$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: MGaFkX/k8NLF0H3kV4baqADEV0atAfupmU3NdK1eTC0= Subject key identifier: 44:3E:6B:D2:EC:80:2E:D6:73:E0:60:71:93:9C:31:48:71:AB:75:8F Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 7936F45EA891E9CC838D59DFB90865809539E313 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: FD Signing time: Sun 19 Oct 2025 10:51:58 +0000 Manifest this update: Sun 19 Oct 2025 10:46:58 +0000 Manifest next update: Wed 22 Oct 2025 21:09:58 +0000 Files and hashes: 1: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: csndNlSWqYQd7tvSFNUOEJL2NTbF9lANOAaFGs+ONq4=) 2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:36:f4:5e:a8:91:e9:cc:83:8d:59:df:b9:08:65:80:95:39:e3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Oct 19 10:46:58 2025 GMT Not After : Oct 22 21:09:58 2025 GMT Subject: CN=443E6BD2EC802ED673E06071939C314871AB758F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:4e:8f:a2:f4:61:c9:71:ac:04:00:ea:35: 02:98:ff:4f:73:86:d0:53:cf:b9:b9:82:4d:86:ec: 46:c5:cc:35:24:1b:c7:a4:a4:88:a6:a3:df:e0:68: 40:c0:a5:a4:1d:d0:c9:2e:9e:76:b3:17:7b:46:d5: f1:c0:5b:89:31:bb:3b:3f:50:46:e8:bd:53:14:69: ce:ee:72:22:fb:0c:22:d6:98:f4:61:8d:35:bf:2a: 0c:46:40:04:9a:d4:02:38:b0:c7:b2:f7:d6:d3:cc: 2d:0d:77:b9:9b:42:48:e7:bf:dd:c2:26:f1:a8:db: 3d:b0:3d:16:27:62:bf:a8:31:e7:9e:01:3f:21:a7: ab:84:60:a5:50:c9:c0:02:f7:58:61:83:36:8d:6b: 43:0f:05:32:32:28:cf:36:02:91:2a:61:e7:a7:94: e4:bf:39:c4:fd:a3:e5:ea:5e:42:c6:e8:29:70:48: 11:d6:0d:46:92:f2:de:3e:2f:e7:d8:29:90:53:d2: bc:89:6c:bb:f5:b8:e4:ca:b9:6e:d5:77:f6:96:d2: f3:60:ba:ac:a9:4b:6e:63:78:d2:b4:1e:16:79:e5: ea:49:c7:c0:9d:ce:e8:da:c7:80:d1:8b:39:9c:f9: aa:c4:ee:c3:83:08:97:22:a8:f7:1d:f3:74:0a:9f: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:6B:D2:EC:80:2E:D6:73:E0:60:71:93:9C:31:48:71:AB:75:8F X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1d:47:38:c0:6d:1f:85:64:6a:c5:8c:f0:38:6d:11:40:c9: e0:dd:05:e7:f0:7d:46:bd:5f:38:06:ed:54:3b:59:d0:e6:19: 27:f9:22:31:43:3a:27:94:90:51:87:0b:97:2f:f7:52:f1:c7: bf:bd:9a:42:a7:8e:4f:5d:fa:e7:5b:1c:4c:98:8a:17:e3:7b: 12:74:58:32:35:38:21:26:f4:f8:a2:b2:f3:b4:a2:3b:29:13: c1:af:9b:85:ea:f6:f7:fb:d0:37:80:3f:35:88:47:4f:61:bb: ff:80:01:94:cd:57:f7:8c:2d:23:10:fe:e4:8c:ac:b0:33:99: 8a:c0:87:06:29:58:7b:7d:7b:10:46:7a:37:94:51:12:c7:84: 21:6b:12:6e:1a:36:98:cc:2f:35:99:cc:43:3a:fe:cc:0b:7f: ce:cf:f1:7d:4c:78:d8:20:12:1c:7f:5c:d8:3a:51:0f:78:f7: 22:92:ca:36:4e:ac:37:e1:e5:a9:f3:fd:44:9b:0a:57:89:3c: ef:b2:9f:b1:62:d2:80:6e:78:f4:8f:e8:b0:54:d5:6a:84:6a: e5:0b:c3:b4:9b:85:59:ac:12:74:1c:ab:9d:50:82:df:d2:03: 8a:69:db:86:77:15:43:fd:ee:f6:a5:04:8b:b7:18:c5:18:12: eb:db:34:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTb0XqiR6cyDjVnfuQhlgJU54xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTEwMTkxMDQ2NThaFw0yNTEwMjIyMTA5NThaMDMxMTAvBgNV BAMTKDQ0M0U2QkQyRUM4MDJFRDY3M0UwNjA3MTkzOUMzMTQ4NzFBQjc1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22E6PovRhyXGsBADqNQKY/09z htBTz7m5gk2G7EbFzDUkG8ekpIimo9/gaEDApaQd0MkunnazF3tG1fHAW4kxuzs/ UEbovVMUac7uciL7DCLWmPRhjTW/KgxGQASa1AI4sMey99bTzC0Nd7mbQkjnv93C JvGo2z2wPRYnYr+oMeeeAT8hp6uEYKVQycAC91hhgzaNa0MPBTIyKM82ApEqYeen lOS/OcT9o+XqXkLG6ClwSBHWDUaS8t4+L+fYKZBT0ryJbLv1uOTKuW7Vd/aW0vNg uqypS25jeNK0HhZ55epJx8Cdzujax4DRizmc+arE7sODCJciqPcd83QKn+uzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURD5r0uyALtZz4GBxk5wxSHGrdY8wHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4dRzjAbR+FZGrFjPA4bRFAyeDdBefwfUa9 XzgG7VQ7WdDmGSf5IjFDOieUkFGHC5cv91Lxx7+9mkKnjk9d+udbHEyYihfjexJ0 WDI1OCEm9PiisvO0ojspE8Gvm4Xq9vf70DeAPzWIR09hu/+AAZTNV/eMLSMQ/uSM rLAzmYrAhwYpWHt9exBGejeUURLHhCFrEm4aNpjMLzWZzEM6/swLf87P8X1MeNgg Ehx/XNg6UQ949yKSyjZOrDfh5anz/USbCleJPO+yn7Fi0oBuePSP6LBU1WqEauUL w7SbhVmsEnQcq51Qgt/SA4pp24Z3FUP97valBIu3GMUYEuvbNDQ= -----END CERTIFICATE-----Generated at Tue Oct 21 11:59:27 2025 by rpki-client