$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: irQ5ZnLgqJGvvVgwYVHf0ag5/n98il+gPhN6AKF3pqk= Subject key identifier: 89:42:BE:52:3D:7C:C3:66:5B:49:20:15:67:AE:EC:B1:03:11:20:91 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 35B869A4670339C1955A4FB815F40F56DAE2FAA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 031F Signing time: Mon 03 Nov 2025 05:40:50 +0000 Manifest this update: Mon 03 Nov 2025 05:35:50 +0000 Manifest next update: Thu 06 Nov 2025 10:56:50 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: qjMgLwHrSoXmahWbh4+z3Ar6xf2is5y9mNpC5uR3Mf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b8:69:a4:67:03:39:c1:95:5a:4f:b8:15:f4:0f:56:da:e2:fa:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Nov 3 05:35:50 2025 GMT Not After : Nov 6 10:56:50 2025 GMT Subject: CN=8942BE523D7CC3665B49201567AEECB103112091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:7b:33:06:ef:36:0c:64:04:76:03:3f:0e: e4:5b:4d:16:08:80:6a:3b:a8:c1:75:54:ec:50:ca: cf:12:f9:6b:aa:b6:14:d0:4e:9a:1d:c6:e2:1f:cd: e3:3f:70:d5:69:c9:08:35:88:3f:97:f8:42:fa:40: d1:cc:2a:f6:64:3f:6e:9a:4e:48:b6:38:f9:c7:e9: 03:5e:d9:ba:9e:a2:dd:e4:8f:25:fe:c6:ac:24:fb: 7d:f9:85:6d:80:73:fc:27:2f:46:8a:e8:77:a1:35: c9:49:c6:07:f8:d5:bf:61:b2:4a:e7:82:56:d7:c7: 6b:ea:82:69:f4:a2:be:6e:48:3f:d7:03:30:b5:87: a1:3e:d7:c0:ac:7f:25:3f:6e:b3:3a:5a:f6:35:56: 66:d4:e0:01:04:ad:07:47:b4:f7:32:03:e3:61:82: d1:32:43:02:16:35:cb:2e:d5:aa:6d:bb:0b:d8:0e: 14:87:bf:4f:b2:e7:d7:6e:11:4b:36:4a:b4:9b:30: e9:7d:46:b8:b8:9e:b7:89:71:dd:d1:6a:3e:1f:31: 54:42:09:24:42:d3:7f:f1:42:2b:12:7f:a8:17:f4: 4a:20:3b:e5:8c:34:79:c4:d3:76:8b:2f:9d:62:e5: 85:9e:fe:5f:f6:aa:c7:b8:c1:67:7e:50:67:ec:31: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:BE:52:3D:7C:C3:66:5B:49:20:15:67:AE:EC:B1:03:11:20:91 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:83:8b:f4:87:6b:40:6f:5d:c2:ec:ea:02:1b:9a:0c:56:b9: d4:9e:f8:ce:93:7e:00:2e:0d:7b:76:97:f8:ca:c6:c3:53:8e: 94:8a:00:e6:da:87:71:c5:8d:0b:f6:51:83:18:bc:8a:90:c2: 2b:dd:f8:a8:0b:8a:67:8d:5f:63:f3:84:06:d4:8a:3f:72:69: 95:fc:12:d1:6b:0b:e5:5a:c5:f3:e8:6e:f4:7e:d9:d7:1f:ee: 32:2c:bb:9e:24:b5:4e:bd:92:51:2e:c5:11:7b:b4:10:c8:bf: 53:cb:ff:cf:65:8d:48:8f:70:47:3f:fe:4a:29:4e:0d:57:99: 82:d4:f0:c9:0a:95:2e:48:7b:29:6a:3b:35:01:1e:9c:f4:ec: f1:f4:91:be:94:5d:8c:50:fb:8a:82:89:1d:cd:55:7e:b5:60: 44:4d:fc:d8:3f:39:c5:2a:54:6e:4c:95:27:50:b8:15:5d:f9: 44:ac:91:a4:4c:c2:69:51:ce:87:2d:91:be:a5:e1:fe:ef:0d: 27:09:73:40:74:3c:a6:0c:31:59:5a:82:01:9b:e8:d9:f9:27: 85:03:fb:e8:3a:e9:16:db:fd:65:08:74:85:de:b2:16:0e:a8: 66:61:51:2b:95:a3:85:13:76:64:96:d5:f7:06:bc:bb:96:0c: d6:3c:55:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbhppGcDOcGVWk+4FfQPVtri+qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTExMDMwNTM1NTBaFw0yNTExMDYxMDU2NTBaMDMxMTAvBgNV BAMTKDg5NDJCRTUyM0Q3Q0MzNjY1QjQ5MjAxNTY3QUVFQ0IxMDMxMTIwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjnszBu82DGQEdgM/DuRbTRYI gGo7qMF1VOxQys8S+WuqthTQTpodxuIfzeM/cNVpyQg1iD+X+EL6QNHMKvZkP26a Tki2OPnH6QNe2bqeot3kjyX+xqwk+335hW2Ac/wnL0aK6HehNclJxgf41b9hskrn glbXx2vqgmn0or5uSD/XAzC1h6E+18CsfyU/brM6WvY1VmbU4AEErQdHtPcyA+Nh gtEyQwIWNcsu1aptuwvYDhSHv0+y59duEUs2SrSbMOl9Rri4nreJcd3Raj4fMVRC CSRC03/xQisSf6gX9EogO+WMNHnE03aLL51i5YWe/l/2qse4wWd+UGfsMVwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUK+Uj18w2ZbSSAVZ67ssQMRIJEwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuDi/SHa0BvXcLs6gIbmgxWudSe+M6TfgAu DXt2l/jKxsNTjpSKAObah3HFjQv2UYMYvIqQwivd+KgLimeNX2PzhAbUij9yaZX8 EtFrC+VaxfPobvR+2dcf7jIsu54ktU69klEuxRF7tBDIv1PL/89ljUiPcEc//kop Tg1XmYLU8MkKlS5IeylqOzUBHpz07PH0kb6UXYxQ+4qCiR3NVX61YERN/Ng/OcUq VG5MlSdQuBVd+USskaRMwmlRzoctkb6l4f7vDScJc0B0PKYMMVlaggGb6Nn5J4UD ++g66Rbb/WUIdIXeshYOqGZhUSuVo4UTdmSW1fcGvLuWDNY8VcE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:44 2025 by rpki-client