$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: Yo8jVSf6TnBvQ+GAwoAAaTm9OHMbcY+80ipWcO06svQ= Subject key identifier: F6:6F:C5:9C:21:B0:12:33:EB:1D:37:01:98:6B:F5:86:58:D1:AC:47 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 3B99E367ED43F91EA73BE1E9AD9BE9A942C57012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 0398 Signing time: Wed 22 Oct 2025 01:42:11 +0000 Manifest this update: Wed 22 Oct 2025 01:37:11 +0000 Manifest next update: Sat 25 Oct 2025 13:23:11 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: FcFOVdRuEER/0EzJvr4COBK7M+FNUcYhjFc5ii5uIGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:99:e3:67:ed:43:f9:1e:a7:3b:e1:e9:ad:9b:e9:a9:42:c5:70:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Oct 22 01:37:11 2025 GMT Not After : Oct 25 13:23:11 2025 GMT Subject: CN=F66FC59C21B01233EB1D3701986BF58658D1AC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:c1:60:b2:7e:b8:5d:3f:f5:06:82:38:e6: 30:c4:24:5e:cc:12:31:90:44:3e:15:a0:1b:a2:c0: e4:d9:f2:80:5f:07:a9:84:be:9d:4a:09:35:10:b8: c4:87:bc:f8:93:f6:8a:47:bf:29:e6:d2:00:48:21: a3:6a:13:6d:06:3b:c1:1e:80:a8:1e:e6:1f:5a:dd: 99:2d:36:eb:6b:1d:1c:28:31:48:47:6f:ae:df:19: 95:5b:4a:39:64:ce:eb:a9:97:b5:20:1d:01:46:b2: 5e:bf:28:9b:62:34:28:3a:dc:46:73:61:14:a2:b4: 6e:ef:e9:c0:e0:87:96:47:ee:31:8c:bf:3a:7b:e9: 1a:a9:2f:08:57:36:ed:10:e5:5b:1b:10:82:9d:5c: 26:c9:ab:7f:42:1f:49:7c:d7:c1:86:df:bc:d1:c8: fc:53:fd:4f:96:f7:ec:75:c9:1d:85:a3:29:b9:29: c3:61:4f:46:9c:02:b0:dc:68:3e:80:73:47:01:33: 8c:5f:02:94:09:09:8f:c6:06:34:ea:e1:5e:e7:13: 3e:70:d1:62:b8:80:6d:0e:d7:db:ae:d5:88:9c:1d: 3e:3a:c7:cd:2b:09:d1:92:41:4a:6f:8e:8b:39:1d: 6c:af:64:6b:bd:c7:0b:63:73:79:ab:cf:fe:85:d6: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6F:C5:9C:21:B0:12:33:EB:1D:37:01:98:6B:F5:86:58:D1:AC:47 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:17:69:02:2b:9b:ed:53:bc:59:eb:2f:b7:d3:bd:64:85:75: f5:a9:5b:7a:cc:47:66:cf:dc:c4:f4:54:45:ae:29:ea:58:29: 1d:07:08:70:6f:e9:49:1d:9e:14:27:92:d3:80:cc:11:82:9c: e4:85:4c:f5:a4:c7:8d:50:dd:1f:66:2c:9b:a8:26:a2:41:23: d7:5f:3d:37:1b:6a:aa:18:2f:70:01:1a:4a:2c:e9:79:fb:14: 13:44:02:eb:c9:9b:67:df:3a:c6:2a:14:9b:48:79:2d:04:2c: 56:29:43:88:66:79:b3:2b:2a:85:00:7b:cf:f1:f6:6b:f1:74: 1f:f7:34:fc:e5:bd:b5:8c:b5:03:1f:39:50:95:6d:49:26:a1: 33:be:62:de:36:dd:3a:26:d0:d6:f8:b9:f6:4c:fe:00:2e:cc: 97:c8:fa:4b:22:93:62:45:a3:23:9b:8e:ff:04:92:0a:d5:4d: e2:f5:af:f8:62:3d:d6:98:71:05:b0:7b:55:13:98:37:14:e2: 71:2e:44:c4:eb:d9:48:19:94:49:85:fe:71:90:fa:bf:f4:c8: e7:a8:d8:7e:4a:a9:e6:34:13:21:8d:21:67:3f:80:94:bf:a5: 6b:94:f8:cf:62:fa:38:8a:fb:a3:d2:7b:4e:a0:3e:b4:c5:ff: 15:96:67:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5njZ+1D+R6nO+HprZvpqULFcBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTEwMjIwMTM3MTFaFw0yNTEwMjUxMzIzMTFaMDMxMTAvBgNV BAMTKEY2NkZDNTlDMjFCMDEyMzNFQjFEMzcwMTk4NkJGNTg2NThEMUFDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAMFgsn64XT/1BoI45jDEJF7M EjGQRD4VoBuiwOTZ8oBfB6mEvp1KCTUQuMSHvPiT9opHvynm0gBIIaNqE20GO8Ee gKge5h9a3ZktNutrHRwoMUhHb67fGZVbSjlkzuupl7UgHQFGsl6/KJtiNCg63EZz YRSitG7v6cDgh5ZH7jGMvzp76RqpLwhXNu0Q5VsbEIKdXCbJq39CH0l818GG37zR yPxT/U+W9+x1yR2Foym5KcNhT0acArDcaD6Ac0cBM4xfApQJCY/GBjTq4V7nEz5w 0WK4gG0O19uu1YicHT46x80rCdGSQUpvjos5HWyvZGu9xwtjc3mrz/6F1gNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9m/FnCGwEjPrHTcBmGv1hljRrEcwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8XaQIrm+1TvFnrL7fTvWSFdfWpW3rMR2bP 3MT0VEWuKepYKR0HCHBv6UkdnhQnktOAzBGCnOSFTPWkx41Q3R9mLJuoJqJBI9df PTcbaqoYL3ABGkos6Xn7FBNEAuvJm2ffOsYqFJtIeS0ELFYpQ4hmebMrKoUAe8/x 9mvxdB/3NPzlvbWMtQMfOVCVbUkmoTO+Yt423Tom0Nb4ufZM/gAuzJfI+ksik2JF oyObjv8EkgrVTeL1r/hiPdaYcQWwe1UTmDcU4nEuRMTr2UgZlEmF/nGQ+r/0yOeo 2H5KqeY0EyGNIWc/gJS/pWuU+M9i+jiK+6PSe06gPrTF/xWWZ/4= -----END CERTIFICATE-----Generated at Thu Oct 23 05:29:21 2025 by rpki-client