$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: 0ebRM9HeX9ld1igg0VoCoqqPhEQNfSV+CGTqbJZvWCA= Subject key identifier: A9:10:BC:1F:3D:34:31:E7:61:E4:17:F3:FE:89:6C:C4:69:7C:2A:F2 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 338143FD1411A58861E7DAB2C8EF94D54C256D4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01E2 Signing time: Mon 20 Oct 2025 00:32:00 +0000 Manifest this update: Mon 20 Oct 2025 00:27:00 +0000 Manifest next update: Thu 23 Oct 2025 05:38:00 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=) 4: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: J/8J3Nop4X3oCixrMZHVDZi+AuefTkalTD6VwYCqFSM=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:81:43:fd:14:11:a5:88:61:e7:da:b2:c8:ef:94:d5:4c:25:6d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Oct 20 00:27:00 2025 GMT Not After : Oct 23 05:38:00 2025 GMT Subject: CN=A910BC1F3D3431E761E417F3FE896CC4697C2AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:27:9a:0e:7c:c7:85:b7:7d:39:eb:d4:13: af:eb:5c:56:4c:4a:98:70:40:fa:88:cf:e0:17:d3: 7c:25:e7:c7:9c:c7:99:4c:55:96:77:c0:ba:3b:4f: 06:03:79:af:06:08:1b:98:0f:9a:62:28:37:82:a9: ca:f4:5c:63:2c:b0:b2:5c:75:79:21:ba:50:b5:59: 35:60:08:88:60:da:dd:bd:6a:93:bd:ed:4d:26:1b: 0c:ea:94:44:c1:f6:38:3a:73:66:3e:95:46:ce:58: 12:bd:10:5a:7d:39:c9:b1:32:69:aa:7b:5a:a6:0a: b4:44:2d:a9:64:20:c8:48:d5:c2:85:56:53:cd:bc: a1:4b:e3:7b:86:cc:94:5e:50:7c:5b:6e:41:f1:08: 59:93:85:46:2a:dc:ff:87:d4:34:55:b3:5d:97:2c: a2:b1:2f:c1:39:9a:a4:b8:df:13:66:bd:8f:64:9a: 71:f6:be:49:a5:97:60:97:b7:45:0c:37:c3:92:4c: ea:8c:d7:d1:88:9c:e7:3f:92:28:d9:39:cc:04:5b: 1c:3f:56:75:d8:ee:10:65:ce:d9:48:89:f9:2c:42: 9e:e8:23:67:35:5d:08:3b:66:80:ea:ec:17:8f:e1: bc:bc:5c:36:4a:b8:14:86:1b:32:00:3a:16:25:1c: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:10:BC:1F:3D:34:31:E7:61:E4:17:F3:FE:89:6C:C4:69:7C:2A:F2 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:76:14:69:ff:1c:e0:ba:bd:3c:dc:e1:a6:6a:0f:0d:7d:44: 9f:fd:b3:49:36:b7:13:2d:c4:24:5a:10:9c:12:85:5a:78:fa: 65:53:1c:5f:7b:79:95:c7:3e:e0:b6:3c:aa:59:6f:62:59:60: bb:e5:12:9f:e5:9a:8b:7c:62:ae:e0:bb:ea:ee:7a:bd:29:a5: b0:f0:5e:79:01:49:1f:ca:c9:b4:18:cc:0a:12:fa:ed:13:95: ce:24:e0:31:49:86:35:da:d0:88:1c:78:9d:cd:ad:ae:ca:f5: b9:69:a5:98:85:27:d9:b9:8d:9c:56:41:92:54:7e:e4:62:85: 2c:f3:b9:46:cc:3a:b4:33:70:a4:6f:09:15:a3:86:05:ea:67: c1:10:38:c4:72:64:3c:55:06:0c:05:58:76:58:95:04:54:4a: c2:ca:90:6f:e4:b0:b5:f3:7d:e4:cb:00:a4:00:54:c4:9b:d4: bb:ee:aa:14:67:f2:e5:16:6e:f7:2a:eb:5c:ce:1f:ca:38:f9: a3:8d:88:95:9a:c1:00:40:06:fc:7b:04:7e:81:56:0c:43:b5: 0c:ee:80:3a:1a:4e:1b:8b:18:01:b1:f7:05:94:a0:9f:9d:87: f3:f8:7d:da:31:c6:44:4a:a9:31:ee:f9:58:62:21:d8:11:4e: 31:29:24:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4FD/RQRpYhh59qyyO+U1UwlbUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTEwMjAwMDI3MDBaFw0yNTEwMjMwNTM4MDBaMDMxMTAvBgNV BAMTKEE5MTBCQzFGM0QzNDMxRTc2MUU0MTdGM0ZFODk2Q0M0Njk3QzJBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSyeaDnzHhbd9OevUE6/rXFZM SphwQPqIz+AX03wl58ecx5lMVZZ3wLo7TwYDea8GCBuYD5piKDeCqcr0XGMssLJc dXkhulC1WTVgCIhg2t29apO97U0mGwzqlETB9jg6c2Y+lUbOWBK9EFp9OcmxMmmq e1qmCrRELalkIMhI1cKFVlPNvKFL43uGzJReUHxbbkHxCFmThUYq3P+H1DRVs12X LKKxL8E5mqS43xNmvY9kmnH2vkmll2CXt0UMN8OSTOqM19GInOc/kijZOcwEWxw/ VnXY7hBlztlIifksQp7oI2c1XQg7ZoDq7BeP4by8XDZKuBSGGzIAOhYlHEl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRC8Hz00Medh5Bfz/olsxGl8KvIwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx2FGn/HOC6vTzc4aZqDw19RJ/9s0k2txMt xCRaEJwShVp4+mVTHF97eZXHPuC2PKpZb2JZYLvlEp/lmot8Yq7gu+ruer0ppbDw XnkBSR/KybQYzAoS+u0Tlc4k4DFJhjXa0IgceJ3Nra7K9blppZiFJ9m5jZxWQZJU fuRihSzzuUbMOrQzcKRvCRWjhgXqZ8EQOMRyZDxVBgwFWHZYlQRUSsLKkG/ksLXz feTLAKQAVMSb1LvuqhRn8uUWbvcq61zOH8o4+aONiJWawQBABvx7BH6BVgxDtQzu gDoaThuLGAGx9wWUoJ+dh/P4fdoxxkRKqTHu+VhiIdgRTjEpJLc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:57 2025 by rpki-client