$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: Sm4L7JR8fwdvbQdIxKpwYZpw/SepEZ1i0U1SAJTatdA= Subject key identifier: 1C:7D:5A:91:84:00:FB:83:8D:10:EB:1E:42:36:2F:3F:E9:B6:B7:69 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 12F98794DA0F011A678E4ED3A99535A4A42B584C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02B0 Signing time: Tue 04 Nov 2025 13:42:10 +0000 Manifest this update: Tue 04 Nov 2025 13:37:10 +0000 Manifest next update: Fri 07 Nov 2025 15:39:10 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: yjcpm0Y3mlGyaY2P7cSgmYomdBGW0oapSmxDQBYPTjw=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f9:87:94:da:0f:01:1a:67:8e:4e:d3:a9:95:35:a4:a4:2b:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Nov 4 13:37:10 2025 GMT Not After : Nov 7 15:39:10 2025 GMT Subject: CN=1C7D5A918400FB838D10EB1E42362F3FE9B6B769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:1b:fa:ad:68:99:07:db:be:92:fe:16:93: e7:db:76:ec:ab:05:1e:ea:af:b3:10:68:9c:9b:e8: d6:7f:1c:eb:13:a8:31:e7:a4:c5:fb:2d:73:00:8e: d8:ad:90:61:af:d6:a4:80:cc:32:24:37:4b:8e:1f: ae:d0:db:fd:d9:e1:7d:60:15:58:e5:1d:6a:50:dc: d0:32:09:b4:57:d8:24:6a:c7:e9:e5:3b:fd:e0:0a: 18:05:7c:c4:c3:9a:12:10:aa:cd:e0:1a:d9:b1:f5: ee:a8:58:a8:12:c4:62:db:0f:89:e0:64:2f:0b:b0: a6:1f:84:05:71:05:05:9a:2a:e5:31:43:6e:72:3e: bf:e5:e5:b7:53:03:9f:f0:eb:86:b9:71:2c:72:b7: e0:88:54:30:a8:fa:a1:51:c4:26:f4:c4:2d:d6:e8: 4b:90:00:fd:56:f5:c0:c8:52:a2:63:81:93:ee:92: aa:5a:5a:c3:24:1c:83:be:d7:4d:e3:1b:f6:f1:d3: 31:2c:18:ab:c1:19:ec:c1:32:31:8b:6c:57:a1:5d: 2e:46:b8:20:49:2f:4c:21:df:c2:bb:eb:cd:10:ed: 4b:a8:c1:a4:cc:a7:44:2c:4d:9f:ae:47:bc:eb:85: 99:88:ab:74:51:95:34:ab:10:44:86:a3:86:71:1c: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:5A:91:84:00:FB:83:8D:10:EB:1E:42:36:2F:3F:E9:B6:B7:69 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0e:25:e2:98:99:6c:d7:41:10:9c:24:43:ff:50:81:3b:00: 97:2a:89:21:cb:5c:69:fe:b5:c7:dc:63:2e:ed:2e:43:49:eb: 1c:47:06:ce:59:61:d3:f9:b9:a0:00:14:35:6f:f3:96:de:88: a3:6c:96:d9:0c:82:35:dd:cd:12:59:64:8b:f6:35:bd:c6:8d: 5d:02:3e:3a:a5:94:dc:8c:da:8f:1d:96:d1:b6:02:32:94:28: 18:fe:86:a2:56:7e:ea:e0:3d:98:12:df:40:1d:db:3b:dd:75: 00:86:2e:4f:a6:87:38:6d:d5:78:a9:31:a1:e0:5b:91:cb:cf: 98:91:b5:c8:29:71:7e:b1:c6:49:51:76:3e:be:9a:8a:ea:e4: a8:fc:c4:26:3a:a9:7d:c8:2f:fd:61:d9:ea:38:68:6f:00:69: e5:22:35:73:ea:c3:eb:aa:a7:70:42:41:41:5d:a9:76:5d:0e: d0:12:7f:10:2d:77:fd:86:fa:32:2e:ce:54:b7:c6:2e:8c:84: 9b:7b:85:3b:8d:d5:55:aa:13:ce:2c:c3:b1:c4:b1:6d:be:f6: d9:25:9e:2a:58:6f:8f:06:0e:39:51:f3:cf:d8:dc:92:73:6c: fe:03:fb:32:c2:55:43:f4:19:90:8b:51:c4:2b:5b:fb:73:d6: 23:8d:9b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvmHlNoPARpnjk7TqZU1pKQrWEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTExMDQxMzM3MTBaFw0yNTExMDcxNTM5MTBaMDMxMTAvBgNV BAMTKDFDN0Q1QTkxODQwMEZCODM4RDEwRUIxRTQyMzYyRjNGRTlCNkI3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPBv6rWiZB9u+kv4Wk+fbduyr BR7qr7MQaJyb6NZ/HOsTqDHnpMX7LXMAjtitkGGv1qSAzDIkN0uOH67Q2/3Z4X1g FVjlHWpQ3NAyCbRX2CRqx+nlO/3gChgFfMTDmhIQqs3gGtmx9e6oWKgSxGLbD4ng ZC8LsKYfhAVxBQWaKuUxQ25yPr/l5bdTA5/w64a5cSxyt+CIVDCo+qFRxCb0xC3W 6EuQAP1W9cDIUqJjgZPukqpaWsMkHIO+103jG/bx0zEsGKvBGezBMjGLbFehXS5G uCBJL0wh38K7680Q7UuowaTMp0QsTZ+uR7zrhZmIq3RRlTSrEESGo4ZxHGFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHH1akYQA+4ONEOseQjYvP+m2t2kwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYOJeKYmWzXQRCcJEP/UIE7AJcqiSHLXGn+ tcfcYy7tLkNJ6xxHBs5ZYdP5uaAAFDVv85beiKNsltkMgjXdzRJZZIv2Nb3GjV0C PjqllNyM2o8dltG2AjKUKBj+hqJWfurgPZgS30Ad2zvddQCGLk+mhzht1XipMaHg W5HLz5iRtcgpcX6xxklRdj6+morq5Kj8xCY6qX3IL/1h2eo4aG8AaeUiNXPqw+uq p3BCQUFdqXZdDtASfxAtd/2G+jIuzlS3xi6MhJt7hTuN1VWqE84sw7HEsW2+9tkl nipYb48GDjlR88/Y3JJzbP4D+zLCVUP0GZCLUcQrW/tz1iONm4A= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:02 2025 by rpki-client