$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: OzfX4jRryXrc5DeLGy5P3RRJiOjfp5xVDb4StXWfNAA= Subject key identifier: FF:06:A5:8F:22:3A:A1:0F:48:1E:E5:0E:95:F8:D5:78:05:5B:65:27 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 44F42F0C5DAE56F8A01C57226A208C19E2719048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 04DE Signing time: Sun 19 Oct 2025 20:40:49 +0000 Manifest this update: Sun 19 Oct 2025 20:35:49 +0000 Manifest next update: Thu 23 Oct 2025 08:20:49 +0000 Files and hashes: 1: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (hash: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0=) 2: 323430363a623734303a3a2f33322d3332203d3e203338373736.roa (hash: l1d86+GollU+X7/7+S+akSvN9Ic4ZxndXEoSt1R4EA0=) 3: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: we24I32s5ELSTaYXFb0D1dL9DqvAx3yOmh/lu/NzD+s=) 4: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: NxlxLH6sWrVvfcgHsgIQ2g78mN/SXiv62/SQIBAOs7I=) 5: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:2f:0c:5d:ae:56:f8:a0:1c:57:22:6a:20:8c:19:e2:71:90:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Oct 19 20:35:49 2025 GMT Not After : Oct 23 08:20:49 2025 GMT Subject: CN=FF06A58F223AA10F481EE50E95F8D578055B6527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:97:2e:e9:00:1b:c3:83:85:ff:4a:cf:52: 77:19:64:f4:92:6f:2a:13:63:b4:bf:d8:8e:f3:50: 40:55:f6:2b:9d:80:32:30:23:2a:61:cc:8e:98:96: d6:ae:c1:f6:fc:91:7c:75:58:9a:ce:31:41:57:c6: f3:06:12:d1:2c:51:84:db:21:38:83:48:6f:48:42: 6c:5a:8f:19:69:46:15:8a:58:99:70:0c:b0:dd:8e: 64:37:8e:a5:9e:0b:9d:9d:9e:35:6a:98:4e:91:1f: d0:e3:7e:b5:8b:18:8f:e8:61:db:ef:56:ec:5f:54: e4:e9:00:77:14:b6:82:b8:78:3b:5b:26:f4:07:0b: 6b:dd:c4:a5:0c:88:2a:1a:26:61:57:93:fb:bf:be: 6b:1b:24:26:20:28:6e:0b:05:89:39:83:db:22:e5: 2e:22:bd:7c:d2:2f:68:d0:93:c9:42:6b:aa:d5:28: 37:d0:b9:72:8e:20:21:08:02:45:da:01:20:e3:e5: 77:4e:fc:b6:5c:f5:d2:0d:c0:3b:ba:bc:5d:d0:d1: 00:64:d9:56:fd:e5:07:fa:28:f5:40:61:fb:c2:14: 04:69:44:2d:b2:91:d9:89:a6:d7:62:fc:e6:9a:cb: de:57:c9:5d:49:26:0c:d2:40:52:1a:7f:1f:5f:00: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:A5:8F:22:3A:A1:0F:48:1E:E5:0E:95:F8:D5:78:05:5B:65:27 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b9:39:a4:ad:8b:3a:4e:c2:d4:b3:96:25:f1:23:56:37:11: d9:17:5f:ac:f4:3d:96:60:5e:10:5c:aa:44:34:66:df:92:96: f7:11:1a:22:f9:8b:ca:05:10:23:2c:64:7e:27:ab:f6:9d:b9: a2:93:bc:5a:d1:cf:41:ad:71:13:60:9e:13:53:f7:9d:f2:94: 49:48:87:47:e6:5b:eb:4f:28:62:5a:cd:57:41:b7:e9:74:5d: 66:a1:a9:ef:70:ec:55:d8:1c:a0:54:67:22:25:80:71:aa:86: 5e:6d:17:85:31:31:06:e7:15:9e:b9:b5:4c:e3:1d:ee:78:74: b1:07:05:41:43:29:29:c1:27:e4:b1:d2:e1:2d:97:53:f8:ff: e7:17:f0:b6:8e:81:44:ac:26:04:9f:2c:43:32:8b:f5:17:c9: 9a:78:49:c2:f1:33:91:d6:22:e3:8d:f4:81:5a:2f:2d:a5:7c: d1:b0:fa:ec:3d:d9:99:bf:80:9d:10:f0:8a:77:57:23:8b:dd: 8b:a7:4f:58:24:cc:c6:95:0e:2f:3f:b5:cb:e7:96:b0:bc:0d: 2d:cf:72:66:f8:59:68:c4:30:5f:f1:4f:88:ea:65:55:13:bd: 2b:9c:b4:ef:87:69:bc:93:9d:6e:18:9d:ad:f5:8a:d9:3a:30: 6b:34:ed:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPQvDF2uVvigHFciaiCMGeJxkEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTEwMTkyMDM1NDlaFw0yNTEwMjMwODIwNDlaMDMxMTAvBgNV BAMTKEZGMDZBNThGMjIzQUExMEY0ODFFRTUwRTk1RjhENTc4MDU1QjY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASZcu6QAbw4OF/0rPUncZZPSS byoTY7S/2I7zUEBV9iudgDIwIyphzI6Yltauwfb8kXx1WJrOMUFXxvMGEtEsUYTb ITiDSG9IQmxajxlpRhWKWJlwDLDdjmQ3jqWeC52dnjVqmE6RH9DjfrWLGI/oYdvv VuxfVOTpAHcUtoK4eDtbJvQHC2vdxKUMiCoaJmFXk/u/vmsbJCYgKG4LBYk5g9si 5S4ivXzSL2jQk8lCa6rVKDfQuXKOICEIAkXaASDj5XdO/LZc9dINwDu6vF3Q0QBk 2Vb95Qf6KPVAYfvCFARpRC2ykdmJptdi/Oaay95XyV1JJgzSQFIafx9fAGLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/waljyI6oQ9IHuUOlfjVeAVbZScwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC5OaStizpOwtSzliXxI1Y3EdkXX6z0PZZg XhBcqkQ0Zt+SlvcRGiL5i8oFECMsZH4nq/aduaKTvFrRz0GtcRNgnhNT953ylElI h0fmW+tPKGJazVdBt+l0XWahqe9w7FXYHKBUZyIlgHGqhl5tF4UxMQbnFZ65tUzj He54dLEHBUFDKSnBJ+Sx0uEtl1P4/+cX8LaOgUSsJgSfLEMyi/UXyZp4ScLxM5HW IuON9IFaLy2lfNGw+uw92Zm/gJ0Q8Ip3VyOL3YunT1gkzMaVDi8/tcvnlrC8DS3P cmb4WWjEMF/xT4jqZVUTvSuctO+HabyTnW4Yna31itk6MGs07eg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:58 2025 by rpki-client