$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: lhJOlXNec/GuX7DTDQslYwOYvgMFGoEt85JkVWmH3KM= Subject key identifier: 38:44:C1:AC:41:AB:E7:CA:37:12:C6:2D:94:10:86:97:FA:69:35:4F Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 0891A2ACB2E28B218DA21DE03AACFF0194C8E196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 01BE Signing time: Sun 19 Oct 2025 02:01:25 +0000 Manifest this update: Sun 19 Oct 2025 01:56:25 +0000 Manifest next update: Wed 22 Oct 2025 08:10:25 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=) 3: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: s/iH0Iak4gupzQ0LO4I9LBqIb2awWfmdO0cT8ySJY/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:a2:ac:b2:e2:8b:21:8d:a2:1d:e0:3a:ac:ff:01:94:c8:e1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Oct 19 01:56:25 2025 GMT Not After : Oct 22 08:10:25 2025 GMT Subject: CN=3844C1AC41ABE7CA3712C62D94108697FA69354F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:cb:07:5c:18:0a:dd:9c:4c:a8:0d:4b:96: e3:57:84:ca:95:11:27:5a:9d:45:81:58:e1:5d:68: e0:00:a2:53:5a:ff:e6:f1:2f:70:a2:0c:17:bc:de: 61:65:04:2f:7a:fa:52:a2:8f:92:f9:24:af:c5:73: 77:2f:f6:bf:b4:34:bc:af:6c:39:53:50:dc:e8:6b: 9c:e4:69:1c:25:9d:f9:62:6b:c5:2c:58:50:16:9e: 97:eb:59:04:21:81:1c:7f:57:3d:d9:90:23:b6:96: 7c:31:84:79:c2:74:c7:cf:5e:b2:58:e5:ab:c9:2b: e2:cb:df:f1:3a:7e:2a:b0:2e:71:75:e2:53:03:96: 22:87:7b:85:e3:50:bb:62:90:b7:96:41:77:55:a2: b6:cc:04:da:ee:fc:a6:77:03:a5:cc:93:84:88:22: cf:0b:23:ae:48:5a:1b:dc:67:18:59:a4:f9:8c:a1: 0b:d2:c8:5e:d1:a5:fe:26:e5:1a:1b:cb:c5:0a:f1: 07:b9:be:f8:11:4f:50:37:f8:03:67:6c:5f:31:68: 76:60:a5:fb:f2:12:c3:cf:c8:4a:f2:10:54:7b:a5: 43:8c:8f:98:1f:e5:91:55:2d:ee:64:0c:48:2a:85: 51:65:9c:36:06:c4:3b:e7:9d:71:67:2e:59:af:78: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:C1:AC:41:AB:E7:CA:37:12:C6:2D:94:10:86:97:FA:69:35:4F X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:47:8a:cd:0a:99:8a:93:50:d6:4f:45:7c:06:ba:9b:55:db: b1:59:61:d2:61:18:32:e8:16:28:68:31:0f:7a:07:98:50:6c: 9a:4c:27:b0:fe:73:03:42:cc:10:85:ee:bc:b0:ab:59:3a:44: 42:fb:3c:73:f0:ce:d7:b4:40:5d:35:4b:46:59:e9:62:59:cf: 66:01:8c:1b:80:98:93:10:8b:27:d3:6f:bd:06:b9:37:b9:b3: de:69:a5:2a:1f:91:a4:9d:78:0f:e2:16:24:fe:e1:7b:a9:e9: 57:bc:48:b4:c3:da:1e:24:7d:5e:d0:9e:a4:58:1b:3c:de:0b: 6e:29:91:98:58:1b:db:3a:98:06:a1:7e:f9:31:0b:25:c8:bc: 46:57:7b:f7:65:fc:7d:99:99:1f:3b:05:1b:4f:76:61:9b:28: ae:93:6d:1c:ff:50:a5:8a:e4:50:6b:da:69:37:b4:31:38:57: f3:f3:ba:ff:a1:79:51:bb:a2:b4:8a:9d:d8:2e:b9:1e:98:55: b9:73:cf:fa:71:ce:07:ab:a3:a1:1a:3c:84:f7:1a:64:1a:ff: 0a:ff:2d:a6:a5:21:30:bb:60:ab:16:ab:62:14:80:b1:e3:2a: d7:de:f7:56:9d:db:ac:2a:d7:5e:ce:d2:c5:ce:e1:1e:44:87: 52:e0:fa:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJGirLLiiyGNoh3gOqz/AZTI4ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTEwMTkwMTU2MjVaFw0yNTEwMjIwODEwMjVaMDMxMTAvBgNV BAMTKDM4NDRDMUFDNDFBQkU3Q0EzNzEyQzYyRDk0MTA4Njk3RkE2OTM1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdScsHXBgK3ZxMqA1LluNXhMqV ESdanUWBWOFdaOAAolNa/+bxL3CiDBe83mFlBC96+lKij5L5JK/Fc3cv9r+0NLyv bDlTUNzoa5zkaRwlnflia8UsWFAWnpfrWQQhgRx/Vz3ZkCO2lnwxhHnCdMfPXrJY 5avJK+LL3/E6fiqwLnF14lMDliKHe4XjULtikLeWQXdVorbMBNru/KZ3A6XMk4SI Is8LI65IWhvcZxhZpPmMoQvSyF7Rpf4m5Roby8UK8Qe5vvgRT1A3+ANnbF8xaHZg pfvyEsPPyEryEFR7pUOMj5gf5ZFVLe5kDEgqhVFlnDYGxDvnnXFnLlmveHTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOETBrEGr58o3EsYtlBCGl/ppNU8wHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1His0KmYqTUNZPRXwGuptV27FZYdJhGDLo FihoMQ96B5hQbJpMJ7D+cwNCzBCF7rywq1k6REL7PHPwzte0QF01S0ZZ6WJZz2YB jBuAmJMQiyfTb70GuTe5s95ppSofkaSdeA/iFiT+4Xup6Ve8SLTD2h4kfV7QnqRY GzzeC24pkZhYG9s6mAahfvkxCyXIvEZXe/dl/H2ZmR87BRtPdmGbKK6TbRz/UKWK 5FBr2mk3tDE4V/Pzuv+heVG7orSKndguuR6YVblzz/pxzgero6EaPIT3GmQa/wr/ LaalITC7YKsWq2IUgLHjKtfe91ad26wq117O0sXO4R5Eh1Lg+oA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:22 2025 by rpki-client