$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: J45+G7jyVQYXOVlvZra1zHu0T7AiYMHIbuwm2AmDzJc= Subject key identifier: DC:DB:12:59:6E:56:51:5F:FF:30:8F:2D:14:79:08:8D:BB:E5:AF:D2 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 101545963FB4F8A37E16ED211B7510407E90FAD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 051A Signing time: Sun 19 Oct 2025 21:30:52 +0000 Manifest this update: Sun 19 Oct 2025 21:25:52 +0000 Manifest next update: Thu 23 Oct 2025 06:43:52 +0000 Files and hashes: 1: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: Db1pneMLB9ph7ncqyZsYrzyhT4e3i1s7mxkNzpA5NCI=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:45:96:3f:b4:f8:a3:7e:16:ed:21:1b:75:10:40:7e:90:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Oct 19 21:25:52 2025 GMT Not After : Oct 23 06:43:52 2025 GMT Subject: CN=DCDB12596E56515FFF308F2D1479088DBBE5AFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:bd:57:5b:e5:42:0c:36:31:0f:4b:8e:4c: e4:7e:9d:8a:11:9d:82:1d:ba:d8:37:c0:e1:2e:17: d5:e5:8b:6e:4d:ea:51:94:08:a9:04:bc:98:69:09: 17:4e:dc:31:fd:55:fe:f9:4b:83:21:6e:e2:dd:8c: 92:fe:25:2a:70:9f:fb:96:9c:71:69:c7:8e:8b:d0: 20:e2:9d:90:78:31:01:21:71:f5:ff:11:f3:d5:2c: aa:3a:a8:78:8f:b5:d7:38:61:2c:92:34:33:a5:14: d0:3a:d1:43:1e:53:04:8e:7f:52:f8:c8:6a:ca:25: b4:08:7f:9c:c0:5c:19:7b:a0:20:fc:8f:97:6d:95: cf:f5:b7:4f:19:70:c1:fb:98:b3:ed:a4:f6:aa:e5: 82:b5:ee:c1:17:2b:cf:56:fc:79:56:b2:e2:c6:fa: 07:3c:30:0c:6d:20:02:9a:0b:db:bc:83:b4:5e:d9: 60:fd:ef:52:49:ff:72:eb:45:ed:e4:ea:fe:1d:83: 96:03:0b:f9:7a:88:09:e8:05:77:48:02:2d:04:a3: eb:4f:af:d3:e3:09:ec:45:df:9f:a2:50:f7:4d:fb: 42:37:22:63:4d:7d:32:85:8f:ac:36:1e:ad:22:f5: 2f:a7:c2:3f:96:02:f0:36:be:23:0c:8f:ee:31:72: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:12:59:6E:56:51:5F:FF:30:8F:2D:14:79:08:8D:BB:E5:AF:D2 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:b2:f8:98:58:bc:e2:2e:c0:6a:56:b7:d3:96:11:09:42: 46:66:e6:14:16:85:10:49:77:19:b4:c9:85:0f:31:04:34:0a: ad:86:88:88:fa:8f:31:ae:df:63:63:34:09:fe:3d:74:71:4a: 55:07:04:b6:98:9b:12:c2:4f:1a:9c:a9:c1:65:5b:51:34:80: eb:5b:57:43:11:bd:41:fd:68:3c:69:73:53:f1:2d:ca:31:cc: 30:fc:4c:a1:eb:9b:03:bd:5a:fe:46:6f:18:be:bb:5f:07:00: 52:64:2d:21:92:11:ba:c5:89:69:36:c7:a7:73:39:9f:cc:84: e8:42:d4:c3:dd:1c:d2:7c:c3:8d:6c:26:12:87:d6:77:2e:6a: a5:8e:c4:73:d0:cd:6d:37:50:f7:24:6e:fe:38:95:98:ce:2c: 49:a6:c5:6a:8e:33:a8:53:d6:52:47:d6:77:eb:67:d8:5f:98: 00:50:e9:f9:f9:92:df:8b:93:95:b2:3b:1e:a5:f2:0f:2c:77: b1:e5:38:c7:2c:6b:49:ef:4d:f7:98:c9:a7:55:e6:50:90:6b: 0b:27:36:81:20:89:dc:30:df:01:c4:e6:97:8d:46:9b:42:aa: d5:d2:f2:5d:65:0d:1b:71:67:ec:fe:9c:af:3c:9d:4f:94:aa: 91:f0:a6:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBVFlj+0+KN+Fu0hG3UQQH6Q+tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTEwMTkyMTI1NTJaFw0yNTEwMjMwNjQzNTJaMDMxMTAvBgNV BAMTKERDREIxMjU5NkU1NjUxNUZGRjMwOEYyRDE0NzkwODhEQkJFNUFGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNL1XW+VCDDYxD0uOTOR+nYoR nYIdutg3wOEuF9Xli25N6lGUCKkEvJhpCRdO3DH9Vf75S4MhbuLdjJL+JSpwn/uW nHFpx46L0CDinZB4MQEhcfX/EfPVLKo6qHiPtdc4YSySNDOlFNA60UMeUwSOf1L4 yGrKJbQIf5zAXBl7oCD8j5dtlc/1t08ZcMH7mLPtpPaq5YK17sEXK89W/HlWsuLG +gc8MAxtIAKaC9u8g7Re2WD971JJ/3LrRe3k6v4dg5YDC/l6iAnoBXdIAi0Eo+tP r9PjCexF35+iUPdN+0I3ImNNfTKFj6w2Hq0i9S+nwj+WAvA2viMMj+4xcr9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NsSWW5WUV//MI8tFHkIjbvlr9IwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmvsviYWLziLsBqVrfTlhEJQkZm5hQWhRBJ dxm0yYUPMQQ0Cq2GiIj6jzGu32NjNAn+PXRxSlUHBLaYmxLCTxqcqcFlW1E0gOtb V0MRvUH9aDxpc1PxLcoxzDD8TKHrmwO9Wv5Gbxi+u18HAFJkLSGSEbrFiWk2x6dz OZ/MhOhC1MPdHNJ8w41sJhKH1ncuaqWOxHPQzW03UPckbv44lZjOLEmmxWqOM6hT 1lJH1nfrZ9hfmABQ6fn5kt+Lk5WyOx6l8g8sd7HlOMcsa0nvTfeYyadV5lCQawsn NoEgidww3wHE5peNRptCqtXS8l1lDRtxZ+z+nK88nU+UqpHwpuo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:20 2025 by rpki-client