$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: DDkWaTBxB+9O29WPSwKaEsuxM7oaW/NMVJDnJ6t8nbk= Subject key identifier: B1:CE:C1:A0:1D:45:CF:03:51:B7:1A:1D:33:7A:A7:96:D0:1E:BC:88 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 0457E50C71E1E90E9223869D20DCE31F72E26F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0250 Signing time: Sun 02 Nov 2025 11:32:05 +0000 Manifest this update: Sun 02 Nov 2025 11:27:05 +0000 Manifest next update: Wed 05 Nov 2025 18:34:05 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: Kj2kB2i9f56YQDkeYvn64d5kEUO2xyZbk7c5dc0VgjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:57:e5:0c:71:e1:e9:0e:92:23:86:9d:20:dc:e3:1f:72:e2:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Nov 2 11:27:05 2025 GMT Not After : Nov 5 18:34:05 2025 GMT Subject: CN=B1CEC1A01D45CF0351B71A1D337AA796D01EBC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:61:57:1b:37:ea:95:55:b6:84:c8:4e:b9: b7:cf:25:e8:9d:1c:b1:c5:d1:90:d5:70:2d:1f:fc: fb:89:f2:84:fe:53:fe:11:5e:04:60:18:bd:0c:9c: 4b:36:ee:af:1d:72:bf:ca:fa:b8:f8:ca:e4:65:1c: 7a:71:b6:f4:e3:a5:41:5f:54:a7:c7:70:76:82:d2: d2:6b:4e:c8:8f:ac:5d:31:b6:7c:e8:32:39:e4:d7: 44:29:70:df:7e:43:2f:0c:f4:cd:4f:83:d9:13:56: 7b:93:30:94:04:5e:10:b5:38:a4:bf:c4:61:0c:8c: b0:a7:13:cb:0e:02:6c:ee:e0:ef:67:10:cb:59:f8: 9a:28:c3:38:77:b9:a8:f6:8a:f4:15:f5:1e:25:28: 7b:e3:81:fd:b8:85:16:07:8c:a5:70:85:3e:a8:a9: b5:51:61:a5:00:4a:75:fd:a7:5f:27:5a:d5:0e:e0: 98:ca:68:90:e3:36:4e:59:29:ca:64:46:0b:bf:33: eb:75:9e:18:af:0f:d7:d7:87:35:c1:7c:bf:9c:7a: 09:b4:2a:0b:00:ab:51:26:60:12:1e:d2:3f:fb:49: 5e:f5:68:c5:91:38:b1:ec:17:7c:91:80:34:5d:60: 8f:9a:c4:df:56:0c:62:51:28:67:a5:4e:03:a6:60: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:C1:A0:1D:45:CF:03:51:B7:1A:1D:33:7A:A7:96:D0:1E:BC:88 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8e:03:f4:1d:c2:a4:f7:47:c2:84:1b:eb:f2:cf:0d:4a:65: 0f:c5:78:19:54:08:7a:fb:00:91:c1:1e:7a:2c:cf:78:83:e0: 97:97:ff:92:1c:17:a3:d7:a0:04:77:15:5e:6f:ad:33:86:1b: ac:f3:5b:56:2c:69:e8:3d:04:a7:90:d0:4a:1c:15:32:ba:66: f4:f0:50:d6:42:9b:dc:99:55:7e:89:52:6b:44:1d:b7:2d:85: 4e:84:53:bd:3b:91:72:f7:1c:27:80:e4:b6:0c:1b:8b:38:ce: d9:42:08:0d:05:e4:f8:5a:d0:fd:f4:dd:7c:c2:a2:a2:0b:8f: cc:74:b5:f4:86:e1:34:c4:ae:3c:93:72:f3:43:5d:7b:01:65: 8a:4a:40:17:48:8a:fc:f5:5b:2f:63:dc:42:31:25:7d:29:11: a7:58:7b:11:78:41:3a:6c:35:c6:79:54:fb:e9:29:7c:22:2e: d1:4e:ea:cf:62:37:95:d6:14:25:c3:db:a4:1d:36:a0:b2:87: 95:22:05:06:76:6e:3c:02:e2:93:4f:5c:41:fa:33:13:43:7f: 05:9b:c5:20:1d:54:f9:0c:78:2e:c2:d5:a6:ab:3a:06:e1:95: 0e:31:bd:ae:70:ba:b9:6b:8b:fb:71:03:75:01:3d:36:32:85: b1:4d:a5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFflDHHh6Q6SI4adINzjH3Lib2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTExMDIxMTI3MDVaFw0yNTExMDUxODM0MDVaMDMxMTAvBgNV BAMTKEIxQ0VDMUEwMUQ0NUNGMDM1MUI3MUExRDMzN0FBNzk2RDAxRUJDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5GFXGzfqlVW2hMhOubfPJeid HLHF0ZDVcC0f/PuJ8oT+U/4RXgRgGL0MnEs27q8dcr/K+rj4yuRlHHpxtvTjpUFf VKfHcHaC0tJrTsiPrF0xtnzoMjnk10QpcN9+Qy8M9M1Pg9kTVnuTMJQEXhC1OKS/ xGEMjLCnE8sOAmzu4O9nEMtZ+Joowzh3uaj2ivQV9R4lKHvjgf24hRYHjKVwhT6o qbVRYaUASnX9p18nWtUO4JjKaJDjNk5ZKcpkRgu/M+t1nhivD9fXhzXBfL+cegm0 KgsAq1EmYBIe0j/7SV71aMWROLHsF3yRgDRdYI+axN9WDGJRKGelTgOmYLL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsc7BoB1FzwNRtxodM3qnltAevIgwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKOA/QdwqT3R8KEG+vyzw1KZQ/FeBlUCHr7 AJHBHnosz3iD4JeX/5IcF6PXoAR3FV5vrTOGG6zzW1Ysaeg9BKeQ0EocFTK6ZvTw UNZCm9yZVX6JUmtEHbcthU6EU707kXL3HCeA5LYMG4s4ztlCCA0F5Pha0P303XzC oqILj8x0tfSG4TTErjyTcvNDXXsBZYpKQBdIivz1Wy9j3EIxJX0pEadYexF4QTps NcZ5VPvpKXwiLtFO6s9iN5XWFCXD26QdNqCyh5UiBQZ2bjwC4pNPXEH6MxNDfwWb xSAdVPkMeC7C1aarOgbhlQ4xva5wurlri/txA3UBPTYyhbFNpew= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:45 2025 by rpki-client