$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: 3O4O+LKTqds7SGmcw8jtLFeaYukEfuSRqIQVbzxEnuQ= Subject key identifier: 07:D9:5D:78:3A:0E:F8:35:65:5B:0C:E5:5C:79:22:C6:D5:23:4A:D0 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 2C1974E779682E277BC20033EF95178D541AF1EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0522 Signing time: Sun 02 Nov 2025 19:41:04 +0000 Manifest this update: Sun 02 Nov 2025 19:36:04 +0000 Manifest next update: Thu 06 Nov 2025 01:54:04 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 3: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) 4: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: b88YwEH4KGjYtYUtLIt5ci5f4EQg97ea+KBtdehhpPc=) 5: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 6: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 7: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:19:74:e7:79:68:2e:27:7b:c2:00:33:ef:95:17:8d:54:1a:f1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Nov 2 19:36:04 2025 GMT Not After : Nov 6 01:54:04 2025 GMT Subject: CN=07D95D783A0EF835655B0CE55C7922C6D5234AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:a1:7b:43:72:5f:b0:cb:86:2f:27:0d:57: da:a9:2c:84:df:60:c1:4c:ff:f7:2a:7d:56:e8:cf: e2:df:92:d7:24:f5:15:ac:4c:32:49:a7:e7:cb:c0: d6:4c:4e:44:67:fb:5b:87:07:b2:4f:36:57:ea:17: e1:37:0b:09:f4:8c:2e:1c:68:bd:77:e9:8f:99:8f: eb:2c:ab:4a:36:c2:2a:7f:30:fe:6d:11:0e:fb:d2: 08:f1:3f:3e:74:aa:f2:ee:51:c1:41:c5:bf:4e:f5: 00:90:89:b2:66:aa:bb:a9:ab:79:cb:95:0a:b4:68: b1:9a:55:f3:75:f3:03:ea:f1:e9:6f:28:03:f9:af: 01:eb:97:a1:9c:41:90:d6:0f:3d:4f:a3:bc:e6:2f: de:1a:0e:c7:0b:78:8b:93:75:e5:c2:6c:b1:67:42: 2b:05:01:84:ba:5c:74:2d:60:5b:03:04:ec:72:19: 38:84:f7:2b:de:bd:f4:1e:ee:56:13:f5:88:98:d9: eb:c9:95:e5:98:db:a9:4f:47:a2:bb:2d:d3:60:aa: 5a:64:fa:9f:45:f5:8c:4c:ad:c9:52:24:cf:ca:57: eb:53:14:03:a2:f1:87:23:ea:30:cf:15:b3:58:f3: 7b:73:95:f6:9f:80:cf:b0:f8:a1:d2:30:ce:84:88: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:5D:78:3A:0E:F8:35:65:5B:0C:E5:5C:79:22:C6:D5:23:4A:D0 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ab:c9:a9:84:36:44:22:99:77:29:5a:48:98:f2:9d:71:9e: e0:c4:b9:a2:90:cd:8e:77:0c:0a:7f:85:c9:98:fd:d7:53:1a: 0f:60:8d:f1:7c:74:90:5c:d2:2c:02:1e:1a:4e:5b:ba:b0:ec: f2:99:99:3c:0e:e2:a5:1d:21:be:64:28:92:bf:2d:f1:19:dd: 4b:00:5e:83:af:d9:4b:b2:c1:1b:ec:61:46:9e:11:30:7d:0d: c1:91:20:e3:ce:ed:a7:5a:43:ad:36:22:a1:0f:6f:15:3d:69: be:10:98:67:c7:43:14:82:22:19:4d:44:79:8b:25:6d:74:41: 9b:bd:4e:aa:05:4c:06:1b:7c:7a:89:e0:5e:58:ea:a6:97:7a: 95:06:86:12:84:a8:57:4b:0a:22:d4:f9:ce:81:ab:e5:26:34: 5d:bd:56:fa:44:96:bb:63:fc:d1:4d:6e:86:e4:ee:e4:c8:b9: 5e:81:b8:61:d9:c4:df:1e:c3:87:40:7a:7a:02:2b:6b:d6:75: 78:63:a9:1c:62:8b:0d:f2:e7:d0:1a:4a:29:e0:ab:d7:95:f0: 21:d6:17:a9:09:34:62:0e:f1:ae:c9:98:85:a6:57:f5:c3:fd: a6:2a:ea:23:d6:4c:74:fb:e6:b5:63:ee:39:61:d4:76:8e:f9: 4b:e2:f3:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBl053loLid7wgAz75UXjVQa8ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTExMDIxOTM2MDRaFw0yNTExMDYwMTU0MDRaMDMxMTAvBgNV BAMTKDA3RDk1RDc4M0EwRUY4MzU2NTVCMENFNTVDNzkyMkM2RDUyMzRBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28aF7Q3JfsMuGLycNV9qpLITf YMFM//cqfVboz+Lfktck9RWsTDJJp+fLwNZMTkRn+1uHB7JPNlfqF+E3Cwn0jC4c aL136Y+Zj+ssq0o2wip/MP5tEQ770gjxPz50qvLuUcFBxb9O9QCQibJmqrupq3nL lQq0aLGaVfN18wPq8elvKAP5rwHrl6GcQZDWDz1Po7zmL94aDscLeIuTdeXCbLFn QisFAYS6XHQtYFsDBOxyGTiE9yvevfQe7lYT9YiY2evJleWY26lPR6K7LdNgqlpk +p9F9YxMrclSJM/KV+tTFAOi8Ycj6jDPFbNY83tzlfafgM+w+KHSMM6EiEUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9ldeDoO+DVlWwzlXHkixtUjStAwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeryamENkQimXcpWkiY8p1xnuDEuaKQzY53 DAp/hcmY/ddTGg9gjfF8dJBc0iwCHhpOW7qw7PKZmTwO4qUdIb5kKJK/LfEZ3UsA XoOv2UuywRvsYUaeETB9DcGRIOPO7adaQ602IqEPbxU9ab4QmGfHQxSCIhlNRHmL JW10QZu9TqoFTAYbfHqJ4F5Y6qaXepUGhhKEqFdLCiLU+c6Bq+UmNF29VvpElrtj /NFNbobk7uTIuV6BuGHZxN8ew4dAenoCK2vWdXhjqRxiiw3y59AaSingq9eV8CHW F6kJNGIO8a7JmIWmV/XD/aYq6iPWTHT75rVj7jlh1HaO+Uvi89s= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:53 2025 by rpki-client