$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: RKiV9KUCipPpfZFb8QOpOLspBTtjZL4c8euFRfTIjpI= Subject key identifier: E5:F4:B5:B6:8E:83:87:03:2C:C2:A4:A1:73:71:AF:01:4A:9E:B9:7F Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 0A0AE99C7F73CCBCA3AA47907A393CD9C7EFAA10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: FD Signing time: Sun 19 Oct 2025 10:11:03 +0000 Manifest this update: Sun 19 Oct 2025 10:06:03 +0000 Manifest next update: Wed 22 Oct 2025 10:44:03 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 2: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: Fvu1Ozx0IBE37LoFgM9qYM3zjghdIWlqR4tyP7hjDKA=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0a:e9:9c:7f:73:cc:bc:a3:aa:47:90:7a:39:3c:d9:c7:ef:aa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Oct 19 10:06:03 2025 GMT Not After : Oct 22 10:44:03 2025 GMT Subject: CN=E5F4B5B68E8387032CC2A4A17371AF014A9EB97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:11:0e:7d:94:81:af:ff:ec:26:5e:4c:58: 37:28:ca:74:7d:51:51:35:a2:8f:e0:20:6b:4e:18: df:40:26:9a:90:a2:7d:d0:b6:c8:5e:46:51:d9:f3: 4c:cb:ff:15:d2:03:a5:38:a3:23:68:50:db:07:51: 2f:a7:b6:df:85:bf:31:19:e3:6c:80:63:29:6d:05: 94:50:fd:5a:4f:84:38:0f:25:34:46:e3:9c:33:30: 07:d0:1b:31:89:52:55:cb:05:0f:29:08:88:a0:0c: eb:45:25:57:8e:38:c1:11:15:88:c1:84:68:5c:14: 89:a8:21:a0:a9:de:68:8e:a9:6a:f7:18:99:91:02: 7d:28:85:ae:50:9c:c6:da:7b:9c:ba:6f:e2:7c:9e: 66:06:56:9b:d7:d7:80:15:ce:16:f0:fd:99:92:a5: 7b:3c:e9:28:62:85:53:e7:e5:5e:b0:83:7d:63:0b: 40:e1:56:3f:9b:45:48:71:6d:16:8a:ab:41:0c:4e: db:44:f9:8f:72:f9:a0:9a:1b:d1:41:67:f2:3d:c8: 8c:32:b2:c6:03:f3:b5:10:01:eb:b2:95:41:65:7f: d6:cc:3f:18:08:48:f8:8b:f7:43:67:33:5d:71:85: 3c:4a:96:1f:17:da:e8:3a:b0:15:6b:27:b5:d1:02: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F4:B5:B6:8E:83:87:03:2C:C2:A4:A1:73:71:AF:01:4A:9E:B9:7F X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:eb:e9:4a:a8:ed:04:8f:38:3b:06:98:bd:1d:37:f5:42:ae: a3:42:67:2e:e8:38:0c:58:00:b8:56:07:b4:98:24:49:88:c9: c5:fb:af:00:4c:73:f1:b1:b6:80:68:c5:67:d9:6d:a9:36:aa: a9:21:98:e5:f3:df:e1:e9:13:2c:58:47:37:a3:73:0e:09:f2: f9:3a:a9:d9:6f:ff:3b:93:28:68:af:f5:4f:94:ca:ce:e4:f7: cf:ef:fb:e1:97:73:dc:b0:ee:69:0f:ca:12:1f:28:a2:f5:0b: fa:29:a7:09:9a:aa:2e:62:9f:72:0a:a6:6d:f5:5c:b6:6d:ef: 0e:c0:b3:72:7f:e8:b7:d3:24:3e:3b:93:d5:b3:27:03:23:5c: 9d:e5:22:63:e2:4d:a2:76:8b:4a:c5:cb:ac:bb:56:7a:fb:23: 90:15:a2:88:b2:bc:60:4d:1f:1d:9f:c0:3e:33:b9:2a:9b:6a: f6:03:cb:98:d1:bd:de:3e:1a:de:be:03:e5:50:5a:03:3a:e8: 17:4e:12:27:1b:41:7d:51:11:2f:b6:28:8b:9a:71:48:a1:44: 65:f2:de:63:14:de:46:8c:b7:e0:72:07:30:3b:2b:36:36:eb: 15:00:74:93:19:fd:d2:16:f4:14:5b:05:83:10:5d:b2:32:68: 09:1c:2f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgrpnH9zzLyjqkeQejk82cfvqhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTEwMTkxMDA2MDNaFw0yNTEwMjIxMDQ0MDNaMDMxMTAvBgNV BAMTKEU1RjRCNUI2OEU4Mzg3MDMyQ0MyQTRBMTczNzFBRjAxNEE5RUI5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/BEOfZSBr//sJl5MWDcoynR9 UVE1oo/gIGtOGN9AJpqQon3QtsheRlHZ80zL/xXSA6U4oyNoUNsHUS+ntt+FvzEZ 42yAYyltBZRQ/VpPhDgPJTRG45wzMAfQGzGJUlXLBQ8pCIigDOtFJVeOOMERFYjB hGhcFImoIaCp3miOqWr3GJmRAn0oha5QnMbae5y6b+J8nmYGVpvX14AVzhbw/ZmS pXs86ShihVPn5V6wg31jC0DhVj+bRUhxbRaKq0EMTttE+Y9y+aCaG9FBZ/I9yIwy ssYD87UQAeuylUFlf9bMPxgISPiL90NnM11xhTxKlh8X2ug6sBVrJ7XRAtbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5fS1to6DhwMswqShc3GvAUqeuX8wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfr6Uqo7QSPODsGmL0dN/VCrqNCZy7oOAxY ALhWB7SYJEmIycX7rwBMc/GxtoBoxWfZbak2qqkhmOXz3+HpEyxYRzejcw4J8vk6 qdlv/zuTKGiv9U+Uys7k98/v++GXc9yw7mkPyhIfKKL1C/oppwmaqi5in3IKpm31 XLZt7w7As3J/6LfTJD47k9WzJwMjXJ3lImPiTaJ2i0rFy6y7Vnr7I5AVooiyvGBN Hx2fwD4zuSqbavYDy5jRvd4+Gt6+A+VQWgM66BdOEicbQX1RES+2KIuacUihRGXy 3mMU3kaMt+ByBzA7KzY26xUAdJMZ/dIW9BRbBYMQXbIyaAkcL1Q= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:51 2025 by rpki-client