$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: syf3tZaDTLHJXUyyF8mNwdT26R4yaZi+jw6uNLnPPuM= Subject key identifier: AF:D5:E2:27:99:3C:9D:3B:6B:8E:56:85:53:04:C2:A4:72:90:7A:48 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 206F917FD5198BC19EDE51AF85AA0397AB4FDCD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 0288 Signing time: Mon 20 Oct 2025 15:40:02 +0000 Manifest this update: Mon 20 Oct 2025 15:35:02 +0000 Manifest next update: Thu 23 Oct 2025 21:35:02 +0000 Files and hashes: 1: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: LrqOLogV2pqJm1JD+jgGDFnoqudanN5BU7ote6ngSrk=) 2: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: 3sYR5mChNjNSaDqdxXZa5E5wSNcSpbhqq718PzknZeo=) 3: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: oOGj5tlcgCuOuQ6ORsdrfX31aFz0B3FN8fvqd8j5T/A=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: R48/rgbNCjjp4lN8u0WLGy1+WSaMSCFGbeTToOjbzmw=) 5: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: yBAmYPcX6Hw9g9sbt5o4PVcLnMdm+J2PfCuUjXQ0T5g=) 6: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6f:91:7f:d5:19:8b:c1:9e:de:51:af:85:aa:03:97:ab:4f:dc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Oct 20 15:35:02 2025 GMT Not After : Oct 23 21:35:02 2025 GMT Subject: CN=AFD5E227993C9D3B6B8E56855304C2A472907A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:91:c2:0f:90:e2:42:3b:29:85:c1:b7:7c:c8: b0:02:21:07:03:75:96:17:f7:e9:07:82:29:88:e7: e5:bf:c6:1e:f2:82:7c:4f:e3:73:bb:47:02:c9:e1: 40:37:3c:c1:67:e0:28:a1:a9:99:c0:28:4b:6f:f3: 13:c4:43:23:e3:49:0f:38:7c:87:2c:19:76:62:80: 08:85:a1:da:88:59:9d:8e:28:f9:0c:ce:53:6f:e5: 38:50:b2:96:40:76:98:19:b0:ae:68:bb:f7:13:23: 6e:9f:64:b4:42:ef:8d:12:7a:ce:15:14:b8:4f:31: 06:22:a5:ab:49:fb:93:e7:dc:22:bc:4f:11:cb:1b: 55:eb:79:76:7d:97:f7:1f:75:6d:c2:1d:5d:8d:1c: a9:85:50:c8:81:bb:c0:1f:dc:d9:11:5d:f2:ce:85: 17:0e:e4:61:f6:d7:86:67:ec:54:f9:67:d6:fd:1d: e7:b4:b3:72:a1:d5:98:cd:6e:5a:60:38:5a:7e:7e: dd:7c:02:47:1b:e1:bc:bc:36:9d:60:c5:58:22:a9: c5:bc:8f:de:25:68:cc:48:71:61:17:65:17:b7:98: 9c:d9:2c:da:d1:eb:dd:73:6c:51:08:60:f6:d2:35: ec:ae:57:e1:a6:ab:86:c3:93:ea:21:6f:0a:a3:1d: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:E2:27:99:3C:9D:3B:6B:8E:56:85:53:04:C2:A4:72:90:7A:48 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:53:db:2a:a4:81:ff:ae:3b:76:21:5b:84:ea:92:5a:4c: 24:c6:a9:f6:72:ba:d0:6a:8b:04:ca:24:f1:d6:56:1f:69:1b: 07:28:f4:6b:58:b8:da:81:ce:35:30:35:5f:65:56:a3:70:25: c5:c9:df:26:a9:da:ec:51:af:f6:c3:19:a2:a0:d3:a0:ba:c9: 81:2d:68:42:ca:fe:ef:24:16:f9:ce:1f:a7:80:a4:49:a9:83: 9d:00:1b:09:a2:10:47:f4:a3:ad:b0:37:65:e2:56:b1:5e:ef: 4d:f3:08:8a:91:b9:97:4e:19:b5:6e:d0:42:25:77:60:e8:ee: 85:3d:29:48:5f:74:47:b4:39:99:2a:6b:4f:0c:e8:11:8a:06: 8b:ad:cf:ed:11:03:42:1d:cc:52:ec:fe:6e:b5:98:c9:61:75: 3c:74:83:d5:9b:c4:cd:20:17:d8:59:96:d4:a9:76:b0:fa:30: 6a:eb:ec:36:73:1d:32:ad:fc:9f:fa:60:c5:4b:a8:68:0a:26: 38:97:57:d3:15:9f:45:5a:88:31:ae:9e:f1:f2:e3:68:15:e5: 83:31:ab:8e:b1:63:74:34:56:40:a8:83:b1:fb:5a:49:67:11: e4:6f:c6:60:d2:31:6e:6f:4b:4e:8d:4f:9c:d5:97:73:5c:ed: fa:91:45:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIG+Rf9UZi8Ge3lGvhaoDl6tP3NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTEwMjAxNTM1MDJaFw0yNTEwMjMyMTM1MDJaMDMxMTAvBgNV BAMTKEFGRDVFMjI3OTkzQzlEM0I2QjhFNTY4NTUzMDRDMkE0NzI5MDdBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkcIPkOJCOymFwbd8yLACIQcD dZYX9+kHgimI5+W/xh7ygnxP43O7RwLJ4UA3PMFn4CihqZnAKEtv8xPEQyPjSQ84 fIcsGXZigAiFodqIWZ2OKPkMzlNv5ThQspZAdpgZsK5ou/cTI26fZLRC740Ses4V FLhPMQYipatJ+5Pn3CK8TxHLG1XreXZ9l/cfdW3CHV2NHKmFUMiBu8Af3NkRXfLO hRcO5GH214Zn7FT5Z9b9Hee0s3Kh1ZjNblpgOFp+ft18Akcb4by8Np1gxVgiqcW8 j94laMxIcWEXZRe3mJzZLNrR691zbFEIYPbSNeyuV+Gmq4bDk+ohbwqjHUUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9XiJ5k8nTtrjlaFUwTCpHKQekgwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw6U9sqpIH/rjt2IVuE6pJaTCTGqfZyutBq iwTKJPHWVh9pGwco9GtYuNqBzjUwNV9lVqNwJcXJ3yap2uxRr/bDGaKg06C6yYEt aELK/u8kFvnOH6eApEmpg50AGwmiEEf0o62wN2XiVrFe703zCIqRuZdOGbVu0EIl d2Do7oU9KUhfdEe0OZkqa08M6BGKBoutz+0RA0IdzFLs/m61mMlhdTx0g9WbxM0g F9hZltSpdrD6MGrr7DZzHTKt/J/6YMVLqGgKJjiXV9MVn0VaiDGunvHy42gV5YMx q46xY3Q0VkCog7H7WklnEeRvxmDSMW5vS06NT5zVl3Nc7fqRRbA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:19:11 2025 by rpki-client