$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: Bgi7aVwAy7M5qN3OYJProZrAuIWsisipCQvZXLah4e4= Subject key identifier: 52:3C:CD:8E:A0:A4:0E:39:87:07:B7:11:39:A1:D1:DA:0C:B6:BA:EA Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 62E19E89B09318DAB09549BB6CFEE51A8CA2D92A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 021B Signing time: Sat 18 Oct 2025 12:52:18 +0000 Manifest this update: Sat 18 Oct 2025 12:47:18 +0000 Manifest next update: Tue 21 Oct 2025 18:15:18 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 4: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: 9D0hxJTBsiAk3CZEn6m/L7NmuOe7JFMDoLfPH37Wusw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e1:9e:89:b0:93:18:da:b0:95:49:bb:6c:fe:e5:1a:8c:a2:d9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Oct 18 12:47:18 2025 GMT Not After : Oct 21 18:15:18 2025 GMT Subject: CN=523CCD8EA0A40E398707B71139A1D1DA0CB6BAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:df:c2:f0:b6:53:b4:6d:7f:8a:7a:36:07:91: a6:66:65:36:6b:12:f0:0f:69:e6:16:60:15:fe:25: 01:0a:8b:37:88:65:d7:06:0f:a8:8d:72:70:9e:0f: 31:f1:0f:06:25:90:fe:29:b7:b9:14:fa:5e:15:e1: a6:3b:16:28:88:55:06:31:3b:f2:b2:44:2e:60:32: 64:e9:06:2e:b7:ec:b4:56:93:55:2e:c3:26:ca:0d: 39:73:4e:d3:4b:3a:27:32:3e:eb:8d:01:29:be:55: 96:f8:fc:bb:ef:79:de:2b:80:e5:50:7e:8d:33:a5: 37:84:6e:bd:2a:23:e0:3e:37:2f:e5:0a:6e:f2:f3: be:e7:b1:10:91:6d:9d:e8:6d:c1:f5:ef:51:f7:1b: e8:f9:4b:41:e2:20:81:94:85:96:c9:8d:8b:28:e4: b3:63:f7:ac:b8:85:44:75:c6:46:7f:e3:cf:ac:95: 2f:c4:f6:a7:27:d9:f1:f7:66:77:66:40:1f:07:98: de:72:3c:11:5f:65:7e:fc:1a:d6:a3:8b:31:fe:68: d3:37:fd:a7:ad:b0:78:4a:8a:d2:ef:05:86:3f:e8: eb:bf:81:da:05:84:6c:aa:96:ff:b2:ee:69:72:a9: 0f:b3:5e:56:9b:03:40:cc:6d:da:51:6d:de:13:4a: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:CD:8E:A0:A4:0E:39:87:07:B7:11:39:A1:D1:DA:0C:B6:BA:EA X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:45:4b:55:5c:76:c2:da:c9:ac:36:5e:c4:16:6c:a4:b5:fc: b9:bb:25:20:25:41:03:c8:c1:76:08:8a:d6:84:ca:d8:ea:47: 79:59:1c:d1:99:7d:fd:c3:b8:02:dc:6e:27:4b:e2:6e:9b:81: 87:c3:61:9f:70:ae:8c:bf:3a:39:b9:dd:fc:ef:3f:ba:26:1b: b5:5d:6e:89:7e:1e:cf:0b:67:4a:5c:95:58:8f:f2:84:77:5a: bb:62:c5:71:80:2f:a6:e6:d3:ff:2a:c4:6a:ba:6f:e0:af:aa: 5f:9d:e7:76:2f:ad:55:51:71:31:98:ac:d5:e5:c0:80:64:4f: e4:6a:b4:2b:f6:77:93:ba:c0:fa:45:04:3f:49:95:90:6f:09: 75:b6:ce:a3:72:05:55:26:80:fe:27:18:1a:1d:65:35:5f:f1: 32:a4:b1:1e:74:bd:3c:ef:02:f4:0b:44:6e:59:3c:32:ba:d2: 95:ae:8f:7c:f1:ef:30:50:62:00:57:ea:b7:91:04:99:96:2e: 82:29:58:61:ae:2b:9f:45:d1:a9:1c:d2:62:c2:de:21:ee:57: 7e:f9:28:83:4b:16:c1:63:5a:22:4d:3c:68:67:07:16:93:0a: 3b:ae:dc:f2:35:0b:bc:68:dd:68:f9:18:4e:78:7d:cd:87:61: 72:fc:df:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuGeibCTGNqwlUm7bP7lGoyi2SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTEwMTgxMjQ3MThaFw0yNTEwMjExODE1MThaMDMxMTAvBgNV BAMTKDUyM0NDRDhFQTBBNDBFMzk4NzA3QjcxMTM5QTFEMURBMENCNkJBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw38LwtlO0bX+KejYHkaZmZTZr EvAPaeYWYBX+JQEKizeIZdcGD6iNcnCeDzHxDwYlkP4pt7kU+l4V4aY7FiiIVQYx O/KyRC5gMmTpBi637LRWk1UuwybKDTlzTtNLOicyPuuNASm+VZb4/Lvved4rgOVQ fo0zpTeEbr0qI+A+Ny/lCm7y877nsRCRbZ3obcH171H3G+j5S0HiIIGUhZbJjYso 5LNj96y4hUR1xkZ/48+slS/E9qcn2fH3ZndmQB8HmN5yPBFfZX78GtajizH+aNM3 /aetsHhKitLvBYY/6Ou/gdoFhGyqlv+y7mlyqQ+zXlabA0DMbdpRbd4TSg5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjzNjqCkDjmHB7cROaHR2gy2uuowHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9FS1VcdsLayaw2XsQWbKS1/Lm7JSAlQQPI wXYIitaEytjqR3lZHNGZff3DuALcbidL4m6bgYfDYZ9wroy/Ojm53fzvP7omG7Vd bol+Hs8LZ0pclViP8oR3WrtixXGAL6bm0/8qxGq6b+Cvql+d53YvrVVRcTGYrNXl wIBkT+RqtCv2d5O6wPpFBD9JlZBvCXW2zqNyBVUmgP4nGBodZTVf8TKksR50vTzv AvQLRG5ZPDK60pWuj3zx7zBQYgBX6reRBJmWLoIpWGGuK59F0akc0mLC3iHuV375 KINLFsFjWiJNPGhnBxaTCjuu3PI1C7xo3Wj5GE54fc2HYXL838k= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:05 2025 by rpki-client