$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: haBuMgn6pO1eFC2v6xyR6mKbefnHK/Nzrto5UsuSeXc= Subject key identifier: C3:EC:9A:86:52:28:ED:9D:B1:A0:7C:CD:13:9D:A9:F8:64:75:3E:23 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 7AFE3503ACA66A7A520554F6A03F78119DFACE9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: EA Signing time: Sun 19 Oct 2025 01:11:59 +0000 Manifest this update: Sun 19 Oct 2025 01:06:59 +0000 Manifest next update: Wed 22 Oct 2025 04:58:59 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: nrxgevVzfke2bYVznD13/b/ndOk9s9aPnu+Kr2u0zQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fe:35:03:ac:a6:6a:7a:52:05:54:f6:a0:3f:78:11:9d:fa:ce:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Oct 19 01:06:59 2025 GMT Not After : Oct 22 04:58:59 2025 GMT Subject: CN=C3EC9A865228ED9DB1A07CCD139DA9F864753E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:3a:ff:e9:c1:99:5b:b7:e8:14:5f:0f:4a: 4d:a7:f9:aa:12:2b:d1:f1:6a:38:b8:e3:94:9b:ee: c0:aa:34:80:bc:f2:31:19:ce:d3:15:3c:7d:f4:98: da:88:fb:d4:cd:7e:62:fa:ac:ea:89:c3:dd:f3:39: 63:99:23:bb:d7:b7:09:1c:ce:b7:ff:17:75:27:f7: 2a:98:0d:e6:de:6c:48:6f:8c:dc:53:5b:ea:2d:df: 37:f4:9d:6c:69:2e:be:9c:b8:6b:e6:fd:1b:61:b0: dc:42:25:ee:45:0b:7a:e8:5f:ca:b5:a9:ee:ab:fd: dd:b8:e9:aa:83:c5:ee:9d:ab:38:33:95:4a:c0:9b: 18:c4:50:35:3a:1e:ed:9d:fe:ff:90:4c:0b:23:1f: bf:31:cc:b8:09:06:45:b3:0f:93:ca:8f:5a:83:63: ba:d4:98:77:5e:a9:2f:0c:68:48:63:69:20:3e:19: d9:a8:65:f0:8e:42:8e:1e:c7:5a:b9:3a:85:dc:6d: 6b:d7:8b:78:ee:1b:45:d3:de:cd:65:45:39:c3:98: 09:ef:2d:ed:f5:31:d8:ea:fe:5a:7d:2f:92:e2:80: e7:65:70:04:a4:1a:4c:6b:8c:dd:dc:96:62:52:17: 42:3e:39:10:4f:07:4f:76:0d:ae:6e:19:4c:4b:ea: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:9A:86:52:28:ED:9D:B1:A0:7C:CD:13:9D:A9:F8:64:75:3E:23 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2d:cb:a5:44:42:09:9a:e9:5a:31:b5:0e:f6:e3:31:00:b7: 08:67:af:95:23:20:12:7a:1a:bc:bc:43:60:fa:84:80:77:88: 2b:d1:0e:30:28:f9:37:54:3c:51:be:f0:a6:c3:7d:20:a8:1a: dc:26:b7:1a:3a:30:fb:cf:69:43:c7:45:15:03:95:54:ed:42: f0:72:16:66:a2:36:91:33:69:0a:88:24:37:ed:f1:5a:18:3c: 63:43:a9:fc:e3:4f:b3:1a:35:55:58:05:e6:80:1e:0d:28:88: 9f:8e:e5:f8:a0:50:d9:ea:23:a7:c7:93:1d:98:c1:13:3e:0b: 73:a9:73:69:4c:ad:34:58:55:a2:87:c1:16:8f:96:48:01:cf: 6f:1c:f9:1a:1c:c7:cf:8a:4a:6c:93:07:10:ec:68:b2:52:2a: 9a:90:a5:f4:e2:5a:50:91:2d:86:d5:77:22:92:1d:ba:b2:f2: 9c:a1:86:00:77:d3:45:23:c8:9d:1b:a5:63:c2:1a:ab:02:7d: ad:5c:20:df:61:8c:79:11:e4:a8:d7:f9:8b:32:e3:60:e5:9b: 1b:ae:5b:19:89:b2:d9:32:e3:37:9c:46:1b:77:40:2a:6c:4c: 57:1e:17:3b:21:b1:9e:d2:ba:62:b9:7a:c2:2e:d6:27:cb:4b: af:df:37:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUev41A6ymanpSBVT2oD94EZ36zpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTEwMTkwMTA2NTlaFw0yNTEwMjIwNDU4NTlaMDMxMTAvBgNV BAMTKEMzRUM5QTg2NTIyOEVEOURCMUEwN0NDRDEzOURBOUY4NjQ3NTNFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/Dr/6cGZW7foFF8PSk2n+aoS K9Hxaji445Sb7sCqNIC88jEZztMVPH30mNqI+9TNfmL6rOqJw93zOWOZI7vXtwkc zrf/F3Un9yqYDebebEhvjNxTW+ot3zf0nWxpLr6cuGvm/RthsNxCJe5FC3roX8q1 qe6r/d246aqDxe6dqzgzlUrAmxjEUDU6Hu2d/v+QTAsjH78xzLgJBkWzD5PKj1qD Y7rUmHdeqS8MaEhjaSA+GdmoZfCOQo4ex1q5OoXcbWvXi3juG0XT3s1lRTnDmAnv Le31Mdjq/lp9L5LigOdlcASkGkxrjN3clmJSF0I+ORBPB092Da5uGUxL6jx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+yahlIo7Z2xoHzNE52p+GR1PiMwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMty6VEQgma6VoxtQ724zEAtwhnr5UjIBJ6 Gry8Q2D6hIB3iCvRDjAo+TdUPFG+8KbDfSCoGtwmtxo6MPvPaUPHRRUDlVTtQvBy FmaiNpEzaQqIJDft8VoYPGNDqfzjT7MaNVVYBeaAHg0oiJ+O5figUNnqI6fHkx2Y wRM+C3Opc2lMrTRYVaKHwRaPlkgBz28c+Rocx8+KSmyTBxDsaLJSKpqQpfTiWlCR LYbVdyKSHbqy8pyhhgB300UjyJ0bpWPCGqsCfa1cIN9hjHkR5KjX+Ysy42Dlmxuu WxmJstky4zecRht3QCpsTFceFzshsZ7SumK5esIu1ifLS6/fNzw= -----END CERTIFICATE-----Generated at Mon Oct 20 22:02:53 2025 by rpki-client