$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: CSw8+hX2fErkGSFvg1s6XL8RLjea2ZgHJECLEU+FK+4= Subject key identifier: 17:EC:FE:F0:2F:A2:0B:DB:1C:54:6A:13:0A:ED:3A:A8:55:9C:32:C5 Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 416C6F2C2C9759D50A6550CCEFF5D18F3A8DDEC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: BC Signing time: Mon 03 Nov 2025 00:30:02 +0000 Manifest this update: Mon 03 Nov 2025 00:25:02 +0000 Manifest next update: Thu 06 Nov 2025 00:41:02 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: 5Rd9Swf1FKnPuwnqrx+BizsHHVg0JukmFoDxoZZlC9A=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6c:6f:2c:2c:97:59:d5:0a:65:50:cc:ef:f5:d1:8f:3a:8d:de:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Nov 3 00:25:02 2025 GMT Not After : Nov 6 00:41:02 2025 GMT Subject: CN=17ECFEF02FA20BDB1C546A130AED3AA8559C32C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:d7:44:a3:02:e2:42:37:55:25:44:b2:17: 33:ec:f5:95:88:d7:2f:c5:3a:0f:b4:3e:bb:ab:cc: c5:3d:4d:18:10:44:f7:c2:56:4f:a4:6b:d1:94:d0: fc:f7:ac:95:83:ac:ba:03:05:11:a2:65:1a:65:46: ab:43:a1:7f:dc:c4:6c:72:47:1c:0c:9a:17:c7:f0: 87:f9:75:11:eb:55:b4:f4:1f:c6:bb:1e:72:b0:25: fb:d6:e9:3c:11:7a:0a:0d:08:4a:eb:7d:e7:44:43: 4d:1e:ef:67:5e:74:cd:96:64:df:4f:13:c7:6d:83: 31:ea:09:fc:0d:4f:59:78:f6:5d:20:fc:94:35:b4: 36:da:56:f3:14:e2:c3:b5:eb:41:6d:74:e7:ad:ac: a6:d4:bb:31:c7:0b:ca:72:03:e1:1e:13:86:81:31: 7a:d7:24:ac:10:56:a9:8f:78:f5:35:4b:aa:b6:4e: 06:37:56:a7:22:70:1e:e9:c5:3f:63:16:9f:9b:16: 74:75:94:82:fc:45:67:8d:8e:20:a6:50:e9:9c:aa: ab:8a:83:2a:a0:08:95:b8:23:ee:63:47:71:41:a7: 46:b5:8e:ec:d1:27:ac:db:11:b6:a8:af:5f:dd:c2: a3:25:89:3f:a0:c5:23:4b:d5:da:2a:b7:7d:e9:18: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EC:FE:F0:2F:A2:0B:DB:1C:54:6A:13:0A:ED:3A:A8:55:9C:32:C5 X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:50:ed:5c:01:f5:bf:1a:23:6b:b6:89:78:48:84:7c:00:78: 70:00:d5:92:11:97:43:f4:2a:94:2e:1f:f6:4b:b0:f7:cb:df: 0e:92:07:cf:f8:d9:42:72:0c:f7:ed:94:94:3b:9b:29:11:4b: 5e:c9:4a:f1:87:ef:a9:ea:dc:cb:57:5f:7d:7a:f1:3c:b2:46: 59:5a:e6:b8:4b:71:80:5f:43:44:0f:bd:87:06:a4:8d:a9:37: 61:b4:ca:d1:2b:81:57:b2:6a:fe:b9:d3:21:b4:2a:7a:09:62: fb:76:91:67:cc:e9:5b:82:bb:9c:80:2d:22:8c:a0:2a:fc:c9: d7:d2:0f:c2:0e:15:53:c2:c2:96:e5:70:6f:f4:21:47:64:4e: 8f:10:3b:2f:e5:76:5e:9f:13:c4:d8:80:89:0d:a5:63:21:1e: 28:3e:b2:6b:02:e5:d1:75:13:92:06:d8:65:13:0c:50:12:ac: fe:1c:5a:3d:fb:3d:32:a6:d0:5f:11:9a:d5:ba:7f:78:c1:3a: 31:9e:25:f2:d9:ff:16:d7:ad:6f:3b:8a:10:88:0c:bb:db:4e: 77:5e:9f:bd:68:5b:ee:b9:e7:39:69:0e:02:c7:b2:cb:c4:08: 18:2f:3d:8b:4f:cd:af:4b:4b:f1:23:65:07:f8:9e:7f:97:c2: c3:b0:27:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWxvLCyXWdUKZVDM7/XRjzqN3sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTExMDMwMDI1MDJaFw0yNTExMDYwMDQxMDJaMDMxMTAvBgNV BAMTKDE3RUNGRUYwMkZBMjBCREIxQzU0NkExMzBBRUQzQUE4NTU5QzMyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyKtdEowLiQjdVJUSyFzPs9ZWI 1y/FOg+0PrurzMU9TRgQRPfCVk+ka9GU0Pz3rJWDrLoDBRGiZRplRqtDoX/cxGxy RxwMmhfH8If5dRHrVbT0H8a7HnKwJfvW6TwRegoNCErrfedEQ00e72dedM2WZN9P E8dtgzHqCfwNT1l49l0g/JQ1tDbaVvMU4sO160FtdOetrKbUuzHHC8pyA+EeE4aB MXrXJKwQVqmPePU1S6q2TgY3VqcicB7pxT9jFp+bFnR1lIL8RWeNjiCmUOmcqquK gyqgCJW4I+5jR3FBp0a1juzRJ6zbEbaor1/dwqMliT+gxSNL1doqt33pGFVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF+z+8C+iC9scVGoTCu06qFWcMsUwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFQ7VwB9b8aI2u2iXhIhHwAeHAA1ZIRl0P0 KpQuH/ZLsPfL3w6SB8/42UJyDPftlJQ7mykRS17JSvGH76nq3MtXX3168TyyRlla 5rhLcYBfQ0QPvYcGpI2pN2G0ytErgVeyav650yG0KnoJYvt2kWfM6VuCu5yALSKM oCr8ydfSD8IOFVPCwpblcG/0IUdkTo8QOy/ldl6fE8TYgIkNpWMhHig+smsC5dF1 E5IG2GUTDFASrP4cWj37PTKm0F8RmtW6f3jBOjGeJfLZ/xbXrW87ihCIDLvbTnde n71oW+655zlpDgLHssvECBgvPYtPza9LS/EjZQf4nn+XwsOwJ4A= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:16 2025 by rpki-client