$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: 5tVam0/QJN7/jAlMYjO0Au+NDiSAL1fp6Fck3DSonBU= Subject key identifier: D6:AA:25:29:E0:45:3B:01:C1:0F:F7:15:0E:A9:79:FF:91:6A:BE:8D Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 4A199F2775C760D875A4373276907D0EB6FF3EEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: D9 Signing time: Mon 03 Nov 2025 08:51:01 +0000 Manifest this update: Mon 03 Nov 2025 08:46:01 +0000 Manifest next update: Thu 06 Nov 2025 18:11:01 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: Y+OktfncaPUPJfB1nXuISsFPLwONqpd6FNM1S125K68=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:9f:27:75:c7:60:d8:75:a4:37:32:76:90:7d:0e:b6:ff:3e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Nov 3 08:46:01 2025 GMT Not After : Nov 6 18:11:01 2025 GMT Subject: CN=D6AA2529E0453B01C10FF7150EA979FF916ABE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:b7:ef:79:8a:1a:af:8e:62:6e:45:76:ef: 85:5d:d6:c9:d4:4f:f5:f7:f6:24:67:6e:da:71:51: 17:eb:2c:41:2e:30:2c:5d:51:0b:b1:83:bf:3d:e6: 4f:41:22:61:36:2c:6c:30:8c:1f:58:8f:7b:94:92: 0d:87:5a:36:33:19:8d:fc:42:cf:fe:7c:99:4f:fb: 96:51:d4:c5:e7:89:76:77:2f:d3:04:4a:85:ff:13: 9c:32:bd:f7:7e:86:69:34:f2:00:9d:47:02:be:d5: 4b:43:ce:3f:c0:47:14:bf:38:62:09:ee:8a:c1:03: 14:07:0d:39:b5:bf:75:46:85:2e:1d:f2:b8:29:68: 51:d5:29:0d:0e:ea:ef:64:ee:96:5a:e0:27:95:bb: b8:02:d5:dd:29:9f:ee:c2:22:f2:be:e7:2d:f1:54: 86:59:bf:f6:10:e6:98:eb:d1:72:df:22:1b:c2:65: 79:05:28:d6:a5:dd:ca:12:40:4e:27:60:c4:5d:7d: 2a:1d:a2:da:3c:b7:7b:66:ea:0e:91:18:84:51:9a: e9:7b:63:48:c5:15:6a:7e:bf:d1:21:2d:44:85:1b: bc:ec:f1:0d:15:60:1f:11:df:e9:d1:ab:8d:8e:45: 3c:b1:79:d3:d8:f1:d5:93:0b:db:f7:16:14:1b:fb: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:25:29:E0:45:3B:01:C1:0F:F7:15:0E:A9:79:FF:91:6A:BE:8D X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:10:1c:3c:bd:81:9e:00:6e:e2:2f:40:8d:74:c9:e6:b5:dc: 77:8f:90:c2:d8:d2:9a:8f:1e:9b:42:52:4d:44:eb:40:39:b1: 79:14:e9:bd:6e:11:c4:23:27:2e:e7:9d:00:4a:91:61:6f:ef: 41:fe:ce:5e:a3:5c:a1:41:cb:68:28:29:2f:32:e0:4a:ae:3c: 16:20:83:64:8d:74:b2:d8:14:69:5d:3a:21:6a:ac:e6:d8:4f: a1:1e:25:37:45:1d:bf:b6:d4:bd:52:c4:d2:27:a5:0a:6b:36: 3b:e9:4d:a2:4f:5d:7e:5f:0e:53:f3:bf:13:41:61:9a:ef:77: d1:9d:f0:a7:ff:3e:2b:df:20:34:10:ba:09:57:cf:fc:60:f1: 3c:1a:19:f4:eb:59:be:db:5c:03:41:49:50:19:87:99:35:5a: dc:0f:34:2b:20:e2:c6:fc:49:20:7c:c8:b1:34:2b:60:48:ad: 1b:8a:b3:ac:a4:58:4f:94:06:42:dc:43:aa:ca:c7:91:20:b3: ac:3d:50:e6:5f:f8:d1:5f:69:36:6f:85:cf:08:a7:3d:05:50: 67:c3:8b:25:e0:05:ad:d5:1d:ec:9b:26:2b:b4:cb:79:72:24: 29:e7:a4:89:b6:45:9d:96:1d:30:95:52:4e:41:02:2d:61:2b: de:e8:8d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShmfJ3XHYNh1pDcydpB9Drb/PuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTExMDMwODQ2MDFaFw0yNTExMDYxODExMDFaMDMxMTAvBgNV BAMTKEQ2QUEyNTI5RTA0NTNCMDFDMTBGRjcxNTBFQTk3OUZGOTE2QUJFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/bfveYoar45ibkV274Vd1snU T/X39iRnbtpxURfrLEEuMCxdUQuxg7895k9BImE2LGwwjB9Yj3uUkg2HWjYzGY38 Qs/+fJlP+5ZR1MXniXZ3L9MESoX/E5wyvfd+hmk08gCdRwK+1UtDzj/ARxS/OGIJ 7orBAxQHDTm1v3VGhS4d8rgpaFHVKQ0O6u9k7pZa4CeVu7gC1d0pn+7CIvK+5y3x VIZZv/YQ5pjr0XLfIhvCZXkFKNal3coSQE4nYMRdfSodoto8t3tm6g6RGIRRmul7 Y0jFFWp+v9EhLUSFG7zs8Q0VYB8R3+nRq42ORTyxedPY8dWTC9v3FhQb+7xdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qolKeBFOwHBD/cVDql5/5Fqvo0wHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkQHDy9gZ4AbuIvQI10yea13HePkMLY0pqP HptCUk1E60A5sXkU6b1uEcQjJy7nnQBKkWFv70H+zl6jXKFBy2goKS8y4EquPBYg g2SNdLLYFGldOiFqrObYT6EeJTdFHb+21L1SxNInpQprNjvpTaJPXX5fDlPzvxNB YZrvd9Gd8Kf/PivfIDQQuglXz/xg8TwaGfTrWb7bXANBSVAZh5k1WtwPNCsg4sb8 SSB8yLE0K2BIrRuKs6ykWE+UBkLcQ6rKx5Egs6w9UOZf+NFfaTZvhc8Ipz0FUGfD iyXgBa3VHeybJiu0y3lyJCnnpIm2RZ2WHTCVUk5BAi1hK97ojTk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:44 2025 by rpki-client