$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: 6euJNgG6jaUO/Faog7EFC7tK7LqBPTjkX6AkYXkE/CU= Subject key identifier: F8:EA:14:DC:2E:9A:DC:C8:B9:10:F5:67:AC:55:8D:C9:BE:F9:4C:00 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 25A72EF1D8F00ECF32B363DAECBB9AACDBB09903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: F1 Signing time: Tue 04 Nov 2025 02:01:13 +0000 Manifest this update: Tue 04 Nov 2025 01:56:13 +0000 Manifest next update: Fri 07 Nov 2025 08:26:13 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: +N2R7ndl941gDMHuyAtjFE9FKIjIIDMobP5G3LLx7vI=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a7:2e:f1:d8:f0:0e:cf:32:b3:63:da:ec:bb:9a:ac:db:b0:99:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Nov 4 01:56:13 2025 GMT Not After : Nov 7 08:26:13 2025 GMT Subject: CN=F8EA14DC2E9ADCC8B910F567AC558DC9BEF94C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:82:a3:c8:72:b6:51:5f:c1:61:4a:1a:bb: 6b:9a:53:34:87:46:c3:5f:43:e1:3b:f3:6f:49:44: 26:76:b4:78:86:51:be:d3:1d:31:9d:cc:07:73:02: 83:80:e6:e2:54:af:b0:98:24:32:56:9e:ed:82:e5: 4d:f5:31:73:1e:63:27:3c:fc:52:62:bd:31:ad:f3: c7:8c:d8:b0:b9:02:1b:e2:f4:9c:c1:2b:59:49:fb: fd:ea:d2:9a:35:b6:41:4a:61:14:94:e4:11:74:d5: e5:35:80:23:26:20:27:34:b7:b4:31:de:f1:9a:36: 7e:b2:89:85:38:2b:32:f9:6f:fb:21:b2:e2:29:4f: c3:3d:4d:73:db:b6:2f:4e:d6:b1:10:4d:ee:7e:90: 3a:7c:5e:fb:c4:f6:eb:dc:e0:4a:27:74:bc:9e:54: 8e:05:14:ff:1b:7b:5b:99:44:17:40:64:12:cb:da: f5:14:ef:14:2a:bb:52:f4:a5:47:3b:97:e2:4f:cb: 8f:03:05:33:f5:5f:99:aa:05:2f:c6:c4:a3:2e:d6: 7d:c8:f1:d7:43:8a:08:c7:b9:ed:0f:8c:f1:4b:17: a5:6c:50:7d:d9:c4:a5:88:61:ec:6a:49:25:91:ba: 64:7d:28:5f:43:b0:06:4c:76:01:e2:55:8c:52:c6: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EA:14:DC:2E:9A:DC:C8:B9:10:F5:67:AC:55:8D:C9:BE:F9:4C:00 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:06:4e:ec:53:34:f5:16:18:94:b9:b6:ce:32:90:5a:6c:2f: 4b:64:a3:ea:8f:a7:f7:4d:d2:37:10:1b:e9:8a:22:52:cc:6d: 3d:7b:b0:01:d7:8f:47:19:51:fb:7f:19:b6:1a:69:e7:99:94: c1:7b:b0:f4:c4:6e:f3:8f:af:3e:48:ce:48:b9:26:9c:d9:c4: b3:d6:ab:7c:e1:bc:0c:d1:d9:70:6d:f9:c5:1d:ff:3a:dc:26: 0b:fe:be:fb:b8:22:9c:a2:69:68:13:c0:e2:33:f6:64:38:55: 85:94:cb:91:fc:c9:a2:83:40:20:17:7e:20:fd:4e:ed:1e:31: 69:fb:00:04:ba:1a:bc:77:fc:e3:ad:e1:31:4b:4f:4a:3e:c6: 6c:ee:a1:4b:a8:9f:bf:e8:52:24:e3:0c:92:08:f8:33:d5:84: bc:35:5d:06:4c:4a:ac:48:6a:d3:82:4d:35:91:3c:6a:d5:f5: 35:b6:fd:5b:53:a0:c1:d5:95:05:11:87:d8:a4:ab:23:96:ec: df:81:35:0c:eb:9a:a3:39:91:c3:2d:49:e4:b5:9b:7d:b8:7a: 97:9c:9f:22:c2:fe:ec:af:0d:7d:2a:65:c4:ca:5e:46:06:dd: 49:1f:34:7c:eb:dc:81:2e:5f:10:74:70:76:90:f3:3e:b7:15: 6d:66:75:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJacu8djwDs8ys2Pa7LuarNuwmQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTExMDQwMTU2MTNaFw0yNTExMDcwODI2MTNaMDMxMTAvBgNV BAMTKEY4RUExNERDMkU5QURDQzhCOTEwRjU2N0FDNTU4REM5QkVGOTRDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kYKjyHK2UV/BYUoau2uaUzSH RsNfQ+E7829JRCZ2tHiGUb7THTGdzAdzAoOA5uJUr7CYJDJWnu2C5U31MXMeYyc8 /FJivTGt88eM2LC5Ahvi9JzBK1lJ+/3q0po1tkFKYRSU5BF01eU1gCMmICc0t7Qx 3vGaNn6yiYU4KzL5b/shsuIpT8M9TXPbti9O1rEQTe5+kDp8XvvE9uvc4EondLye VI4FFP8be1uZRBdAZBLL2vUU7xQqu1L0pUc7l+JPy48DBTP1X5mqBS/GxKMu1n3I 8ddDigjHue0PjPFLF6VsUH3ZxKWIYexqSSWRumR9KF9DsAZMdgHiVYxSxirdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OoU3C6a3Mi5EPVnrFWNyb75TAAwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUGTuxTNPUWGJS5ts4ykFpsL0tko+qPp/dN 0jcQG+mKIlLMbT17sAHXj0cZUft/GbYaaeeZlMF7sPTEbvOPrz5Izki5JpzZxLPW q3zhvAzR2XBt+cUd/zrcJgv+vvu4IpyiaWgTwOIz9mQ4VYWUy5H8yaKDQCAXfiD9 Tu0eMWn7AAS6Grx3/OOt4TFLT0o+xmzuoUuon7/oUiTjDJII+DPVhLw1XQZMSqxI atOCTTWRPGrV9TW2/VtToMHVlQURh9ikqyOW7N+BNQzrmqM5kcMtSeS1m324epec nyLC/uyvDX0qZcTKXkYG3UkfNHzr3IEuXxB0cHaQ8z63FW1mdeU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:20:31 2025 by rpki-client