$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: bSHqYECi1gk8ESibTLdx7aqjlEoO4auy7HfQiHqKgbk= Subject key identifier: 20:44:D8:D2:E4:9F:9B:ED:05:71:A2:1B:B3:67:67:62:99:D9:5B:DF Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 68A83F91A79A64ABD044087245BED3FDAE012BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 0320 Signing time: Wed 05 Nov 2025 11:00:50 +0000 Manifest this update: Wed 05 Nov 2025 10:55:50 +0000 Manifest next update: Sat 08 Nov 2025 13:20:50 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: gNcFsDg4Ub+G0Ap+7Y4M0jOLgLA9hqdlL+AYNARR2H0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 13:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a8:3f:91:a7:9a:64:ab:d0:44:08:72:45:be:d3:fd:ae:01:2b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Nov 5 10:55:50 2025 GMT Not After : Nov 8 13:20:50 2025 GMT Subject: CN=2044D8D2E49F9BED0571A21BB367676299D95BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:b8:22:cf:41:62:2a:26:1e:49:4f:2a:71: 0b:d0:65:ae:e8:5b:66:e8:31:f9:38:79:92:f2:ab: ca:8a:ca:0b:d9:62:29:42:12:ec:a2:15:ea:33:ea: 3a:42:f9:59:93:23:e2:96:03:f4:1e:17:e0:c9:a1: f9:50:c9:bd:44:57:8f:52:a7:7d:75:fb:9b:a5:37: 06:e2:1d:d1:74:9d:54:64:72:b0:9e:12:87:86:52: 5a:ee:60:d9:47:41:eb:64:33:92:d7:a3:7e:29:be: c7:f6:50:8f:f3:48:ce:86:f8:96:b6:d9:6e:26:9f: e1:44:b3:05:5c:12:29:6a:a3:7c:2e:9f:5a:9d:d5: 5d:ae:85:d0:93:38:d9:56:14:4e:32:fe:70:d3:2b: 7c:79:05:a5:13:7c:74:3a:1e:e1:1a:62:af:46:ac: fa:e2:3e:56:cb:ef:9b:31:43:38:5a:e1:9e:42:5e: a9:27:58:b2:38:56:81:0c:d5:f3:25:67:3d:09:0d: 10:57:dd:d4:d4:ae:46:ba:7a:78:ba:bc:bd:5b:0b: 3c:4a:3e:22:e3:53:f0:36:a9:d6:34:19:9c:8d:b0: 62:9b:bc:81:e5:ac:1c:c0:8c:aa:53:42:b9:6d:b3: 5e:5d:63:43:4a:d8:32:f6:ad:1c:67:17:a0:6e:ce: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:D8:D2:E4:9F:9B:ED:05:71:A2:1B:B3:67:67:62:99:D9:5B:DF X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fa:b9:2d:39:fa:16:e5:4b:a2:28:8e:6f:f1:de:6e:85:5c: 87:44:f3:e0:b3:d4:82:71:52:fc:6b:62:d8:20:a8:18:07:4f: 37:0d:32:6a:d4:2a:f4:9c:bf:f1:04:9c:0a:3b:80:ec:94:fe: 8d:88:db:ac:3d:b3:ce:91:9f:f1:17:0d:79:2c:c9:a0:3c:26: c9:88:ea:17:05:d1:e5:2f:9f:f0:1c:52:69:b8:90:76:cc:4f: 64:2a:ba:39:bd:61:27:f3:07:59:59:66:f0:4f:ea:10:ff:9b: 29:7d:41:c2:92:ad:98:3f:f4:81:cf:93:39:e5:84:4f:2c:99: 3f:15:c8:4f:9b:b8:3b:e3:fe:25:a5:81:ba:80:ff:8d:36:cb: 7d:f6:bf:89:03:52:d8:42:cb:4a:c8:74:be:d1:74:d2:14:8a: 3b:65:aa:4e:a4:dc:cd:4d:7d:0b:3c:87:19:c2:4d:17:af:54: bb:97:7f:2f:6c:dc:b2:5a:5a:22:d4:cc:49:c9:34:cb:0f:ba: 20:81:26:d9:9d:39:c0:7b:76:4d:0b:54:93:63:df:ea:67:46: c8:ac:4b:48:50:98:6a:37:04:e7:b3:f5:a2:27:e0:8f:38:57: b0:a8:6f:56:e5:d0:ef:0f:6c:a0:52:95:78:dc:ad:c2:c6:87: d6:92:98:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKg/kaeaZKvQRAhyRb7T/a4BK6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTExMDUxMDU1NTBaFw0yNTExMDgxMzIwNTBaMDMxMTAvBgNV BAMTKDIwNDREOEQyRTQ5RjlCRUQwNTcxQTIxQkIzNjc2NzYyOTlEOTVCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvLgiz0FiKiYeSU8qcQvQZa7o W2boMfk4eZLyq8qKygvZYilCEuyiFeoz6jpC+VmTI+KWA/QeF+DJoflQyb1EV49S p311+5ulNwbiHdF0nVRkcrCeEoeGUlruYNlHQetkM5LXo34pvsf2UI/zSM6G+Ja2 2W4mn+FEswVcEilqo3wun1qd1V2uhdCTONlWFE4y/nDTK3x5BaUTfHQ6HuEaYq9G rPriPlbL75sxQzha4Z5CXqknWLI4VoEM1fMlZz0JDRBX3dTUrka6eni6vL1bCzxK PiLjU/A2qdY0GZyNsGKbvIHlrBzAjKpTQrlts15dY0NK2DL2rRxnF6BuzptBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIETY0uSfm+0FcaIbs2dnYpnZW98wHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf6uS05+hblS6Iojm/x3m6FXIdE8+Cz1IJx UvxrYtggqBgHTzcNMmrUKvScv/EEnAo7gOyU/o2I26w9s86Rn/EXDXksyaA8JsmI 6hcF0eUvn/AcUmm4kHbMT2Qqujm9YSfzB1lZZvBP6hD/myl9QcKSrZg/9IHPkznl hE8smT8VyE+buDvj/iWlgbqA/402y332v4kDUthCy0rIdL7RdNIUijtlqk6k3M1N fQs8hxnCTRevVLuXfy9s3LJaWiLUzEnJNMsPuiCBJtmdOcB7dk0LVJNj3+pnRsis S0hQmGo3BOez9aIn4I84V7Cob1bl0O8PbKBSlXjcrcLGh9aSmAo= -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:53 2025 by rpki-client