$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: QYPgHYxBCQTo53FJGVE+Q/57DA6Ln9tt4N4t8eLK07M= Subject key identifier: 06:F7:5D:AF:4C:05:B2:11:AE:4B:54:0B:84:4D:EF:AB:59:5C:B4:6F Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 09C1B1B76A25188079F65442727D8477A53381FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01FE Signing time: Sat 18 Oct 2025 03:20:36 +0000 Manifest this update: Sat 18 Oct 2025 03:15:36 +0000 Manifest next update: Tue 21 Oct 2025 14:08:36 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 2: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 3: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 4: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: T3on85c7w0/aCbKlHCicajiVP9UX67munp+NLDogimg=) 5: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:b1:b7:6a:25:18:80:79:f6:54:42:72:7d:84:77:a5:33:81:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Oct 18 03:15:36 2025 GMT Not After : Oct 21 14:08:36 2025 GMT Subject: CN=06F75DAF4C05B211AE4B540B844DEFAB595CB46F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3f:67:21:3f:58:9b:2b:2b:e3:90:4f:f5:52: 5f:5c:e8:b0:3c:a3:26:c2:f9:14:a1:10:ef:df:a0: 71:40:67:f6:1f:55:e6:c4:57:d9:37:48:16:32:da: fb:35:0d:ce:8d:77:6d:03:c9:ee:14:6b:92:82:f7: 74:80:23:bb:a5:e1:52:aa:09:3c:ab:5a:51:3e:e5: 17:f9:55:6d:39:03:22:5f:d9:82:f7:50:a2:09:d9: 03:d7:ab:c3:67:79:06:47:b0:22:16:bf:c5:91:3b: a3:d3:5a:3a:f7:ff:1a:42:c9:60:9c:e9:d4:ad:97: 68:29:f2:86:b2:55:bd:b3:40:8f:02:ca:1c:0e:9a: 04:12:e8:1f:71:ae:06:f8:68:ed:d7:f1:27:63:98: 5d:e5:6e:fa:f8:97:98:fc:36:f8:5e:ed:f7:1b:54: fb:d3:63:c1:37:87:4f:ab:10:bb:21:a9:b4:86:24: 75:2c:6b:86:64:25:da:82:48:21:f7:a6:30:f4:a0: b9:2b:28:5c:59:03:2e:c0:65:f7:f9:b4:f6:a2:14: 19:f6:53:31:a0:75:be:ee:0b:de:85:ad:82:6e:0a: 06:25:a3:f8:02:91:93:8c:9a:f9:53:aa:9f:17:a3: 69:90:36:2e:cd:6c:4e:ed:6e:bf:cb:ff:66:d8:2b: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F7:5D:AF:4C:05:B2:11:AE:4B:54:0B:84:4D:EF:AB:59:5C:B4:6F X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:36:2c:f6:15:1d:4d:60:00:91:87:65:c1:d2:c9:dc:3a:a2: 43:44:12:7e:f4:bb:b7:97:8b:4f:3c:92:ff:c3:c1:38:9c:f3: 54:4f:16:ec:aa:f1:7c:28:4a:c3:2a:91:50:39:d1:46:64:f0: 48:21:50:61:69:05:00:9a:bf:98:2a:9f:86:e1:58:fa:80:74: 40:c0:0a:23:34:2d:56:d8:39:83:58:78:ea:e4:dd:2d:1f:b3: a1:5b:d8:66:13:fe:98:5a:23:e7:0e:42:34:2b:1e:0f:5f:dd: ac:24:4b:b1:db:75:62:d3:7c:7a:1b:25:9e:5b:75:a2:97:9c: cf:36:8a:82:78:42:a1:a0:da:39:02:df:72:eb:22:d9:18:e3: 87:bd:96:19:df:21:b1:31:28:65:74:57:44:30:f8:d4:15:0d: ba:f6:48:bf:f3:a1:6b:2b:a5:a2:9e:dc:34:ae:b3:1c:2b:f8: d6:a2:a3:ca:aa:1f:d6:21:2d:0b:ce:29:53:45:f8:40:d1:2a: a3:7d:f9:e0:b7:32:80:d4:47:f6:5e:77:e1:3f:57:73:e1:83: 4c:ab:d4:1f:da:2d:49:1e:20:93:10:d1:40:cf:a8:fc:2c:15: 2c:72:31:de:42:e7:88:ca:0b:6f:2f:42:46:79:84:78:16:3e: d5:dc:b6:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcGxt2olGIB59lRCcn2Ed6UzgfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTEwMTgwMzE1MzZaFw0yNTEwMjExNDA4MzZaMDMxMTAvBgNV BAMTKDA2Rjc1REFGNEMwNUIyMTFBRTRCNTQwQjg0NERFRkFCNTk1Q0I0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwP2chP1ibKyvjkE/1Ul9c6LA8 oybC+RShEO/foHFAZ/YfVebEV9k3SBYy2vs1Dc6Nd20Dye4Ua5KC93SAI7ul4VKq CTyrWlE+5Rf5VW05AyJf2YL3UKIJ2QPXq8NneQZHsCIWv8WRO6PTWjr3/xpCyWCc 6dStl2gp8oayVb2zQI8CyhwOmgQS6B9xrgb4aO3X8SdjmF3lbvr4l5j8Nvhe7fcb VPvTY8E3h0+rELshqbSGJHUsa4ZkJdqCSCH3pjD0oLkrKFxZAy7AZff5tPaiFBn2 UzGgdb7uC96FrYJuCgYlo/gCkZOMmvlTqp8Xo2mQNi7NbE7tbr/L/2bYKzjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvddr0wFshGuS1QLhE3vq1lctG8wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc2LPYVHU1gAJGHZcHSydw6okNEEn70u7eX i088kv/DwTic81RPFuyq8XwoSsMqkVA50UZk8EghUGFpBQCav5gqn4bhWPqAdEDA CiM0LVbYOYNYeOrk3S0fs6Fb2GYT/phaI+cOQjQrHg9f3awkS7HbdWLTfHobJZ5b daKXnM82ioJ4QqGg2jkC33LrItkY44e9lhnfIbExKGV0V0Qw+NQVDbr2SL/zoWsr paKe3DSusxwr+Naio8qqH9YhLQvOKVNF+EDRKqN9+eC3MoDUR/Zed+E/V3Phg0yr 1B/aLUkeIJMQ0UDPqPwsFSxyMd5C54jKC28vQkZ5hHgWPtXctqg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:27 2025 by rpki-client