$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: 5UDD1VqJVtaIMom8PJaTFV6wLrEviftuQaRu9gDN0zw= Subject key identifier: B4:22:2A:2C:67:76:A4:E9:A2:50:5E:3B:E4:04:9B:0F:AB:CF:FF:5E Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 501A797141A6CAB534AC2A6679681706E5A20DFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01FC Signing time: Tue 04 Nov 2025 04:31:20 +0000 Manifest this update: Tue 04 Nov 2025 04:26:20 +0000 Manifest next update: Fri 07 Nov 2025 11:31:20 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 2: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: 779g9gndBbcSLIB8oPqwHfttDXRolvJVFLuVIQ+aAEc=) 3: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 4: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 5: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 6: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1a:79:71:41:a6:ca:b5:34:ac:2a:66:79:68:17:06:e5:a2:0d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Nov 4 04:26:20 2025 GMT Not After : Nov 7 11:31:20 2025 GMT Subject: CN=B4222A2C6776A4E9A2505E3BE4049B0FABCFFF5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:59:ff:f9:14:1a:dc:b8:ab:f2:4c:43:14: 6a:21:8e:7a:5a:2c:c8:06:92:3d:78:5f:c6:be:f8: bf:e7:49:a4:7d:60:30:a2:6b:a5:68:dc:12:49:01: 55:9b:4b:50:82:72:1e:da:d1:33:cf:43:7a:ec:7b: b4:fe:9c:4f:48:f1:10:45:3d:1e:21:43:2c:c2:62: fc:b0:a9:64:68:a7:50:eb:be:84:51:d4:5a:ba:53: 1c:df:1a:4e:82:d8:f5:c6:e6:84:22:60:46:a6:0e: 7e:7d:3d:71:2b:d3:f8:57:75:36:d7:6d:2e:b5:c9: 5a:74:c8:9f:7d:b4:23:fe:88:ac:e4:c9:fa:2f:f6: 2b:12:99:44:39:e8:f7:50:39:e2:9a:3f:21:3a:d9: 70:5a:95:8a:05:34:79:53:44:d9:79:1d:ca:c5:31: 42:17:07:0f:b4:f1:31:a2:91:43:52:e0:f6:bb:bd: a6:ed:4c:aa:dc:78:4f:37:15:ed:8b:82:91:93:4d: 56:7b:72:ba:fd:59:f8:e4:ca:5f:92:2f:6b:fc:dd: 28:6d:7a:16:17:61:de:c5:cf:3b:7b:33:cf:cf:22: 6b:77:2f:8a:b1:e8:bc:d8:21:7e:2e:48:25:07:bf: 6b:06:58:e9:70:27:63:97:71:d2:ac:35:41:5c:83: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:2A:2C:67:76:A4:E9:A2:50:5E:3B:E4:04:9B:0F:AB:CF:FF:5E X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7c:bb:5e:64:da:fc:cc:8c:8c:52:6b:f0:54:e5:e6:58:a9: 71:90:f8:7f:9c:42:0c:af:bd:19:41:f9:d9:65:0f:d4:fb:3c: 0e:d8:9e:c9:68:eb:4b:e9:3b:ee:08:45:43:97:a3:80:83:c8: 97:42:31:c5:32:dd:36:a3:90:ec:a1:de:fb:cc:58:cb:4a:40: 17:09:86:b0:67:b5:55:bc:2b:b8:20:04:96:d8:7b:e5:3a:42: 07:47:fa:5f:9a:c1:db:47:89:09:7a:20:4f:4c:25:17:9e:fb: e1:67:ad:f9:0d:fc:98:04:d1:9c:6a:80:4c:fa:4e:4c:99:04: 88:09:0b:26:0a:e0:62:f2:52:52:6e:79:83:44:92:84:7d:ec: e9:76:d5:6a:68:98:b4:01:f9:f7:c0:5b:e6:35:c6:50:10:11: 95:80:1f:9e:9a:93:ce:42:9f:93:4e:c7:24:55:08:53:25:22: dd:28:50:95:84:13:43:fe:22:21:b4:e1:72:cf:a6:26:93:25: 9c:c1:03:aa:98:a2:09:bf:ba:49:8e:52:6c:62:06:63:b3:09: 79:8f:81:0f:8f:b2:14:9a:1a:5e:9b:93:84:37:c8:23:7a:6b: ce:6b:39:b8:e9:a5:d7:70:33:a7:13:e9:fd:0f:dc:7a:10:40: 75:cf:90:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBp5cUGmyrU0rCpmeWgXBuWiDfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTExMDQwNDI2MjBaFw0yNTExMDcxMTMxMjBaMDMxMTAvBgNV BAMTKEI0MjIyQTJDNjc3NkE0RTlBMjUwNUUzQkU0MDQ5QjBGQUJDRkZGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJln/+RQa3Lir8kxDFGohjnpa LMgGkj14X8a++L/nSaR9YDCia6Vo3BJJAVWbS1CCch7a0TPPQ3rse7T+nE9I8RBF PR4hQyzCYvywqWRop1DrvoRR1Fq6UxzfGk6C2PXG5oQiYEamDn59PXEr0/hXdTbX bS61yVp0yJ99tCP+iKzkyfov9isSmUQ56PdQOeKaPyE62XBalYoFNHlTRNl5HcrF MUIXBw+08TGikUNS4Pa7vabtTKrceE83Fe2LgpGTTVZ7crr9Wfjkyl+SL2v83Sht ehYXYd7Fzzt7M8/PImt3L4qx6LzYIX4uSCUHv2sGWOlwJ2OXcdKsNUFcgycJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCIqLGd2pOmiUF475ASbD6vP/14wHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ8u15k2vzMjIxSa/BU5eZYqXGQ+H+cQgyv vRlB+dllD9T7PA7Ynslo60vpO+4IRUOXo4CDyJdCMcUy3TajkOyh3vvMWMtKQBcJ hrBntVW8K7ggBJbYe+U6QgdH+l+awdtHiQl6IE9MJRee++FnrfkN/JgE0ZxqgEz6 TkyZBIgJCyYK4GLyUlJueYNEkoR97Ol21WpomLQB+ffAW+Y1xlAQEZWAH56ak85C n5NOxyRVCFMlIt0oUJWEE0P+IiG04XLPpiaTJZzBA6qYogm/ukmOUmxiBmOzCXmP gQ+PshSaGl6bk4Q3yCN6a85rObjppddwM6cT6f0P3HoQQHXPkAY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:21 2025 by rpki-client