$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: P6jKpb1r3NmAyLU1Jvvt+DmmUDRaiqSHWbHh4rcjNwk= Subject key identifier: A8:15:DA:23:E4:EC:4D:D1:5A:2D:9F:76:D2:13:85:03:C9:83:EE:44 Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 422E1F1CA742792F9E9B71F7766FFA1CDC777CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 02B3 Signing time: Sun 02 Nov 2025 20:20:37 +0000 Manifest this update: Sun 02 Nov 2025 20:15:37 +0000 Manifest next update: Thu 06 Nov 2025 03:05:37 +0000 Files and hashes: 1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=) 2: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=) 3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=) 4: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: TM0c0cmZO3kvDYRmVg1//kE5pVO/PUTR1vchDEva11g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2e:1f:1c:a7:42:79:2f:9e:9b:71:f7:76:6f:fa:1c:dc:77:7c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Nov 2 20:15:37 2025 GMT Not After : Nov 6 03:05:37 2025 GMT Subject: CN=A815DA23E4EC4DD15A2D9F76D2138503C983EE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:dc:5a:5d:f1:1c:d0:8f:e0:7b:3d:b4:e1:56: b4:7c:30:fd:2d:4c:c8:b9:29:e2:ba:34:37:f2:b0: 79:8e:9e:b7:ba:b7:22:fa:da:95:d7:d0:88:42:04: f0:7e:8c:0a:ca:16:9d:61:c9:c3:cd:7d:9b:fa:33: f4:4d:14:1b:a5:9c:b5:74:32:4c:3a:be:af:15:b1: 53:0e:3b:ad:0d:7e:c4:33:75:8e:22:2d:70:38:c4: e7:2a:09:15:1c:29:b6:ca:c8:6e:45:5e:ff:cf:2b: f2:d3:07:8c:e7:58:c7:f4:56:67:bc:71:05:dd:98: bb:ac:d9:3d:3d:48:fc:37:53:45:82:ad:df:ce:57: 4f:d1:9a:12:4a:e1:26:70:22:14:36:0e:b1:c9:23: 95:d5:0d:51:9e:0e:f0:a1:59:04:37:ec:df:9d:80: 88:54:1f:20:2a:d5:53:dd:ef:7d:ed:ca:62:85:37: 61:1a:9f:5b:f1:57:92:76:f7:46:7e:dc:3c:93:ee: 75:df:af:dc:3c:c7:b5:6d:f8:7a:18:3a:de:03:17: 62:ae:e4:9b:47:d9:52:f5:22:ff:0a:39:69:1c:52: da:a9:d1:c8:00:6e:2b:00:bb:b5:30:de:31:ce:38: 02:94:9d:56:f7:7f:7b:e7:11:fb:bb:3d:3f:1e:b5: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:15:DA:23:E4:EC:4D:D1:5A:2D:9F:76:D2:13:85:03:C9:83:EE:44 X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:88:76:47:cc:b0:17:ac:ea:a8:54:2e:9a:ae:5f:c7:65: e1:6b:6b:48:b1:cf:4c:fa:f8:f5:a0:bb:06:8f:aa:3c:d6:e8: 59:fc:57:35:22:51:05:f7:63:d8:cc:eb:f8:ea:6f:b2:f3:5e: 45:1b:0e:5c:68:a5:4b:14:ac:81:c5:05:2a:73:c6:16:53:7f: 04:27:22:dd:c2:6f:c5:e5:71:be:50:0f:94:70:f6:cb:a9:31: 22:2a:db:76:a0:b9:c5:e9:b1:07:5f:83:cb:a3:de:a5:95:99: 88:37:6c:f7:8c:35:2e:a7:fa:39:1e:88:5a:fc:63:d3:1d:61: 0a:87:8d:9c:b8:ac:0c:40:0c:25:8a:02:48:19:cc:fc:c0:5f: 48:3d:8c:13:c3:ce:cd:bf:f5:71:3a:2e:72:36:a7:a9:7a:a7: b4:c9:e3:5c:54:ee:29:68:90:fa:a1:5e:e2:e5:2d:ac:0f:cd: 24:ec:3b:95:21:60:77:1d:ff:f5:a3:70:0a:fb:dc:0d:b5:0b: c4:14:4d:e7:b0:02:b8:7f:10:d3:27:73:29:ce:00:d1:3f:ba: 85:66:d9:7a:88:c2:a5:fa:45:04:64:ae:42:c0:b4:66:c7:e6: 7b:46:21:16:29:86:89:33:f1:ca:57:da:7f:02:5b:74:14:99: b1:bf:f6:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi4fHKdCeS+em3H3dm/6HNx3fN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNTExMDIyMDE1MzdaFw0yNTExMDYwMzA1MzdaMDMxMTAvBgNV BAMTKEE4MTVEQTIzRTRFQzRERDE1QTJEOUY3NkQyMTM4NTAzQzk4M0VFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD33Fpd8RzQj+B7PbThVrR8MP0t TMi5KeK6NDfysHmOnre6tyL62pXX0IhCBPB+jArKFp1hycPNfZv6M/RNFBulnLV0 Mkw6vq8VsVMOO60NfsQzdY4iLXA4xOcqCRUcKbbKyG5FXv/PK/LTB4znWMf0Vme8 cQXdmLus2T09SPw3U0WCrd/OV0/RmhJK4SZwIhQ2DrHJI5XVDVGeDvChWQQ37N+d gIhUHyAq1VPd733tymKFN2Ean1vxV5J290Z+3DyT7nXfr9w8x7Vt+HoYOt4DF2Ku 5JtH2VL1Iv8KOWkcUtqp0cgAbisAu7Uw3jHOOAKUnVb3f3vnEfu7PT8etX8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBXaI+TsTdFaLZ920hOFA8mD7kQwHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyniHZHzLAXrOqoVC6arl/HZeFra0ixz0z6 +PWguwaPqjzW6Fn8VzUiUQX3Y9jM6/jqb7LzXkUbDlxopUsUrIHFBSpzxhZTfwQn It3Cb8Xlcb5QD5Rw9supMSIq23agucXpsQdfg8uj3qWVmYg3bPeMNS6n+jkeiFr8 Y9MdYQqHjZy4rAxADCWKAkgZzPzAX0g9jBPDzs2/9XE6LnI2p6l6p7TJ41xU7ilo kPqhXuLlLawPzSTsO5UhYHcd//WjcAr73A21C8QUTeewArh/ENMncynOANE/uoVm 2XqIwqX6RQRkrkLAtGbH5ntGIRYphokz8cpX2n8CW3QUmbG/9lY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:05 2025 by rpki-client