$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: WGmEMVF8cCc1D3lfyxukh5IBu6Dr4dfNBQwZ7pQiaU4= Subject key identifier: FA:EB:A7:B0:A6:30:75:42:5C:02:73:F4:7B:C1:03:B2:C7:AD:3B:D9 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 31A0F6018DA04437B47F701F794FD9C389982E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 0193 Signing time: Sun 02 Nov 2025 14:42:07 +0000 Manifest this update: Sun 02 Nov 2025 14:37:07 +0000 Manifest next update: Wed 05 Nov 2025 20:08:07 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 2: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 3: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: xFxkfDA5GjuGjA3qNr+9Zr+Sfs1oBnfYABs4j6j+OmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a0:f6:01:8d:a0:44:37:b4:7f:70:1f:79:4f:d9:c3:89:98:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Nov 2 14:37:07 2025 GMT Not After : Nov 5 20:08:07 2025 GMT Subject: CN=FAEBA7B0A63075425C0273F47BC103B2C7AD3BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:02:59:5f:c5:a1:b4:d5:a7:62:db:0a:a6: 53:60:3d:dd:5c:a8:f6:0c:10:22:38:13:bd:cb:11: 92:6c:32:f8:61:21:d2:de:08:96:2c:a2:e9:fd:55: 4e:5c:cf:1b:2e:6a:97:31:a8:7d:6b:38:2f:6a:e1: f5:5b:c3:f0:ad:98:05:08:04:73:cb:af:c2:80:17: 6a:e9:6f:ec:dd:63:b9:b4:6b:cf:15:e9:01:c0:c7: bb:f1:39:46:b3:f6:c9:ee:cc:cb:4a:84:b3:90:ac: f7:99:8b:ad:ef:22:66:9b:12:8d:6d:56:8d:5d:75: 3e:1a:3d:30:08:51:eb:35:63:61:25:da:e6:6d:ae: 2e:30:e9:35:ee:a1:0e:3d:c7:13:1d:c7:dd:73:a3: a7:67:ec:b6:a7:6c:64:31:15:66:13:0d:ea:6e:00: d5:1d:f6:18:8e:ad:66:99:a6:1c:7a:77:10:70:43: 55:2d:53:e9:1c:2a:b1:65:d4:17:83:1a:3c:f1:46: 89:26:d3:a9:0d:8b:6c:38:f7:bb:db:f6:8e:11:0c: b0:78:14:26:68:0a:30:74:1e:7e:b0:5e:39:3b:60: ea:ff:79:3a:bb:1a:3b:2d:70:74:2b:65:9d:df:a7: 7c:91:89:04:18:ea:34:54:f5:89:f5:89:97:1d:a7: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:A7:B0:A6:30:75:42:5C:02:73:F4:7B:C1:03:B2:C7:AD:3B:D9 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:45:77:c9:68:9c:3e:a1:ec:95:f3:54:e2:2b:0f:bd:d3:9c: a5:2d:d5:bd:3a:77:4f:a4:b6:dd:34:0d:29:2f:63:37:1a:7e: c7:5d:8c:7c:e2:ea:9e:35:51:36:d1:77:a5:22:ce:b7:f6:ce: 02:cf:3f:ff:41:7e:da:30:a0:a7:1b:92:4d:13:7f:6c:b2:0b: 6f:f2:2a:a2:d7:a3:55:e2:2b:80:e7:36:00:ed:4c:3f:58:e3: e5:36:fb:ad:de:a3:35:3f:b7:4e:ab:d0:5e:ad:35:50:e3:20: 96:d7:5e:80:de:74:d3:29:d1:b2:42:8b:f4:41:63:54:a1:37: 97:e3:29:23:ef:d4:cf:f4:80:78:d1:08:8a:2e:ed:d5:3c:77: d6:c5:22:d5:37:0a:fe:b5:d7:24:09:ab:0e:20:3a:ef:74:f3: 39:b4:3b:e0:cb:0c:0e:b8:64:1e:18:86:30:f7:18:7e:61:e1: c6:2b:70:c3:4b:b2:6c:44:aa:45:a8:4c:19:27:76:28:14:00: 11:50:96:25:aa:f8:61:53:e2:e7:c0:53:62:02:2a:2f:11:b7: f1:5a:75:1a:d4:ba:56:f0:5e:9a:aa:8a:86:da:f5:5e:6d:f7: f2:68:a2:29:75:01:1e:67:da:98:7a:c1:71:cb:9c:ec:45:f7: 68:22:31:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMaD2AY2gRDe0f3AfeU/Zw4mYLi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTExMDIxNDM3MDdaFw0yNTExMDUyMDA4MDdaMDMxMTAvBgNV BAMTKEZBRUJBN0IwQTYzMDc1NDI1QzAyNzNGNDdCQzEwM0IyQzdBRDNCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaAJZX8WhtNWnYtsKplNgPd1c qPYMECI4E73LEZJsMvhhIdLeCJYsoun9VU5czxsuapcxqH1rOC9q4fVbw/CtmAUI BHPLr8KAF2rpb+zdY7m0a88V6QHAx7vxOUaz9snuzMtKhLOQrPeZi63vImabEo1t Vo1ddT4aPTAIUes1Y2El2uZtri4w6TXuoQ49xxMdx91zo6dn7LanbGQxFWYTDepu ANUd9hiOrWaZphx6dxBwQ1UtU+kcKrFl1BeDGjzxRokm06kNi2w497vb9o4RDLB4 FCZoCjB0Hn6wXjk7YOr/eTq7GjstcHQrZZ3fp3yRiQQY6jRU9Yn1iZcdp5/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+uunsKYwdUJcAnP0e8EDssetO9kwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNFd8lonD6h7JXzVOIrD73TnKUt1b06d0+k tt00DSkvYzcafsddjHzi6p41UTbRd6Uizrf2zgLPP/9BftowoKcbkk0Tf2yyC2/y KqLXo1XiK4DnNgDtTD9Y4+U2+63eozU/t06r0F6tNVDjIJbXXoDedNMp0bJCi/RB Y1ShN5fjKSPv1M/0gHjRCIou7dU8d9bFItU3Cv611yQJqw4gOu908zm0O+DLDA64 ZB4YhjD3GH5h4cYrcMNLsmxEqkWoTBkndigUABFQliWq+GFT4ufAU2ICKi8Rt/Fa dRrUulbwXpqqioba9V5t9/Jooil1AR5n2ph6wXHLnOxF92giMZs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:33 2025 by rpki-client