$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: HTHeaRjLU29zaUjvqa98/VtEa6PD2e9fb4TKli6JfkM= Subject key identifier: 37:2F:42:62:56:08:5B:AC:F5:C9:06:ED:24:6C:25:6C:3F:4B:07:55 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 62C04445ACF8AC04A304B7ECB8DC1B7249F836F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0405 Signing time: Tue 04 Nov 2025 08:01:01 +0000 Manifest this update: Tue 04 Nov 2025 07:56:01 +0000 Manifest next update: Fri 07 Nov 2025 10:21:01 +0000 Files and hashes: 1: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=) 2: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=) 3: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=) 4: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: oBFZOoS/NGqFNXfIznS0xVJCFsqpfrLQiu0WsIXcOog=) 5: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c0:44:45:ac:f8:ac:04:a3:04:b7:ec:b8:dc:1b:72:49:f8:36:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Nov 4 07:56:01 2025 GMT Not After : Nov 7 10:21:01 2025 GMT Subject: CN=372F426256085BACF5C906ED246C256C3F4B0755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c5:fb:61:47:87:6f:aa:d0:84:af:56:81:3d: 5d:f8:fd:fa:20:9b:cb:4f:3b:07:67:6c:83:1a:1d: c8:44:5c:4b:cc:98:0d:81:e7:11:01:68:14:20:04: d2:e5:3c:c8:f0:99:16:71:a4:c2:d3:6f:e2:98:33: 64:51:f3:e0:a6:5f:df:0b:fd:a5:6c:e8:a2:1d:4a: 77:5d:ad:aa:c5:81:c7:23:ff:87:b2:72:a3:fa:40: ca:3d:e6:d1:47:80:15:7e:55:01:54:d4:40:97:25: 59:56:21:60:07:9d:83:de:8c:bb:93:76:55:2a:3b: 61:e0:12:53:6e:97:cc:a6:e9:dc:ad:29:6d:70:e1: e5:09:e6:91:8d:4a:27:2b:18:97:46:c2:25:52:b4: e8:1d:64:f9:e3:80:e9:af:25:c7:9a:a7:30:5e:83: 69:37:9f:34:c1:e5:73:cc:84:4b:cb:04:f7:d7:d0: 1f:1f:dd:82:48:44:d8:fe:e2:76:50:21:b8:4b:2a: 1c:8f:3a:d4:38:9a:34:42:e5:00:e5:c2:23:63:29: cf:24:49:d5:95:64:bc:e9:75:55:ca:e6:14:f7:f4: 64:02:dc:80:55:c2:16:45:39:34:8f:12:c5:4f:80: 96:ee:d7:1b:1c:36:c4:56:6e:01:67:d8:67:12:a5: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2F:42:62:56:08:5B:AC:F5:C9:06:ED:24:6C:25:6C:3F:4B:07:55 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b7:2f:f7:1c:be:93:c0:05:58:5f:cc:80:0b:50:05:61:5e: 97:b4:b4:74:b1:91:8d:58:04:9a:28:16:9d:cc:de:87:db:37: c7:e6:28:95:c9:7b:e8:c7:b9:dd:d4:43:ad:c8:86:ed:86:ea: dc:f9:16:e5:5a:41:7a:c8:63:5c:a7:23:ad:cf:1f:aa:f1:32: 06:47:b1:60:ba:a8:d3:b2:62:9a:8e:2e:1f:3f:9a:93:36:18: 09:47:ed:1a:8a:46:d1:a1:0d:35:8a:3b:33:79:05:fe:47:c3: 58:c8:ea:67:4b:65:3a:e7:54:8a:9f:d7:df:19:a1:58:2e:22: c4:9f:37:ec:f1:9d:4b:87:1c:66:88:9f:90:a2:ab:79:4e:65: 06:74:8b:b2:ba:bc:25:a2:e9:89:f3:96:f5:fb:c8:a6:62:dc: c0:d1:6e:eb:3b:93:0a:08:5e:62:e6:23:dd:9e:20:b8:8f:55: 8b:e5:18:63:46:3b:e0:04:51:0a:66:4e:32:3d:63:ca:a6:df: e2:0f:83:2f:87:8e:6e:fa:8d:bd:b5:7e:a4:89:6d:bb:75:4f: fb:c0:f9:66:6f:29:86:9d:c9:7f:50:50:0d:85:28:ec:dc:69: d6:68:f6:96:26:9d:ba:79:7d:86:cd:f8:50:14:1d:10:de:28: 33:57:6b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsBERaz4rASjBLfsuNwbckn4NvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTExMDQwNzU2MDFaFw0yNTExMDcxMDIxMDFaMDMxMTAvBgNV BAMTKDM3MkY0MjYyNTYwODVCQUNGNUM5MDZFRDI0NkMyNTZDM0Y0QjA3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxfthR4dvqtCEr1aBPV34/fog m8tPOwdnbIMaHchEXEvMmA2B5xEBaBQgBNLlPMjwmRZxpMLTb+KYM2RR8+CmX98L /aVs6KIdSnddrarFgccj/4eycqP6QMo95tFHgBV+VQFU1ECXJVlWIWAHnYPejLuT dlUqO2HgElNul8ym6dytKW1w4eUJ5pGNSicrGJdGwiVStOgdZPnjgOmvJceapzBe g2k3nzTB5XPMhEvLBPfX0B8f3YJIRNj+4nZQIbhLKhyPOtQ4mjRC5QDlwiNjKc8k SdWVZLzpdVXK5hT39GQC3IBVwhZFOTSPEsVPgJbu1xscNsRWbgFn2GcSpZulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNy9CYlYIW6z1yQbtJGwlbD9LB1UwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy3L/ccvpPABVhfzIALUAVhXpe0tHSxkY1Y BJooFp3M3ofbN8fmKJXJe+jHud3UQ63Ihu2G6tz5FuVaQXrIY1ynI63PH6rxMgZH sWC6qNOyYpqOLh8/mpM2GAlH7RqKRtGhDTWKOzN5Bf5Hw1jI6mdLZTrnVIqf198Z oVguIsSfN+zxnUuHHGaIn5Ciq3lOZQZ0i7K6vCWi6YnzlvX7yKZi3MDRbus7kwoI XmLmI92eILiPVYvlGGNGO+AEUQpmTjI9Y8qm3+IPgy+Hjm76jb21fqSJbbt1T/vA +WZvKYadyX9QUA2FKOzcadZo9pYmnbp5fYbN+FAUHRDeKDNXa1U= -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:54 2025 by rpki-client