$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: wMJyJFCcvQB7soR+Jp5rZiyOCX8SFRHCzyq26uk7J7Y= Subject key identifier: CB:EC:A0:A6:58:53:89:6F:AB:45:CB:33:A1:30:07:0A:A0:A3:B1:C9 Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 0BA99606AD1ABF97AA28D6AF3B8F237EAD98DB73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 0535 Signing time: Sun 19 Oct 2025 14:31:32 +0000 Manifest this update: Sun 19 Oct 2025 14:26:32 +0000 Manifest next update: Wed 22 Oct 2025 17:47:32 +0000 Files and hashes: 1: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) 2: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=) 3: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) 4: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 5: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=) 6: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 7: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: LWR7whPzh1fkq8eSgTZ9w6n7Fe0a04QJiBSetMQyM3Y=) 8: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 9: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 10: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) 11: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 12: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 13: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 14: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 15: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a9:96:06:ad:1a:bf:97:aa:28:d6:af:3b:8f:23:7e:ad:98:db:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Oct 19 14:26:32 2025 GMT Not After : Oct 22 17:47:32 2025 GMT Subject: CN=CBECA0A65853896FAB45CB33A130070AA0A3B1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:bd:f8:fd:c2:74:b2:93:88:37:7f:22:9a: d6:4c:b4:f7:45:94:d7:80:ca:5b:bc:02:9c:05:54: 42:56:bf:36:80:63:e1:23:dc:c7:cb:c5:53:72:93: 79:d8:d6:2f:03:fa:88:71:93:d7:27:40:a2:35:98: b6:cc:ce:16:53:bc:10:5b:dd:17:47:b4:20:39:ff: 02:ed:d5:0f:84:c4:ff:63:c5:91:f5:72:15:82:59: 71:57:bb:cd:f1:4f:f0:bd:e3:0d:4f:69:9d:f1:04: 03:ab:34:90:46:ff:fa:73:cd:da:b2:0a:40:c0:9d: 80:66:ed:0d:d5:19:7f:f5:27:be:7e:d8:71:8c:3d: 66:16:c2:b3:98:f6:77:2d:7f:94:84:79:36:ae:2f: 9a:9f:a4:5b:55:a1:5c:84:88:23:db:fb:d5:d3:2c: 7a:c3:d8:9f:89:51:65:df:db:2e:e0:57:f8:6e:55: b0:05:6f:51:68:3d:06:61:70:b5:13:7a:a8:c8:f8: 6d:cc:45:f7:1b:3e:50:67:31:83:a7:ca:f2:4d:e9: 7b:6d:f8:b0:13:11:8e:f3:e3:50:64:88:e4:f0:6a: 18:2d:95:82:74:56:bf:94:70:32:dd:be:fc:8a:94: 11:ad:a0:68:1d:26:3c:d1:05:0f:0b:f6:9b:07:7c: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EC:A0:A6:58:53:89:6F:AB:45:CB:33:A1:30:07:0A:A0:A3:B1:C9 X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:81:66:1e:03:e2:72:4c:1b:38:0d:50:46:08:c2:55:87:b1: a5:a3:8a:f2:6c:e1:b0:83:f2:2a:39:3e:84:8d:f0:ea:8d:07: b0:88:e0:7f:11:dd:a7:06:49:b5:d7:17:63:84:41:f7:f0:04: e0:41:db:5d:a8:c7:90:e4:30:6f:64:be:56:7f:4d:87:8a:11: e9:35:43:13:ea:c7:ab:05:82:a2:16:64:d7:ab:a6:91:df:dc: 54:87:28:85:65:fe:79:29:5d:cc:f3:87:58:32:ee:a2:41:63: bc:47:1b:62:ff:98:c8:d1:0c:d4:8a:d6:0a:02:aa:18:1b:a4: 6c:35:28:cb:d4:63:73:91:56:05:07:92:11:e1:64:ae:fe:9d: 54:cf:fc:2f:e6:45:22:56:6e:3c:cb:31:91:e2:6f:20:20:d0: d5:f4:89:bf:b3:16:f6:c9:28:31:93:5a:ef:30:53:d3:52:80: cd:ba:88:01:76:68:d6:13:44:8c:2b:5e:ad:1b:a7:4a:6b:96: 1e:86:b7:04:da:b5:78:8e:c1:98:25:ac:64:f4:d7:76:07:5c: d2:86:d8:43:e8:ba:0d:c0:03:5d:ad:9b:52:f9:b4:f5:56:86: 14:a4:63:06:c7:7e:10:84:02:3d:3f:6e:02:1f:b5:d0:a8:08: 1f:fd:c3:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6mWBq0av5eqKNavO48jfq2Y23MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTEwMTkxNDI2MzJaFw0yNTEwMjIxNzQ3MzJaMDMxMTAvBgNV BAMTKENCRUNBMEE2NTg1Mzg5NkZBQjQ1Q0IzM0ExMzAwNzBBQTBBM0IxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+734/cJ0spOIN38imtZMtPdF lNeAylu8ApwFVEJWvzaAY+Ej3MfLxVNyk3nY1i8D+ohxk9cnQKI1mLbMzhZTvBBb 3RdHtCA5/wLt1Q+ExP9jxZH1chWCWXFXu83xT/C94w1PaZ3xBAOrNJBG//pzzdqy CkDAnYBm7Q3VGX/1J75+2HGMPWYWwrOY9nctf5SEeTauL5qfpFtVoVyEiCPb+9XT LHrD2J+JUWXf2y7gV/huVbAFb1FoPQZhcLUTeqjI+G3MRfcbPlBnMYOnyvJN6Xtt +LATEY7z41BkiOTwahgtlYJ0Vr+UcDLdvvyKlBGtoGgdJjzRBQ8L9psHfKxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+ygplhTiW+rRcszoTAHCqCjsckwHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2BZh4D4nJMGzgNUEYIwlWHsaWjivJs4bCD 8io5PoSN8OqNB7CI4H8R3acGSbXXF2OEQffwBOBB212ox5DkMG9kvlZ/TYeKEek1 QxPqx6sFgqIWZNerppHf3FSHKIVl/nkpXczzh1gy7qJBY7xHG2L/mMjRDNSK1goC qhgbpGw1KMvUY3ORVgUHkhHhZK7+nVTP/C/mRSJWbjzLMZHibyAg0NX0ib+zFvbJ KDGTWu8wU9NSgM26iAF2aNYTRIwrXq0bp0prlh6GtwTatXiOwZglrGT013YHXNKG 2EPoug3AA12tm1L5tPVWhhSkYwbHfhCEAj0/bgIftdCoCB/9w/E= -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:41 2025 by rpki-client