$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: QOJjU0OL6OF73ZmTSNgCdPTvgAbg4J2ZvvFQnp7EGuw= Subject key identifier: 33:43:5E:CF:FD:7E:DA:6C:56:71:DA:5B:7D:30:92:0F:10:1F:A1:EF Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 3D713EFBC51B3FDB3BB213DD5B847F3A8B30A356 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 051C Signing time: Sun 19 Oct 2025 21:01:05 +0000 Manifest this update: Sun 19 Oct 2025 20:56:05 +0000 Manifest next update: Thu 23 Oct 2025 02:46:05 +0000 Files and hashes: 1: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: AtzWk8OxfsXxIPOUs1pD7OWUtLrLliEqKsRdEN18RsQ=) 2: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 3: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 4: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 6: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:71:3e:fb:c5:1b:3f:db:3b:b2:13:dd:5b:84:7f:3a:8b:30:a3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Oct 19 20:56:05 2025 GMT Not After : Oct 23 02:46:05 2025 GMT Subject: CN=33435ECFFD7EDA6C5671DA5B7D30920F101FA1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:2d:c1:27:b7:3b:00:01:60:62:67:c5:f9: 08:bb:7d:05:36:ce:dc:2d:f3:18:8b:65:b8:23:51: 3b:cd:47:fb:3b:cb:d9:98:39:15:c5:a8:19:93:0c: f5:4c:9c:0d:ce:16:eb:99:cd:dd:e1:b3:17:f4:5e: 75:21:54:14:44:5d:d2:61:19:32:2e:72:3b:22:3c: cd:e6:61:18:7b:5b:37:68:1e:22:a6:33:fe:61:2b: 28:a5:5a:17:0d:ec:e8:4b:45:e1:46:df:af:32:4d: a0:01:63:0a:b0:03:21:be:42:7a:2a:12:9a:f7:f0: 14:4c:ce:f1:20:e6:9b:96:5a:1f:5b:de:a4:4d:f1: 73:d4:93:84:17:e7:63:92:d2:fd:6b:3d:c8:29:45: e3:3b:03:b0:e2:6c:5f:78:48:38:0f:ed:31:48:c2: c2:c5:e0:73:2a:7b:d0:96:e2:d5:5a:9f:3d:01:0a: 25:45:2c:30:c8:ce:02:50:00:ef:ca:5a:15:91:83: c4:09:c5:f5:05:37:7b:87:1c:b4:93:fb:84:d1:77: b0:19:83:c2:68:33:60:ae:36:e3:0b:4e:bf:12:e4: f0:80:3a:dc:df:73:02:8e:32:ad:9e:28:90:ca:58: 75:38:dc:98:43:8e:5a:62:c9:41:14:93:06:b2:c3: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:43:5E:CF:FD:7E:DA:6C:56:71:DA:5B:7D:30:92:0F:10:1F:A1:EF X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:19:95:ae:ee:fb:41:0d:79:46:3a:e7:9e:7f:5c:68:86: 45:75:c2:6f:9e:39:89:48:7f:e9:17:90:30:5b:31:e2:9f:e1: 86:d5:1a:91:35:77:44:59:b9:53:47:39:ca:d4:56:72:5f:2d: 63:6f:a9:92:8f:db:f9:7d:99:4c:cf:bf:de:6c:cc:38:bd:b0: 59:1b:51:ab:4b:bb:b0:b1:6d:af:31:58:1f:2d:f2:17:58:08: 9f:e1:06:8c:fe:de:d1:a5:7e:27:d0:16:69:4e:1a:85:3b:f9: 7e:07:fc:18:4c:d0:66:31:b2:ad:9b:5e:d8:26:cf:38:fb:60: 30:53:57:a8:48:1f:71:93:f8:57:96:55:0e:e2:ae:bf:36:66: db:48:19:0b:ee:e7:12:d4:5c:15:18:e3:44:a4:75:20:bd:20: 4f:e1:fd:36:36:00:5e:12:a2:c4:ca:7f:95:31:56:12:90:cd: 1e:52:ca:b6:46:a2:61:81:15:d7:0c:10:22:f7:66:52:74:5e: 40:d8:39:75:19:5c:77:90:33:ad:1d:da:4f:1f:ec:11:ab:5f: ba:7e:3a:c1:64:8c:49:c5:95:6e:a5:da:f8:73:56:bd:5f:2a: 05:8c:2c:0a:95:b2:51:bb:04:68:75:6d:1a:99:c8:22:36:3a: 0b:89:b0:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXE++8UbP9s7shPdW4R/Ooswo1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTEwMTkyMDU2MDVaFw0yNTEwMjMwMjQ2MDVaMDMxMTAvBgNV BAMTKDMzNDM1RUNGRkQ3RURBNkM1NjcxREE1QjdEMzA5MjBGMTAxRkExRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUy3BJ7c7AAFgYmfF+Qi7fQU2 ztwt8xiLZbgjUTvNR/s7y9mYORXFqBmTDPVMnA3OFuuZzd3hsxf0XnUhVBREXdJh GTIucjsiPM3mYRh7WzdoHiKmM/5hKyilWhcN7OhLReFG368yTaABYwqwAyG+Qnoq Epr38BRMzvEg5puWWh9b3qRN8XPUk4QX52OS0v1rPcgpReM7A7DibF94SDgP7TFI wsLF4HMqe9CW4tVanz0BCiVFLDDIzgJQAO/KWhWRg8QJxfUFN3uHHLST+4TRd7AZ g8JoM2CuNuMLTr8S5PCAOtzfcwKOMq2eKJDKWHU43JhDjlpiyUEUkwayw8a3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM0Nez/1+2mxWcdpbfTCSDxAfoe8wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqXGZWu7vtBDXlGOueef1xohkV1wm+eOYlI f+kXkDBbMeKf4YbVGpE1d0RZuVNHOcrUVnJfLWNvqZKP2/l9mUzPv95szDi9sFkb UatLu7Cxba8xWB8t8hdYCJ/hBoz+3tGlfifQFmlOGoU7+X4H/BhM0GYxsq2bXtgm zzj7YDBTV6hIH3GT+FeWVQ7irr82ZttIGQvu5xLUXBUY40SkdSC9IE/h/TY2AF4S osTKf5UxVhKQzR5SyrZGomGBFdcMECL3ZlJ0XkDYOXUZXHeQM60d2k8f7BGrX7p+ OsFkjEnFlW6l2vhzVr1fKgWMLAqVslG7BGh1bRqZyCI2OguJsJk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:11 2025 by rpki-client