$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: a3NGYcBxut2GzTGXVKVUD9XQpRgq/RULLuw3nceaKR8= Subject key identifier: 29:87:96:84:BC:00:F4:D2:7F:14:AC:3C:BD:E0:ED:2B:61:F2:CB:75 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 71EC8F2017D02338B80B26688B415C1E1340E445 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 047D Signing time: Tue 04 Nov 2025 02:51:39 +0000 Manifest this update: Tue 04 Nov 2025 02:46:39 +0000 Manifest next update: Fri 07 Nov 2025 08:10:39 +0000 Files and hashes: 1: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: pPegxAPt/7bjWyAX7qsI4TtQdyIeef1ab+09KXKhPmY=) 2: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=) 3: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=) 4: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ec:8f:20:17:d0:23:38:b8:0b:26:68:8b:41:5c:1e:13:40:e4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Nov 4 02:46:39 2025 GMT Not After : Nov 7 08:10:39 2025 GMT Subject: CN=29879684BC00F4D27F14AC3CBDE0ED2B61F2CB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:65:f3:2f:8f:cd:60:c8:6d:f7:37:90:dd:59: b5:5a:9c:0b:b7:1a:c2:02:79:3a:f0:f4:e9:ad:a2: 7c:44:c2:bf:03:a5:fe:f8:c2:06:5e:8f:35:85:d5: 9f:d1:a6:44:89:07:8f:8c:ff:a8:e3:51:57:fe:10: c1:53:1d:a1:9e:c4:70:e5:f6:4d:5a:c5:7b:75:8b: 92:88:d6:78:8a:1a:62:69:a3:6c:9b:e4:f7:e8:09: f6:9d:21:e1:a5:2a:7f:4b:39:49:35:82:cf:b6:49: 1a:6b:df:28:92:f7:73:a9:cb:38:37:cd:7b:13:31: d9:47:f3:61:4e:0f:f3:d6:fb:60:b4:29:b7:3b:6b: b4:b7:0f:d0:d0:13:21:28:8c:80:a5:35:c9:c7:0d: 39:6c:ab:b5:5f:b1:86:eb:e1:70:82:93:02:3b:a8: 95:98:ab:98:6a:b0:03:98:4f:51:26:66:cc:1f:67: 2a:84:6f:eb:83:9a:37:ef:90:3e:4a:40:9a:26:44: 5c:97:76:b9:63:3a:b8:70:b8:4c:1c:42:e9:87:13: 47:fa:1d:8c:97:97:c8:55:32:57:b6:a2:08:aa:59: 3b:db:ad:19:6e:db:ce:7c:66:b9:e7:3e:09:b7:9e: 6c:21:86:a2:c5:9e:49:65:07:38:7c:5f:8c:9e:06: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:96:84:BC:00:F4:D2:7F:14:AC:3C:BD:E0:ED:2B:61:F2:CB:75 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b4:8b:bd:ed:e8:7c:f1:82:2c:ac:fb:08:38:44:4b:00:49: d3:70:9f:85:c5:fc:e0:5f:c3:3a:66:8a:6e:2d:dd:c8:c5:99: 3e:90:16:50:bb:9e:d8:72:61:b8:8d:73:a3:d2:07:e1:b2:ee: 56:b1:7c:79:ed:94:48:ce:15:5b:b4:6d:76:7a:8f:16:d9:58: 03:8b:4f:aa:e4:51:3e:26:ad:ae:ec:3d:cb:ac:2a:e4:cc:01: cb:09:2f:e3:55:36:c5:1d:95:49:6a:bd:97:23:ed:43:79:d8: f6:fb:38:f0:62:86:11:2e:85:cc:b8:9f:36:b8:f5:90:7b:48: 6d:05:d5:6b:b6:78:f3:87:2a:08:b7:0b:77:a0:90:b1:d0:13: d1:f5:9c:5c:de:79:87:db:64:73:88:f3:8e:23:46:8d:a5:ca: b6:43:98:e9:48:aa:b1:30:dc:27:49:a8:d5:5b:e9:ce:08:61: 59:d1:b0:72:1d:66:be:01:6d:32:b7:e0:a1:94:2e:e0:e7:b6: de:4b:ef:1d:2a:d5:a9:6b:8c:07:75:63:59:7a:e4:94:0c:28: b4:09:af:84:5c:da:6a:fa:91:e7:3f:16:04:77:9c:b3:6e:68: 83:34:96:22:c5:94:1e:4b:2b:89:a8:d9:ef:2d:5a:96:04:ea: cc:e7:f2:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceyPIBfQIzi4CyZoi0FcHhNA5EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTExMDQwMjQ2MzlaFw0yNTExMDcwODEwMzlaMDMxMTAvBgNV BAMTKDI5ODc5Njg0QkMwMEY0RDI3RjE0QUMzQ0JERTBFRDJCNjFGMkNCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ZfMvj81gyG33N5DdWbVanAu3 GsICeTrw9OmtonxEwr8Dpf74wgZejzWF1Z/RpkSJB4+M/6jjUVf+EMFTHaGexHDl 9k1axXt1i5KI1niKGmJpo2yb5PfoCfadIeGlKn9LOUk1gs+2SRpr3yiS93Opyzg3 zXsTMdlH82FOD/PW+2C0Kbc7a7S3D9DQEyEojIClNcnHDTlsq7VfsYbr4XCCkwI7 qJWYq5hqsAOYT1EmZswfZyqEb+uDmjfvkD5KQJomRFyXdrljOrhwuEwcQumHE0f6 HYyXl8hVMle2ogiqWTvbrRlu2858ZrnnPgm3nmwhhqLFnkllBzh8X4yeBjV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYeWhLwA9NJ/FKw8veDtK2Hyy3UwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW0i73t6Hzxgiys+wg4REsASdNwn4XF/OBf wzpmim4t3cjFmT6QFlC7nthyYbiNc6PSB+Gy7laxfHntlEjOFVu0bXZ6jxbZWAOL T6rkUT4mra7sPcusKuTMAcsJL+NVNsUdlUlqvZcj7UN52Pb7OPBihhEuhcy4nza4 9ZB7SG0F1Wu2ePOHKgi3C3egkLHQE9H1nFzeeYfbZHOI844jRo2lyrZDmOlIqrEw 3CdJqNVb6c4IYVnRsHIdZr4BbTK34KGULuDntt5L7x0q1alrjAd1Y1l65JQMKLQJ r4Rc2mr6kec/FgR3nLNuaIM0liLFlB5LK4mo2e8tWpYE6szn8v4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:30 2025 by rpki-client