$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: vWkjdhD6P/yaQDTEj4IwxWrGlImtVbd/+okXc87fkFw= Subject key identifier: 2A:46:74:6B:CD:B1:61:E2:97:3C:B2:F9:CB:D0:DD:70:9B:96:87:6F Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 39E2897AC4EB2DB408002607BEB76487E2266371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02EE Signing time: Sat 18 Oct 2025 12:10:50 +0000 Manifest this update: Sat 18 Oct 2025 12:05:50 +0000 Manifest next update: Tue 21 Oct 2025 17:42:50 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: l7d7TdLsnRamWHuiTkEyrNNb90265T6sQbvNdYH0HAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e2:89:7a:c4:eb:2d:b4:08:00:26:07:be:b7:64:87:e2:26:63:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Oct 18 12:05:50 2025 GMT Not After : Oct 21 17:42:50 2025 GMT Subject: CN=2A46746BCDB161E2973CB2F9CBD0DD709B96876F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:d8:a6:56:27:f0:7a:a2:25:7f:fd:b8:10: 56:e4:49:1c:e8:de:43:f1:47:e2:6b:58:64:ff:7f: cb:b0:d2:32:20:6f:c3:70:3c:9b:34:0e:86:71:4d: a6:7c:b1:22:98:1e:52:37:aa:1f:c9:2a:34:61:da: b7:93:1f:56:36:b7:28:25:d3:4e:bb:39:48:f5:db: 91:80:46:55:91:ce:70:f2:d3:43:59:7e:e2:de:4d: 85:3f:09:29:da:26:b0:32:ed:3e:f2:91:80:c0:29: b3:1a:80:ca:a4:19:17:20:7f:c2:4e:3f:c8:15:8f: 7f:be:ab:5d:83:2f:29:eb:4b:04:69:db:5d:75:64: 3c:2d:f7:41:d3:7a:61:83:d1:bf:9a:5d:8a:d4:7f: ea:be:7d:5b:d4:3e:4a:68:26:0a:48:9d:ed:c9:0f: f3:04:f7:7f:b8:70:2f:e2:d4:30:12:fd:4a:a3:73: 7d:19:0c:e3:80:41:29:22:6a:0d:5f:77:bb:23:83: a0:e8:2f:46:87:50:dc:fc:ae:9b:88:37:2d:72:58: 26:64:da:7e:5f:f2:63:59:ff:c1:b4:ed:1a:ba:78: 1f:3c:7a:53:7e:78:7c:c2:2e:9e:78:1b:00:07:4a: d0:28:ba:49:10:50:49:f8:2b:cf:bd:ff:72:36:53: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:74:6B:CD:B1:61:E2:97:3C:B2:F9:CB:D0:DD:70:9B:96:87:6F X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1d:58:18:ea:95:1e:09:73:5a:76:11:73:54:2d:eb:57:c6: f6:b5:39:67:3d:25:64:f8:4b:7a:5c:99:0a:d5:f7:1b:da:b8: ab:8a:66:76:a5:ee:d8:e6:7a:cc:7c:47:fd:a2:94:ea:89:5b: 4d:e6:cc:30:0a:c5:0e:c5:34:b0:cc:d8:3f:cb:b3:a7:72:ef: 36:45:2a:26:17:e3:1e:c7:c6:a1:ae:27:f2:05:83:f8:c6:b5: 1e:6b:73:85:3b:80:8f:f2:52:a6:b9:ce:9c:35:4b:b9:36:2a: 20:65:3e:6e:b6:36:13:4b:7a:06:06:ee:93:d4:ac:1c:51:4f: 61:60:11:91:dc:24:a6:e4:f3:f0:da:81:00:84:f9:85:64:61: 46:85:99:e5:2f:05:b2:83:02:e1:45:3c:c4:45:b8:e8:91:69: 14:71:31:7e:13:b9:34:11:1a:77:ce:ad:83:00:c4:d6:3c:d7: de:af:bf:65:cd:a4:2d:c4:b0:89:53:0a:e0:7b:9f:a8:92:22: 24:3e:33:f3:05:c9:c6:fc:f0:7f:eb:11:63:d7:7d:a6:f1:1c: 69:9a:46:04:e1:e4:6c:18:d8:35:f9:4a:1f:b7:be:a3:5f:3e: 7b:9f:ab:17:f0:81:5c:cc:1f:5b:2d:3f:16:8d:f9:7e:5f:df: 35:36:af:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeKJesTrLbQIACYHvrdkh+ImY3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTEwMTgxMjA1NTBaFw0yNTEwMjExNzQyNTBaMDMxMTAvBgNV BAMTKDJBNDY3NDZCQ0RCMTYxRTI5NzNDQjJGOUNCRDBERDcwOUI5Njg3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRftimVifweqIlf/24EFbkSRzo 3kPxR+JrWGT/f8uw0jIgb8NwPJs0DoZxTaZ8sSKYHlI3qh/JKjRh2reTH1Y2tygl 0067OUj125GARlWRznDy00NZfuLeTYU/CSnaJrAy7T7ykYDAKbMagMqkGRcgf8JO P8gVj3++q12DLynrSwRp2111ZDwt90HTemGD0b+aXYrUf+q+fVvUPkpoJgpIne3J D/ME93+4cC/i1DAS/Uqjc30ZDOOAQSkiag1fd7sjg6DoL0aHUNz8rpuINy1yWCZk 2n5f8mNZ/8G07Rq6eB88elN+eHzCLp54GwAHStAoukkQUEn4K8+9/3I2U6EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkZ0a82xYeKXPLL5y9DdcJuWh28wHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGodWBjqlR4Jc1p2EXNULetXxva1OWc9JWT4 S3pcmQrV9xvauKuKZnal7tjmesx8R/2ilOqJW03mzDAKxQ7FNLDM2D/Ls6dy7zZF KiYX4x7HxqGuJ/IFg/jGtR5rc4U7gI/yUqa5zpw1S7k2KiBlPm62NhNLegYG7pPU rBxRT2FgEZHcJKbk8/DagQCE+YVkYUaFmeUvBbKDAuFFPMRFuOiRaRRxMX4TuTQR GnfOrYMAxNY8196vv2XNpC3EsIlTCuB7n6iSIiQ+M/MFycb88H/rEWPXfabxHGma RgTh5GwY2DX5Sh+3vqNfPnufqxfwgVzMH1stPxaN+X5f3zU2r9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:24 2025 by rpki-client