$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: bc81DxSYe18L8VQlXjKZCUbE3gJtksr+BP7vtyRuTX4= Subject key identifier: F6:C5:EF:BD:1E:75:AE:EC:BF:7D:FB:A2:A0:3A:75:09:DD:D8:D6:4F Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 3DF61095598D2DC355CF3FFC83DA4FE5D06023F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 04B8 Signing time: Sun 02 Nov 2025 16:50:43 +0000 Manifest this update: Sun 02 Nov 2025 16:45:43 +0000 Manifest next update: Thu 06 Nov 2025 01:02:43 +0000 Files and hashes: 1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) 2: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=) 3: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: tWQh8rTmzl58yoD4luOY2jCHtiia+oRcIWXnIx2Ff2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f6:10:95:59:8d:2d:c3:55:cf:3f:fc:83:da:4f:e5:d0:60:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Nov 2 16:45:43 2025 GMT Not After : Nov 6 01:02:43 2025 GMT Subject: CN=F6C5EFBD1E75AEECBF7DFBA2A03A7509DDD8D64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:17:55:35:b2:e3:c4:12:96:d1:17:c3:a3: 1c:b8:bf:b6:48:15:33:c1:56:24:c4:70:73:06:3b: 4b:56:d0:3b:37:14:90:30:51:07:7b:25:53:b8:a0: 6c:ae:df:c5:5e:57:05:57:bb:b6:c7:62:05:c0:50: 2f:aa:72:f5:a7:2f:e9:8a:c4:80:b3:89:8c:63:7c: 4f:d2:0b:62:fa:df:c5:63:7f:85:71:fa:cc:aa:6a: cd:81:e6:f5:b6:77:1a:4e:03:f7:47:b2:fb:b5:3d: 19:dc:08:fa:b1:d0:78:50:88:e4:bd:53:f6:29:88: d4:96:22:5e:64:0b:fa:0e:e4:6d:db:46:90:c5:0c: 2c:13:63:d8:fd:18:c4:a1:5d:5c:91:df:8c:de:95: a5:a2:e9:90:f7:aa:73:c7:ff:ea:69:3e:f6:84:73: 4c:17:25:ec:ff:07:12:79:6f:28:97:48:7f:ae:69: f2:9b:5b:16:da:ee:f4:a8:ba:47:e3:ee:6b:72:4f: 27:4b:a7:16:d6:74:bb:31:df:15:30:b7:37:26:15: eb:11:d9:8a:12:98:fa:90:d0:3f:a7:cd:6d:ce:14: 17:70:c7:6c:c4:2c:6f:69:1d:24:bb:2a:fa:e3:de: 9c:56:c8:e0:0d:e9:b8:0c:83:9f:98:41:5d:19:80: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:EF:BD:1E:75:AE:EC:BF:7D:FB:A2:A0:3A:75:09:DD:D8:D6:4F X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:20:d6:40:1f:81:a0:d3:2a:5b:99:c1:52:20:8b:04:69:fa: e8:3b:a9:dd:6e:9f:6f:d3:7c:d0:4a:43:d0:95:b7:6b:cb:a9: 76:c8:ff:54:e5:e0:79:b2:5f:6c:01:fa:4c:45:28:4b:52:8b: f4:ec:84:da:89:86:8c:75:eb:c2:3a:4a:8f:8e:be:f2:29:38: f4:31:3c:17:f3:e8:c8:c5:65:b7:d2:2c:77:52:e1:91:e2:9a: 4d:4b:26:b9:a3:2c:bf:d8:a4:01:ea:62:6d:f5:64:49:72:ee: 50:61:4e:9f:5f:8d:90:b0:85:47:72:52:d8:dd:91:cc:01:bc: a9:55:06:6d:8d:54:1c:e7:1b:43:b7:d2:e4:32:80:9e:53:47: 3c:6c:e7:5c:a7:bf:7c:8b:b0:44:1c:8a:3a:a2:25:ef:31:b0: d4:32:cc:a4:37:ea:6c:09:ae:15:17:a7:f2:71:51:47:2c:7b: cf:31:3b:cd:02:89:1c:13:81:ce:7d:e9:00:11:0b:89:44:d5: 29:cd:61:fe:5d:37:c7:67:f7:55:1d:7d:64:2e:58:25:e5:da: 94:ae:77:49:b3:32:b0:1f:73:b3:86:f5:d6:0f:7f:20:e7:cb: f9:47:e0:4d:e2:fc:fc:50:8a:07:dc:09:38:60:8d:e6:b6:28: 0e:a8:84:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfYQlVmNLcNVzz/8g9pP5dBgI/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNTExMDIxNjQ1NDNaFw0yNTExMDYwMTAyNDNaMDMxMTAvBgNV BAMTKEY2QzVFRkJEMUU3NUFFRUNCRjdERkJBMkEwM0E3NTA5REREOEQ2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBRdVNbLjxBKW0RfDoxy4v7ZI FTPBViTEcHMGO0tW0Ds3FJAwUQd7JVO4oGyu38VeVwVXu7bHYgXAUC+qcvWnL+mK xICziYxjfE/SC2L638Vjf4Vx+syqas2B5vW2dxpOA/dHsvu1PRncCPqx0HhQiOS9 U/YpiNSWIl5kC/oO5G3bRpDFDCwTY9j9GMShXVyR34zelaWi6ZD3qnPH/+ppPvaE c0wXJez/BxJ5byiXSH+uafKbWxba7vSoukfj7mtyTydLpxbWdLsx3xUwtzcmFesR 2YoSmPqQ0D+nzW3OFBdwx2zELG9pHSS7Kvrj3pxWyOAN6bgMg5+YQV0ZgHK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sXvvR51ruy/ffuioDp1Cd3Y1k8wHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8g1kAfgaDTKluZwVIgiwRp+ug7qd1un2/T fNBKQ9CVt2vLqXbI/1Tl4HmyX2wB+kxFKEtSi/TshNqJhox168I6So+OvvIpOPQx PBfz6MjFZbfSLHdS4ZHimk1LJrmjLL/YpAHqYm31ZEly7lBhTp9fjZCwhUdyUtjd kcwBvKlVBm2NVBznG0O30uQygJ5TRzxs51ynv3yLsEQcijqiJe8xsNQyzKQ36mwJ rhUXp/JxUUcse88xO80CiRwTgc596QARC4lE1SnNYf5dN8dn91UdfWQuWCXl2pSu d0mzMrAfc7OG9dYPfyDny/lH4E3i/PxQigfcCThgjea2KA6ohIo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:37 2025 by rpki-client