$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: pB1NNFjBFUVcTfHNU6gDHfCBjcEOOKN7Hv36Xkn5qRA= Subject key identifier: E9:B8:F9:C8:B2:92:0C:1E:65:D4:E2:B2:B2:AE:90:61:AA:D7:5B:16 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 339424765D548EAF04133E0C0D61454EDE8C0E98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 01D9 Signing time: Tue 04 Nov 2025 00:51:32 +0000 Manifest this update: Tue 04 Nov 2025 00:46:32 +0000 Manifest next update: Fri 07 Nov 2025 01:39:32 +0000 Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) 2: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: 71R0gV+0zTS/RhvKKzXW2PXiEYRj0+dU6Qoitn/s1/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:94:24:76:5d:54:8e:af:04:13:3e:0c:0d:61:45:4e:de:8c:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Nov 4 00:46:32 2025 GMT Not After : Nov 7 01:39:32 2025 GMT Subject: CN=E9B8F9C8B2920C1E65D4E2B2B2AE9061AAD75B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:14:5e:d7:09:94:e9:56:7e:ea:ab:73:72: 89:7b:ea:b4:94:a6:ec:5c:39:06:20:01:bf:0a:c8: 3b:84:65:30:be:c9:92:ea:79:8b:9e:a0:4f:63:84: ad:fd:75:b5:47:db:ac:9f:1c:da:62:a9:49:96:c4: c5:f2:ec:36:37:31:46:a4:8b:83:cb:71:16:3c:09: 82:1b:5d:f0:e1:3a:36:47:ba:de:d3:cb:c4:b6:9f: 80:d9:60:20:c8:b2:c0:2a:cd:4c:c9:7e:cb:30:59: 46:3f:21:6f:cf:0b:68:57:da:3e:39:83:47:23:1e: 25:78:26:5a:4f:18:e8:23:5c:76:95:b7:d3:14:29: 51:1f:80:fb:6f:af:73:89:db:2f:43:4f:4c:a3:63: cd:0c:b0:ee:ad:cc:26:41:58:90:a4:79:fb:c6:86: 67:87:ea:41:bc:fc:ef:1e:fb:80:a3:b5:60:ed:48: 44:76:7b:9e:57:00:46:1d:4d:b5:b9:95:c5:ad:cf: 36:37:08:7e:f3:89:c1:ef:a2:bc:d6:45:c6:b7:81: ed:b7:34:b5:8e:7e:d5:64:b4:72:3e:10:03:f4:db: a5:2d:5e:2c:ca:78:01:07:24:8e:98:9d:4a:0b:d0: 48:32:f4:fe:21:de:57:60:59:e8:49:06:fa:18:6b: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B8:F9:C8:B2:92:0C:1E:65:D4:E2:B2:B2:AE:90:61:AA:D7:5B:16 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:99:c9:3f:6b:72:53:77:20:b3:c0:7a:21:9d:f9:d1:73:28: f1:4f:c4:04:f0:73:5d:20:85:2c:ba:85:74:03:07:d8:5b:0e: c6:02:4c:f1:35:d9:91:d6:6b:42:32:92:9e:60:ee:ad:77:b9: 9a:46:d9:9a:7d:d6:88:4d:4c:a6:ac:43:95:ed:81:84:65:81: 8a:06:62:6b:08:f7:59:08:2e:1b:c6:74:78:66:6f:e0:c9:f1: 0e:db:82:51:86:bb:23:34:9d:58:77:5b:40:ba:e9:d1:f9:75: db:ac:47:42:6d:ca:ef:5a:33:f0:79:df:43:e5:d8:bf:be:47: 0c:5c:53:7e:88:36:94:14:c7:76:7a:a2:2d:8d:2e:ec:87:79: f6:03:40:43:4c:bb:7f:61:00:2a:dc:78:23:57:ad:fb:aa:7d: ac:f7:23:65:96:21:bf:88:8d:45:ce:32:a7:7b:95:36:12:94: bb:fe:27:8a:ea:9b:99:20:f4:e4:b6:43:5f:3a:80:4a:3d:fe: f3:2f:41:1d:76:9f:bd:da:2c:e6:19:b8:40:2e:19:2b:de:21: 44:0f:bb:37:8e:bd:4d:7c:1e:53:cd:70:10:be:70:53:b3:63: 59:79:39:f4:c4:3b:27:92:08:04:40:c7:e7:6c:77:c5:3e:48: b6:72:a1:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5Qkdl1Ujq8EEz4MDWFFTt6MDpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTExMDQwMDQ2MzJaFw0yNTExMDcwMTM5MzJaMDMxMTAvBgNV BAMTKEU5QjhGOUM4QjI5MjBDMUU2NUQ0RTJCMkIyQUU5MDYxQUFENzVCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikRRe1wmU6VZ+6qtzcol76rSU puxcOQYgAb8KyDuEZTC+yZLqeYueoE9jhK39dbVH26yfHNpiqUmWxMXy7DY3MUak i4PLcRY8CYIbXfDhOjZHut7Ty8S2n4DZYCDIssAqzUzJfsswWUY/IW/PC2hX2j45 g0cjHiV4JlpPGOgjXHaVt9MUKVEfgPtvr3OJ2y9DT0yjY80MsO6tzCZBWJCkefvG hmeH6kG8/O8e+4CjtWDtSER2e55XAEYdTbW5lcWtzzY3CH7zicHvorzWRca3ge23 NLWOftVktHI+EAP026UtXizKeAEHJI6YnUoL0Egy9P4h3ldgWehJBvoYayIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bj5yLKSDB5l1OKysq6QYarXWxYwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCZyT9rclN3ILPAeiGd+dFzKPFPxATwc10g hSy6hXQDB9hbDsYCTPE12ZHWa0Iykp5g7q13uZpG2Zp91ohNTKasQ5XtgYRlgYoG YmsI91kILhvGdHhmb+DJ8Q7bglGGuyM0nVh3W0C66dH5ddusR0Jtyu9aM/B530Pl 2L++RwxcU36INpQUx3Z6oi2NLuyHefYDQENMu39hACrceCNXrfuqfaz3I2WWIb+I jUXOMqd7lTYSlLv+J4rqm5kg9OS2Q186gEo9/vMvQR12n73aLOYZuEAuGSveIUQP uzeOvU18HlPNcBC+cFOzY1l5OfTEOyeSCARAx+dsd8U+SLZyoXU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:21 2025 by rpki-client