:17:cc:be:a3:6c:4d:ef:bd:67:bb:82: 9f:a8:22:58:bf:86:d5:2d:3f:b2:f8:55:79:0c:ae: 67:b3:ec:a8:c2:1c:ef:86:18:01:f2:e4:d4:87:97: 1b:21:12:5a:fb:68:28:5d:54:78:37:fe:66:d7:e2: 57:23:dd:08:4b:6a:03:c4:65:cd:24:6e:51:97:28: 2c:2b:08:39:7e:e6:ca:70:dc:f7:e7:1e:54:4f:55: 3e:bf:95:9a:8c:42:b7:b1:8f:0c:84:4a:13:31:2f: be:a6:1f:37:14:49:4c:e4:49:c7:bd:30:1e:d2:3d: e4:0d:24:c5:6c:6c:62:31:89:ee:b7:7a:fc:4d:03: 37:64:f9:37:ff:cd:61:41:f0:bc:b4:12:86:0a:38: bb:54:3b:6f:a2:55:7e:ea:52:57:bc:62:4d:82:41: 3e:54:2b:09:33:3f:fb:1d:ac:89:76:8a:35:70:1b: 43:2e:1c:7a:26:84:86:67:58:9f:a2:fe:3c:6f:89: ae:60:21:f5:98:a3:60:fb:e5:8c:89:03:72:65:d2: 61:c2:39:c1:42:5c:60:79:15:ae:48:24:dd:1e:1a: 1d:9c:e1:b8:bf:8b:97:77:55:e7:24:db:33:b4:0a: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FD:AB:77:9E:78:C9:E2:B0:75:67:EC:41:E6:FC:4D:D4:84:06:20 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:dc:0d:95:f1:37:84:5b:27:7e:c7:2b:45:ed:4b:6d:4d: 9c:5a:6b:cd:76:87:09:a2:ee:96:8b:2f:0f:f3:3f:bb:cc:f6: 89:fe:3a:b8:2a:1a:bf:11:45:35:2f:d1:5b:91:44:9b:ec:8c: eb:e5:ab:74:5f:14:02:f2:21:62:8a:63:d5:b7:6d:9c:d0:79: 39:55:bc:0a:ab:03:45:b7:df:dd:e4:11:86:f7:7e:7f:9f:e6: 2f:c9:b5:bb:5a:7f:76:24:2d:13:ca:26:a2:86:dc:3e:f9:2a: 6f:9a:48:43:57:bb:ea:91:2a:84:24:bc:dc:78:ec:0a:ae:28: e5:61:fb:a8:87:60:d1:89:05:3c:52:ac:66:27:04:eb:2a:2c: 24:11:a3:a1:aa:18:c0:11:4d:b0:be:c3:e0:96:05:48:fc:7b: ee:90:94:ed:48:a9:44:da:6f:8f:91:2f:21:f9:80:1e:5d:d1: 1a:69:a3:77:6e:3e:86:b8:a3:b8:f8:4a:b2:ea:7a:c8:fa:30: 15:95:a1:e8:0a:50:55:2e:35:cb:25:20:ff:ef:5e:16:52:a6: d1:3a:f1:90:ed:ed:6e:24:84:1a:df:fc:99:8e:ed:88:f5:1e: b0:ab:c8:d3:92:98:48:cf:03:45:4b:1c:66:09:bf:15:77:08: f9:19:c3:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbow2XYawkf7a37tIZ/3GrdUyrhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTEwMjAxMDI2MDhaFw0yNTEwMjMxMTM0MDhaMDMxMTAvBgNV BAMTKDlBRkRBQjc3OUU3OEM5RTJCMDc1NjdFQzQxRTZGQzRERDQ4NDA2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjFYe5109INIwyrra2DPJmEYX zL6jbE3vvWe7gp+oIli/htUtP7L4VXkMrmez7KjCHO+GGAHy5NSHlxshElr7aChd VHg3/mbX4lcj3QhLagPEZc0kblGXKCwrCDl+5spw3PfnHlRPVT6/lZqMQrexjwyE ShMxL76mHzcUSUzkSce9MB7SPeQNJMVsbGIxie63evxNAzdk+Tf/zWFB8Ly0EoYK OLtUO2+iVX7qUle8Yk2CQT5UKwkzP/sdrIl2ijVwG0MuHHomhIZnWJ+i/jxvia5g IfWYo2D75YyJA3Jl0mHCOcFCXGB5Fa5IJN0eGh2c4bi/i5d3Veck2zO0CrIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmv2rd554yeKwdWfsQeb8TdSEBiAwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfq3A2V8TeEWyd+xytF7UttTZxaa812hwmi 7paLLw/zP7vM9on+OrgqGr8RRTUv0VuRRJvsjOvlq3RfFALyIWKKY9W3bZzQeTlV vAqrA0W3393kEYb3fn+f5i/Jtbtaf3YkLRPKJqKG3D75Km+aSENXu+qRKoQkvNx4 7AquKOVh+6iHYNGJBTxSrGYnBOsqLCQRo6GqGMARTbC+w+CWBUj8e+6QlO1IqUTa b4+RLyH5gB5d0Rppo3duPoa4o7j4SrLqesj6MBWVoegKUFUuNcslIP/vXhZSptE6 8ZDt7W4khBrf/JmO7Yj1HrCryNOSmEjPA0VLHGYJvxV3CPkZw/w= -----END CERTIFICATE-----Generated at Mon Oct 20 21:03:10 2025 by rpki-client