$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: 3b2swZX5MlSyYxOYvPG6lBG8e7eh+HhVjSlZz4Kc4Sw= Subject key identifier: F8:9B:52:DC:FC:4E:5C:F8:30:2D:67:CD:BC:32:6F:9B:21:AB:BA:D3 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 62E9B8D1503AE4C04564446A0BCB12081DA20FCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 023D Signing time: Tue 04 Nov 2025 10:51:22 +0000 Manifest this update: Tue 04 Nov 2025 10:46:22 +0000 Manifest next update: Fri 07 Nov 2025 11:38:22 +0000 Files and hashes: 1: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: l6sJY9o2g+qL3GvfS+3jfrCGDVruGtx5xW/XuFNDeYo=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e9:b8:d1:50:3a:e4:c0:45:64:44:6a:0b:cb:12:08:1d:a2:0f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Nov 4 10:46:22 2025 GMT Not After : Nov 7 11:38:22 2025 GMT Subject: CN=F89B52DCFC4E5CF8302D67CDBC326F9B21ABBAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:34:3a:ee:96:93:00:a3:8b:25:d8:0a:08: ae:e1:5f:50:db:91:86:86:c5:42:ad:e7:7e:1e:40: cc:a7:54:1c:db:db:79:6d:d4:3b:84:17:86:c8:c4: d3:84:6d:04:1d:f3:cd:12:65:f5:1b:31:60:3e:0c: 16:36:02:fb:fc:3d:cc:90:76:ba:87:99:7b:6a:20: ca:ae:54:af:d6:fd:48:32:bf:4c:39:e4:50:e0:87: 1d:28:c1:cc:a6:35:81:d9:31:f6:3b:2b:52:f0:eb: ec:39:5d:0f:2d:c4:65:29:98:69:50:67:d3:f8:f9: 40:81:b2:41:9b:15:ea:b5:37:a0:75:13:8b:f3:5a: c1:15:30:8a:bf:be:7a:cf:2c:91:fe:9b:c7:8f:04: 46:ef:88:e0:8d:99:f8:1c:cd:fe:2a:eb:f6:b4:8c: ea:8f:83:2a:b6:09:05:f2:24:1e:01:f3:86:12:46: 8a:ed:63:91:ae:f1:bb:18:2c:05:2c:5b:8b:d9:d9: 4c:5b:19:2d:b6:3a:56:14:db:e1:15:01:2d:6b:ca: 6b:a1:c8:6b:f5:5f:e3:9e:cc:f8:c7:5e:1d:17:e4: 43:ce:b2:c8:63:3e:11:94:0b:31:70:a5:bc:73:04: e0:6b:4c:7d:3c:fb:cf:2e:17:2d:5b:a5:de:88:72: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:52:DC:FC:4E:5C:F8:30:2D:67:CD:BC:32:6F:9B:21:AB:BA:D3 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:37:a0:01:4e:d4:a0:4f:56:b6:09:70:cf:2f:3a:a7:82:42: 1a:2d:24:54:87:d2:da:35:c4:56:b6:00:a3:2b:c4:78:e2:8d: 60:a5:77:ea:96:ca:be:c6:44:8c:66:2e:d8:d5:d9:0a:6f:f7: 7d:f6:8e:67:d1:e2:7c:1b:d8:b2:b0:b3:75:33:e4:36:cc:bd: 40:76:e1:b2:e5:01:cb:16:2d:fe:cc:fe:8b:05:23:6f:a4:f2: 20:ea:c4:20:23:8c:2e:d0:da:37:1d:a6:93:b0:6f:aa:e7:e2: 97:89:c9:42:82:d3:41:6d:61:93:67:ee:11:35:4f:14:22:57: cc:85:7f:b4:44:21:f2:94:2e:97:1d:22:54:03:91:fe:07:0e: 4d:6f:a5:aa:be:ae:bb:7e:0f:ea:77:e7:a0:46:c7:00:4e:60: 3c:d7:53:57:12:e8:06:82:17:76:03:c0:a2:ff:96:db:64:62: 6f:ec:3d:c0:be:03:2e:69:22:9f:70:57:1a:21:f2:08:1a:b9: 93:59:93:c3:5e:9b:2a:03:c8:25:6f:65:e9:f4:d8:e0:f2:59: cf:1f:df:33:bd:4f:2a:9a:f7:c5:60:1b:2b:9d:e4:bb:2f:38: 05:4e:e4:9c:22:8b:30:fb:47:23:18:e0:5e:74:cb:c6:42:13: be:9f:80:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYum40VA65MBFZERqC8sSCB2iD8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTExMDQxMDQ2MjJaFw0yNTExMDcxMTM4MjJaMDMxMTAvBgNV BAMTKEY4OUI1MkRDRkM0RTVDRjgzMDJENjdDREJDMzI2RjlCMjFBQkJBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetTQ67paTAKOLJdgKCK7hX1Db kYaGxUKt534eQMynVBzb23lt1DuEF4bIxNOEbQQd880SZfUbMWA+DBY2Avv8PcyQ drqHmXtqIMquVK/W/Ugyv0w55FDghx0owcymNYHZMfY7K1Lw6+w5XQ8txGUpmGlQ Z9P4+UCBskGbFeq1N6B1E4vzWsEVMIq/vnrPLJH+m8ePBEbviOCNmfgczf4q6/a0 jOqPgyq2CQXyJB4B84YSRortY5Gu8bsYLAUsW4vZ2UxbGS22OlYU2+EVAS1rymuh yGv1X+OezPjHXh0X5EPOsshjPhGUCzFwpbxzBOBrTH08+88uFy1bpd6IcnJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JtS3PxOXPgwLWfNvDJvmyGrutMwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo3oAFO1KBPVrYJcM8vOqeCQhotJFSH0to1 xFa2AKMrxHjijWCld+qWyr7GRIxmLtjV2Qpv9332jmfR4nwb2LKws3Uz5DbMvUB2 4bLlAcsWLf7M/osFI2+k8iDqxCAjjC7Q2jcdppOwb6rn4peJyUKC00FtYZNn7hE1 TxQiV8yFf7REIfKULpcdIlQDkf4HDk1vpaq+rrt+D+p356BGxwBOYDzXU1cS6AaC F3YDwKL/lttkYm/sPcC+Ay5pIp9wVxoh8ggauZNZk8NemyoDyCVvZen02ODyWc8f 3zO9Tyqa98VgGyud5LsvOAVO5JwiizD7RyMY4F50y8ZCE76fgMc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:25 2025 by rpki-client