$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: 9L1qa5dhq6rn3pRj7gZ0py4H3rRhWJ3GpNil+L2Dcjk= Subject key identifier: 4B:77:C3:FB:3F:33:94:38:DE:84:21:9F:BE:D5:4F:4F:F1:40:B2:82 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 2AB2E49791623E7F86A21F45B315FFEC33F25269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01B2 Signing time: Sun 19 Oct 2025 23:01:57 +0000 Manifest this update: Sun 19 Oct 2025 22:56:57 +0000 Manifest next update: Thu 23 Oct 2025 05:08:57 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 2: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 3: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: vVCntrgsw0NtmpL0Gbh2IccfohDraMbzcwh7QyhA3Nw=) 4: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 5: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b2:e4:97:91:62:3e:7f:86:a2:1f:45:b3:15:ff:ec:33:f2:52:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Oct 19 22:56:57 2025 GMT Not After : Oct 23 05:08:57 2025 GMT Subject: CN=4B77C3FB3F339438DE84219FBED54F4FF140B282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:85:bd:c5:73:6e:8c:a3:0f:2a:90:17:ab: bd:6f:08:d9:5e:b5:9a:21:58:17:01:7a:38:a3:38: 4b:d6:c6:d3:99:52:60:1f:03:8a:21:87:8e:8d:73: ec:21:f6:3a:0b:29:26:f8:2e:9c:26:af:46:92:22: eb:ad:2c:d8:a1:7e:94:25:90:2e:cd:60:17:b3:a6: 1c:9a:9b:09:d6:96:22:20:42:48:89:57:9a:8a:1b: 35:b6:cf:64:0c:ef:c3:1a:a4:7e:85:e8:cb:54:3b: 98:c4:e1:f2:61:ca:22:8c:d1:f6:7d:a7:5d:b5:71: 7e:18:49:f2:c9:8b:48:7b:85:e7:ed:77:47:00:9c: 3e:e5:3d:d6:5f:4e:a1:2d:93:33:ae:ee:f2:be:a8: ee:d6:24:0c:ac:62:1e:9a:cb:d7:fe:22:a4:6b:86: d4:19:b7:76:6e:5e:9d:a2:ff:b6:8e:94:db:ae:d6: 9c:d9:32:28:63:88:93:f5:ca:91:a1:b5:41:3a:38: 8c:d3:d7:19:d8:8c:6c:f5:1a:2d:d7:b2:f9:c1:1d: d1:99:bf:46:ac:99:02:97:13:a8:ca:31:82:ca:76: 76:de:5d:30:4a:1d:c1:3a:8e:67:26:49:7a:3b:2f: 80:1b:b8:97:d1:9f:c5:62:ea:e0:84:c1:26:c9:81: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:C3:FB:3F:33:94:38:DE:84:21:9F:BE:D5:4F:4F:F1:40:B2:82 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:30:d5:0d:e5:36:0c:f4:20:a0:6e:b8:eb:da:a0:f3:02: 91:53:c5:ee:34:d2:f8:99:cf:a8:6a:73:11:31:64:45:5c:c6: ac:d0:43:b3:9b:34:ec:51:65:6d:fc:20:e7:83:64:60:03:3e: 2a:8a:bf:f8:82:b9:b3:8e:0b:c8:e7:e1:9e:6f:63:95:93:31: 98:47:b3:05:d4:56:6f:44:cb:f5:e1:33:17:3f:4c:11:9e:f2: a3:2c:19:be:22:88:b2:90:c0:52:77:fb:28:8c:cb:37:20:99: f8:11:1e:91:2c:08:c0:bf:48:14:2c:25:51:4f:63:4c:5b:0c: b5:dd:50:c6:50:4e:f1:ae:b5:1d:7c:f3:ff:f8:2a:8b:a5:28: ad:f8:40:4a:a6:3f:14:e6:31:da:45:e2:bb:86:2a:41:ab:69: 92:46:92:8a:dc:dc:88:52:b8:7a:cc:d5:ef:2e:8e:e8:1e:ea: 8c:2c:66:3e:6f:ad:96:2d:a5:3d:55:9f:4d:35:d1:10:45:4d: a6:e3:02:ce:6c:a4:5e:d1:1d:f1:2c:ea:71:17:c7:9f:cf:3d: 1c:67:58:45:67:20:c5:c5:8e:06:bf:75:1e:fc:19:13:22:19: 8c:2e:c8:71:1f:a6:73:a6:c0:13:42:8c:72:ab:61:19:b3:c3: de:59:e1:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrLkl5FiPn+Goh9FsxX/7DPyUmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTEwMTkyMjU2NTdaFw0yNTEwMjMwNTA4NTdaMDMxMTAvBgNV BAMTKDRCNzdDM0ZCM0YzMzk0MzhERTg0MjE5RkJFRDU0RjRGRjE0MEIyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn14W9xXNujKMPKpAXq71vCNle tZohWBcBejijOEvWxtOZUmAfA4ohh46Nc+wh9joLKSb4Lpwmr0aSIuutLNihfpQl kC7NYBezphyamwnWliIgQkiJV5qKGzW2z2QM78MapH6F6MtUO5jE4fJhyiKM0fZ9 p121cX4YSfLJi0h7heftd0cAnD7lPdZfTqEtkzOu7vK+qO7WJAysYh6ay9f+IqRr htQZt3ZuXp2i/7aOlNuu1pzZMihjiJP1ypGhtUE6OIzT1xnYjGz1Gi3XsvnBHdGZ v0asmQKXE6jKMYLKdnbeXTBKHcE6jmcmSXo7L4AbuJfRn8Vi6uCEwSbJgSM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3fD+z8zlDjehCGfvtVPT/FAsoIwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZIMNUN5TYM9CCgbrjr2qDzApFTxe400viZ z6hqcxExZEVcxqzQQ7ObNOxRZW38IOeDZGADPiqKv/iCubOOC8jn4Z5vY5WTMZhH swXUVm9Ey/XhMxc/TBGe8qMsGb4iiLKQwFJ3+yiMyzcgmfgRHpEsCMC/SBQsJVFP Y0xbDLXdUMZQTvGutR188//4KoulKK34QEqmPxTmMdpF4ruGKkGraZJGkorc3IhS uHrM1e8ujuge6owsZj5vrZYtpT1Vn0010RBFTabjAs5spF7RHfEs6nEXx5/PPRxn WEVnIMXFjga/dR78GRMiGYwuyHEfpnOmwBNCjHKrYRmzw95Z4Z8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:44 2025 by rpki-client