$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: J6jdynkumevwF/hJM732nwFEP5EDbB4oJzuuZccZHmM= Subject key identifier: 9D:DC:4D:6E:E6:72:6C:B7:2D:D9:52:E1:DE:35:B0:FF:67:15:1B:91 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 1FA29BFEF2C590DA0697E2492A64C657BBB77C6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 0232 Signing time: Fri 10 Oct 2025 23:11:20 +0000 Manifest this update: Fri 10 Oct 2025 23:06:20 +0000 Manifest next update: Mon 13 Oct 2025 23:53:20 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 3: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: sjbJRrFvExJAJ0BIEpxaSiAV3t7rlTmnDDV/C5xal8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 23:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a2:9b:fe:f2:c5:90:da:06:97:e2:49:2a:64:c6:57:bb:b7:7c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Oct 10 23:06:20 2025 GMT Not After : Oct 13 23:53:20 2025 GMT Subject: CN=9DDC4D6EE6726CB72DD952E1DE35B0FF67151B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:f6:55:cf:9c:11:91:e4:ad:05:bd:3f:50: fc:31:27:37:78:f2:a7:d1:f3:a2:da:05:2b:ce:db: 2d:c1:ae:a7:04:a9:de:55:60:24:65:c7:cb:78:4c: 90:0b:63:fa:f2:14:68:80:e2:14:f0:6a:fa:f1:43: 3a:f5:73:7a:fc:e2:9c:82:28:9f:6e:29:64:97:70: 92:70:ea:98:7f:82:18:65:d9:e5:3f:6a:0a:2a:e6: 78:f5:6f:fe:29:19:58:c6:e5:d3:41:cd:ac:15:da: d0:5f:3b:43:5a:5d:4b:cc:7d:b5:2d:87:3d:35:f1: b2:b0:25:13:25:2e:0e:6a:26:0a:1f:5f:e1:7b:8f: 45:0c:f4:5e:ca:a1:6b:91:0f:d5:62:ee:7c:05:12: 19:73:c8:80:d5:48:82:94:21:46:b8:03:0a:10:a4: 0d:69:d3:74:1f:a4:a5:75:41:3e:46:78:75:0d:41: d6:29:b2:be:4d:e5:43:63:ef:6b:7c:a7:42:0b:bd: 3f:a9:5c:4e:99:83:b4:97:7c:8b:b8:23:94:47:16: c0:0d:90:2c:7c:55:af:80:aa:b0:8e:3e:38:51:33: 19:32:ba:58:c8:09:89:a6:cf:9b:a3:34:09:f0:95: ae:f2:2a:75:24:41:6c:b4:d3:18:cf:68:64:bf:88: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:4D:6E:E6:72:6C:B7:2D:D9:52:E1:DE:35:B0:FF:67:15:1B:91 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:62:03:46:48:50:1b:a4:c9:13:d4:21:bc:84:3c:50:a1:6d: a3:35:48:f5:e6:95:0e:43:5e:60:7b:92:3f:32:bd:d5:af:1a: af:4f:c1:55:44:15:c8:48:11:7c:12:21:10:7a:f9:ab:a1:79: fb:95:04:d9:e4:83:0d:1a:04:1a:e8:8a:25:8c:e8:91:9f:7e: 4b:da:31:88:88:d9:e5:8a:2a:93:d8:30:02:8f:68:7a:67:51: 72:49:6c:87:1a:53:40:83:f3:23:48:d3:ae:80:7f:fe:a8:5e: 60:b1:b1:c0:5c:fa:f5:53:0d:53:7a:8e:32:43:f2:fe:42:75: ae:ae:52:41:c3:65:b1:66:cf:1e:f7:fa:67:01:09:dc:e4:7d: 4d:c7:6b:67:fe:e6:ee:34:f2:0d:47:f3:96:9a:7e:80:55:3c: af:c8:79:15:1a:15:7a:a3:a6:ef:39:fe:57:b6:b6:23:f3:5b: 45:fa:02:60:2c:38:ed:aa:99:7f:f4:c9:9e:36:43:f9:dd:ce: df:66:d0:58:72:e9:27:ac:f4:f1:17:cb:59:08:7e:9c:0b:e9: 30:d2:fb:a4:da:8e:42:24:40:8d:cb:16:58:4b:63:d2:2e:b3: 8c:ee:50:80:48:41:cc:ec:b9:de:8a:58:68:30:04:54:3f:f4: 01:8f:a0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6Kb/vLFkNoGl+JJKmTGV7u3fGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTEwMTAyMzA2MjBaFw0yNTEwMTMyMzUzMjBaMDMxMTAvBgNV BAMTKDlEREM0RDZFRTY3MjZDQjcyREQ5NTJFMURFMzVCMEZGNjcxNTFCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTvZVz5wRkeStBb0/UPwxJzd4 8qfR86LaBSvO2y3BrqcEqd5VYCRlx8t4TJALY/ryFGiA4hTwavrxQzr1c3r84pyC KJ9uKWSXcJJw6ph/ghhl2eU/agoq5nj1b/4pGVjG5dNBzawV2tBfO0NaXUvMfbUt hz018bKwJRMlLg5qJgofX+F7j0UM9F7KoWuRD9Vi7nwFEhlzyIDVSIKUIUa4AwoQ pA1p03QfpKV1QT5GeHUNQdYpsr5N5UNj72t8p0ILvT+pXE6Zg7SXfIu4I5RHFsAN kCx8Va+AqrCOPjhRMxkyuljICYmmz5ujNAnwla7yKnUkQWy00xjPaGS/iEYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndxNbuZybLct2VLh3jWw/2cVG5EwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtiA0ZIUBukyRPUIbyEPFChbaM1SPXmlQ5D XmB7kj8yvdWvGq9PwVVEFchIEXwSIRB6+auhefuVBNnkgw0aBBroiiWM6JGffkva MYiI2eWKKpPYMAKPaHpnUXJJbIcaU0CD8yNI066Af/6oXmCxscBc+vVTDVN6jjJD 8v5Cda6uUkHDZbFmzx73+mcBCdzkfU3Ha2f+5u408g1H85aafoBVPK/IeRUaFXqj pu85/le2tiPzW0X6AmAsOO2qmX/0yZ42Q/ndzt9m0Fhy6Ses9PEXy1kIfpwL6TDS +6TajkIkQI3LFlhLY9Ius4zuUIBIQczsud6KWGgwBFQ/9AGPoOs= -----END CERTIFICATE-----Generated at Sat Oct 11 13:07:50 2025 by rpki-client