$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json) Hash identifier: j/wUfun5cK1PbGYUmNaw6vhcW9vSd4A0WFG7+Ma5ViI= Subject key identifier: 22:29:9B:B1:D6:39:8A:5C:1D:5F:9A:B5:00:17:2B:9C:68:F6:97:92 Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 203C4DF9C066804FF40571762C3C75C1F85A03C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft Manifest number: 02E5 Signing time: Tue 04 Nov 2025 08:20:56 +0000 Manifest this update: Tue 04 Nov 2025 08:15:56 +0000 Manifest next update: Fri 07 Nov 2025 14:07:56 +0000 Files and hashes: 1: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=) 2: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=) 3: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=) 4: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=) 5: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=) 6: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=) 7: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=) 8: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=) 9: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=) 10: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=) 11: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=) 12: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: GgNRMw+HSFbsM2KEQkGtYcqpKZgNPp8RYMWqGYxPQ9A=) 13: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=) 14: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=) 15: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=) 16: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3c:4d:f9:c0:66:80:4f:f4:05:71:76:2c:3c:75:c1:f8:5a:03:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Nov 4 08:15:56 2025 GMT Not After : Nov 7 14:07:56 2025 GMT Subject: CN=22299BB1D6398A5C1D5F9AB500172B9C68F69792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:57:50:28:4b:ca:dd:46:02:9c:9e:94:20: b7:48:04:61:6e:5f:6f:d2:87:c9:87:f1:e1:1c:62: cd:aa:cf:06:35:44:82:36:6f:5a:13:9b:8b:43:c0: ef:0f:b1:0a:e0:e3:ff:81:e3:00:47:8c:42:5c:5c: 0d:3c:e9:99:47:70:98:ec:dd:43:fd:de:5e:e0:ba: 47:ea:e5:ed:00:6a:3f:86:31:1d:7b:20:0d:c7:87: 04:68:a0:72:43:d4:ca:87:18:45:a1:b5:36:78:c7: 89:e0:f4:72:c4:a6:68:43:52:28:67:58:23:32:21: 28:e7:f0:ad:9d:bd:2e:48:8e:cd:24:28:31:99:60: 5a:06:af:82:ca:c9:5c:a5:c2:0a:cc:7d:85:2c:48: 6f:95:dd:84:2d:98:09:b2:14:45:34:dc:b4:46:94: 05:f1:75:7c:ef:f3:52:dc:12:94:bb:b8:3d:11:f5: 1c:7a:73:1e:06:a8:0c:93:e4:c2:2b:46:b8:ea:6a: 8e:7b:82:3d:6d:7d:10:88:c2:f2:c1:0c:df:84:71: 85:e1:aa:da:76:c1:0f:1f:6d:5a:2a:71:ac:eb:ac: 32:49:d9:df:91:e2:8f:6a:14:4f:6a:35:e5:3f:8d: 77:7a:cd:f4:f0:47:09:cd:30:ef:43:82:b2:53:22: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:9B:B1:D6:39:8A:5C:1D:5F:9A:B5:00:17:2B:9C:68:F6:97:92 X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:97:6b:7f:bb:aa:40:e5:f0:7a:c7:fb:22:b0:07:f7:9e:ed: fc:09:74:0b:8e:fa:a8:8f:3a:2b:4c:a3:1c:4f:c2:61:70:66: 3b:83:3a:f4:df:f6:bb:62:c8:fd:d1:d3:4d:2c:41:fd:ca:58: 98:9d:1c:ce:40:ff:03:48:62:76:db:e3:fc:c7:c3:cd:b8:d3: 07:be:b2:5e:4f:ea:85:e6:d2:ed:c3:04:07:5b:08:82:56:13: fb:03:7a:1a:7c:25:65:e3:5b:f1:c6:9a:ad:4a:10:08:db:5f: 53:85:9f:4a:67:4f:15:8f:07:f9:87:03:b5:14:1e:38:19:a1: f6:c4:be:89:fb:8c:2a:70:5c:e7:45:14:2e:32:c9:46:af:c3: 91:4a:e3:44:a5:a1:85:2d:f1:b7:32:ce:d8:88:d7:c4:8b:38: 47:22:f3:df:56:2b:89:7a:aa:43:1d:75:1b:fb:37:99:3c:4d: b2:80:66:b7:d2:f1:bf:15:bb:ee:be:79:31:41:73:38:29:92: fa:79:08:23:b0:11:cb:a0:6b:da:d3:99:48:9b:45:94:c9:00: 61:b8:d3:f1:f8:05:01:b3:9f:1d:77:f8:aa:22:a3:22:8a:f8: 05:4b:e8:a8:ff:2c:08:4d:6e:4b:36:ce:c9:23:02:48:41:61: fa:44:58:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDxN+cBmgE/0BXF2LDx1wfhaA8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNTExMDQwODE1NTZaFw0yNTExMDcxNDA3NTZaMDMxMTAvBgNV BAMTKDIyMjk5QkIxRDYzOThBNUMxRDVGOUFCNTAwMTcyQjlDNjhGNjk3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYx1dQKEvK3UYCnJ6UILdIBGFu X2/Sh8mH8eEcYs2qzwY1RII2b1oTm4tDwO8PsQrg4/+B4wBHjEJcXA086ZlHcJjs 3UP93l7gukfq5e0Aaj+GMR17IA3HhwRooHJD1MqHGEWhtTZ4x4ng9HLEpmhDUihn WCMyISjn8K2dvS5Ijs0kKDGZYFoGr4LKyVylwgrMfYUsSG+V3YQtmAmyFEU03LRG lAXxdXzv81LcEpS7uD0R9Rx6cx4GqAyT5MIrRrjqao57gj1tfRCIwvLBDN+EcYXh qtp2wQ8fbVoqcazrrDJJ2d+R4o9qFE9qNeU/jXd6zfTwRwnNMO9DgrJTIrsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIimbsdY5ilwdX5q1ABcrnGj2l5IwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2 MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2 REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyXa3+7qkDl8HrH+yKwB/ee7fwJdAuO+qiP OitMoxxPwmFwZjuDOvTf9rtiyP3R000sQf3KWJidHM5A/wNIYnbb4/zHw8240we+ sl5P6oXm0u3DBAdbCIJWE/sDehp8JWXjW/HGmq1KEAjbX1OFn0pnTxWPB/mHA7UU HjgZofbEvon7jCpwXOdFFC4yyUavw5FK40SloYUt8bcyztiI18SLOEci899WK4l6 qkMddRv7N5k8TbKAZrfS8b8Vu+6+eTFBczgpkvp5CCOwEcuga9rTmUibRZTJAGG4 0/H4BQGznx13+KoioyKK+AVL6Kj/LAhNbks2zskjAkhBYfpEWKk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:56 2025 by rpki-client