
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
File: F137C794398E5F88909A244EC978EA476CCF76CC.mft (raw, json)
Hash identifier: W1TFeGV92OOzgX35DajV1XksilgriiOCc/XPvbQSjg0=
Subject key identifier: 28:32:35:7D:E8:16:04:93:1D:F0:2D:86:6C:84:01:7D:B8:B7:71:6B
Authority key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC
Certificate issuer: /CN=F137C794398E5F88909A244EC978EA476CCF76CC
Certificate serial: 272FADFD8C011D0CE9492921826BD3B1F5DD46E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
Manifest number: 01D5
Signing time: Mon 03 Nov 2025 17:01:56 +0000
Manifest this update: Mon 03 Nov 2025 16:56:56 +0000
Manifest next update: Fri 07 Nov 2025 00:39:56 +0000
Files and hashes: 1: 3130332e35352e3232342e302f32332d3234203d3e20313530343832.roa (hash: bYXObqHIEuwgYntbLAkXiZDYp6ozXDo0Cjhn/uYq1JU=)
2: F137C794398E5F88909A244EC978EA476CCF76CC.crl (hash: BrvEpEqPakmkIBcSvezRzUeJ8al/f00/D4IAVL+QYdQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl
rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2f:ad:fd:8c:01:1d:0c:e9:49:29:21:82:6b:d3:b1:f5:dd:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F137C794398E5F88909A244EC978EA476CCF76CC
Validity
Not Before: Nov 3 16:56:56 2025 GMT
Not After : Nov 7 00:39:56 2025 GMT
Subject: CN=2832357DE81604931DF02D866C84017DB8B7716B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:b9:a7:20:e5:b3:f8:6e:aa:4d:27:b3:4b:
30:e2:e4:1e:3c:15:0a:d2:43:99:73:e8:8b:4f:e8:
38:03:e5:25:55:e1:30:14:50:ba:b3:b9:3d:4e:6b:
8d:c1:55:3b:8b:31:60:1d:73:af:2b:b0:b9:65:06:
70:3f:c1:60:39:6e:29:3f:1c:d0:2e:f2:15:82:fe:
51:4a:a7:ab:3c:50:ab:d8:d9:b2:42:c3:4b:d0:75:
37:a7:78:9c:36:d3:7a:ef:59:ba:0b:d9:03:cd:2a:
d1:47:34:9b:b0:b3:0b:10:c4:a3:48:52:87:d8:72:
cd:8e:ff:a0:3c:48:f2:0d:3b:64:1a:97:6c:93:43:
a6:d6:32:46:a8:f0:b9:2b:d0:d0:47:0a:7e:16:81:
e4:09:40:63:3f:f8:88:22:57:5a:c5:5c:7d:7d:a3:
78:10:bb:eb:67:e1:39:ad:9c:31:7c:72:aa:00:99:
96:0d:6c:34:b0:17:f2:dd:8a:d1:14:3e:4f:66:a7:
14:82:f7:4b:88:2d:67:41:a3:a9:78:79:e9:83:5f:
2b:c8:76:6b:9d:8a:61:47:1a:50:55:d1:51:ce:c3:
49:37:dc:c0:64:37:a3:8c:a7:4e:6f:56:36:87:68:
f0:58:21:b5:cd:52:60:9d:61:6c:f1:78:25:86:59:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:35:7D:E8:16:04:93:1D:F0:2D:86:6C:84:01:7D:B8:B7:71:6B
X509v3 Authority Key Identifier:
keyid:F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:03:c5:fb:88:82:3e:27:43:f2:c7:90:56:f8:10:97:9d:ec:
91:8f:72:f8:fb:58:21:15:c8:68:11:34:4b:ac:b4:89:98:a6:
56:b1:61:b5:d4:db:44:11:18:7d:06:d2:a1:d7:eb:1c:72:d1:
31:5c:22:71:07:4d:8f:02:25:65:78:3d:4b:22:99:0f:13:cf:
7b:88:3c:67:49:63:8f:a0:0d:96:9e:fb:70:7a:30:15:21:32:
04:ee:09:b7:90:01:aa:77:dd:75:d8:58:26:bc:44:59:eb:23:
0b:7b:06:2c:b3:5d:68:81:c7:76:af:59:d7:9f:f5:7c:da:ba:
88:d9:86:f7:c8:6c:73:b5:06:ee:aa:6e:6f:2e:78:ff:d2:fb:
af:c3:3b:f4:86:6f:db:10:a3:3b:d0:04:f1:5a:84:b3:18:1d:
5f:e1:6a:99:43:fe:1b:e3:e2:04:5a:f4:01:d3:23:12:93:02:
28:9d:2f:0a:06:52:e2:4a:81:fc:d1:9f:e2:8b:3a:fc:3b:ff:
c9:9f:3c:eb:68:50:76:7a:bd:51:45:8d:2d:f4:f5:94:96:a1:
83:ea:a1:13:83:7a:85:6d:cc:e8:82:ca:05:ff:c7:15:d2:80:
1c:27:86:3c:0c:50:9d:9c:10:9e:fe:4d:a7:de:6d:f9:5d:15:
04:57:62:9b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJy+t/YwBHQzpSSkhgmvTsfXdRuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2
Q0NGNzZDQzAeFw0yNTExMDMxNjU2NTZaFw0yNTExMDcwMDM5NTZaMDMxMTAvBgNV
BAMTKDI4MzIzNTdERTgxNjA0OTMxREYwMkQ4NjZDODQwMTdEQjhCNzcxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rLmnIOWz+G6qTSezSzDi5B48
FQrSQ5lz6ItP6DgD5SVV4TAUULqzuT1Oa43BVTuLMWAdc68rsLllBnA/wWA5bik/
HNAu8hWC/lFKp6s8UKvY2bJCw0vQdTeneJw203rvWboL2QPNKtFHNJuwswsQxKNI
UofYcs2O/6A8SPINO2Qal2yTQ6bWMkao8Lkr0NBHCn4WgeQJQGM/+IgiV1rFXH19
o3gQu+tn4TmtnDF8cqoAmZYNbDSwF/LditEUPk9mpxSC90uILWdBo6l4eemDXyvI
dmudimFHGlBV0VHOw0k33MBkN6OMp05vVjaHaPBYIbXNUmCdYWzxeCWGWR1LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKDI1fegWBJMd8C2GbIQBfbi3cWswHwYDVR0j
BBgwFoAU8TfHlDmOX4iQmiROyXjqR2zPdswwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMC9GMTM3Qzc5NDM5
OEU1Rjg4OTA5QTI0NEVDOTc4RUE0NzZDQ0Y3NkNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2Q0NG
NzZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmMmM3MzMtZDY3Zi00ODEzLWI4
ZjctMDU4ZDk1YTA5NTg3LzAvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVB
NDc2Q0NGNzZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJMDxfuIgj4nQ/LHkFb4EJed7JGPcvj7WCEV
yGgRNEustImYplaxYbXU20QRGH0G0qHX6xxy0TFcInEHTY8CJWV4PUsimQ8Tz3uI
PGdJY4+gDZae+3B6MBUhMgTuCbeQAap33XXYWCa8RFnrIwt7BiyzXWiBx3avWdef
9XzauojZhvfIbHO1Bu6qbm8ueP/S+6/DO/SGb9sQozvQBPFahLMYHV/haplD/hvj
4gRa9AHTIxKTAiidLwoGUuJKgfzRn+KLOvw7/8mfPOtoUHZ6vVFFjS309ZSWoYPq
oRODeoVtzOiCygX/xxXSgBwnhjwMUJ2cEJ7+TafebfldFQRXYps=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:05 2025 by rpki-client