$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: 4qqYX6W4sxOR1MmoUTtBJ3Wbmxx73DD6cGbdXle/3X8= Subject key identifier: 9C:59:C8:D8:AA:6D:3D:82:06:F9:20:C4:93:3A:B2:E3:6D:F6:DC:7E Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 4511CF3C9B7694037A864B29089F07733BA96BEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 0104 Signing time: Mon 03 Nov 2025 16:31:03 +0000 Manifest this update: Mon 03 Nov 2025 16:26:03 +0000 Manifest next update: Thu 06 Nov 2025 19:25:03 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 2: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: 1HAQzCr+0LDPPAnSu6mVrRDStBjmM2tzzEdKVzbZTuk=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:11:cf:3c:9b:76:94:03:7a:86:4b:29:08:9f:07:73:3b:a9:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Nov 3 16:26:03 2025 GMT Not After : Nov 6 19:25:03 2025 GMT Subject: CN=9C59C8D8AA6D3D8206F920C4933AB2E36DF6DC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:76:9d:80:71:27:a0:e8:74:e2:b9:bb:83: 75:aa:af:70:25:35:7c:41:0f:0e:0c:99:50:3b:c8: 5f:1c:a2:13:79:1d:c1:f1:b2:04:b0:62:9d:39:d3: e9:5f:0e:39:54:41:2a:42:c9:34:d5:88:b1:c2:aa: 49:48:d9:0d:07:ab:0e:1d:c8:a1:e0:ea:d6:a6:27: 7f:50:ce:2e:18:31:2d:b2:fe:19:8a:61:0c:20:59: 40:69:6c:22:df:0f:81:66:ea:bf:00:56:5d:87:23: 52:7f:f7:d8:11:c3:49:f3:33:09:19:9b:6d:64:b1: 33:92:81:e0:1e:6c:5b:37:27:02:42:30:7c:ed:95: 82:51:b9:66:11:f7:3c:48:4f:e8:21:b4:ca:25:d9: 46:f3:26:8e:0a:42:01:23:ca:25:4d:14:e0:e8:b5: ca:e2:79:d9:36:3f:8b:e7:eb:18:30:fd:82:a9:19: 90:23:2c:05:69:72:30:09:8c:d9:30:78:bd:8e:b3: 13:83:e1:36:c6:60:75:81:b3:99:ec:0d:ae:cf:a6: d3:f2:ae:b4:ca:10:c6:6f:25:e2:18:48:45:6e:0d: 87:a6:7a:c3:97:a1:aa:1f:33:df:dc:19:27:fe:bd: 00:d7:06:aa:fb:d4:90:37:3c:a3:fe:a3:5e:69:1c: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:59:C8:D8:AA:6D:3D:82:06:F9:20:C4:93:3A:B2:E3:6D:F6:DC:7E X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:bf:c5:aa:f0:d4:06:8c:cc:25:8f:49:39:4f:3b:99:6b: 69:51:cc:b9:ce:70:8d:6f:17:a6:37:26:3b:33:46:e8:d3:e5: ec:2f:86:d8:12:94:76:81:f6:6b:30:4c:19:74:d1:80:a9:bd: 8c:38:61:39:ed:b5:b7:2f:7b:5d:00:63:5e:f8:88:0e:aa:93: 0b:50:cb:2a:b2:4c:4f:0e:20:5d:f3:6b:55:8c:e0:a7:69:fc: 2c:b9:9d:bf:1c:20:94:dc:f4:bf:2f:ad:1d:2e:93:2d:13:f6: fa:0d:e0:d6:c1:ee:f9:7d:32:ed:82:89:57:7b:a3:40:67:04: 9e:45:ec:a5:10:10:d5:63:aa:67:37:c4:a5:90:f1:65:f5:ad: ad:83:ad:52:81:7c:91:b4:1b:51:21:be:6d:5d:3b:f6:86:b4: f1:f6:46:7b:53:02:65:08:61:05:17:ff:6b:23:d1:b5:3c:3a: 5d:16:db:dd:96:c8:de:fa:48:b9:10:62:a0:bf:8a:dd:46:bd: 5f:91:29:3c:a2:2b:5a:60:6f:22:ba:26:29:ce:b0:9c:f1:be: ae:dd:7d:9e:7c:16:3a:39:67:f6:3a:d7:35:c5:30:77:c2:96: fd:35:f7:37:a0:d7:b1:aa:0b:88:e8:16:0a:1d:5d:ee:d3:42: cc:71:96:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRHPPJt2lAN6hkspCJ8Hczupa+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTExMDMxNjI2MDNaFw0yNTExMDYxOTI1MDNaMDMxMTAvBgNV BAMTKDlDNTlDOEQ4QUE2RDNEODIwNkY5MjBDNDkzM0FCMkUzNkRGNkRDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+3adgHEnoOh04rm7g3Wqr3Al NXxBDw4MmVA7yF8cohN5HcHxsgSwYp050+lfDjlUQSpCyTTViLHCqklI2Q0Hqw4d yKHg6tamJ39Qzi4YMS2y/hmKYQwgWUBpbCLfD4Fm6r8AVl2HI1J/99gRw0nzMwkZ m21ksTOSgeAebFs3JwJCMHztlYJRuWYR9zxIT+ghtMol2UbzJo4KQgEjyiVNFODo tcriedk2P4vn6xgw/YKpGZAjLAVpcjAJjNkweL2OsxOD4TbGYHWBs5nsDa7PptPy rrTKEMZvJeIYSEVuDYemesOXoaofM9/cGSf+vQDXBqr71JA3PKP+o15pHKAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFnI2KptPYIG+SDEkzqy42323H4wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDHv8Wq8NQGjMwlj0k5TzuZa2lRzLnOcI1v F6Y3JjszRujT5ewvhtgSlHaB9mswTBl00YCpvYw4YTnttbcve10AY174iA6qkwtQ yyqyTE8OIF3za1WM4Kdp/Cy5nb8cIJTc9L8vrR0uky0T9voN4NbB7vl9Mu2CiVd7 o0BnBJ5F7KUQENVjqmc3xKWQ8WX1ra2DrVKBfJG0G1Ehvm1dO/aGtPH2RntTAmUI YQUX/2sj0bU8Ol0W292WyN76SLkQYqC/it1GvV+RKTyiK1pgbyK6JinOsJzxvq7d fZ58Fjo5Z/Y61zXFMHfClv019zeg17GqC4joFgodXe7TQsxxlno= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:48 2025 by rpki-client