$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: IMhnNYo94WEJ/iI3qKY7C1jC5tozN+4FPUkQHTRF3mk= Subject key identifier: 62:1C:B3:A6:86:8B:54:E2:A3:AB:19:98:3A:CF:03:0A:9B:7B:E7:25 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 3F8E5C25AEEEC8C5C02E18DB58DCC30603AC0B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 06:01:33 +0000 Manifest this update: Mon 03 Nov 2025 05:56:33 +0000 Manifest next update: Thu 06 Nov 2025 11:57:33 +0000 Files and hashes: 1: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) 2: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: VRaHNIcm8gfDZp9fDbMo24TLxhzXLBScDSucgpY3gWQ=) 3: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8e:5c:25:ae:ee:c8:c5:c0:2e:18:db:58:dc:c3:06:03:ac:0b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Nov 3 05:56:33 2025 GMT Not After : Nov 6 11:57:33 2025 GMT Subject: CN=621CB3A6868B54E2A3AB19983ACF030A9B7BE725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:62:6f:cf:5c:fc:1c:ee:7f:0d:2e:0c:b1: b9:ec:ff:b0:bc:10:b7:c1:8e:d1:84:7b:c6:34:97: 34:92:2f:51:24:46:f1:bc:90:16:c7:1d:85:2c:6c: e6:9d:07:be:4e:f1:7b:57:9d:da:e0:ce:c5:5b:52: 9d:bd:3a:80:69:f0:a0:d8:e8:af:fa:48:3b:47:dd: 78:5f:7a:a1:9e:ea:a8:a1:97:8e:e6:d9:cf:22:7c: 7c:13:b8:7c:be:d4:5a:8e:fc:fd:07:b9:11:49:1c: 13:d5:32:c9:c6:de:76:1b:16:dc:40:3b:a1:e2:96: 12:1e:47:e6:9b:75:b9:5e:f9:e7:75:01:84:df:1f: cf:d9:cf:d0:84:67:12:cf:76:4c:ff:4b:8a:fd:d9: 1e:84:65:e5:b0:dd:7b:8d:80:6d:65:fe:42:8e:3a: 81:57:d8:43:86:4b:f9:86:a9:34:7a:08:8e:1b:4c: 67:56:88:54:8f:d2:b4:08:fa:ba:30:06:da:63:dd: c8:1b:33:e1:d8:f9:88:17:23:94:60:ac:83:82:b8: c1:36:0d:d9:c3:af:65:3c:cf:64:a5:59:1f:09:8b: 06:17:75:52:59:60:5f:b1:b1:ad:b9:da:52:86:05: b0:a9:55:9e:53:33:99:0f:ee:83:00:9d:5c:80:75: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1C:B3:A6:86:8B:54:E2:A3:AB:19:98:3A:CF:03:0A:9B:7B:E7:25 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1c:1f:3a:43:d5:a6:44:62:9f:58:78:d0:7a:60:d1:7a:fa: 30:3f:ea:70:ab:c3:a8:87:15:98:38:af:a3:2c:3d:1f:56:d8: 5c:a3:7b:a4:5c:ac:1a:56:bf:4f:05:8c:7b:37:96:69:64:ef: cf:be:df:e1:11:ed:14:89:f4:ad:1c:d0:6c:35:1e:57:d6:33: f8:66:72:27:73:63:98:c6:ff:43:09:62:39:53:ff:d6:eb:14: 70:21:77:3d:5d:e9:b5:45:b9:ab:23:79:b6:e2:f9:22:95:80: fe:80:cc:59:c7:21:53:93:9c:72:10:74:50:7f:29:ff:b1:01: 2d:d9:e5:1a:2f:a3:22:2f:55:e6:4d:12:a9:1b:e5:13:44:f6: ab:00:b0:47:08:cd:41:9c:a9:45:7a:ef:8f:f2:cc:bc:6c:84: fa:9d:9a:34:81:fb:43:92:b3:87:29:24:e3:0a:7b:d1:ee:30: 58:0f:a5:f9:74:c7:10:1b:5a:0f:ed:86:89:40:25:cd:9a:09: 82:89:7c:38:65:dc:25:ba:7f:a0:4b:57:0f:ff:a2:6b:55:0b: 0a:d2:60:50:bb:a5:89:ba:cb:1c:41:f4:bf:d1:9d:9d:b5:1c: 72:c0:4f:17:3f:b9:2e:1b:53:4f:96:92:40:5d:5f:c9:fc:e6: 7a:75:9e:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP45cJa7uyMXALhjbWNzDBgOsC3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTExMDMwNTU2MzNaFw0yNTExMDYxMTU3MzNaMDMxMTAvBgNV BAMTKDYyMUNCM0E2ODY4QjU0RTJBM0FCMTk5ODNBQ0YwMzBBOUI3QkU3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoyWJvz1z8HO5/DS4Msbns/7C8 ELfBjtGEe8Y0lzSSL1EkRvG8kBbHHYUsbOadB75O8XtXndrgzsVbUp29OoBp8KDY 6K/6SDtH3XhfeqGe6qihl47m2c8ifHwTuHy+1FqO/P0HuRFJHBPVMsnG3nYbFtxA O6HilhIeR+abdble+ed1AYTfH8/Zz9CEZxLPdkz/S4r92R6EZeWw3XuNgG1l/kKO OoFX2EOGS/mGqTR6CI4bTGdWiFSP0rQI+rowBtpj3cgbM+HY+YgXI5RgrIOCuME2 DdnDr2U8z2SlWR8JiwYXdVJZYF+xsa252lKGBbCpVZ5TM5kP7oMAnVyAdYo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhyzpoaLVOKjqxmYOs8DCpt75yUwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMcHzpD1aZEYp9YeNB6YNF6+jA/6nCrw6iH FZg4r6MsPR9W2Fyje6RcrBpWv08FjHs3lmlk78++3+ER7RSJ9K0c0Gw1HlfWM/hm cidzY5jG/0MJYjlT/9brFHAhdz1d6bVFuasjebbi+SKVgP6AzFnHIVOTnHIQdFB/ Kf+xAS3Z5RovoyIvVeZNEqkb5RNE9qsAsEcIzUGcqUV674/yzLxshPqdmjSB+0OS s4cpJOMKe9HuMFgPpfl0xxAbWg/tholAJc2aCYKJfDhl3CW6f6BLVw//omtVCwrS YFC7pYm6yxxB9L/RnZ21HHLATxc/uS4bU0+WkkBdX8n85np1npo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:53 2025 by rpki-client