$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: 3jaY3LhLPnHIhKx0Mb7mJz/OcVCN2XwNrt5F28SO3Vg= Subject key identifier: 59:A2:67:9A:28:A7:98:BD:1B:6E:38:DC:04:EA:6A:B8:8B:4D:02:16 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 6C12B1C7B7955F44FED13838AA75C0A39F2E44D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 031E Signing time: Fri 31 Oct 2025 20:30:51 +0000 Manifest this update: Fri 31 Oct 2025 20:25:51 +0000 Manifest next update: Tue 04 Nov 2025 05:31:51 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: 7cRrmubDIw3ZummNyY35HiY15Q4H5UEkvDrt3gvISnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 05:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:12:b1:c7:b7:95:5f:44:fe:d1:38:38:aa:75:c0:a3:9f:2e:44:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Oct 31 20:25:51 2025 GMT Not After : Nov 4 05:31:51 2025 GMT Subject: CN=59A2679A28A798BD1B6E38DC04EA6AB88B4D0216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:ec:2c:7f:ea:64:5c:54:72:e7:b1:27:c9: 56:b6:13:c3:6d:43:6a:8a:ea:44:32:5c:73:84:4a: 4c:68:36:36:00:48:31:8a:b7:21:ee:3f:07:0a:54: 7c:f1:92:3a:91:7b:65:90:f5:dd:68:06:7e:7a:44: 82:05:f2:85:f6:52:a4:3f:09:d2:2d:f8:6f:b9:bd: 29:a2:43:1e:6f:e7:e8:db:75:21:2e:fd:bb:79:75: 1e:af:a2:a4:90:dd:af:68:c1:6a:a1:d6:2d:51:91: 69:ee:46:53:a1:81:18:30:b6:65:00:4f:dd:e8:d5: e1:eb:40:19:1c:a4:88:bc:a1:ea:5c:6b:d4:6a:0c: 3d:d0:7e:9c:f6:ad:35:36:31:13:bf:5a:af:69:b1: f2:58:b0:0d:b1:fb:c6:0e:fb:d6:46:37:6d:99:50: a0:81:cb:90:ea:e2:41:9c:da:5a:a5:31:f5:f8:17: 05:81:96:31:68:e5:a9:43:7c:b3:36:1e:d1:83:a6: 4b:d1:64:49:67:d4:74:2a:b8:cf:b4:f1:7f:6a:40: 47:ee:f2:cb:42:4a:47:f1:81:4b:2d:5b:ac:30:67: 15:05:1e:2a:54:27:4a:eb:24:2e:ad:b9:dc:4f:4e: 26:76:6d:26:6f:aa:38:40:2e:a2:04:f8:5c:7d:3a: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A2:67:9A:28:A7:98:BD:1B:6E:38:DC:04:EA:6A:B8:8B:4D:02:16 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:7f:29:ee:af:9b:74:f6:c5:a1:da:4d:ed:ab:d7:0c:38:95: 62:3f:a3:eb:1d:12:30:33:34:4b:fa:c9:e4:8d:41:83:b1:0b: 40:fa:e7:38:66:8f:0f:3e:f8:36:bc:d3:26:d9:2c:8d:dd:ef: b7:e9:a6:fe:7f:15:58:4a:cb:b3:4e:bb:d7:de:53:1d:4b:80: 39:18:c3:60:73:9e:f7:f8:d9:c0:a4:35:b5:b7:82:e3:e5:62: 37:b2:ff:b0:e3:d0:1c:5f:cc:4b:dd:0a:68:6b:c3:c0:6e:e5: 09:de:5d:00:39:bc:29:26:4d:55:97:63:37:66:a2:1c:09:12: 0f:19:30:92:29:98:f7:af:4e:d4:f4:fd:29:6f:5a:1e:50:2a: 75:1e:73:c0:bf:bb:5d:5d:86:bb:a5:bf:8c:8d:bb:c3:a8:2a: 5f:bf:08:a2:d2:d0:ab:5e:66:f2:7c:78:d4:ad:eb:86:46:55: d2:d0:e1:3b:de:29:d8:50:98:f1:2a:d2:bd:6a:67:9f:29:81: 20:44:a5:44:fb:f3:c2:7a:53:b9:f3:8f:1c:50:a2:45:ec:70: 43:85:86:c2:96:19:18:85:22:bb:5a:39:f0:0c:fc:69:b8:7b: db:d8:b7:a1:fc:7d:4d:0b:76:43:09:a4:99:a1:e7:27:69:5c: f3:b9:0b:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBKxx7eVX0T+0Tg4qnXAo58uRNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTEwMzEyMDI1NTFaFw0yNTExMDQwNTMxNTFaMDMxMTAvBgNV BAMTKDU5QTI2NzlBMjhBNzk4QkQxQjZFMzhEQzA0RUE2QUI4OEI0RDAyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDOwsf+pkXFRy57EnyVa2E8Nt Q2qK6kQyXHOESkxoNjYASDGKtyHuPwcKVHzxkjqRe2WQ9d1oBn56RIIF8oX2UqQ/ CdIt+G+5vSmiQx5v5+jbdSEu/bt5dR6voqSQ3a9owWqh1i1RkWnuRlOhgRgwtmUA T93o1eHrQBkcpIi8oepca9RqDD3Qfpz2rTU2MRO/Wq9psfJYsA2x+8YO+9ZGN22Z UKCBy5Dq4kGc2lqlMfX4FwWBljFo5alDfLM2HtGDpkvRZEln1HQquM+08X9qQEfu 8stCSkfxgUstW6wwZxUFHipUJ0rrJC6tudxPTiZ2bSZvqjhALqIE+Fx9OvfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWaJnmiinmL0bbjjcBOpquItNAhYwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5/Ke6vm3T2xaHaTe2r1ww4lWI/o+sdEjAz NEv6yeSNQYOxC0D65zhmjw8++Da80ybZLI3d77fppv5/FVhKy7NOu9feUx1LgDkY w2Bznvf42cCkNbW3guPlYjey/7Dj0BxfzEvdCmhrw8Bu5QneXQA5vCkmTVWXYzdm ohwJEg8ZMJIpmPevTtT0/SlvWh5QKnUec8C/u11dhrulv4yNu8OoKl+/CKLS0Kte ZvJ8eNSt64ZGVdLQ4TveKdhQmPEq0r1qZ58pgSBEpUT788J6U7nzjxxQokXscEOF hsKWGRiFIrtaOfAM/Gm4e9vYt6H8fU0LdkMJpJmh5ydpXPO5C/c= -----END CERTIFICATE-----Generated at Sun Nov 2 05:05:27 2025 by rpki-client