$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: lHaylkL4DxNQFKHInmwYgIsdUG+Yk7FeseaxBKl4ziM= Subject key identifier: 58:E7:D8:C1:D5:53:CD:77:D6:C9:09:59:D2:4E:EE:F2:26:CB:60:80 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 67EE138255F89D9200A0ADB19C46A17887D34F0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 0527 Signing time: Tue 04 Nov 2025 01:52:10 +0000 Manifest this update: Tue 04 Nov 2025 01:47:10 +0000 Manifest next update: Fri 07 Nov 2025 09:10:10 +0000 Files and hashes: 1: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=) 2: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: 7jZ9WwpObj1iV2yaCFGN48M2JFDdWWnvRvoPQDamqN0=) 3: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=) 4: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=) 5: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=) 7: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ee:13:82:55:f8:9d:92:00:a0:ad:b1:9c:46:a1:78:87:d3:4f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Nov 4 01:47:10 2025 GMT Not After : Nov 7 09:10:10 2025 GMT Subject: CN=58E7D8C1D553CD77D6C90959D24EEEF226CB6080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:38:02:4a:08:29:79:89:db:62:02:14:52: 4b:6b:25:0b:20:07:a0:bb:98:75:d7:21:28:f4:4f: 73:47:3d:5b:d9:f0:57:40:d4:87:84:74:27:c9:2e: 05:f6:50:f5:9e:46:de:72:8f:01:9d:22:ce:7e:2a: bf:f1:f2:3b:bf:7d:06:6e:36:36:d5:fc:09:5b:bb: e9:9d:8a:b5:8c:d9:29:ff:5e:21:04:bc:78:f4:e1: 19:9a:d3:33:46:44:e6:65:ea:90:59:aa:f0:2b:2a: 55:27:58:ea:c5:6f:91:3a:d1:73:c2:85:a8:09:24: 4a:20:6e:0e:ee:f1:84:b9:f9:b6:6f:26:b3:59:d1: 18:30:20:08:4b:91:52:ff:f0:36:8d:4c:46:88:a1: a8:4e:5e:f0:8f:54:9a:ca:c9:aa:cd:f4:cb:cf:16: 1a:51:fe:31:27:e4:1f:75:2c:6b:a9:1d:ad:36:e5: c3:7a:63:6f:9b:ec:1c:d8:22:a7:37:f2:f5:91:26: 11:03:93:12:cf:a5:f3:d6:af:e5:3e:11:04:4c:47: ef:71:2f:61:c4:e6:26:f4:85:ef:8f:c8:a1:21:32: a3:1f:51:6f:79:54:dc:b3:c3:45:82:b8:4e:14:a1: bc:ff:e7:b4:09:d3:4c:05:65:c1:cd:f6:5d:ea:aa: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E7:D8:C1:D5:53:CD:77:D6:C9:09:59:D2:4E:EE:F2:26:CB:60:80 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:c5:0a:97:10:da:6a:98:62:9c:3b:ec:d2:ff:af:3f:ff: 7b:93:47:aa:9d:6a:0f:98:31:bf:24:67:ac:32:b1:86:8d:e9: 1e:8e:f1:ba:a4:01:df:08:c2:7e:a0:b1:e0:28:78:30:f0:85: ce:47:22:ed:77:95:a9:0e:8d:0b:74:c1:ba:61:e0:cd:a5:43: d2:f3:0f:55:3b:2b:fa:cd:be:68:49:65:98:d2:4f:7d:7d:70: 9f:12:8e:4c:de:92:35:27:7e:c5:7e:e6:27:28:2a:cb:ad:a6: 6b:f6:02:df:cd:c3:7d:8d:1d:14:6e:fa:66:ac:2b:26:9a:f6: d2:ac:e4:41:a6:5a:e0:b1:ae:9a:e2:ff:c3:50:c4:1a:ec:86: d4:25:db:8e:96:c4:75:6f:d9:66:d9:92:c8:af:2b:21:01:31: 87:ab:41:8c:8a:b3:ac:a0:e8:5f:cf:5c:49:ae:27:7e:45:8a: b1:25:a5:6f:d2:34:78:3d:60:c3:11:39:17:8f:b2:48:09:d0: 7d:24:87:a3:bd:e1:dc:93:10:4c:ec:c0:6b:fb:5d:52:11:76: 96:2d:a9:86:e7:1f:2e:9f:e0:3f:65:9c:5a:49:35:46:21:0a: dd:69:df:6d:ef:82:4d:6f:22:fe:d9:ce:52:b6:28:37:94:f8: 84:57:a5:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+4TglX4nZIAoK2xnEaheIfTTw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTExMDQwMTQ3MTBaFw0yNTExMDcwOTEwMTBaMDMxMTAvBgNV BAMTKDU4RTdEOEMxRDU1M0NENzdENkM5MDk1OUQyNEVFRUYyMjZDQjYwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ODgCSggpeYnbYgIUUktrJQsg B6C7mHXXISj0T3NHPVvZ8FdA1IeEdCfJLgX2UPWeRt5yjwGdIs5+Kr/x8ju/fQZu NjbV/Albu+mdirWM2Sn/XiEEvHj04Rma0zNGROZl6pBZqvArKlUnWOrFb5E60XPC hagJJEogbg7u8YS5+bZvJrNZ0RgwIAhLkVL/8DaNTEaIoahOXvCPVJrKyarN9MvP FhpR/jEn5B91LGupHa025cN6Y2+b7BzYIqc38vWRJhEDkxLPpfPWr+U+EQRMR+9x L2HE5ib0he+PyKEhMqMfUW95VNyzw0WCuE4Uobz/57QJ00wFZcHN9l3qqgqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWOfYwdVTzXfWyQlZ0k7u8ibLYIAwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEArxQqXENpqmGKcO+zS/68//3uTR6qdag+Y Mb8kZ6wysYaN6R6O8bqkAd8Iwn6gseAoeDDwhc5HIu13lakOjQt0wbph4M2lQ9Lz D1U7K/rNvmhJZZjST319cJ8SjkzekjUnfsV+5icoKsutpmv2At/Nw32NHRRu+mas Kyaa9tKs5EGmWuCxrpri/8NQxBrshtQl246WxHVv2WbZksivKyEBMYerQYyKs6yg 6F/PXEmuJ35FirElpW/SNHg9YMMRORePskgJ0H0kh6O94dyTEEzswGv7XVIRdpYt qYbnHy6f4D9lnFpJNUYhCt1p323vgk1vIv7ZzlK2KDeU+IRXpZc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:49 2025 by rpki-client