$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: pjY3L97OvvxeTIrHm32+0eFqK65cbjvwffRSJn51Tac= Subject key identifier: FB:36:E9:13:DC:59:59:18:48:34:43:09:C3:2A:8A:31:3A:BF:32:F4 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 50DE00574C961C3DA92875A4621366174B6C47D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01AA Signing time: Sun 19 Oct 2025 05:11:47 +0000 Manifest this update: Sun 19 Oct 2025 05:06:47 +0000 Manifest next update: Wed 22 Oct 2025 07:51:47 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: E1x+kdImAQBLtv7ggNEb9u3JxjfIpzEtbYxlxMnIxWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:de:00:57:4c:96:1c:3d:a9:28:75:a4:62:13:66:17:4b:6c:47:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Oct 19 05:06:47 2025 GMT Not After : Oct 22 07:51:47 2025 GMT Subject: CN=FB36E913DC59591848344309C32A8A313ABF32F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:9e:b4:33:45:b9:96:19:81:b4:96:36:e3: e2:b4:87:8b:06:42:4b:be:df:55:ba:3c:61:45:17: 90:6a:42:a1:86:65:2e:03:95:58:b6:89:49:a1:0b: 09:e2:41:37:2f:0c:8b:08:a8:d6:1d:97:2c:15:c5: 76:c6:e8:52:c7:96:04:66:d5:bf:63:5a:92:2d:74: ff:13:a1:17:34:82:8a:fa:f5:d0:6b:9a:5b:30:ea: 7d:25:66:b5:e7:ab:6b:cb:d0:e4:4a:92:13:3f:01: af:22:87:a7:24:fb:f1:9d:54:1d:3d:fd:9d:28:14: 84:50:23:62:ba:ff:19:da:cc:9e:ee:eb:65:1c:be: 5b:7d:43:3c:dc:0d:12:2d:ef:6b:be:fb:6f:56:e0: b3:97:39:95:e6:df:8b:17:b4:85:fe:d4:15:62:bc: d5:db:0b:c2:f6:77:f2:ce:0a:d2:2a:4c:87:20:21: 41:fd:f2:66:19:71:88:fa:ff:01:97:7c:2b:52:fd: a7:3a:1e:0d:1c:0b:5c:69:bc:27:9c:49:4e:a8:21: b2:6c:5f:d3:82:ac:fc:28:f2:dc:2b:a9:3c:b2:d0: 0a:f7:2d:ef:2c:c4:14:31:93:1f:29:66:dc:f4:fa: 3f:45:d9:24:5e:25:68:59:34:a1:45:1e:7c:90:e1: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:36:E9:13:DC:59:59:18:48:34:43:09:C3:2A:8A:31:3A:BF:32:F4 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6c:56:12:48:62:46:ea:46:4b:e8:0b:4b:ca:05:d5:a1:a0: a9:96:dc:49:fb:94:96:83:a3:47:90:1c:62:52:0c:95:5e:05: 36:a1:0a:b3:85:35:cf:6c:4b:36:3a:fe:12:c7:45:5c:09:65: 34:a2:bd:bf:d9:62:32:7c:ab:08:fa:ac:29:65:2d:49:f9:24: 3c:cb:0d:15:cc:20:c8:a8:a7:a5:fb:37:bb:ca:0f:a1:b3:10: e6:d4:d2:71:d8:c6:91:9e:77:4e:0f:b4:e8:9b:e4:49:09:c6: f0:62:3c:67:11:ea:bf:07:d8:a9:bc:60:0f:c9:cf:c2:dd:b3: fc:3f:ab:01:71:96:c9:7c:a2:a4:2b:9d:0e:a1:8e:cd:e3:bb: 73:19:18:2e:04:c6:da:73:c9:92:3a:28:ca:8f:63:79:12:da: be:f6:5b:c3:94:c6:f4:0a:4f:16:f1:3d:be:35:7c:b1:09:8d: 44:09:64:3d:21:3c:5d:95:a9:5c:25:59:a9:b2:62:a8:ae:4f: c5:67:bc:45:f4:d7:87:dd:f2:ed:71:27:6a:3b:56:56:35:35: b8:0a:fe:c0:c3:83:f3:d3:23:40:b4:f9:c5:93:81:20:63:8e: 1d:0e:03:ce:c5:38:04:63:a4:cf:f9:78:4d:59:0f:d8:29:6e: 29:07:b0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN4AV0yWHD2pKHWkYhNmF0tsR9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTEwMTkwNTA2NDdaFw0yNTEwMjIwNzUxNDdaMDMxMTAvBgNV BAMTKEZCMzZFOTEzREM1OTU5MTg0ODM0NDMwOUMzMkE4QTMxM0FCRjMyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GJ60M0W5lhmBtJY24+K0h4sG Qku+31W6PGFFF5BqQqGGZS4DlVi2iUmhCwniQTcvDIsIqNYdlywVxXbG6FLHlgRm 1b9jWpItdP8ToRc0gor69dBrmlsw6n0lZrXnq2vL0ORKkhM/Aa8ih6ck+/GdVB09 /Z0oFIRQI2K6/xnazJ7u62Ucvlt9QzzcDRIt72u++29W4LOXOZXm34sXtIX+1BVi vNXbC8L2d/LOCtIqTIcgIUH98mYZcYj6/wGXfCtS/ac6Hg0cC1xpvCecSU6oIbJs X9OCrPwo8twrqTyy0Ar3Le8sxBQxkx8pZtz0+j9F2SReJWhZNKFFHnyQ4XSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+zbpE9xZWRhINEMJwyqKMTq/MvQwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBsVhJIYkbqRkvoC0vKBdWhoKmW3En7lJaD o0eQHGJSDJVeBTahCrOFNc9sSzY6/hLHRVwJZTSivb/ZYjJ8qwj6rCllLUn5JDzL DRXMIMiop6X7N7vKD6GzEObU0nHYxpGed04PtOib5EkJxvBiPGcR6r8H2Km8YA/J z8Lds/w/qwFxlsl8oqQrnQ6hjs3ju3MZGC4ExtpzyZI6KMqPY3kS2r72W8OUxvQK TxbxPb41fLEJjUQJZD0hPF2VqVwlWamyYqiuT8VnvEX014fd8u1xJ2o7VlY1NbgK /sDDg/PTI0C0+cWTgSBjjh0OA87FOARjpM/5eE1ZD9gpbikHsA4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:20 2025 by rpki-client