$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: KxygSzt45p1t5NZpFcXGrGy2nAiOYS2XmoufWBZed14= Subject key identifier: 6C:98:0F:8A:11:E0:94:5D:5A:8D:37:1D:7B:9F:B7:B7:D6:87:BD:E1 Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 5BBADF28C79F1C2AC27003EF801E6DF3CFF14D2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 23:01:26 +0000 Manifest this update: Sun 19 Oct 2025 22:56:26 +0000 Manifest next update: Thu 23 Oct 2025 09:49:26 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: SqLVtRzYDgsE8xtvHEkXfWSJ3eq3r1xvCOHzgU8XSVA=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: F/PrgRQWyjl54TnGtCvaw2IbmQgpyQyxqaaKjq7WP0U=) 3: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: sgkeYaO8S2e8cnXgkYwU6mefviteLX04AqARc12/jfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ba:df:28:c7:9f:1c:2a:c2:70:03:ef:80:1e:6d:f3:cf:f1:4d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Oct 19 22:56:26 2025 GMT Not After : Oct 23 09:49:26 2025 GMT Subject: CN=6C980F8A11E0945D5A8D371D7B9FB7B7D687BDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:c5:42:21:75:c7:19:e0:b0:3a:06:7b:e2: 95:94:8f:c1:e7:78:42:9c:fc:9c:2f:4a:42:a1:55: fb:c2:bd:42:e2:c1:d3:83:01:c8:f7:1c:ca:57:44: aa:5a:a5:b8:44:ad:b8:b8:d5:5c:b7:81:3e:ae:35: 57:ac:e4:83:f3:b8:e9:10:ea:5d:f1:74:99:9f:cf: ff:8f:d4:86:83:19:d6:82:4c:49:1f:b5:b6:cc:fd: 09:43:ef:23:86:bc:0b:08:a3:8c:6b:89:76:4b:6d: 4e:71:7f:7b:43:32:83:1b:e5:43:f8:c4:91:af:b6: ed:99:77:bd:e5:d0:c1:fa:f6:4c:e9:d4:c0:9b:5e: 2b:37:90:14:ca:75:aa:f3:69:8c:77:dc:b9:dd:07: 78:91:83:e9:c1:9e:c3:59:36:e1:a5:69:5a:cc:d9: 27:47:52:ad:6b:55:e4:1b:4b:62:20:24:f1:c0:03: 2e:2e:bd:e2:24:fc:df:f5:d9:b5:ad:b1:67:b8:a4: 94:94:29:af:dc:b5:4e:3c:14:12:2a:41:4c:73:f6: 19:7c:b0:75:29:3d:89:08:0f:c0:5c:dd:f3:51:21: 02:a8:82:43:d2:57:26:76:fb:86:ba:87:36:e6:63: e0:d4:e9:8d:a8:fd:0a:94:14:5e:f2:17:47:0b:e1: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:98:0F:8A:11:E0:94:5D:5A:8D:37:1D:7B:9F:B7:B7:D6:87:BD:E1 X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:88:c0:4c:a1:0e:18:ce:10:1c:ec:e3:a5:94:19:fa:74:f0: b9:4d:49:32:8d:6a:83:f3:fa:0e:3f:48:9a:5e:49:84:d3:e8: 9e:8d:da:a3:15:20:ef:97:e8:17:dd:90:7d:e1:71:8e:cf:6d: 98:af:7b:5e:eb:4d:81:32:7d:69:58:64:65:7f:ae:f8:0e:90: d3:ff:e8:d4:81:96:c9:69:62:dc:25:11:6d:ba:05:26:5c:db: f3:63:cb:fe:ff:b4:44:59:0a:78:64:84:aa:3f:44:52:11:41: 34:4e:84:c0:2b:26:d4:f5:a0:26:4f:9d:85:da:26:8a:10:89: 44:d4:36:4a:dc:bd:d0:d7:e1:3d:eb:e8:f1:1b:27:88:9c:a5: 03:20:1a:41:75:0c:24:a6:0c:bd:34:08:74:8f:08:36:76:5d: 34:6d:2a:cc:fe:56:7d:f4:56:24:f4:30:c9:a6:60:4e:30:6d: 0b:d0:21:34:a5:1f:d7:1d:b7:01:9c:70:91:1d:96:c1:04:5c: 77:77:85:2e:ce:7e:c8:05:96:35:82:29:b2:61:11:1e:60:5b: 94:61:1d:36:cb:49:ec:e6:54:10:d7:21:73:24:52:8e:40:3a: 61:ea:37:81:e2:ad:9c:a3:29:6e:0b:4e:2d:87:e8:c0:59:22: 54:ba:8b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7rfKMefHCrCcAPvgB5t88/xTS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTEwMTkyMjU2MjZaFw0yNTEwMjMwOTQ5MjZaMDMxMTAvBgNV BAMTKDZDOTgwRjhBMTFFMDk0NUQ1QThEMzcxRDdCOUZCN0I3RDY4N0JERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIcVCIXXHGeCwOgZ74pWUj8Hn eEKc/JwvSkKhVfvCvULiwdODAcj3HMpXRKpapbhErbi41Vy3gT6uNVes5IPzuOkQ 6l3xdJmfz/+P1IaDGdaCTEkftbbM/QlD7yOGvAsIo4xriXZLbU5xf3tDMoMb5UP4 xJGvtu2Zd73l0MH69kzp1MCbXis3kBTKdarzaYx33LndB3iRg+nBnsNZNuGlaVrM 2SdHUq1rVeQbS2IgJPHAAy4uveIk/N/12bWtsWe4pJSUKa/ctU48FBIqQUxz9hl8 sHUpPYkID8Bc3fNRIQKogkPSVyZ2+4a6hzbmY+DU6Y2o/QqUFF7yF0cL4bfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJgPihHglF1ajTcde5+3t9aHveEwHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOIwEyhDhjOEBzs46WUGfp08LlNSTKNaoPz +g4/SJpeSYTT6J6N2qMVIO+X6BfdkH3hcY7PbZive17rTYEyfWlYZGV/rvgOkNP/ 6NSBlslpYtwlEW26BSZc2/Njy/7/tERZCnhkhKo/RFIRQTROhMArJtT1oCZPnYXa JooQiUTUNkrcvdDX4T3r6PEbJ4icpQMgGkF1DCSmDL00CHSPCDZ2XTRtKsz+Vn30 ViT0MMmmYE4wbQvQITSlH9cdtwGccJEdlsEEXHd3hS7OfsgFljWCKbJhER5gW5Rh HTbLSezmVBDXIXMkUo5AOmHqN4HirZyjKW4LTi2H6MBZIlS6i1A= -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:35 2025 by rpki-client