$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: F5cdKghvGULrzSyyNmgQX4/JXh4A2PzIrzJdlaWdya4= Subject key identifier: D0:1B:02:96:B6:3E:0A:7F:A0:5C:E1:02:9F:B3:82:12:D7:D0:10:12 Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 06B4F0356FEA6FB518ECB5FBA0C30CC911BC1305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 0518 Signing time: Sat 18 Oct 2025 10:22:03 +0000 Manifest this update: Sat 18 Oct 2025 10:17:03 +0000 Manifest next update: Tue 21 Oct 2025 19:52:03 +0000 Files and hashes: 1: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) 2: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 3: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 4: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: cDp7OuyN09Gm0y8EZsZjemreBIMHMyn+hsxlFop20Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b4:f0:35:6f:ea:6f:b5:18:ec:b5:fb:a0:c3:0c:c9:11:bc:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Oct 18 10:17:03 2025 GMT Not After : Oct 21 19:52:03 2025 GMT Subject: CN=D01B0296B63E0A7FA05CE1029FB38212D7D01012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:05:73:7b:2a:08:50:0b:c3:0b:71:99:b4: 3d:39:89:7a:1e:6d:cb:8d:d1:62:da:ad:21:b7:dc: 93:d2:9f:eb:83:5f:d9:ff:05:43:55:a5:71:97:07: a4:64:9f:b9:0b:10:cc:ac:46:d6:45:f6:07:ab:be: d5:6d:3c:03:a9:eb:85:d9:cd:fa:82:38:1c:ba:90: c3:b7:1b:c4:68:ee:9b:e2:0f:e7:75:53:b5:25:2a: 3c:ae:c3:68:83:0e:ac:0f:19:55:b0:87:48:06:70: 65:51:61:6c:27:9a:ba:64:d3:83:6d:7f:f6:13:73: e2:ec:5a:47:70:8e:9b:3d:01:4f:bd:90:39:6e:49: 95:1b:a7:9f:f8:26:df:35:d6:c5:a2:e3:03:ca:0a: b5:d8:40:47:42:c7:ba:5d:0d:3a:0e:af:86:e8:1a: 49:2c:80:67:8b:a1:70:0c:95:61:3a:5c:57:19:c6: 1b:78:b2:32:f9:12:d7:a6:61:d5:50:71:2a:f9:77: ee:e8:c1:67:d6:dd:d0:ba:12:12:5a:b5:b2:d4:92: 69:63:79:cf:38:77:36:9f:bc:44:71:ba:cf:0b:b9: 07:10:60:f7:f7:90:d7:48:a0:70:f8:7a:df:44:ea: dc:bd:83:33:cb:54:3a:cb:66:63:4c:48:7e:e2:59: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1B:02:96:B6:3E:0A:7F:A0:5C:E1:02:9F:B3:82:12:D7:D0:10:12 X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:27:d1:b0:61:f0:42:dd:d2:db:13:a4:0d:80:cf:be:50: aa:e9:2f:30:47:5d:2e:65:fd:c5:1e:90:11:75:51:12:6d:92: d8:f2:4f:0f:e6:8a:20:a4:84:bc:8f:d0:c6:ed:65:6e:b9:33: 8a:e7:bc:4d:4b:cd:ad:4b:aa:44:ec:17:64:ba:1f:39:a4:7f: 4e:81:24:20:16:6d:a6:61:6e:8c:07:7c:c4:38:36:8d:77:07: 48:6b:c5:8c:ae:4d:e4:cc:4c:36:ca:ed:a8:32:61:24:5b:f7: f4:22:31:77:d3:ac:55:8f:2a:b8:78:66:28:a1:5f:c2:8c:a5: 9e:3b:ae:05:29:d5:96:71:27:c5:01:cd:15:e0:67:10:a0:4c: a5:b7:14:54:55:f7:54:72:85:55:ee:57:08:d8:0b:3b:9e:91: 9a:f1:94:65:66:1a:c3:cb:e9:e9:a2:6c:e2:6a:0e:20:0f:0f: fd:f7:7c:b0:08:3f:9b:4d:96:ca:ea:80:0b:78:a8:ad:2e:69: 22:82:f8:7c:69:e4:f3:df:59:5c:b6:35:9d:27:25:62:1a:7a: 28:69:81:12:8b:59:eb:73:a5:63:ef:39:cc:28:96:fd:59:d8: 4d:62:bf:2d:e1:ed:60:80:d5:4e:d7:1c:64:33:1f:26:78:6e: 84:08:c8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrTwNW/qb7UY7LX7oMMMyRG8EwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTEwMTgxMDE3MDNaFw0yNTEwMjExOTUyMDNaMDMxMTAvBgNV BAMTKEQwMUIwMjk2QjYzRTBBN0ZBMDVDRTEwMjlGQjM4MjEyRDdEMDEwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrwVzeyoIUAvDC3GZtD05iXoe bcuN0WLarSG33JPSn+uDX9n/BUNVpXGXB6Rkn7kLEMysRtZF9gervtVtPAOp64XZ zfqCOBy6kMO3G8Ro7pviD+d1U7UlKjyuw2iDDqwPGVWwh0gGcGVRYWwnmrpk04Nt f/YTc+LsWkdwjps9AU+9kDluSZUbp5/4Jt811sWi4wPKCrXYQEdCx7pdDToOr4bo GkksgGeLoXAMlWE6XFcZxht4sjL5EtemYdVQcSr5d+7owWfW3dC6EhJatbLUkmlj ec84dzafvERxus8LuQcQYPf3kNdIoHD4et9E6ty9gzPLVDrLZmNMSH7iWa/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BsClrY+Cn+gXOECn7OCEtfQEBIwHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF68J9GwYfBC3dLbE6QNgM++UKrpLzBHXS5l /cUekBF1URJtktjyTw/miiCkhLyP0MbtZW65M4rnvE1Lza1LqkTsF2S6Hzmkf06B JCAWbaZhbowHfMQ4No13B0hrxYyuTeTMTDbK7agyYSRb9/QiMXfTrFWPKrh4Ziih X8KMpZ47rgUp1ZZxJ8UBzRXgZxCgTKW3FFRV91RyhVXuVwjYCzuekZrxlGVmGsPL 6emibOJqDiAPD/33fLAIP5tNlsrqgAt4qK0uaSKC+Hxp5PPfWVy2NZ0nJWIaeihp gRKLWetzpWPvOcwolv1Z2E1ivy3h7WCA1U7XHGQzHyZ4boQIyPY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:43 2025 by rpki-client