$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: yJnDPm5RyId4oiQw0Mtq4IuICguBll7pOUrxwpA15lM= Subject key identifier: 37:0B:13:73:2C:BB:6D:69:75:38:1B:F8:44:72:C6:89:C7:61:AC:F8 Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 42D6F7610F3E20DA360A372F50AEC491D143BE24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02F5 Signing time: Sun 02 Nov 2025 23:00:50 +0000 Manifest this update: Sun 02 Nov 2025 22:55:50 +0000 Manifest next update: Thu 06 Nov 2025 08:13:50 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: VEcjxasmDRUGD9k1ZIegPB8Dt5fXFQeXIjciym9nlLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d6:f7:61:0f:3e:20:da:36:0a:37:2f:50:ae:c4:91:d1:43:be:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Nov 2 22:55:50 2025 GMT Not After : Nov 6 08:13:50 2025 GMT Subject: CN=370B13732CBB6D6975381BF84472C689C761ACF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:f3:26:8c:e1:43:65:0f:1a:d5:5c:d0:3d: 15:75:40:2d:ce:b7:bc:57:6b:46:59:31:07:69:64: 08:84:6f:e7:fb:cc:46:09:8f:d2:cb:dc:d1:cf:ba: aa:ab:4a:51:b6:fd:73:bc:98:1f:c2:70:53:e2:21: 5c:5e:3b:4e:78:27:f0:1f:03:51:1f:ee:82:49:90: e7:4f:b6:be:38:c2:c6:e3:4d:08:b7:51:f8:6d:44: dc:6a:a5:ff:3e:a2:0a:d0:ab:65:97:35:f7:5b:f3: f3:1d:4f:16:5b:b2:e6:a2:31:9f:56:3d:07:18:b7: 20:ed:90:af:9f:a7:f0:09:98:6b:23:5e:0c:4b:5c: f9:a8:0d:63:4b:c7:b9:20:5a:44:48:12:92:f3:98: 47:aa:6a:95:fe:26:63:81:87:53:7e:0b:c4:91:78: df:59:0e:5a:b8:b2:7d:3f:44:8b:78:3a:36:40:01: 4f:4c:85:20:e6:16:91:e3:97:2a:2c:11:c0:7f:bb: c2:48:74:26:92:0a:e5:a5:3b:34:bd:8d:b6:9e:b4: c0:bb:08:cb:e0:f6:3d:f7:6d:c4:77:b2:c4:e4:97: 50:cb:d4:cd:0f:bd:41:38:45:3d:45:2a:2a:ab:33: bd:16:97:bb:e0:96:de:6a:b3:2a:51:b2:e5:88:11: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:13:73:2C:BB:6D:69:75:38:1B:F8:44:72:C6:89:C7:61:AC:F8 X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:34:88:b9:9d:47:a7:d6:28:c9:bd:97:ed:73:0d:77:5f:e8: a4:5c:4c:62:b0:e6:8b:e2:50:d3:c9:76:cf:f7:93:c3:b6:e1: ea:5a:1d:ca:51:42:81:28:60:92:17:a2:fb:77:d3:3c:1b:c6: ed:b8:f4:67:bb:f5:69:d2:7f:20:0c:e4:61:7e:33:20:53:17: f2:42:f3:c5:01:37:e9:36:9f:c8:78:e7:7d:5c:00:fe:0b:b1: d9:f3:e1:f1:f5:b6:10:ef:40:a5:43:ec:8a:61:02:8a:45:fe: 69:30:cf:53:61:5c:14:b5:57:b5:45:46:a3:21:80:26:2a:01: e8:d7:02:74:27:e6:1c:63:11:f2:00:7a:d3:91:60:05:3e:1e: 6f:28:7b:99:24:97:3a:fc:78:68:36:7b:75:d9:5c:2c:b6:03: cf:db:14:96:f3:be:5b:55:15:26:d7:e1:d8:0d:49:53:29:66: 4d:3c:aa:34:36:38:8d:4f:c7:41:d9:a4:15:ce:f4:66:4c:08: 46:4a:93:93:75:64:5a:8f:21:dc:c0:cd:d3:c2:d0:c7:f3:55: d7:69:5a:c0:f2:74:ad:69:51:d2:56:01:ab:f8:fc:15:b5:bb: ba:57:55:8d:ff:e7:ee:f4:0e:be:62:07:4d:93:49:18:9c:d4: ae:e3:1c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtb3YQ8+INo2CjcvUK7EkdFDviQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTExMDIyMjU1NTBaFw0yNTExMDYwODEzNTBaMDMxMTAvBgNV BAMTKDM3MEIxMzczMkNCQjZENjk3NTM4MUJGODQ0NzJDNjg5Qzc2MUFDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO/MmjOFDZQ8a1VzQPRV1QC3O t7xXa0ZZMQdpZAiEb+f7zEYJj9LL3NHPuqqrSlG2/XO8mB/CcFPiIVxeO054J/Af A1Ef7oJJkOdPtr44wsbjTQi3UfhtRNxqpf8+ogrQq2WXNfdb8/MdTxZbsuaiMZ9W PQcYtyDtkK+fp/AJmGsjXgxLXPmoDWNLx7kgWkRIEpLzmEeqapX+JmOBh1N+C8SR eN9ZDlq4sn0/RIt4OjZAAU9MhSDmFpHjlyosEcB/u8JIdCaSCuWlOzS9jbaetMC7 CMvg9j33bcR3ssTkl1DL1M0PvUE4RT1FKiqrM70Wl7vglt5qsypRsuWIEWVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwsTcyy7bWl1OBv4RHLGicdhrPgwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMI0iLmdR6fWKMm9l+1zDXdf6KRcTGKw5ovi UNPJds/3k8O24epaHcpRQoEoYJIXovt30zwbxu249Ge79WnSfyAM5GF+MyBTF/JC 88UBN+k2n8h4531cAP4Lsdnz4fH1thDvQKVD7IphAopF/mkwz1NhXBS1V7VFRqMh gCYqAejXAnQn5hxjEfIAetORYAU+Hm8oe5kklzr8eGg2e3XZXCy2A8/bFJbzvltV FSbX4dgNSVMpZk08qjQ2OI1Px0HZpBXO9GZMCEZKk5N1ZFqPIdzAzdPC0MfzVddp WsDydK1pUdJWAav4/BW1u7pXVY3/5+70Dr5iB02TSRic1K7jHPs= -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:06 2025 by rpki-client