$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: VOt5HbivDCQVDrqYl/eOnD4WPR8oSiGbdN3XSV6+xdE= Subject key identifier: 68:63:E0:7D:C4:06:A9:7D:C9:74:43:C0:6A:73:95:53:A4:63:CC:07 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 7545624F138BD84A28D2A7DF69FA108EABF35278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0499 Signing time: Sun 02 Nov 2025 15:11:24 +0000 Manifest this update: Sun 02 Nov 2025 15:06:24 +0000 Manifest next update: Wed 05 Nov 2025 20:27:24 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 2: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: YVRbQtdFc1ICm2GbmUeTof6ePzxaPxLUdKWJJ3SLkYw=) 3: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) 4: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:45:62:4f:13:8b:d8:4a:28:d2:a7:df:69:fa:10:8e:ab:f3:52:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Nov 2 15:06:24 2025 GMT Not After : Nov 5 20:27:24 2025 GMT Subject: CN=6863E07DC406A97DC97443C06A739553A463CC07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:03:4c:b2:bc:2c:08:c9:3c:7a:86:01:08: 25:7e:82:32:c0:18:74:56:24:ec:51:58:fb:1a:9e: c2:7f:65:0b:79:8f:51:37:57:9d:c8:3a:f2:52:8c: c2:71:97:73:99:80:cb:20:66:79:13:a9:6d:1a:0f: 85:6d:fa:c7:b8:3a:28:57:5a:d8:08:75:7c:24:25: 6d:87:a7:e7:05:3d:65:50:4a:56:32:65:47:cf:a0: d6:0a:e0:79:8d:d0:0f:e0:2e:19:a6:6a:12:87:d8: 52:32:91:ab:7e:07:b8:c0:dd:a3:2a:d7:90:99:eb: 8c:b4:a2:a6:16:6f:8f:2d:05:fb:2e:37:f1:e1:85: 09:f0:53:c1:34:13:6c:3f:83:2e:35:99:03:48:d9: b8:c1:28:40:c6:36:3a:2a:e7:f4:24:8e:60:18:8a: 60:6a:0c:60:24:c9:7a:24:5b:d2:23:78:55:dc:e8: 6e:79:cd:5e:2f:db:50:97:32:6a:85:4c:cf:c8:70: 0d:55:23:10:58:84:15:3f:be:fe:e4:e6:b6:0a:0f: 59:a3:a0:07:1e:22:0b:68:d5:44:85:84:3c:2e:ee: 15:8b:13:71:df:47:fd:82:81:fc:d3:d9:85:a1:58: fa:e1:bb:f4:a6:e3:3e:82:bd:7b:9d:46:a6:06:2d: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:63:E0:7D:C4:06:A9:7D:C9:74:43:C0:6A:73:95:53:A4:63:CC:07 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:c8:c4:bf:c5:67:78:37:8d:59:28:fa:f4:aa:8a:be:05: ad:0e:47:a8:d4:1b:bd:e0:3f:b5:48:a5:73:4e:5c:a7:f2:2f: 34:b8:0a:f6:4d:03:47:43:60:c8:54:2d:8d:11:84:8c:e6:e2: f0:d0:12:f0:71:31:ea:47:94:95:6e:b0:73:71:b8:c5:35:c0: 55:f5:df:20:39:b6:e3:b9:ce:92:f6:a8:73:33:f1:81:2b:9c: aa:2f:54:5e:3e:c2:c9:74:65:ae:aa:2d:0a:da:d3:ad:8f:b4: f6:78:a2:4e:9c:ab:dd:3b:66:90:be:e1:d3:24:7b:60:a8:ba: ce:82:dc:c2:a6:37:a0:ba:f3:22:ea:a3:20:a2:c0:7f:32:b0: 8e:bc:36:7a:d5:de:b4:1f:3b:5b:f8:a8:b5:41:d9:fa:cb:40: f4:71:ff:87:e5:9a:1f:ab:71:11:94:53:51:23:cc:69:ab:60: 5f:7f:37:af:33:9c:5e:d9:fd:ca:4e:e8:d8:c8:7c:dc:69:11: a4:ce:bd:ba:0a:cf:55:40:7b:51:6d:3c:43:e5:b7:d1:ae:f5: 6f:f9:dd:9a:6e:d9:86:e5:37:52:73:68:b2:20:46:6e:e8:6a: c3:df:24:50:41:4d:29:7c:6c:f6:81:4d:c6:51:57:fe:58:84: de:43:37:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUViTxOL2Eoo0qffafoQjqvzUngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTExMDIxNTA2MjRaFw0yNTExMDUyMDI3MjRaMDMxMTAvBgNV BAMTKDY4NjNFMDdEQzQwNkE5N0RDOTc0NDNDMDZBNzM5NTUzQTQ2M0NDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIQNMsrwsCMk8eoYBCCV+gjLA GHRWJOxRWPsansJ/ZQt5j1E3V53IOvJSjMJxl3OZgMsgZnkTqW0aD4Vt+se4OihX WtgIdXwkJW2Hp+cFPWVQSlYyZUfPoNYK4HmN0A/gLhmmahKH2FIykat+B7jA3aMq 15CZ64y0oqYWb48tBfsuN/HhhQnwU8E0E2w/gy41mQNI2bjBKEDGNjoq5/QkjmAY imBqDGAkyXokW9IjeFXc6G55zV4v21CXMmqFTM/IcA1VIxBYhBU/vv7k5rYKD1mj oAceIgto1USFhDwu7hWLE3HfR/2CgfzT2YWhWPrhu/Sm4z6CvXudRqYGLUJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGPgfcQGqX3JdEPAanOVU6RjzAcwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvAyMS/xWd4N41ZKPr0qoq+Ba0OR6jUG73g P7VIpXNOXKfyLzS4CvZNA0dDYMhULY0RhIzm4vDQEvBxMepHlJVusHNxuMU1wFX1 3yA5tuO5zpL2qHMz8YErnKovVF4+wsl0Za6qLQra062PtPZ4ok6cq907ZpC+4dMk e2Cous6C3MKmN6C68yLqoyCiwH8ysI68NnrV3rQfO1v4qLVB2frLQPRx/4flmh+r cRGUU1EjzGmrYF9/N68znF7Z/cpO6NjIfNxpEaTOvboKz1VAe1FtPEPlt9Gu9W/5 3Zpu2YblN1JzaLIgRm7oasPfJFBBTSl8bPaBTcZRV/5YhN5DNxM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:21 2025 by rpki-client