$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json) Hash identifier: XgrHZe4D4SkSZL79zJqJIxYjhSpV7g8dLloo4kHeBtQ= Subject key identifier: 17:F1:CB:05:8E:A3:97:5E:CF:C7:4D:A6:BF:B7:B7:14:EE:55:EC:8E Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 0B248C49E350BCDF0AD719C9454D469C0C5FE113 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft Manifest number: 053C Signing time: Tue 04 Nov 2025 08:11:35 +0000 Manifest this update: Tue 04 Nov 2025 08:06:35 +0000 Manifest next update: Fri 07 Nov 2025 10:34:35 +0000 Files and hashes: 1: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=) 2: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=) 3: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=) 4: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=) 5: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=) 6: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=) 7: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=) 8: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=) 9: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=) 10: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=) 11: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: NnJlkTcd2ooYoPFb5FRioZpEFC3O+xvLOXfg9HAI8I8=) 12: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=) 13: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=) 14: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=) 15: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:24:8c:49:e3:50:bc:df:0a:d7:19:c9:45:4d:46:9c:0c:5f:e1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Nov 4 08:06:35 2025 GMT Not After : Nov 7 10:34:35 2025 GMT Subject: CN=17F1CB058EA3975ECFC74DA6BFB7B714EE55EC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:d2:25:94:dd:ab:f4:9e:9f:60:19:5c:1f: 5f:81:76:9c:fd:59:5e:d5:12:4a:37:ad:c0:f9:41: 32:4d:78:a4:27:4d:dd:36:63:b0:c7:76:1a:ab:bb: 97:58:5d:02:eb:d6:bf:f0:2c:a2:3b:6b:38:67:10: c0:86:02:f3:9d:eb:e4:1e:57:8c:7f:93:70:64:af: a8:c0:0a:83:dc:1f:16:d5:fa:fc:3a:89:d3:98:7d: f6:5c:86:14:5e:fb:83:da:fe:4e:a1:10:48:9d:2d: 2e:b9:f0:28:cd:62:14:62:cd:4f:c1:cc:d1:bc:89: 95:bb:ae:f7:a2:64:ab:4f:a7:6f:10:0c:3a:f6:97: 2f:2b:15:c7:12:84:75:e2:c8:56:18:08:2f:73:ba: 19:17:79:53:45:54:47:f6:27:1f:51:fb:d6:2d:a2: 77:e7:fc:6e:95:f6:2c:81:0f:d7:8b:d8:2e:36:b9: e6:92:39:7d:48:ce:25:a0:e9:36:c8:34:08:46:45: 62:3b:22:6d:39:3f:3a:4f:90:33:61:4c:06:6b:27: 03:70:99:28:95:2a:6e:20:eb:c5:2e:a2:07:6f:80: a8:e7:9e:1a:b8:0e:af:f3:68:f4:bc:a0:30:2c:84: 2a:35:9b:ef:8b:96:1e:ea:0d:da:ef:6d:a4:23:5f: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:CB:05:8E:A3:97:5E:CF:C7:4D:A6:BF:B7:B7:14:EE:55:EC:8E X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:70:72:8c:02:ae:2d:87:4f:c4:68:be:db:ac:be:71:7e:ff: ba:2a:24:42:6f:51:7e:41:44:60:32:e3:2e:62:2c:fa:e2:d9: c7:5c:f4:51:c8:35:37:38:e2:dc:a8:9e:54:e2:d9:54:e5:40: f8:b5:08:cb:48:2f:88:ad:f5:cf:eb:5b:83:af:62:b2:6b:de: 4b:ef:b8:4e:9d:73:6b:2c:12:e4:ff:4d:82:e7:2e:9e:bf:aa: ed:bd:ed:8e:90:42:45:71:04:16:eb:3c:37:d7:11:0b:f4:41: 4a:85:1a:c3:e2:29:2e:0e:b6:c3:25:29:03:85:9e:8b:99:5f: b7:60:6c:55:06:0a:97:e5:66:c2:1f:a3:68:22:0a:3f:47:de: 49:bb:cb:8f:84:b1:7a:91:3a:e7:d4:91:e1:b6:2e:aa:f4:40: 0d:4c:96:47:a1:63:fe:43:b4:22:38:61:89:3a:4d:e8:29:9f: 60:19:58:d2:0e:74:cd:4a:e9:51:1b:38:a6:55:76:0b:88:9e: 70:c9:f7:6c:09:b9:c0:45:9b:b6:15:21:b1:c9:c4:8c:b0:01: c1:0c:ae:11:f7:2b:af:6f:19:9f:ad:ec:9d:a3:b4:68:42:10: cc:41:e5:68:ef:18:73:b7:73:76:2d:b3:0d:4f:9d:72:ae:cc: fc:b7:1f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCySMSeNQvN8K1xnJRU1GnAxf4RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yNTExMDQwODA2MzVaFw0yNTExMDcxMDM0MzVaMDMxMTAvBgNV BAMTKDE3RjFDQjA1OEVBMzk3NUVDRkM3NERBNkJGQjdCNzE0RUU1NUVDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M9IllN2r9J6fYBlcH1+Bdpz9 WV7VEko3rcD5QTJNeKQnTd02Y7DHdhqru5dYXQLr1r/wLKI7azhnEMCGAvOd6+Qe V4x/k3Bkr6jACoPcHxbV+vw6idOYffZchhRe+4Pa/k6hEEidLS658CjNYhRizU/B zNG8iZW7rveiZKtPp28QDDr2ly8rFccShHXiyFYYCC9zuhkXeVNFVEf2Jx9R+9Yt onfn/G6V9iyBD9eL2C42ueaSOX1IziWg6TbINAhGRWI7Im05PzpPkDNhTAZrJwNw mSiVKm4g68UuogdvgKjnnhq4Dq/zaPS8oDAshCo1m++Llh7qDdrvbaQjXxDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/HLBY6jl17Px02mv7e3FO5V7I4wHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpwcowCri2HT8RovtusvnF+/7oqJEJvUX5B RGAy4y5iLPri2cdc9FHINTc44tyonlTi2VTlQPi1CMtIL4it9c/rW4OvYrJr3kvv uE6dc2ssEuT/TYLnLp6/qu297Y6QQkVxBBbrPDfXEQv0QUqFGsPiKS4OtsMlKQOF nouZX7dgbFUGCpflZsIfo2giCj9H3km7y4+EsXqROufUkeG2Lqr0QA1MlkehY/5D tCI4YYk6Tegpn2AZWNIOdM1K6VEbOKZVdguInnDJ92wJucBFm7YVIbHJxIywAcEM rhH3K69vGZ+t7J2jtGhCEMxB5WjvGHO3c3Ytsw1PnXKuzPy3H6Y= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:30 2025 by rpki-client