$ rpki-client -vvf repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft File: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft (raw, json) Hash identifier: lDMeANM8VntsUl0kFgvzvPBHfMJLgi7yP26+UA24j28= Subject key identifier: 35:93:7B:42:08:04:C6:31:C9:14:1A:71:13:10:78:6C:5B:DB:D4:3F Authority key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 Certificate issuer: /CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165 Certificate serial: 13BCF067C6F7575042DA1509ABBBE111E61F6B7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft Manifest number: 0242 Signing time: Sun 02 Nov 2025 12:41:36 +0000 Manifest this update: Sun 02 Nov 2025 12:36:36 +0000 Manifest next update: Wed 05 Nov 2025 17:12:36 +0000 Files and hashes: 1: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: tzus+b1Dyr0i8p6BXNzRg2JRJ5sSDDozsutDjca9Txw=) 2: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl (hash: IPoYg+V1ZSBHRWggl2wbrbSijwFzK+KlkNZ0auR7GC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:f0:67:c6:f7:57:50:42:da:15:09:ab:bb:e1:11:e6:1f:6b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165 Validity Not Before: Nov 2 12:36:36 2025 GMT Not After : Nov 5 17:12:36 2025 GMT Subject: CN=35937B420804C631C9141A711310786C5BDBD43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:04:0c:13:0d:96:02:2d:50:cd:7b:bb:6c:c0: ea:88:80:71:17:e3:5f:8f:8c:a2:4b:36:11:e6:62: 78:f2:63:58:be:bb:ee:7d:07:9a:02:3f:45:31:ec: ef:3c:48:bf:c1:98:8e:21:6f:b3:e0:69:b0:8c:81: 99:85:ff:2f:d7:d6:04:85:ed:2a:43:ce:6c:2e:e9: fb:65:f1:ce:00:18:1e:32:9a:35:91:81:1f:5e:a8: c8:ee:09:2a:c2:8c:05:ce:62:9a:34:d5:5a:f0:45: ca:54:cc:a2:57:f3:cf:59:74:34:c4:83:81:6d:0c: 72:bb:a4:30:a1:e3:fa:8a:c4:7d:c3:8e:3c:02:bc: 84:f3:b1:cf:fe:31:77:72:21:85:d5:52:a0:96:76: df:6c:95:34:c7:ed:dc:f7:93:d7:bc:64:aa:33:41: ac:7b:2c:7c:38:7a:fc:76:27:4b:87:48:14:d6:06: bc:51:db:fd:68:b7:05:6f:2c:b6:e9:45:ea:ff:d8: da:1a:57:86:28:92:c2:2c:75:81:c1:87:94:4f:26: 19:19:f1:e2:9a:59:80:6a:e4:7d:7e:5e:2e:62:bb: 91:b8:54:40:5d:8a:d3:7f:fa:5c:23:f7:95:1a:fb: 8f:75:90:15:b0:85:34:2e:aa:3f:4b:88:a6:55:09: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:93:7B:42:08:04:C6:31:C9:14:1A:71:13:10:78:6C:5B:DB:D4:3F X509v3 Authority Key Identifier: keyid:EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:78:8a:df:15:fb:72:f9:66:f0:4c:8a:cd:4a:e8:2c:f1:5c: 75:c1:8d:70:bf:23:84:79:0c:1f:db:3e:08:89:54:0a:57:d0: b7:fe:0b:d7:51:8b:a5:cc:6d:7e:c1:82:e2:c9:55:4c:46:c8: 2f:c2:71:d3:ab:48:ab:de:64:9b:fa:2e:5f:04:e7:54:e6:8d: c5:b1:0b:47:c6:4f:65:eb:b7:82:d1:1d:62:30:f8:35:7b:97: 77:02:f7:d8:2d:c4:04:73:be:e6:56:8a:4e:a4:5f:59:15:fe: f2:ec:87:bb:1e:b9:6c:22:e3:97:87:a0:f7:87:df:f7:15:e3: 94:46:db:dc:60:95:48:0f:c6:ed:78:1a:fb:b1:e6:6b:4c:3d: 64:54:c1:26:b1:cb:86:06:99:e9:82:d8:95:11:2f:aa:6a:61: a8:28:a2:b6:64:3d:ce:5b:a3:a8:7e:ca:5c:d6:8b:08:83:2a: d3:76:05:7d:a3:73:ae:f8:7c:6a:87:fd:3c:06:2e:3a:3f:60: 42:a4:a8:32:c6:3c:44:86:f0:1b:e7:3c:07:d5:38:09:b5:97: 0a:8e:ae:87:fe:86:1b:4c:ed:d5:e1:20:1a:01:11:a8:53:23: 75:85:b4:27:52:14:5b:12:cd:6e:ad:0e:73:ad:c0:82:40:39: e9:ad:35:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7zwZ8b3V1BC2hUJq7vhEeYfa3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRD MTZCODE2NTAeFw0yNTExMDIxMjM2MzZaFw0yNTExMDUxNzEyMzZaMDMxMTAvBgNV BAMTKDM1OTM3QjQyMDgwNEM2MzFDOTE0MUE3MTEzMTA3ODZDNUJEQkQ0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBAwTDZYCLVDNe7tswOqIgHEX 41+PjKJLNhHmYnjyY1i+u+59B5oCP0Ux7O88SL/BmI4hb7PgabCMgZmF/y/X1gSF 7SpDzmwu6ftl8c4AGB4ymjWRgR9eqMjuCSrCjAXOYpo01VrwRcpUzKJX889ZdDTE g4FtDHK7pDCh4/qKxH3DjjwCvITzsc/+MXdyIYXVUqCWdt9slTTH7dz3k9e8ZKoz Qax7LHw4evx2J0uHSBTWBrxR2/1otwVvLLbpRer/2NoaV4YoksIsdYHBh5RPJhkZ 8eKaWYBq5H1+Xi5iu5G4VEBditN/+lwj95Ua+491kBWwhTQuqj9LiKZVCa29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZN7QggExjHJFBpxExB4bFvb1D8wHwYDVR0j BBgwFoAU74BfPwD9X18JkeRgILvPpMFrgWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzFlODY1Zi1kNWExLTRhZjctYTcxOS0wYzI2ZTc0ZmNkNjEvMC9FRjgwNUYzRjAw RkQ1RjVGMDk5MUU0NjAyMEJCQ0ZBNEMxNkI4MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRDMTZC ODE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmMxZTg2NWYtZDVhMS00YWY3LWE3 MTktMGMyNmU3NGZjZDYxLzAvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNG QTRDMTZCODE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJt4it8V+3L5ZvBMis1K6CzxXHXBjXC/I4R5 DB/bPgiJVApX0Lf+C9dRi6XMbX7BguLJVUxGyC/CcdOrSKveZJv6Ll8E51TmjcWx C0fGT2Xrt4LRHWIw+DV7l3cC99gtxARzvuZWik6kX1kV/vLsh7seuWwi45eHoPeH 3/cV45RG29xglUgPxu14Gvux5mtMPWRUwSaxy4YGmemC2JURL6pqYagoorZkPc5b o6h+ylzWiwiDKtN2BX2jc674fGqH/TwGLjo/YEKkqDLGPESG8BvnPAfVOAm1lwqO rof+hhtM7dXhIBoBEahTI3WFtCdSFFsSzW6tDnOtwIJAOemtNU8= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:52 2025 by rpki-client