$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json) Hash identifier: UtwpZWZA7Xfueg+ALNeVOLxjChfH3RANY7DawfaweNw= Subject key identifier: 42:6B:69:B3:93:F3:92:5E:1B:59:97:A5:0B:23:DB:05:A9:E3:74:D8 Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Certificate serial: 43CE523A8F5BC3E9F8FD300601A27EF03E6ACF72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft Manifest number: 026F Signing time: Mon 03 Nov 2025 18:20:45 +0000 Manifest this update: Mon 03 Nov 2025 18:15:45 +0000 Manifest next update: Fri 07 Nov 2025 02:28:45 +0000 Files and hashes: 1: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: k0b2lkpq8q4s3fkoxl1YjRKkny4cHh2jc+tMGlHvWlg=) 2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=) 3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: E01mZ15UIJ+QTIPPcGks35isU/hOcW6+FEQB5HchAFc=) 4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: T5Fz3OXAuav/iqbItkD85kgf8QFMTkSpBn4rOH0yfRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ce:52:3a:8f:5b:c3:e9:f8:fd:30:06:01:a2:7e:f0:3e:6a:cf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Validity Not Before: Nov 3 18:15:45 2025 GMT Not After : Nov 7 02:28:45 2025 GMT Subject: CN=426B69B393F3925E1B5997A50B23DB05A9E374D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:cc:3f:e5:86:b8:d8:90:b6:75:fc:f8:0f: 24:13:32:5a:2d:21:9c:6f:a0:4b:45:42:2f:8b:80: f3:6c:e7:37:c8:39:4e:0d:cf:03:24:99:2a:ab:45: 43:30:c1:37:08:61:8c:af:39:b9:f2:08:14:2e:e8: 35:f3:d8:bb:e0:bf:60:2d:c5:82:2b:d5:a0:21:7b: d8:24:21:a4:4d:7a:e2:3a:40:51:d7:08:02:c4:b0: e3:c2:28:c5:b1:68:bb:73:68:d8:6a:ed:1b:c2:e8: b9:a3:0a:b8:28:77:d8:ae:82:a6:a9:5a:8a:6f:1c: db:95:de:41:e5:43:b9:59:35:fa:46:c4:c5:56:f0: 3a:e0:5f:24:49:f5:8c:35:68:5d:f9:e2:fe:8b:8a: a0:26:bc:c7:35:3b:5c:77:83:59:b7:c5:df:d9:ff: af:27:f8:9c:21:41:a6:7b:63:ca:52:55:6b:31:18: cb:f9:77:89:75:f2:d9:ff:a3:45:a5:56:25:56:3c: 7f:e7:ac:fa:f2:b7:7e:cd:2f:d4:e4:3f:ba:c8:29: 06:20:ad:35:f0:2d:9c:29:42:e6:44:37:51:1f:0a: 77:d9:27:c6:1d:b6:41:df:2f:72:52:92:09:ce:24: 20:11:8a:e6:f2:26:b1:36:4e:04:6d:98:65:97:eb: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:69:B3:93:F3:92:5E:1B:59:97:A5:0B:23:DB:05:A9:E3:74:D8 X509v3 Authority Key Identifier: keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e1:30:71:a3:0a:2a:58:41:35:37:7f:5e:ac:85:22:57:46: 32:46:71:74:26:07:51:8e:4a:1c:71:7d:0f:e2:71:07:56:8a: 76:1f:2d:9c:84:82:98:82:7f:30:80:eb:bc:90:af:81:97:f9: 59:d7:c0:03:e1:8b:e6:93:58:30:10:28:dd:b1:a3:bb:8e:b9: 2f:8e:15:4e:27:08:94:cd:55:18:ac:78:c3:68:1a:96:c8:80: 0e:fe:f5:b0:39:8a:c6:bf:9c:a3:b6:5b:ac:0c:87:bc:96:31: 68:9d:90:3f:b6:ab:ba:2d:08:eb:d4:9e:93:f8:14:db:c0:53: e0:0f:5a:0a:4c:12:bc:92:71:38:50:99:c7:ec:88:5c:ed:c5: 42:0e:ca:52:3d:30:d3:2b:d2:ad:20:08:55:ec:04:8a:1b:bc: 51:c6:f1:43:92:f7:f0:87:49:62:5f:19:ec:aa:28:2a:9e:53: ce:71:46:90:5b:66:b6:07:87:a0:c3:28:80:41:0f:cf:cc:1a: 83:c1:fd:79:40:e8:92:be:5d:15:57:5f:83:d4:d1:dd:d1:64: ba:cf:9f:3e:51:10:0c:49:22:8a:7c:98:9d:07:da:e4:2d:ad: a8:8d:82:07:e7:5a:f3:23:8d:a6:e9:a1:37:33:d5:59:7d:92: 32:f9:2f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ85SOo9bw+n4/TAGAaJ+8D5qz3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMz NjYzMkM4OTAeFw0yNTExMDMxODE1NDVaFw0yNTExMDcwMjI4NDVaMDMxMTAvBgNV BAMTKDQyNkI2OUIzOTNGMzkyNUUxQjU5OTdBNTBCMjNEQjA1QTlFMzc0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0cw/5Ya42JC2dfz4DyQTMlot IZxvoEtFQi+LgPNs5zfIOU4NzwMkmSqrRUMwwTcIYYyvObnyCBQu6DXz2Lvgv2At xYIr1aAhe9gkIaRNeuI6QFHXCALEsOPCKMWxaLtzaNhq7RvC6LmjCrgod9iugqap WopvHNuV3kHlQ7lZNfpGxMVW8DrgXyRJ9Yw1aF354v6LiqAmvMc1O1x3g1m3xd/Z /68n+JwhQaZ7Y8pSVWsxGMv5d4l18tn/o0WlViVWPH/nrPryt37NL9TkP7rIKQYg rTXwLZwpQuZEN1EfCnfZJ8YdtkHfL3JSkgnOJCARiubyJrE2TgRtmGWX6ynDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmtps5Pzkl4bWZelCyPbBanjdNgwHwYDVR0j BBgwFoAU/tSavNocnQl/Uq0m2AAcDDZjLIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y3NTA4OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9GRUQ0OUFCQ0RB MUM5RDA5N0Y1MkFEMjZEODAwMUMwQzM2NjMyQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMzNjYz MkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFD MEMzNjYzMkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzhMHGjCipYQTU3f16shSJXRjJGcXQmB1GO ShxxfQ/icQdWinYfLZyEgpiCfzCA67yQr4GX+VnXwAPhi+aTWDAQKN2xo7uOuS+O FU4nCJTNVRiseMNoGpbIgA7+9bA5isa/nKO2W6wMh7yWMWidkD+2q7otCOvUnpP4 FNvAU+APWgpMEryScThQmcfsiFztxUIOylI9MNMr0q0gCFXsBIobvFHG8UOS9/CH SWJfGeyqKCqeU85xRpBbZrYHh6DDKIBBD8/MGoPB/XlA6JK+XRVXX4PU0d3RZLrP nz5REAxJIop8mJ0H2uQtraiNggfnWvMjjabpoTcz1Vl9kjL5L34= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:35 2025 by rpki-client