$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: aMkedaacXG69h6m46AR2o6SkSO0ocqqxtHJOrVUO3zU= Subject key identifier: 78:B8:1B:33:CC:6F:BE:66:F7:6D:3C:E5:90:F9:60:E9:C3:E6:7E:FC Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 0AFE994EB31CFDF77A8C68F1C5CC6C33FB36FABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0228 Signing time: Mon 03 Nov 2025 11:31:14 +0000 Manifest this update: Mon 03 Nov 2025 11:26:14 +0000 Manifest next update: Thu 06 Nov 2025 15:19:14 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: CGSdUL38Qq543ZNG1PV9UM7wDqcL0iXKut+bKeJ3UN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:99:4e:b3:1c:fd:f7:7a:8c:68:f1:c5:cc:6c:33:fb:36:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Nov 3 11:26:14 2025 GMT Not After : Nov 6 15:19:14 2025 GMT Subject: CN=78B81B33CC6FBE66F76D3CE590F960E9C3E67EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:f5:38:da:7e:d2:d3:e8:b2:2e:6e:77:a2: 49:5f:00:77:65:71:40:16:e0:5b:31:fb:24:59:94: e9:60:76:b1:07:83:e6:28:cf:1f:6e:7d:34:dc:6d: b6:83:b4:59:6c:13:43:64:98:e2:82:10:b0:ea:58: c3:94:9e:1d:cf:ff:c6:d1:31:ad:6b:1c:19:ea:64: b8:b4:37:5b:c9:bc:a8:ac:35:7b:33:12:c8:13:6f: 67:58:15:e2:35:25:7b:c4:4a:fb:a3:70:02:cb:d7: 2d:c3:af:b9:2f:97:bb:6e:ca:56:f2:0a:d0:ed:f0: 01:1f:7f:f2:02:ad:4b:f7:1d:24:9d:58:b9:04:2a: dc:4b:42:22:4f:af:ce:0f:7d:0b:3a:99:93:40:69: 75:73:20:72:86:ee:1f:25:7a:b4:e4:35:91:a6:cd: 88:e3:0d:35:b9:50:9d:0c:66:f6:ea:b8:a7:02:77: d3:ff:2e:08:02:ff:56:54:67:f8:f1:9a:e0:97:5a: 1e:db:80:79:87:6e:66:e0:9f:c3:9d:3e:bb:2f:23: 0c:21:0f:7e:21:a3:18:b4:13:01:c5:8f:05:7a:d0: 56:28:a8:c1:92:75:91:db:12:f7:36:78:1a:8a:ae: 4b:d0:a2:f2:1d:3f:ee:52:8e:a9:94:fa:2c:f8:95: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B8:1B:33:CC:6F:BE:66:F7:6D:3C:E5:90:F9:60:E9:C3:E6:7E:FC X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:49:1f:99:c7:82:24:be:6d:a4:af:67:8f:80:e9:2c:eb:3b: 78:b1:e8:1e:04:36:1b:63:ff:31:cf:bb:92:81:5a:d7:b4:d5: bf:9a:04:a2:ec:70:29:46:7e:ac:20:53:85:cd:60:05:a1:31: 9f:70:a0:55:2f:0c:02:08:a0:2f:ee:06:e9:40:02:f7:9f:d8: 17:b6:08:83:db:07:34:62:3f:c8:57:e2:ac:45:c4:e7:d0:f6: 63:83:d8:80:97:43:ad:4d:ef:3b:c9:da:3d:74:c3:fb:47:9f: 8c:32:49:5c:65:0d:d2:92:24:eb:7a:fb:77:36:ec:b5:b9:29: 85:d5:07:6a:e5:34:24:28:4e:53:2b:89:6a:f4:f3:69:97:7b: 82:f7:4a:d0:da:e1:93:eb:fd:cb:ce:65:cc:63:ec:22:94:f1: e5:d3:4f:3e:ae:09:38:bb:ac:bb:14:2b:08:cc:cf:3e:b8:58: 70:a7:b9:87:d1:37:ef:b2:b8:63:b5:9e:1a:5a:39:2b:25:6e: d0:90:ce:bd:3c:38:50:9e:c3:5c:5c:ec:a0:ee:65:01:ee:2b: 8b:d3:25:12:4d:b8:f4:e1:51:8a:44:e4:e7:f1:00:00:0e:07: 34:21:58:9b:94:96:d5:c6:cd:f3:1b:5f:4a:e7:f4:28:bb:df: 5f:3b:00:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv6ZTrMc/fd6jGjxxcxsM/s2+rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTExMDMxMTI2MTRaFw0yNTExMDYxNTE5MTRaMDMxMTAvBgNV BAMTKDc4QjgxQjMzQ0M2RkJFNjZGNzZEM0NFNTkwRjk2MEU5QzNFNjdFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikfU42n7S0+iyLm53oklfAHdl cUAW4Fsx+yRZlOlgdrEHg+Yozx9ufTTcbbaDtFlsE0NkmOKCELDqWMOUnh3P/8bR Ma1rHBnqZLi0N1vJvKisNXszEsgTb2dYFeI1JXvESvujcALL1y3Dr7kvl7tuylby CtDt8AEff/ICrUv3HSSdWLkEKtxLQiJPr84PfQs6mZNAaXVzIHKG7h8lerTkNZGm zYjjDTW5UJ0MZvbquKcCd9P/LggC/1ZUZ/jxmuCXWh7bgHmHbmbgn8OdPrsvIwwh D34hoxi0EwHFjwV60FYoqMGSdZHbEvc2eBqKrkvQovIdP+5SjqmU+iz4lRFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeLgbM8xvvmb3bTzlkPlg6cPmfvwwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRJH5nHgiS+baSvZ4+A6SzrO3ix6B4ENhtj /zHPu5KBWte01b+aBKLscClGfqwgU4XNYAWhMZ9woFUvDAIIoC/uBulAAvef2Be2 CIPbBzRiP8hX4qxFxOfQ9mOD2ICXQ61N7zvJ2j10w/tHn4wySVxlDdKSJOt6+3c2 7LW5KYXVB2rlNCQoTlMriWr082mXe4L3StDa4ZPr/cvOZcxj7CKU8eXTTz6uCTi7 rLsUKwjMzz64WHCnuYfRN++yuGO1nhpaOSslbtCQzr08OFCew1xc7KDuZQHuK4vT JRJNuPThUYpE5OfxAAAOBzQhWJuUltXGzfMbX0rn9Ci73187AFE= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:38 2025 by rpki-client