$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: DBS6kzxb1E0Tcz+5lmo3zopL149hlvF6AudTwI5gCn4= Subject key identifier: 01:05:DF:77:4C:3D:CB:2F:FF:C3:B3:62:25:C8:63:7C:9C:FE:4D:91 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 6C405CC61622829978AB9012EBB784FF0C50E844 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 051F Signing time: Mon 27 Oct 2025 01:31:04 +0000 Manifest this update: Mon 27 Oct 2025 01:26:04 +0000 Manifest next update: Thu 30 Oct 2025 06:16:04 +0000 Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 2: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 3: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 5IWz3t7p2nxjhV87Uc9xzJnr33fCyEhAmIMsYokrFMI=) 4: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 6: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: yz7KoAXsbF5ZqTXQr0wN32L4YkceTPCN36RTUDHDNIE=) 7: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 82WkCsugh3Y0Do+wrRLPbBu7oY8u5dpqm/OQwR7YoKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:40:5c:c6:16:22:82:99:78:ab:90:12:eb:b7:84:ff:0c:50:e8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Oct 27 01:26:04 2025 GMT Not After : Oct 30 06:16:04 2025 GMT Subject: CN=0105DF774C3DCB2FFFC3B36225C8637C9CFE4D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:20:b4:6f:99:aa:68:73:76:f8:5b:7a:a5: cd:1f:c1:c7:91:7d:d0:93:65:36:c6:12:16:5d:62: 78:c4:86:cc:88:a9:10:4d:95:2b:31:85:ff:c9:04: 7f:2a:ff:8e:2a:aa:69:78:76:4f:78:b7:ce:44:fb: b0:7e:d1:db:ea:73:4d:26:e5:46:df:f5:3e:28:2c: 56:9f:67:c0:07:41:06:1c:f5:7b:e8:67:5d:8d:bc: 1e:79:85:9a:4d:8a:fb:6e:52:fa:41:a0:d0:f0:f0: 2f:db:cf:0c:2c:8f:ac:d3:bb:27:3d:6a:81:09:7c: 2d:ae:8f:19:1e:91:25:12:25:7e:0c:fb:03:45:79: 36:b4:2c:bb:28:1b:c4:e4:d5:2d:24:c0:dd:18:74: 4f:0b:3f:e9:59:9e:14:c2:d7:41:de:ac:33:12:9f: 46:53:22:75:d3:a0:da:d0:bf:8e:ac:eb:c9:ed:ec: c3:03:9d:a4:aa:5f:a4:b1:e1:be:61:85:a4:39:ec: 7f:dc:5f:dc:6f:ff:97:4e:fa:80:18:1e:7b:72:42: ad:70:96:2e:97:9c:5a:4b:92:ff:c4:67:ca:9e:c7: 31:a9:aa:a3:86:9f:d3:b6:62:41:7d:df:71:e7:9b: 5c:ad:70:08:15:68:96:1e:9c:bd:2d:e7:7d:d2:ee: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:05:DF:77:4C:3D:CB:2F:FF:C3:B3:62:25:C8:63:7C:9C:FE:4D:91 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f3:5c:89:9e:b1:15:2c:41:e5:be:7e:bf:44:95:cb:fa:6c: 5f:b4:8a:d1:43:c4:5e:55:7c:31:c5:62:0f:fb:c2:e9:bc:e0: b2:3f:d2:00:f8:cd:3a:f4:41:81:c2:e1:b6:d9:0f:c8:99:ac: 0d:df:f4:f4:51:a5:43:34:c0:97:b1:31:30:ab:c3:48:fa:ef: 6d:da:a8:da:6b:f4:d3:4b:c4:8c:71:17:bb:55:d1:95:11:d1: ef:26:a4:72:76:52:ac:6a:1b:5f:b8:20:c8:71:84:bc:bd:1f: dc:d6:5a:b4:0b:48:73:9e:91:5c:3c:a2:ca:87:53:24:f5:9d: c9:d2:10:3d:02:d8:b1:f3:24:85:b9:13:55:a6:be:74:3d:c6: 2a:b8:7f:da:01:9c:6c:bf:a1:22:7c:87:71:98:0f:be:a3:94: 48:a8:e7:49:1f:e1:f2:fe:55:52:3f:dc:6e:34:79:ff:62:ad: 16:e1:a3:95:32:68:a6:da:d2:da:10:f1:bc:62:60:2a:47:b8: 5d:6c:79:85:89:03:57:ad:f3:0c:d4:54:a9:a2:cb:60:ad:ec: 9a:0a:e9:87:78:e5:b5:dc:19:b5:2d:72:fe:23:f5:53:59:b5: b7:4b:3c:24:6e:ea:89:be:0a:a1:49:7d:fb:aa:e8:fb:1d:33: ff:4c:41:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEBcxhYigpl4q5AS67eE/wxQ6EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTEwMjcwMTI2MDRaFw0yNTEwMzAwNjE2MDRaMDMxMTAvBgNV BAMTKDAxMDVERjc3NEMzRENCMkZGRkMzQjM2MjI1Qzg2MzdDOUNGRTREOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHiC0b5mqaHN2+Ft6pc0fwceR fdCTZTbGEhZdYnjEhsyIqRBNlSsxhf/JBH8q/44qqml4dk94t85E+7B+0dvqc00m 5Ubf9T4oLFafZ8AHQQYc9XvoZ12NvB55hZpNivtuUvpBoNDw8C/bzwwsj6zTuyc9 aoEJfC2ujxkekSUSJX4M+wNFeTa0LLsoG8Tk1S0kwN0YdE8LP+lZnhTC10HerDMS n0ZTInXToNrQv46s68nt7MMDnaSqX6Sx4b5hhaQ57H/cX9xv/5dO+oAYHntyQq1w li6XnFpLkv/EZ8qexzGpqqOGn9O2YkF933Hnm1ytcAgVaJYenL0t533S7rZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQXfd0w9yy//w7NiJchjfJz+TZEwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnzXImesRUsQeW+fr9Elcv6bF+0itFDxF5V fDHFYg/7wum84LI/0gD4zTr0QYHC4bbZD8iZrA3f9PRRpUM0wJexMTCrw0j6723a qNpr9NNLxIxxF7tV0ZUR0e8mpHJ2UqxqG1+4IMhxhLy9H9zWWrQLSHOekVw8osqH UyT1ncnSED0C2LHzJIW5E1WmvnQ9xiq4f9oBnGy/oSJ8h3GYD76jlEio50kf4fL+ VVI/3G40ef9irRbho5UyaKba0toQ8bxiYCpHuF1seYWJA1et8wzUVKmiy2Ct7JoK 6Yd45bXcGbUtcv4j9VNZtbdLPCRu6om+CqFJffuq6PsdM/9MQVE= -----END CERTIFICATE-----Generated at Tue Oct 28 15:46:02 2025 by rpki-client