$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: 5RzM7OIst6F0uQEpvOUU8844g/kIsgn9dJutOMguzeY= Subject key identifier: 31:E8:11:53:2E:F4:77:37:1C:ED:CA:D0:F0:9A:D7:DA:53:DE:F2:7F Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 9B4935AA3FB220024CF593CD8E48D256271B7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0495 Signing time: Fri 24 Oct 2025 23:01:25 +0000 Manifest this update: Fri 24 Oct 2025 22:56:25 +0000 Manifest next update: Tue 28 Oct 2025 02:55:25 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: 4U+qU9tfiuAi7PabL66KksvYy88HjLeIgZzEDgbKW5o=) 2: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 3: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) 4: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 6: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9b:49:35:aa:3f:b2:20:02:4c:f5:93:cd:8e:48:d2:56:27:1b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Oct 24 22:56:25 2025 GMT Not After : Oct 28 02:55:25 2025 GMT Subject: CN=31E811532EF477371CEDCAD0F09AD7DA53DEF27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b1:24:5a:7a:63:15:d1:b0:52:63:45:bc:69: 39:ac:e8:e3:fa:a7:04:43:6a:75:0e:a5:f1:33:d2: d5:f0:96:5a:85:4e:e7:ec:24:49:b7:eb:21:51:e7: c3:a8:d7:bb:ed:3c:d6:f8:e7:91:d3:7d:57:e9:3c: dd:11:7e:4d:f0:c3:76:c8:a5:ba:20:c9:cb:3f:34: 5f:74:b7:ec:f4:de:b0:60:b4:cb:d7:47:40:dd:4c: 6c:08:ad:23:0c:30:f0:fb:ee:8c:f6:5b:0c:18:f2: f5:1a:ff:38:81:54:15:05:74:84:97:26:45:89:2b: 59:eb:45:87:07:2d:9b:86:67:f0:2c:ed:c9:51:50: 0d:29:1c:51:99:ca:bf:64:ba:15:c2:32:a8:87:4d: cb:8e:18:81:f5:f2:82:f8:b9:76:f5:8a:a6:38:50: c2:1f:54:34:38:d2:16:ab:b0:bb:e4:fb:02:57:07: 9f:17:11:14:a0:f0:3c:dc:81:1b:62:7d:33:1a:44: 10:32:4c:f8:f9:7b:9b:1a:97:2f:af:75:aa:e7:43: 7d:15:a1:be:c2:14:88:01:13:a6:c7:ad:bf:1a:aa: b2:e5:5c:61:68:c0:d5:90:c5:1c:8b:1d:3b:67:1c: c8:7e:49:48:75:ec:1a:46:ba:8d:bf:c1:f3:f3:77: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E8:11:53:2E:F4:77:37:1C:ED:CA:D0:F0:9A:D7:DA:53:DE:F2:7F X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:61:0c:c1:15:75:6a:55:ef:ab:57:84:4b:15:bc:34:58:86: 2d:55:4a:4c:a1:fa:5a:81:18:0b:3a:37:a0:df:0c:80:6e:be: 3a:94:aa:02:16:f6:b4:04:18:f2:0a:f3:3b:bb:be:7e:e0:5b: ae:83:3d:83:d2:36:21:f6:e5:fc:8e:3c:ac:b9:11:71:f8:c6: ea:2b:0b:5d:ef:f0:15:dc:cb:e0:51:c2:27:40:d8:59:66:1f: 5e:85:ce:56:a0:cb:89:b3:bf:94:a7:ea:33:45:15:a6:c8:0b: d7:81:84:dd:69:f4:42:39:a4:0f:5e:28:06:63:ef:0a:66:11: 15:d4:02:b3:ba:78:d7:b2:d7:8d:84:11:4c:e7:f7:15:d0:1c: dc:79:c0:5f:3e:49:b7:b6:d4:57:f3:a9:be:b5:ae:86:46:fe: e2:4b:5e:b9:06:30:fc:71:64:01:e9:b9:28:b6:61:8a:01:24: 02:c4:18:c4:23:88:28:99:e4:38:b2:e1:02:bf:88:d0:f4:05: eb:b8:9d:23:59:42:2d:4d:ac:dc:2d:7a:5b:82:e1:ae:4c:1b: b8:d4:72:1b:ec:76:0c:15:b6:9d:f5:8e:12:7e:01:cc:f2:c2: dc:60:3e:d6:15:fb:db:de:7d:3b:44:bf:98:02:28:db:5d:9f: 34:08:4e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJtJNao/siACTPWTzY5I0lYnG3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTEwMjQyMjU2MjVaFw0yNTEwMjgwMjU1MjVaMDMxMTAvBgNV BAMTKDMxRTgxMTUzMkVGNDc3MzcxQ0VEQ0FEMEYwOUFEN0RBNTNERUYyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsSRaemMV0bBSY0W8aTms6OP6 pwRDanUOpfEz0tXwllqFTufsJEm36yFR58Oo17vtPNb455HTfVfpPN0Rfk3ww3bI pbogycs/NF90t+z03rBgtMvXR0DdTGwIrSMMMPD77oz2WwwY8vUa/ziBVBUFdISX JkWJK1nrRYcHLZuGZ/As7clRUA0pHFGZyr9kuhXCMqiHTcuOGIH18oL4uXb1iqY4 UMIfVDQ40harsLvk+wJXB58XERSg8DzcgRtifTMaRBAyTPj5e5saly+vdarnQ30V ob7CFIgBE6bHrb8aqrLlXGFowNWQxRyLHTtnHMh+SUh17BpGuo2/wfPzd3OnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMegRUy70dzcc7crQ8JrX2lPe8n8wHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9hDMEVdWpV76tXhEsVvDRYhi1VSkyh+lqB GAs6N6DfDIBuvjqUqgIW9rQEGPIK8zu7vn7gW66DPYPSNiH25fyOPKy5EXH4xuor C13v8BXcy+BRwidA2FlmH16Fzlagy4mzv5Sn6jNFFabIC9eBhN1p9EI5pA9eKAZj 7wpmERXUArO6eNey142EEUzn9xXQHNx5wF8+Sbe21Ffzqb61roZG/uJLXrkGMPxx ZAHpuSi2YYoBJALEGMQjiCiZ5Diy4QK/iND0Beu4nSNZQi1NrNwteluC4a5MG7jU chvsdgwVtp31jhJ+AczywtxgPtYV+9vefTtEv5gCKNtdnzQITiU= -----END CERTIFICATE-----Generated at Sun Oct 26 10:31:57 2025 by rpki-client