$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: gchO6hUcfMZOb9FroC7wEzitnLUf59WkKXIBNM0c7vg= Subject key identifier: D3:84:35:EC:E5:5D:D8:D4:97:11:47:22:9F:C7:BE:8B:B6:E1:3D:F1 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 19BD381915073AE9EBFDB238052A12AFD5E0BC24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: C1 Signing time: Tue 04 Nov 2025 16:21:20 +0000 Manifest this update: Tue 04 Nov 2025 16:16:20 +0000 Manifest next update: Sat 08 Nov 2025 01:20:20 +0000 Files and hashes: 1: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: PVQx1EoSHD5eYeRoxF4HMlmU4QAwdbfeNIo0CskeydM=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bd:38:19:15:07:3a:e9:eb:fd:b2:38:05:2a:12:af:d5:e0:bc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Nov 4 16:16:20 2025 GMT Not After : Nov 8 01:20:20 2025 GMT Subject: CN=D38435ECE55DD8D4971147229FC7BE8BB6E13DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:f6:fe:0f:b8:cf:8e:e0:8e:d0:aa:3e:93: ff:f6:76:c7:27:7d:ee:2e:8a:0c:36:ca:08:7d:72: bf:f8:2e:c1:75:f7:bf:45:84:bf:f7:dc:53:25:20: f4:15:bb:8a:be:6d:95:59:89:2d:19:9c:27:5d:51: cf:52:87:9a:83:28:4e:77:69:3d:ef:e6:0b:db:94: e1:69:0a:a3:40:a5:df:31:7f:f3:41:1c:70:d2:ae: aa:48:ff:58:01:9d:61:76:6b:46:1a:c7:eb:d6:d8: ea:e2:c8:72:00:0e:ad:09:f5:1f:7b:6d:11:76:b6: ee:5e:62:e2:5a:c7:22:69:22:80:16:c8:e4:7b:bb: 81:8a:1e:0d:56:94:43:54:1d:dc:0a:44:ab:c9:e4: 1e:5c:2b:44:06:5f:d6:25:fa:f9:6b:d0:fc:38:bd: 6c:df:78:d6:8c:59:c4:56:d1:95:f9:13:39:41:7b: cb:89:b6:fd:45:48:b9:7d:90:5f:ca:c7:51:49:f2: 9d:6e:ce:7a:f1:35:b1:ff:31:53:15:02:b0:79:86: e0:94:ea:fe:ea:c5:ee:0a:b1:f0:35:fa:28:ef:65: 9e:78:7d:4c:2c:13:e2:47:bd:23:59:75:14:87:6d: c8:31:27:5f:4a:02:1d:1c:0d:91:a7:26:f5:05:b9: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:35:EC:E5:5D:D8:D4:97:11:47:22:9F:C7:BE:8B:B6:E1:3D:F1 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4f:b3:39:2c:be:61:4b:39:83:23:4e:08:d6:5d:63:49:c0: da:8b:ad:94:da:d0:89:a9:64:5b:1f:63:93:f6:17:79:49:28: 6e:77:8f:bc:c6:f5:e6:78:a3:fd:39:7d:0a:08:be:af:c8:b1: 6c:56:e4:91:d6:b8:05:cf:58:50:96:d8:01:3a:ae:46:f1:c9: 13:26:3b:49:96:7e:54:b5:37:b3:6e:a0:aa:30:e2:07:ff:74: e4:09:e0:76:fc:8f:5d:88:9e:2a:45:d2:23:f0:13:20:14:92: 41:4c:e7:cf:e7:e3:cf:83:8d:98:07:7f:f2:1a:1c:1a:37:50: a6:7f:8f:c9:48:4c:98:14:8e:8d:63:a6:56:0c:c3:55:dc:f0: 4c:5f:3c:f2:88:ca:83:d6:21:1d:04:b3:bf:93:17:2b:54:cc: e1:d3:f9:ec:29:23:52:a1:ca:92:c1:e3:bc:9a:bb:95:0b:80: 57:ba:54:fb:fb:fb:b8:25:82:2b:d5:5f:b1:5e:36:cd:8a:c0: 4b:b4:aa:f8:55:9e:11:ad:7d:01:98:be:bb:53:89:ac:4a:74: 50:66:b4:e3:75:23:b7:fe:18:fd:13:88:67:d0:2b:93:2e:a4: 0a:8a:ac:d9:ec:cc:c8:f2:7b:a4:b6:a9:8e:ee:a8:10:f7:43: 9b:f6:bb:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGb04GRUHOunr/bI4BSoSr9XgvCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTExMDQxNjE2MjBaFw0yNTExMDgwMTIwMjBaMDMxMTAvBgNV BAMTKEQzODQzNUVDRTU1REQ4RDQ5NzExNDcyMjlGQzdCRThCQjZFMTNERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4Pb+D7jPjuCO0Ko+k//2dscn fe4uigw2ygh9cr/4LsF1979FhL/33FMlIPQVu4q+bZVZiS0ZnCddUc9Sh5qDKE53 aT3v5gvblOFpCqNApd8xf/NBHHDSrqpI/1gBnWF2a0Yax+vW2OriyHIADq0J9R97 bRF2tu5eYuJaxyJpIoAWyOR7u4GKHg1WlENUHdwKRKvJ5B5cK0QGX9Yl+vlr0Pw4 vWzfeNaMWcRW0ZX5EzlBe8uJtv1FSLl9kF/Kx1FJ8p1uznrxNbH/MVMVArB5huCU 6v7qxe4KsfA1+ijvZZ54fUwsE+JHvSNZdRSHbcgxJ19KAh0cDZGnJvUFuWTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04Q17OVd2NSXEUcin8e+i7bhPfEwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVPszksvmFLOYMjTgjWXWNJwNqLrZTa0Imp ZFsfY5P2F3lJKG53j7zG9eZ4o/05fQoIvq/IsWxW5JHWuAXPWFCW2AE6rkbxyRMm O0mWflS1N7NuoKow4gf/dOQJ4Hb8j12InipF0iPwEyAUkkFM58/n48+DjZgHf/Ia HBo3UKZ/j8lITJgUjo1jplYMw1Xc8ExfPPKIyoPWIR0Es7+TFytUzOHT+ewpI1Kh ypLB47yau5ULgFe6VPv7+7glgivVX7FeNs2KwEu0qvhVnhGtfQGYvrtTiaxKdFBm tON1I7f+GP0TiGfQK5MupAqKrNnszMjye6S2qY7uqBD3Q5v2u2U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:43 2025 by rpki-client