$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: fSiyGUVIFFJD/6fO/HcRAFi2dD5uw60OVNJEHvPiDPI= Subject key identifier: 65:9A:26:10:C7:2D:35:19:31:EE:35:4D:78:E9:AF:A9:20:8A:71:4F Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: DCAE1D104844D6ADA2010F17BB98D5E30F79A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: DE Signing time: Mon 03 Nov 2025 10:30:43 +0000 Manifest this update: Mon 03 Nov 2025 10:25:43 +0000 Manifest next update: Thu 06 Nov 2025 20:32:43 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) 2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: +G9ol0RkgYdtTQA1Uu4W72/ulGX/sqWvCzQMTJl7SjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dc:ae:1d:10:48:44:d6:ad:a2:01:0f:17:bb:98:d5:e3:0f:79:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Nov 3 10:25:43 2025 GMT Not After : Nov 6 20:32:43 2025 GMT Subject: CN=659A2610C72D351931EE354D78E9AFA9208A714F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:30:a4:5a:55:77:a3:f3:99:a2:10:1e:5c: ab:c0:5a:01:dc:c5:d7:e4:24:a0:60:22:ed:35:ec: 4a:83:93:d7:17:77:a4:fc:91:83:b3:cf:88:2f:07: ec:e7:c9:0c:ef:92:27:cb:cc:95:69:12:40:0e:30: 47:e5:d3:e7:a4:a1:ce:fe:b4:4d:53:f6:0d:10:8c: 3b:35:bd:37:ad:04:88:1d:1a:d9:32:61:ec:55:ae: 6e:2a:57:49:f7:c9:44:16:51:a6:14:b3:91:d3:46: 42:9b:ea:b4:e9:b0:4a:2f:73:fa:ae:99:9a:35:d0: 53:b3:64:c4:55:bf:5e:71:5b:f0:51:7c:13:56:89: 14:fd:67:0b:2f:0c:cd:79:83:4f:45:4f:6c:c9:e6: d7:f4:6d:7c:b6:41:e0:63:0e:27:69:a4:c8:f8:0f: dd:da:e1:4f:40:57:31:d6:0e:2c:5e:3c:26:92:58: 04:ee:17:59:67:2a:f9:0b:f6:69:16:d2:23:81:5d: b3:d3:bc:60:96:5a:7e:4f:d0:83:86:d6:65:cd:a6: 96:7d:ca:e5:b4:f0:b2:91:a8:cd:78:d5:89:f9:20: e9:a5:01:b8:d5:20:66:d0:14:b3:85:eb:55:38:51: 06:64:61:38:89:06:bb:80:f1:26:de:18:90:18:d9: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:26:10:C7:2D:35:19:31:EE:35:4D:78:E9:AF:A9:20:8A:71:4F X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:09:d4:8c:be:43:84:66:c3:1e:7b:1d:3d:fa:f1:8b:29: a6:46:0a:6b:99:6b:15:0b:52:08:61:cd:18:27:c5:e7:23:7a: 14:c3:53:2e:1a:87:6e:99:63:7c:4f:6f:a0:8d:91:2c:58:ed: 31:1a:9c:00:45:0a:3c:92:38:0f:5e:2c:fb:c4:8b:b7:85:57: b0:c7:30:05:a8:68:65:1c:91:b2:7a:9c:e7:b9:be:fe:8c:6f: 2c:fa:c8:96:34:1d:8e:cd:aa:7a:a7:ba:3f:de:d1:a4:cd:6f: 29:8c:30:9d:40:78:a7:51:50:b9:9a:b1:67:2c:05:6c:3c:15: 15:4e:8b:a4:4c:6c:7a:5c:28:4b:dc:2d:18:fa:a6:9b:e4:6a: 48:d0:b8:f4:bd:dc:06:17:ac:a2:13:ba:d0:77:be:e2:cc:93: 86:ee:4f:94:af:04:ad:77:17:47:fe:29:26:d2:b5:98:f4:c5: 84:6b:ea:d2:17:fb:02:2f:08:17:b8:bb:95:95:cb:03:7b:9d: db:d8:f7:c2:58:79:51:67:08:9a:0b:33:c9:48:0c:f2:5e:fc: 82:6c:8e:21:79:ab:6b:0c:43:79:5e:20:33:79:27:59:03:fd: 5f:78:ef:32:df:2f:6e:71:03:6b:8e:3f:8d:1a:82:70:b9:64: 23:32:b1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANyuHRBIRNatogEPF7uY1eMPeagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTExMDMxMDI1NDNaFw0yNTExMDYyMDMyNDNaMDMxMTAvBgNV BAMTKDY1OUEyNjEwQzcyRDM1MTkzMUVFMzU0RDc4RTlBRkE5MjA4QTcxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCzCkWlV3o/OZohAeXKvAWgHc xdfkJKBgIu017EqDk9cXd6T8kYOzz4gvB+znyQzvkifLzJVpEkAOMEfl0+ekoc7+ tE1T9g0QjDs1vTetBIgdGtkyYexVrm4qV0n3yUQWUaYUs5HTRkKb6rTpsEovc/qu mZo10FOzZMRVv15xW/BRfBNWiRT9ZwsvDM15g09FT2zJ5tf0bXy2QeBjDidppMj4 D93a4U9AVzHWDixePCaSWATuF1lnKvkL9mkW0iOBXbPTvGCWWn5P0IOG1mXNppZ9 yuW08LKRqM141Yn5IOmlAbjVIGbQFLOF61U4UQZkYTiJBruA8SbeGJAY2UcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZomEMctNRkx7jVNeOmvqSCKcU8wHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPqCdSMvkOEZsMeex09+vGLKaZGCmuZaxUL UghhzRgnxecjehTDUy4ah26ZY3xPb6CNkSxY7TEanABFCjySOA9eLPvEi7eFV7DH MAWoaGUckbJ6nOe5vv6Mbyz6yJY0HY7Nqnqnuj/e0aTNbymMMJ1AeKdRULmasWcs BWw8FRVOi6RMbHpcKEvcLRj6ppvkakjQuPS93AYXrKITutB3vuLMk4buT5SvBK13 F0f+KSbStZj0xYRr6tIX+wIvCBe4u5WVywN7ndvY98JYeVFnCJoLM8lIDPJe/IJs jiF5q2sMQ3leIDN5J1kD/V947zLfL25xA2uOP40agnC5ZCMysTI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:06 2025 by rpki-client