$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: eEd1FjlHyCxRBpVuLMDaTAfdOhSqvAL8VJ6MhrgPn7c= Subject key identifier: 1D:9D:4B:05:80:57:BF:8B:00:8B:26:9D:64:0E:28:21:14:CD:71:1A Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 466905A7CA8CFB167067054D1A7EC9CC909A9653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01C2 Signing time: Mon 03 Nov 2025 08:01:42 +0000 Manifest this update: Mon 03 Nov 2025 07:56:42 +0000 Manifest next update: Thu 06 Nov 2025 16:04:42 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: GDyuFrgajUjI1vgTn41N+ZMp0Q8GvxKNjkf8hl7QT2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:69:05:a7:ca:8c:fb:16:70:67:05:4d:1a:7e:c9:cc:90:9a:96:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Nov 3 07:56:42 2025 GMT Not After : Nov 6 16:04:42 2025 GMT Subject: CN=1D9D4B058057BF8B008B269D640E282114CD711A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:c8:26:52:f1:e3:94:f7:97:94:f5:76:11: 29:a9:71:4e:98:e9:03:9d:85:80:10:18:74:a1:ce: 74:11:a9:ac:f3:6a:a8:fa:69:d9:f4:aa:6a:10:2f: 6f:ab:4e:bd:9c:91:b7:38:82:ea:54:e5:25:18:d0: fc:28:df:51:d2:01:6a:e2:73:62:65:1b:c9:e1:f9: 0b:e0:b3:5a:1d:11:e2:7d:50:0e:65:46:3b:b6:f7: e2:a9:83:a3:4a:6a:59:ee:d0:2d:6d:07:6f:88:b7: 91:43:af:9b:9b:d6:93:1a:31:0a:7e:0e:cc:3c:65: f7:a1:56:13:f0:96:f5:e3:98:d6:fe:f3:da:32:f1: 1c:b7:bd:d1:b7:1e:20:2e:3a:ff:0b:11:a7:20:59: a0:0f:19:31:cd:86:9e:f3:e6:48:54:d3:cf:26:fd: 55:46:25:f0:52:24:12:23:d8:4e:38:32:ac:6f:e4: 9d:2d:f5:d9:f2:22:b8:4c:51:cf:f1:88:7e:17:8d: da:06:65:16:c3:c7:2f:2c:ee:12:d0:8e:0c:d0:a5: 2f:a1:e7:7f:a9:cd:d7:5a:7a:4e:f0:df:e9:a4:17: 14:f8:57:91:5e:21:0c:30:3c:91:30:2e:8b:68:35: 6f:e8:33:13:b3:93:c2:18:b6:e9:ad:74:93:69:87: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:4B:05:80:57:BF:8B:00:8B:26:9D:64:0E:28:21:14:CD:71:1A X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:09:13:98:43:68:c8:b1:10:59:ef:38:78:cf:28:c5:dd: 7d:8c:00:f7:97:30:db:41:d0:4a:08:f8:d6:48:49:fc:54:18: 6c:c0:02:53:b7:77:8b:29:b4:e2:31:0c:54:8d:bf:8b:1f:26: b1:85:02:2b:ca:0a:50:6d:a0:53:41:dc:b1:e5:2b:ea:e8:8f: ce:29:5f:a9:e5:47:03:52:2f:1c:93:73:b0:77:fe:c2:26:5a: 7c:7e:0b:3b:f2:63:38:81:58:29:1f:2b:b3:ce:73:a5:9f:a0: d9:5e:aa:72:36:75:40:71:e9:cd:ea:d0:01:02:1d:d5:31:62: d9:5d:db:13:4f:ed:fd:84:08:05:5d:36:99:c6:d9:3a:6d:a4: e5:a2:4f:0e:13:bd:f4:03:5a:e8:72:87:30:c2:8a:22:11:1f: 13:71:9e:db:d4:7b:fb:30:d0:3c:46:cf:df:7d:79:88:39:06: 46:8e:48:b7:07:e9:30:06:e8:d5:c9:e5:47:ab:f3:98:78:19: cb:46:49:07:0b:44:a7:4d:3e:93:2a:5f:e4:5b:46:6b:84:6b: 09:0f:08:93:5f:56:9e:aa:78:14:97:82:5b:75:e9:d6:72:e5: 81:e3:b2:5f:d3:a9:62:94:3e:d0:65:61:c3:b1:76:9e:b2:06: 28:70:1d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmkFp8qM+xZwZwVNGn7JzJCallMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTExMDMwNzU2NDJaFw0yNTExMDYxNjA0NDJaMDMxMTAvBgNV BAMTKDFEOUQ0QjA1ODA1N0JGOEIwMDhCMjY5RDY0MEUyODIxMTRDRDcxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yMgmUvHjlPeXlPV2ESmpcU6Y 6QOdhYAQGHShznQRqazzaqj6adn0qmoQL2+rTr2ckbc4gupU5SUY0Pwo31HSAWri c2JlG8nh+Qvgs1odEeJ9UA5lRju29+Kpg6NKalnu0C1tB2+It5FDr5ub1pMaMQp+ Dsw8ZfehVhPwlvXjmNb+89oy8Ry3vdG3HiAuOv8LEacgWaAPGTHNhp7z5khU088m /VVGJfBSJBIj2E44Mqxv5J0t9dnyIrhMUc/xiH4XjdoGZRbDxy8s7hLQjgzQpS+h 53+pzddaek7w3+mkFxT4V5FeIQwwPJEwLotoNW/oMxOzk8IYtumtdJNph3OVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZ1LBYBXv4sAiyadZA4oIRTNcRowHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPsCROYQ2jIsRBZ7zh4zyjF3X2MAPeXMNtB 0EoI+NZISfxUGGzAAlO3d4sptOIxDFSNv4sfJrGFAivKClBtoFNB3LHlK+roj84p X6nlRwNSLxyTc7B3/sImWnx+CzvyYziBWCkfK7POc6WfoNleqnI2dUBx6c3q0AEC HdUxYtld2xNP7f2ECAVdNpnG2TptpOWiTw4TvfQDWuhyhzDCiiIRHxNxntvUe/sw 0DxGz999eYg5BkaOSLcH6TAG6NXJ5Uer85h4GctGSQcLRKdNPpMqX+RbRmuEawkP CJNfVp6qeBSXglt16dZy5YHjsl/TqWKUPtBlYcOxdp6yBihwHSo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:53 2025 by rpki-client