$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: 9IRzTzMoT7nQl5aF2p8x2HzS6ynHEMW+RFZRPU9a9xU= Subject key identifier: 10:14:CE:A3:09:E3:C7:39:DF:E8:04:C3:BD:24:B6:4C:32:D2:D9:87 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 54A94B0325A030D105A9849FD337C9D0AFF4D6C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02A9 Signing time: Mon 20 Oct 2025 06:00:59 +0000 Manifest this update: Mon 20 Oct 2025 05:55:59 +0000 Manifest next update: Thu 23 Oct 2025 11:20:59 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: VzIrvYP6KFC1mAx7wX3RN4NZG8l17bK+Y9jG1uOOVyo=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a9:4b:03:25:a0:30:d1:05:a9:84:9f:d3:37:c9:d0:af:f4:d6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Oct 20 05:55:59 2025 GMT Not After : Oct 23 11:20:59 2025 GMT Subject: CN=1014CEA309E3C739DFE804C3BD24B64C32D2D987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:e6:b6:c6:e8:c7:10:69:80:66:49:b2:f4: 77:da:3d:26:67:1c:e8:23:85:29:be:8b:95:37:50: e9:8e:76:10:51:a8:49:65:7a:61:39:ec:e4:e9:60: e5:ed:4e:e4:36:0d:22:99:6b:78:5f:2d:c1:34:22: 6e:3e:e3:fe:74:85:8b:ec:56:58:90:ba:8f:57:a4: 1c:ca:ee:83:8a:6e:7a:7e:4f:c0:aa:d8:a6:a4:90: 1f:27:82:52:30:df:61:04:d7:55:bd:89:3c:4f:f7: 3d:fb:8e:43:43:fd:f0:df:ac:31:79:83:32:ad:a3: eb:30:20:d4:08:8c:18:cb:6f:0a:09:1f:13:04:07: 70:4e:fe:85:d5:42:9a:14:a4:a0:e3:7e:37:e1:36: 8c:3e:88:4a:4e:56:d3:dd:53:54:45:46:83:0d:0e: 2f:87:80:08:d0:c5:9e:af:ea:2e:1f:30:33:22:62: b3:82:a4:40:90:ba:6c:51:3a:f1:6e:10:10:b1:41: 18:a8:54:b3:83:2f:f0:ff:b7:90:d9:19:5d:56:34: e2:94:e2:a0:f8:86:44:ae:4c:90:5e:26:f9:a2:88: 56:1e:00:ba:9e:0a:49:13:08:0a:2f:f5:4f:c2:0a: 57:c1:0e:68:73:a3:64:e2:3d:55:ae:16:1b:c0:3f: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:CE:A3:09:E3:C7:39:DF:E8:04:C3:BD:24:B6:4C:32:D2:D9:87 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:41:ea:ce:72:04:af:f4:31:44:cc:ac:34:7c:36:ff:02:71: a8:2a:79:c4:2d:8d:6d:8c:28:fa:36:21:07:36:1e:2b:43:2b: e2:4f:b3:5a:3e:2d:e9:1a:97:a7:45:7b:f3:34:05:a4:9b:9d: b5:1e:c1:97:66:6c:a3:fc:c9:2f:c7:04:b2:89:9a:46:25:9b: 2a:27:e7:d7:2a:23:a6:95:be:1e:f0:a9:95:6c:22:10:0e:28: 4f:f4:63:b6:13:3f:da:c4:76:79:84:f5:bb:2e:9d:40:67:0f: 0f:8e:f3:a4:42:06:f0:a0:92:36:c8:d4:7c:73:7e:f9:23:a2: aa:57:8c:f8:66:5b:18:48:a5:c6:42:66:d1:18:b6:5c:bd:8c: 81:67:75:8c:89:6d:4b:c6:27:7b:60:a2:01:06:9f:44:88:f1: be:9d:4f:d9:f7:6b:6b:8a:83:e9:14:78:9b:ad:94:0f:25:44: 47:0f:d4:18:c4:63:69:db:ea:19:21:20:9c:bd:13:e0:79:63: 01:74:43:36:d9:60:53:9b:ef:04:67:11:07:b9:5d:ab:65:36: 7b:b4:67:1d:b2:c2:b0:b3:bc:ce:0a:7d:8b:63:6c:06:ba:a5: 6c:a6:f8:51:01:0e:1a:04:e3:3e:96:64:a8:5a:bd:df:39:7f: 94:0e:cc:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKlLAyWgMNEFqYSf0zfJ0K/01sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTEwMjAwNTU1NTlaFw0yNTEwMjMxMTIwNTlaMDMxMTAvBgNV BAMTKDEwMTRDRUEzMDlFM0M3MzlERkU4MDRDM0JEMjRCNjRDMzJEMkQ5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXOa2xujHEGmAZkmy9HfaPSZn HOgjhSm+i5U3UOmOdhBRqEllemE57OTpYOXtTuQ2DSKZa3hfLcE0Im4+4/50hYvs VliQuo9XpBzK7oOKbnp+T8Cq2KakkB8nglIw32EE11W9iTxP9z37jkND/fDfrDF5 gzKto+swINQIjBjLbwoJHxMEB3BO/oXVQpoUpKDjfjfhNow+iEpOVtPdU1RFRoMN Di+HgAjQxZ6v6i4fMDMiYrOCpECQumxROvFuEBCxQRioVLODL/D/t5DZGV1WNOKU 4qD4hkSuTJBeJvmiiFYeALqeCkkTCAov9U/CClfBDmhzo2TiPVWuFhvAP1aBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBTOownjxznf6ATDvSS2TDLS2YcwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtB6s5yBK/0MUTMrDR8Nv8CcagqecQtjW2M KPo2IQc2HitDK+JPs1o+Lekal6dFe/M0BaSbnbUewZdmbKP8yS/HBLKJmkYlmyon 59cqI6aVvh7wqZVsIhAOKE/0Y7YTP9rEdnmE9bsunUBnDw+O86RCBvCgkjbI1Hxz fvkjoqpXjPhmWxhIpcZCZtEYtly9jIFndYyJbUvGJ3tgogEGn0SI8b6dT9n3a2uK g+kUeJutlA8lREcP1BjEY2nb6hkhIJy9E+B5YwF0QzbZYFOb7wRnEQe5XatlNnu0 Zx2ywrCzvM4KfYtjbAa6pWym+FEBDhoE4z6WZKhavd85f5QOzAE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:42 2025 by rpki-client