$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: +EOfogNIlLSOy+FtFi+8qX9pZUVJfjpTqVkXxGLZSOQ= Subject key identifier: 7F:3C:29:74:9F:CA:E5:C6:FB:5E:6E:5B:2A:EB:F9:5B:E8:D2:36:42 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 38A1A8D2FDB10AD6C518A90464A393EBDB72A0A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01BC Signing time: Mon 20 Oct 2025 13:41:41 +0000 Manifest this update: Mon 20 Oct 2025 13:36:41 +0000 Manifest next update: Thu 23 Oct 2025 23:31:41 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: kgVELmfGissPw81JjrpDR7LeB9j0KkCBkUehLGP8424=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a1:a8:d2:fd:b1:0a:d6:c5:18:a9:04:64:a3:93:eb:db:72:a0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Oct 20 13:36:41 2025 GMT Not After : Oct 23 23:31:41 2025 GMT Subject: CN=7F3C29749FCAE5C6FB5E6E5B2AEBF95BE8D23642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:a1:ef:f3:a5:f7:6d:6b:b0:d4:f0:39:11: 3f:a0:be:f2:95:fc:aa:30:0a:fe:ca:25:a9:54:50: 99:68:fa:8f:35:01:21:a8:0f:2f:ac:db:b0:a3:42: 46:22:c8:7a:d2:26:62:03:0d:14:36:75:73:f6:a9: 4a:89:7e:18:27:07:65:74:b8:a3:79:07:a1:25:8e: 3d:75:7d:94:57:63:50:d0:c5:37:34:b6:a4:2f:d1: 9a:24:bc:25:18:31:6f:d5:39:fa:0b:9b:e4:18:bb: 41:71:14:cd:e6:fa:23:24:b7:e6:c8:30:9d:0d:bb: 88:57:ba:e8:9f:c9:2e:03:d7:80:2e:10:f6:02:f7: 11:68:12:93:bb:05:7a:ae:b1:df:a9:30:b9:86:f3: 39:98:2a:db:34:fc:38:6f:35:fb:9d:c1:7e:f9:bb: 3e:ff:75:66:25:ce:f5:1e:65:f4:a3:7f:80:5e:f1: f2:96:26:bb:11:89:fa:96:91:45:6a:ff:f9:bb:b4: 54:1a:d4:70:b0:88:26:61:ea:e7:4a:de:1c:98:e1: 25:05:3b:20:65:92:70:7a:13:c9:d2:59:98:1d:ee: 24:c6:02:4b:ce:bd:71:0e:01:95:5d:00:99:b0:cf: d4:5a:0b:b5:84:a7:19:f7:25:18:68:57:d5:90:0f: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:29:74:9F:CA:E5:C6:FB:5E:6E:5B:2A:EB:F9:5B:E8:D2:36:42 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b2:8f:ba:63:17:de:86:73:40:14:94:8b:be:e8:77:00:23: cb:a3:5f:3a:4a:bf:b5:b4:e8:a0:45:71:84:47:93:28:d5:c9: 38:a5:0d:ef:24:cc:79:d1:59:5a:e6:48:a6:6e:ec:b1:f9:a5: f1:5d:97:5d:c2:9a:76:f0:c1:f2:13:b3:00:6d:f8:df:c5:7c: e0:d3:ea:00:55:0d:13:ea:89:ad:25:73:16:27:fb:71:6b:19: 91:84:6a:5d:38:0c:da:89:25:32:43:75:38:fa:55:a1:7c:31: a1:9d:95:0a:d9:00:57:a2:44:1c:f8:89:58:52:60:a6:c8:2b: 40:d4:b9:50:44:31:36:71:8d:6f:c2:e0:a3:bb:ad:3a:47:aa: 6e:7e:58:13:ab:03:dc:a2:a9:c6:f1:f1:30:64:59:91:91:b5: 25:be:9d:95:5d:d9:44:f4:b6:72:6d:bd:a1:a8:ff:14:96:cc: 65:5c:b8:13:60:f6:73:60:a4:7b:9d:03:b2:a6:84:b9:e0:0c: 70:a6:5f:95:d5:8c:e3:c6:ce:cd:29:3f:3a:01:98:b6:79:7d: 3c:b0:a8:a0:5d:a7:90:9a:44:9a:f1:4b:54:98:5e:80:29:45: a7:4b:d9:d8:59:3e:a4:bb:e6:70:0a:a6:9d:33:af:5e:47:70: b5:6c:a6:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKGo0v2xCtbFGKkEZKOT69tyoKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTEwMjAxMzM2NDFaFw0yNTEwMjMyMzMxNDFaMDMxMTAvBgNV BAMTKDdGM0MyOTc0OUZDQUU1QzZGQjVFNkU1QjJBRUJGOTVCRThEMjM2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfqHv86X3bWuw1PA5ET+gvvKV /KowCv7KJalUUJlo+o81ASGoDy+s27CjQkYiyHrSJmIDDRQ2dXP2qUqJfhgnB2V0 uKN5B6Eljj11fZRXY1DQxTc0tqQv0ZokvCUYMW/VOfoLm+QYu0FxFM3m+iMkt+bI MJ0Nu4hXuuifyS4D14AuEPYC9xFoEpO7BXqusd+pMLmG8zmYKts0/DhvNfudwX75 uz7/dWYlzvUeZfSjf4Be8fKWJrsRifqWkUVq//m7tFQa1HCwiCZh6udK3hyY4SUF OyBlknB6E8nSWZgd7iTGAkvOvXEOAZVdAJmwz9RaC7WEpxn3JRhoV9WQDyKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzwpdJ/K5cb7Xm5bKuv5W+jSNkIwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6yj7pjF96Gc0AUlIu+6HcAI8ujXzpKv7W0 6KBFcYRHkyjVyTilDe8kzHnRWVrmSKZu7LH5pfFdl13CmnbwwfITswBt+N/FfODT 6gBVDRPqia0lcxYn+3FrGZGEal04DNqJJTJDdTj6VaF8MaGdlQrZAFeiRBz4iVhS YKbIK0DUuVBEMTZxjW/C4KO7rTpHqm5+WBOrA9yiqcbx8TBkWZGRtSW+nZVd2UT0 tnJtvaGo/xSWzGVcuBNg9nNgpHudA7KmhLngDHCmX5XVjOPGzs0pPzoBmLZ5fTyw qKBdp5CaRJrxS1SYXoApRadL2dhZPqS75nAKpp0zr15HcLVspoo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:24 2025 by rpki-client