$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft File: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json) Hash identifier: 9n58anskK5cWGB6AwNuDr4/uuA0w/76YrT7nmUABtY8= Subject key identifier: 5D:AF:CD:2C:20:B3:12:AC:C8:02:EF:E2:5F:0D:70:F6:18:0B:FF:9E Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 0794929785CD5B394BC1EE123B748ADCF623D5F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft Manifest number: 0535 Signing time: Tue 04 Nov 2025 10:31:26 +0000 Manifest this update: Tue 04 Nov 2025 10:26:26 +0000 Manifest next update: Fri 07 Nov 2025 11:47:26 +0000 Files and hashes: 1: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=) 2: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=) 3: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=) 4: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=) 5: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=) 6: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=) 7: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=) 8: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: oczKtleOn1xdut8okvs/8HO6XkSbF+VRSz7PxJD1Hyk=) 9: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=) 10: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=) 11: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=) 12: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: RTJdm4ux75KqUxTLd+HL3T2/W81Q6eNxAPEmBwe4d2I=) 13: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=) 14: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=) 15: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=) 16: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=) 17: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:94:92:97:85:cd:5b:39:4b:c1:ee:12:3b:74:8a:dc:f6:23:d5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Nov 4 10:26:26 2025 GMT Not After : Nov 7 11:47:26 2025 GMT Subject: CN=5DAFCD2C20B312ACC802EFE25F0D70F6180BFF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:e0:f0:a8:43:dc:79:3f:40:95:fd:78:7a: 65:9c:27:f6:56:7e:c6:d1:50:da:78:17:75:9e:cc: 26:8b:fc:dd:8b:2e:5a:9a:6d:0f:d8:be:85:3c:69: 7f:53:a8:da:f8:c9:6e:b7:49:2a:f5:be:86:af:43: 92:90:f2:ca:79:2a:f7:7d:91:48:fb:ae:cb:d3:7e: 5b:e3:cc:61:55:75:40:23:d2:5a:0f:1f:02:e0:e6: cd:20:e9:ac:ed:80:2f:e6:59:0b:2b:40:6b:72:9d: 44:82:58:54:c5:92:2d:27:93:df:7f:c2:25:de:c2: 8e:90:37:28:e3:f9:38:c3:67:0b:43:c5:33:88:e7: 71:d0:eb:82:19:c8:c9:a3:03:b9:33:8f:02:d2:8a: ef:e5:58:e3:3c:ba:7c:39:b0:9d:9f:98:51:91:9a: 63:aa:5f:d4:30:22:75:1d:7e:c4:0f:a5:18:80:cb: 96:e0:76:29:07:32:05:2a:e8:63:7c:38:36:67:99: ec:e0:ac:ec:89:0f:fa:1e:e6:b7:a5:71:c1:13:61: b8:15:5c:5f:2a:98:ef:a8:f6:8e:bd:65:09:87:95: b7:20:83:84:33:59:76:91:26:a8:70:75:5f:e5:05: 2b:ad:36:e0:a6:da:12:1a:63:04:f8:e6:08:da:88: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:CD:2C:20:B3:12:AC:C8:02:EF:E2:5F:0D:70:F6:18:0B:FF:9E X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0e:c2:31:e6:7b:2d:ec:5d:60:cc:fd:cf:08:2e:b6:f7:30: 7c:4b:5d:1b:7a:ad:c1:a5:5f:72:05:c3:f8:bc:a8:be:82:08: 72:dd:5c:c2:0f:26:b7:7a:46:b5:e2:d8:02:73:0e:f2:39:02: 02:74:18:61:85:e3:66:14:58:f9:1c:77:16:ac:ec:fb:b9:1f: e2:98:2d:a9:61:fd:8f:1b:8b:db:90:ae:b4:64:01:da:3e:eb: 62:ad:3f:4f:88:8f:bb:3a:82:42:22:24:31:d1:8b:e4:63:c6: 97:2c:d8:1c:f4:2d:78:dd:e5:ed:07:41:31:c0:5f:66:76:4a: 9b:3e:1b:86:70:dc:8d:58:c5:48:c8:47:73:87:3a:9b:91:e0: 91:68:f7:2d:05:70:c0:dc:71:fe:df:5a:47:a5:a2:e7:e2:ff: a9:7d:75:96:09:41:ff:2a:4e:39:64:fd:78:75:f0:5d:a7:47: 7f:a3:e4:68:64:e1:71:91:60:9d:b2:9d:0d:b6:fd:54:c3:4b: b2:be:13:52:cb:ed:d8:53:0d:c4:f8:4e:56:83:0b:04:a5:70: 9c:cb:6e:3e:95:a1:7f:cf:a3:5f:31:5b:7d:6c:57:79:30:36: 40:c1:9a:60:d9:46:73:d0:ac:2d:29:88:11:18:79:28:f8:d7: 93:f7:65:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5SSl4XNWzlLwe4SO3SK3PYj1fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTExMDQxMDI2MjZaFw0yNTExMDcxMTQ3MjZaMDMxMTAvBgNV BAMTKDVEQUZDRDJDMjBCMzEyQUNDODAyRUZFMjVGMEQ3MEY2MTgwQkZGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5T+DwqEPceT9Alf14emWcJ/ZW fsbRUNp4F3WezCaL/N2LLlqabQ/YvoU8aX9TqNr4yW63SSr1voavQ5KQ8sp5Kvd9 kUj7rsvTflvjzGFVdUAj0loPHwLg5s0g6aztgC/mWQsrQGtynUSCWFTFki0nk99/ wiXewo6QNyjj+TjDZwtDxTOI53HQ64IZyMmjA7kzjwLSiu/lWOM8unw5sJ2fmFGR mmOqX9QwInUdfsQPpRiAy5bgdikHMgUq6GN8ODZnmezgrOyJD/oe5relccETYbgV XF8qmO+o9o69ZQmHlbcgg4QzWXaRJqhwdV/lBSutNuCm2hIaYwT45gjaiKXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXa/NLCCzEqzIAu/iXw1w9hgL/54wHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky YjAtYjI5OWZhNzY5YWZhLzAvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzcz MDJBNzJCNTgzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwOwjHmey3sXWDM/c8ILrb3MHxLXRt6rcGl X3IFw/i8qL6CCHLdXMIPJrd6RrXi2AJzDvI5AgJ0GGGF42YUWPkcdxas7Pu5H+KY Lalh/Y8bi9uQrrRkAdo+62KtP0+Ij7s6gkIiJDHRi+Rjxpcs2Bz0LXjd5e0HQTHA X2Z2Sps+G4Zw3I1YxUjIR3OHOpuR4JFo9y0FcMDccf7fWkeloufi/6l9dZYJQf8q Tjlk/Xh18F2nR3+j5Ghk4XGRYJ2ynQ22/VTDS7K+E1LL7dhTDcT4TlaDCwSlcJzL bj6VoX/Po18xW31sV3kwNkDBmmDZRnPQrC0piBEYeSj415P3ZVI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:03 2025 by rpki-client