$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: vzibQjEM+mPfFkq4N1Oo5TLuzVHme8yxxCW+CJ3X/20= Subject key identifier: ED:9D:E5:A8:CB:BF:FA:07:6C:41:E5:92:FD:BF:B3:32:6A:E6:6C:C1 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 631731AA59AAF8095624FB324C884E48788AE4C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: EC Signing time: Mon 03 Nov 2025 07:22:21 +0000 Manifest this update: Mon 03 Nov 2025 07:17:21 +0000 Manifest next update: Thu 06 Nov 2025 11:08:21 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 2: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 4: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: +g0bEmMK2NE1jGfjZH8agvxooJkv1nFM6Ja61/7rXpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:17:31:aa:59:aa:f8:09:56:24:fb:32:4c:88:4e:48:78:8a:e4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Nov 3 07:17:21 2025 GMT Not After : Nov 6 11:08:21 2025 GMT Subject: CN=ED9DE5A8CBBFFA076C41E592FDBFB3326AE66CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:81:44:8d:f9:2b:19:4a:0d:10:99:69:61: 7a:e0:c3:51:a0:73:0e:8d:33:60:ea:7d:fd:33:59: 09:31:bd:28:90:ce:6d:c8:ee:79:fb:19:94:29:8a: ef:bb:d4:a1:9c:d6:fd:26:a4:e4:cb:4e:78:d4:d9: c6:4a:e5:11:79:80:4b:16:c4:8a:10:f7:11:d8:ce: 11:b8:81:7e:ea:a8:20:be:f4:06:dd:40:7a:62:44: b0:6e:f4:7a:0b:53:bc:55:8c:e5:59:d4:e4:5e:ae: be:fb:d2:8c:af:56:ad:7a:5f:9d:65:bd:f0:81:d0: eb:1e:18:64:0a:89:0c:a9:cf:dc:c4:b0:d4:82:b3: e5:d3:c7:ab:60:60:c7:0c:22:de:32:78:65:d3:09: ee:d6:d2:bf:40:06:65:be:53:c0:3d:d1:6c:89:d8: 70:a4:5c:85:45:fb:8c:a8:df:a8:19:98:88:a1:c1: f8:36:e8:0e:77:55:d5:c1:ec:1b:58:15:43:6c:6f: e2:70:e5:0a:f8:b4:fb:fc:2c:ed:65:1b:82:0f:ad: 9e:5b:13:76:21:d1:14:27:ac:09:18:e3:f1:57:2a: 1e:1e:f6:b4:e0:a5:7f:10:f8:c1:e9:81:16:64:3b: 79:59:17:dd:1b:5e:6e:cb:c2:12:b3:22:c9:64:2b: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:E5:A8:CB:BF:FA:07:6C:41:E5:92:FD:BF:B3:32:6A:E6:6C:C1 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b8:e6:60:ab:5f:70:a7:35:aa:f2:cd:ad:a6:73:fd:9d:2c: 9d:27:a9:fe:d1:6b:79:56:97:b2:38:9f:7d:ff:02:e0:ae:b4: 33:af:66:9b:9d:a9:24:9b:f8:31:81:a9:bd:c9:22:bd:3e:4a: ab:8d:73:30:3f:85:27:ee:2b:dd:7b:0e:a3:78:f4:47:33:f7: 79:cd:8b:69:10:8c:19:9b:34:a8:76:0b:45:7e:bf:51:71:62: 5b:66:a0:4f:82:60:22:ce:4c:6d:c8:fc:c6:4b:ed:ab:e4:1a: 31:66:d4:e7:12:a1:e9:43:71:83:eb:45:cb:d0:dc:29:6c:ed: ad:83:59:77:d0:01:89:a5:ac:6e:0a:87:39:ff:ab:35:f0:27: 40:56:c4:cb:9d:e0:79:24:54:89:cf:ba:96:06:a9:6d:e9:62: c0:13:71:45:c3:35:cb:b1:98:27:d3:6a:33:b5:10:1c:39:56: 36:40:75:73:4b:11:7c:83:42:ea:0d:84:88:92:c3:a1:44:df: ff:98:ce:42:e7:c5:12:75:31:94:82:f8:a7:5e:2b:ee:0c:3c: dd:34:ef:00:07:5f:99:7c:13:97:22:ac:05:04:c6:b0:57:0f: 22:28:55:d8:31:3e:4b:c2:8d:0b:a8:9c:e7:4b:53:8b:39:e8: b3:78:6b:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxcxqlmq+AlWJPsyTIhOSHiK5MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTExMDMwNzE3MjFaFw0yNTExMDYxMTA4MjFaMDMxMTAvBgNV BAMTKEVEOURFNUE4Q0JCRkZBMDc2QzQxRTU5MkZEQkZCMzMyNkFFNjZDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChSYFEjfkrGUoNEJlpYXrgw1Gg cw6NM2Dqff0zWQkxvSiQzm3I7nn7GZQpiu+71KGc1v0mpOTLTnjU2cZK5RF5gEsW xIoQ9xHYzhG4gX7qqCC+9AbdQHpiRLBu9HoLU7xVjOVZ1ORerr770oyvVq16X51l vfCB0OseGGQKiQypz9zEsNSCs+XTx6tgYMcMIt4yeGXTCe7W0r9ABmW+U8A90WyJ 2HCkXIVF+4yo36gZmIihwfg26A53VdXB7BtYFUNsb+Jw5Qr4tPv8LO1lG4IPrZ5b E3Yh0RQnrAkY4/FXKh4e9rTgpX8Q+MHpgRZkO3lZF90bXm7LwhKzIslkK2YBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Z3lqMu/+gdsQeWS/b+zMmrmbMEwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm45mCrX3CnNaryza2mc/2dLJ0nqf7Ra3lW l7I4n33/AuCutDOvZpudqSSb+DGBqb3JIr0+SquNczA/hSfuK917DqN49Ecz93nN i2kQjBmbNKh2C0V+v1FxYltmoE+CYCLOTG3I/MZL7avkGjFm1OcSoelDcYPrRcvQ 3Cls7a2DWXfQAYmlrG4Khzn/qzXwJ0BWxMud4HkkVInPupYGqW3pYsATcUXDNcux mCfTajO1EBw5VjZAdXNLEXyDQuoNhIiSw6FE3/+YzkLnxRJ1MZSC+KdeK+4MPN00 7wAHX5l8E5cirAUExrBXDyIoVdgxPkvCjQuonOdLU4s56LN4a1Y= -----END CERTIFICATE-----Generated at Tue Nov 4 23:07:47 2025 by rpki-client