$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: 4v8NksY9+c15iU24+OhraemS897f29kM4qGZKE4IaZ8= Subject key identifier: 9F:38:B8:81:4F:D4:BF:F6:62:61:57:5E:EA:11:C1:18:45:B3:57:2B Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 7EF6DFC61394498AAD26D5731F6F41CC5574451E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0221 Signing time: Sun 19 Oct 2025 00:21:15 +0000 Manifest this update: Sun 19 Oct 2025 00:16:15 +0000 Manifest next update: Wed 22 Oct 2025 01:03:15 +0000 Files and hashes: 1: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: JpyxtfIs587NkaPSEIqX+qUtfuGhJJ0++AAKLWXaThY=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f6:df:c6:13:94:49:8a:ad:26:d5:73:1f:6f:41:cc:55:74:45:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Oct 19 00:16:15 2025 GMT Not After : Oct 22 01:03:15 2025 GMT Subject: CN=9F38B8814FD4BFF66261575EEA11C11845B3572B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:12:46:16:ce:0b:6e:46:de:45:b1:75:09: 83:d3:a8:ae:4d:1e:76:9d:a6:ca:ef:75:91:c3:20: 92:3e:77:11:a6:01:bc:8e:84:0c:16:e8:bb:bb:8b: a6:b2:55:da:99:d4:f8:31:71:fe:89:b5:57:a5:4f: b1:71:9e:ca:f0:6d:b0:95:19:4b:08:50:7a:53:7b: cc:ca:b3:29:db:80:f7:25:85:30:50:d4:3d:4b:4c: ea:1b:1a:76:d7:ef:cd:d6:f9:4d:46:2e:ca:57:33: b3:35:8c:73:c0:a6:ce:57:38:62:87:6a:15:29:54: 38:1f:5e:93:ad:ba:99:d9:e9:c6:2d:a5:95:31:49: a4:32:1f:c9:29:d3:cc:a0:7a:f3:47:43:01:20:1e: 14:03:6b:1b:37:99:5d:d4:c4:cb:e8:bb:d0:55:45: 89:cd:2b:51:0c:a5:6a:4f:1a:90:3b:68:c7:f5:65: 4c:45:56:e4:d6:56:06:ff:31:d4:04:27:b5:9a:2f: 06:59:8e:07:ae:eb:ef:2d:dc:78:ca:f6:13:ca:c4: fe:2d:a9:2b:74:ff:99:46:94:8e:41:44:6a:1c:10: 7d:d6:b0:ba:e2:88:ac:af:42:ab:51:af:5e:c9:6e: f2:96:8b:81:6f:7f:45:ff:d3:e4:81:dd:2e:11:59: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:B8:81:4F:D4:BF:F6:62:61:57:5E:EA:11:C1:18:45:B3:57:2B X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cf:d7:ce:ff:09:3d:89:3e:c7:c0:82:8a:a8:3a:8c:6b:18: 31:92:51:79:a8:e5:26:e5:30:50:4b:9c:7c:81:02:18:55:f6: 18:a2:38:47:0b:32:df:2b:7d:d1:2e:e7:21:12:56:fe:ba:d3: a3:b9:26:9f:ab:53:28:51:cf:e9:57:9c:ec:1f:83:ad:5d:3b: f6:1f:6d:e6:df:25:22:ee:d2:a8:d1:4d:31:d1:63:69:57:bd: 27:3c:8e:46:08:3e:90:dd:70:cb:1a:d6:c3:9b:e2:6f:d6:95: 64:79:83:f6:cd:6a:ce:f4:5c:8a:a7:79:c0:6b:e9:67:0b:a0: c9:3f:be:29:a3:37:27:55:a6:b6:f4:6b:8e:0c:2f:e3:d2:0a: ca:ca:84:48:8a:79:70:d4:94:3d:7f:bc:78:d4:5d:4d:b8:91: 29:0d:01:df:fb:8b:c1:0a:c2:b8:6a:54:29:a3:30:0e:ed:f4: 9a:b7:4c:43:6b:3f:77:fb:5d:a2:a6:79:ba:a4:ac:09:3b:b0: c1:2a:f6:4c:55:b7:03:27:92:88:f0:4d:39:88:1f:6f:29:b1: 8c:1f:a9:0f:8e:55:b8:e5:9d:b6:91:9b:1c:49:8f:29:78:da: 2e:12:a9:fd:3d:4a:bd:2d:ed:c3:88:dd:64:2d:b1:e9:eb:d2: 18:8b:c2:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvbfxhOUSYqtJtVzH29BzFV0RR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTEwMTkwMDE2MTVaFw0yNTEwMjIwMTAzMTVaMDMxMTAvBgNV BAMTKDlGMzhCODgxNEZENEJGRjY2MjYxNTc1RUVBMTFDMTE4NDVCMzU3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmxJGFs4LbkbeRbF1CYPTqK5N HnadpsrvdZHDIJI+dxGmAbyOhAwW6Lu7i6ayVdqZ1Pgxcf6JtVelT7FxnsrwbbCV GUsIUHpTe8zKsynbgPclhTBQ1D1LTOobGnbX783W+U1GLspXM7M1jHPAps5XOGKH ahUpVDgfXpOtupnZ6cYtpZUxSaQyH8kp08ygevNHQwEgHhQDaxs3mV3UxMvou9BV RYnNK1EMpWpPGpA7aMf1ZUxFVuTWVgb/MdQEJ7WaLwZZjgeu6+8t3HjK9hPKxP4t qSt0/5lGlI5BRGocEH3WsLriiKyvQqtRr17JbvKWi4Fvf0X/0+SB3S4RWVj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnzi4gU/Uv/ZiYVde6hHBGEWzVyswHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArP187/CT2JPsfAgoqoOoxrGDGSUXmo5Sbl MFBLnHyBAhhV9hiiOEcLMt8rfdEu5yESVv6606O5Jp+rUyhRz+lXnOwfg61dO/Yf bebfJSLu0qjRTTHRY2lXvSc8jkYIPpDdcMsa1sOb4m/WlWR5g/bNas70XIqnecBr 6WcLoMk/vimjNydVprb0a44ML+PSCsrKhEiKeXDUlD1/vHjUXU24kSkNAd/7i8EK wrhqVCmjMA7t9Jq3TENrP3f7XaKmebqkrAk7sMEq9kxVtwMnkojwTTmIH28psYwf qQ+OVbjlnbaRmxxJjyl42i4Sqf09Sr0t7cOI3WQtsenr0hiLwpI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:37 2025 by rpki-client