$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: wEyXq7jaA2y03HdcMNPrEesNnFqHxIGe8/wTpSmeaXg= Subject key identifier: 69:73:12:08:9F:31:D1:09:BF:74:CB:2E:F4:91:A9:E7:4F:C9:88:76 Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 27F70D689E1A7DA0E8D9EB3A419518E1210A3C80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: 0104 Signing time: Tue 04 Nov 2025 18:02:02 +0000 Manifest this update: Tue 04 Nov 2025 17:57:02 +0000 Manifest next update: Sat 08 Nov 2025 03:59:02 +0000 Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) 2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: CwqGJKimLExztfMbBPW5r6V8XvucL192HQXuUNleeiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f7:0d:68:9e:1a:7d:a0:e8:d9:eb:3a:41:95:18:e1:21:0a:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Nov 4 17:57:02 2025 GMT Not After : Nov 8 03:59:02 2025 GMT Subject: CN=697312089F31D109BF74CB2EF491A9E74FC98876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:88:6f:6f:8f:77:48:6a:7e:96:8d:a7:b4: 0d:52:63:1f:f8:9b:9c:d9:6b:de:f9:8f:81:2c:69: 0a:05:9c:a6:ec:0b:e0:35:fb:bb:17:7a:52:81:d7: eb:8c:66:ac:89:d3:5d:a6:1b:a6:14:ca:bd:51:9e: eb:96:82:ea:98:a9:24:7f:24:4a:cd:c1:c0:25:10: de:13:a7:89:c6:74:11:06:f2:aa:90:0d:e8:b3:78: 04:9c:23:d7:32:ff:ca:9a:d5:2d:c4:ec:6b:51:97: 75:93:a9:24:0c:79:d3:14:88:74:af:64:58:6a:9c: a0:af:33:f3:b5:71:30:83:62:b5:5a:f7:e7:ac:3c: 95:f4:93:f3:53:d3:66:d8:fe:27:95:c0:9c:56:cb: 03:4c:5b:2f:82:1e:0a:f0:cc:3a:2f:e1:fe:47:b6: f2:18:56:34:4f:74:33:d4:38:0b:47:be:88:74:94: 50:e6:dd:a9:9e:ff:44:81:d8:3f:f9:da:b8:ed:15: 63:9f:7e:b7:90:d6:49:7a:4c:c9:db:6a:bb:6d:09: d9:4b:f4:8f:12:36:c4:a6:e8:e1:fa:d9:1c:df:1b: 72:97:82:81:41:09:d6:8b:41:ab:ab:b2:21:ac:44: 84:65:86:98:ad:1a:94:a4:6b:8a:43:35:06:ef:35: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:73:12:08:9F:31:D1:09:BF:74:CB:2E:F4:91:A9:E7:4F:C9:88:76 X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:93:b2:2d:db:8d:1c:a7:21:a0:7f:8d:70:5e:d6:54:a6: f8:ab:7a:56:03:33:f1:cc:b7:88:4d:0e:3f:46:85:f1:d2:06: 64:5e:fe:c7:a3:f1:a2:59:cb:d4:a1:cb:5e:1a:77:7f:3b:ee: a9:25:d6:30:6d:61:5c:5a:94:67:7b:f1:b2:78:29:68:2d:e2: 84:7b:26:38:61:43:ff:c0:c9:9a:ad:f7:19:24:79:ab:e5:4c: bd:18:94:69:d2:aa:de:f1:65:dc:b3:51:4d:7f:5e:c3:45:9c: 3c:fe:6f:80:b5:79:09:71:a1:9f:df:62:3f:2a:e4:93:8f:02: b7:54:b8:08:4c:97:d0:bb:8d:1d:65:fa:9d:ad:9f:1e:65:15: 88:f0:74:44:6f:13:46:56:97:a2:26:d4:af:65:a3:77:f7:1d: 65:47:10:c2:03:e2:20:aa:66:7b:ed:c6:3d:fd:6e:e2:56:e8: d5:cf:42:6e:46:91:08:de:8d:64:56:78:e8:ff:87:72:b6:0a: fa:21:5d:3d:51:4f:28:19:82:48:ee:8e:6d:36:7a:9b:67:e7: dc:79:b9:4b:57:9d:0b:5d:22:c4:91:61:75:6b:c2:a8:1b:44: 64:bc:1c:ef:46:4d:bd:c3:38:a4:13:80:e6:5e:e2:58:78:83: bd:a8:bb:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/cNaJ4afaDo2es6QZUY4SEKPIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTExMDQxNzU3MDJaFw0yNTExMDgwMzU5MDJaMDMxMTAvBgNV BAMTKDY5NzMxMjA4OUYzMUQxMDlCRjc0Q0IyRUY0OTFBOUU3NEZDOTg4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39Ihvb493SGp+lo2ntA1SYx/4 m5zZa975j4EsaQoFnKbsC+A1+7sXelKB1+uMZqyJ012mG6YUyr1RnuuWguqYqSR/ JErNwcAlEN4Tp4nGdBEG8qqQDeizeAScI9cy/8qa1S3E7GtRl3WTqSQMedMUiHSv ZFhqnKCvM/O1cTCDYrVa9+esPJX0k/NT02bY/ieVwJxWywNMWy+CHgrwzDov4f5H tvIYVjRPdDPUOAtHvoh0lFDm3ame/0SB2D/52rjtFWOffreQ1kl6TMnbarttCdlL 9I8SNsSm6OH62RzfG3KXgoFBCdaLQaursiGsRIRlhpitGpSka4pDNQbvNX0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXMSCJ8x0Qm/dMsu9JGp50/JiHYwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEFk7It240cpyGgf41wXtZUpvirelYDM/HM t4hNDj9GhfHSBmRe/sej8aJZy9Shy14ad3877qkl1jBtYVxalGd78bJ4KWgt4oR7 JjhhQ//AyZqt9xkkeavlTL0YlGnSqt7xZdyzUU1/XsNFnDz+b4C1eQlxoZ/fYj8q 5JOPArdUuAhMl9C7jR1l+p2tnx5lFYjwdERvE0ZWl6Im1K9lo3f3HWVHEMID4iCq Znvtxj39buJW6NXPQm5GkQjejWRWeOj/h3K2CvohXT1RTygZgkjujm02eptn59x5 uUtXnQtdIsSRYXVrwqgbRGS8HO9GTb3DOKQTgOZe4lh4g72ou/o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:59 2025 by rpki-client