$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: tJAv+KM3W5aMWAMOH3gNay1eRgF9hEgQfBjErWpsimM= Subject key identifier: 9B:69:53:B0:2F:83:D8:F7:5C:37:ED:69:1B:53:EE:DD:4F:D5:41:1F Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 01BDF3633C27207B0C879CCE8D5E6CE6F4F87805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 01FA Signing time: Tue 04 Nov 2025 16:40:03 +0000 Manifest this update: Tue 04 Nov 2025 16:35:03 +0000 Manifest next update: Sat 08 Nov 2025 02:02:03 +0000 Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: QV2ZCLnru5Awi2YnKqQ7tGgDPdfPPGIV/imkOcPrLMM=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: XR+TpGg6coEePHmhn8BPw57A0ogwMebLb1ve/vRAoWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bd:f3:63:3c:27:20:7b:0c:87:9c:ce:8d:5e:6c:e6:f4:f8:78:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Nov 4 16:35:03 2025 GMT Not After : Nov 8 02:02:03 2025 GMT Subject: CN=9B6953B02F83D8F75C37ED691B53EEDD4FD5411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:1a:65:a5:5d:a5:cd:9e:96:96:3b:fb:c8: 34:de:45:46:fb:b7:21:2d:76:90:44:13:cb:38:c2: 0c:24:10:7f:aa:40:a8:6b:bb:20:23:59:b6:06:c2: 57:fb:31:5b:b6:4c:cf:33:98:36:fc:55:56:b9:54: 90:00:93:31:f7:a3:a7:7c:37:dd:08:91:8a:6b:bd: 81:b9:db:a6:44:94:25:8d:b9:f3:91:11:48:be:ad: 64:2e:93:8b:7f:c9:74:92:2b:06:31:0f:ac:a1:78: 5e:07:f6:57:2e:54:7d:93:94:45:44:36:a7:74:4c: d8:ca:6c:d8:e1:9c:e3:8c:44:c7:d3:d7:28:1e:e5: 03:da:88:ac:eb:71:27:a6:db:b6:f6:db:4c:a6:eb: ff:06:76:d4:39:25:40:89:cd:c7:23:a6:65:83:9f: 44:df:8c:f1:17:57:eb:c7:d4:1b:ad:db:07:8b:d1: 57:db:7a:d6:ab:b2:48:d3:be:a0:35:bd:51:65:35: 7b:1b:a5:0a:5c:35:17:34:d6:b5:37:4e:c9:4a:c1: 44:f3:2c:1b:2a:85:97:3f:87:3f:ad:2a:54:f1:51: 81:01:2b:e9:91:92:11:6c:3a:c5:5c:1c:88:94:be: 7e:1c:c1:e2:9f:96:f3:5b:53:14:7b:3b:40:32:95: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:69:53:B0:2F:83:D8:F7:5C:37:ED:69:1B:53:EE:DD:4F:D5:41:1F X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:63:b4:0f:49:f2:33:a7:52:e7:cf:69:4b:13:7d:2c:2c:45: e4:61:59:b0:29:3b:7e:ec:b9:32:15:41:bf:a0:7b:4b:78:40: 29:b3:c7:57:5d:fc:0d:9e:b3:5e:dd:9d:14:9d:92:47:a0:5e: e7:3a:ae:11:da:35:12:fc:de:63:fd:c6:35:97:de:2f:02:48: e1:ee:b7:39:8e:a7:61:1f:14:f9:7b:e1:82:e6:99:1d:08:7f: 80:02:e9:48:ea:5a:a9:8e:02:23:0c:2b:85:24:5d:39:42:eb: 27:18:c1:ba:b3:62:cc:81:05:32:73:71:9c:59:05:2a:07:8f: f4:aa:b2:54:94:bd:c3:09:8e:ab:e1:ae:96:c2:83:31:76:25: e6:6e:c1:21:b4:59:97:df:b4:38:eb:bc:35:62:51:10:03:74: 67:52:54:61:d1:4d:5e:52:38:15:d2:ec:f1:c2:f4:dc:3f:f8: b3:67:42:7b:ce:23:ed:c7:bc:dd:da:21:b8:17:9c:ed:1d:3a: 07:67:8d:92:29:6d:ae:fb:5f:de:6c:84:3e:f1:97:4f:fe:45: 7a:f3:8c:11:d2:04:d8:8f:44:b2:c8:6d:51:f0:81:05:ab:f9: 3a:dd:30:2a:4b:91:81:15:08:d0:bc:b2:6f:34:2f:3c:2b:6b: 32:a8:57:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb3zYzwnIHsMh5zOjV5s5vT4eAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTExMDQxNjM1MDNaFw0yNTExMDgwMjAyMDNaMDMxMTAvBgNV BAMTKDlCNjk1M0IwMkY4M0Q4Rjc1QzM3RUQ2OTFCNTNFRURENEZENTQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WBplpV2lzZ6Wljv7yDTeRUb7 tyEtdpBEE8s4wgwkEH+qQKhruyAjWbYGwlf7MVu2TM8zmDb8VVa5VJAAkzH3o6d8 N90IkYprvYG526ZElCWNufOREUi+rWQuk4t/yXSSKwYxD6yheF4H9lcuVH2TlEVE Nqd0TNjKbNjhnOOMRMfT1yge5QPaiKzrcSem27b220ym6/8GdtQ5JUCJzccjpmWD n0TfjPEXV+vH1But2weL0VfbetarskjTvqA1vVFlNXsbpQpcNRc01rU3TslKwUTz LBsqhZc/hz+tKlTxUYEBK+mRkhFsOsVcHIiUvn4cweKflvNbUxR7O0AylY/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2lTsC+D2PdcN+1pG1Pu3U/VQR8wHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdjtA9J8jOnUufPaUsTfSwsReRhWbApO37s uTIVQb+ge0t4QCmzx1dd/A2es17dnRSdkkegXuc6rhHaNRL83mP9xjWX3i8CSOHu tzmOp2EfFPl74YLmmR0If4AC6UjqWqmOAiMMK4UkXTlC6ycYwbqzYsyBBTJzcZxZ BSoHj/SqslSUvcMJjqvhrpbCgzF2JeZuwSG0WZfftDjrvDViURADdGdSVGHRTV5S OBXS7PHC9Nw/+LNnQnvOI+3HvN3aIbgXnO0dOgdnjZIpba77X95shD7xl0/+RXrz jBHSBNiPRLLIbVHwgQWr+TrdMCpLkYEVCNC8sm80LzwrazKoV+8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:01 2025 by rpki-client