$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: PDL24jmd45EOBVO3Q2unGPloxm9n3hFmmcNdUr/Amjs= Subject key identifier: 1E:3B:CA:CE:04:F9:2A:19:25:E7:4A:45:2D:74:16:C9:99:A2:4D:C9 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 44669057003D875C8A10BBD6C494B9FB688EF439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 01F8 Signing time: Sat 25 Oct 2025 18:51:19 +0000 Manifest this update: Sat 25 Oct 2025 18:46:19 +0000 Manifest next update: Tue 28 Oct 2025 21:57:19 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 2: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 4: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 5: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: s+fd7tkbo7F1tU0yH/HjrhTHTKSr5MUui3VODXg+71k=) 6: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 21:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:66:90:57:00:3d:87:5c:8a:10:bb:d6:c4:94:b9:fb:68:8e:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Oct 25 18:46:19 2025 GMT Not After : Oct 28 21:57:19 2025 GMT Subject: CN=1E3BCACE04F92A1925E74A452D7416C999A24DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:96:6f:dc:96:bc:b3:ab:aa:0a:77:41:1d: 93:a0:b3:d8:88:12:39:c1:82:7c:49:2a:9b:22:5b: e2:f5:af:7a:67:35:40:a7:8f:f6:58:10:3d:ef:87: 7e:89:10:6f:31:b4:80:f1:9f:a5:01:ea:a3:ba:fe: 08:18:1d:ca:ca:e0:fd:bb:40:4e:3a:0d:1d:b6:42: 08:26:82:24:f2:c2:84:b6:7a:f5:0d:72:4a:62:da: e6:7a:d5:fc:d4:a0:14:5b:33:b2:a3:ef:4c:63:6b: 91:ee:f2:d3:bd:76:ef:d1:71:07:49:87:10:82:74: 18:4a:f4:d6:82:f9:4e:23:ce:e3:91:41:31:d3:64: ec:d9:81:ee:46:0b:1a:a2:59:7a:2c:96:ec:d3:0a: a6:30:c4:c7:28:c4:ee:ad:4a:3a:06:cd:b0:3d:c2: 5e:97:b8:67:a0:78:91:a2:f6:f1:f8:4e:fa:85:33: d9:a2:d4:43:4b:81:c0:bf:48:01:00:9f:a6:79:43: 07:9b:6e:75:de:7a:94:00:59:78:4d:6f:ea:29:b1: 12:a3:8f:06:a8:8c:fc:85:f5:eb:5a:88:37:7f:84: de:02:89:61:6f:12:d2:13:e6:e1:ec:b3:e1:4a:c4: ec:ab:00:3b:6e:1a:ea:27:32:db:db:db:d2:a3:79: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:CA:CE:04:F9:2A:19:25:E7:4A:45:2D:74:16:C9:99:A2:4D:C9 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:83:dd:1a:b4:5e:24:a1:72:ee:8f:c5:b1:f9:84:b6:9a:0c: 9c:7d:00:12:68:b7:d5:b4:37:9a:e9:26:41:b3:26:38:75:c6: 3a:0d:f5:52:95:9a:0a:f3:45:88:06:de:ab:69:ee:8b:d1:93: 60:7d:33:a6:f1:8f:07:6e:50:0e:e2:1f:5f:ce:97:3a:1b:51: 5f:cc:4a:5f:50:7d:cb:0e:b3:41:4d:ed:8c:65:0b:6b:c0:d0: 19:01:fd:ac:3d:01:ba:c6:5e:81:dd:0f:c1:15:ef:39:14:97: 39:90:d7:b6:44:c1:37:c0:1c:86:14:50:25:ed:44:50:fb:d6: 8c:e3:fa:3d:78:09:56:05:17:a9:f4:da:bd:ee:37:f8:32:eb: 6a:78:7d:b5:4e:1a:ca:f0:7b:ef:60:5c:61:f3:7f:b4:4e:82: df:d5:0f:04:0e:6a:fa:13:ae:8a:f4:78:f1:cc:bb:4f:60:68: d8:79:95:7d:81:a3:d7:24:1c:fd:4a:0e:a2:ca:a3:f7:fc:0c: d7:6e:b0:21:ce:bd:1b:88:52:c9:28:a2:bd:46:52:7b:d0:3d: 8e:6e:77:fc:31:71:7c:48:d3:1a:d1:d3:42:eb:f6:7d:38:5b: 7b:2a:17:26:82:ee:9d:eb:6b:4c:eb:95:15:b1:61:52:a0:f1: e2:6f:df:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGaQVwA9h1yKELvWxJS5+2iO9DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTEwMjUxODQ2MTlaFw0yNTEwMjgyMTU3MTlaMDMxMTAvBgNV BAMTKDFFM0JDQUNFMDRGOTJBMTkyNUU3NEE0NTJENzQxNkM5OTlBMjREQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYypZv3Ja8s6uqCndBHZOgs9iI EjnBgnxJKpsiW+L1r3pnNUCnj/ZYED3vh36JEG8xtIDxn6UB6qO6/ggYHcrK4P27 QE46DR22QggmgiTywoS2evUNckpi2uZ61fzUoBRbM7Kj70xja5Hu8tO9du/RcQdJ hxCCdBhK9NaC+U4jzuORQTHTZOzZge5GCxqiWXosluzTCqYwxMcoxO6tSjoGzbA9 wl6XuGegeJGi9vH4TvqFM9mi1ENLgcC/SAEAn6Z5QwebbnXeepQAWXhNb+opsRKj jwaojPyF9etaiDd/hN4CiWFvEtIT5uHss+FKxOyrADtuGuonMtvb29KjedRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjvKzgT5Khkl50pFLXQWyZmiTckwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuD3Rq0XiShcu6PxbH5hLaaDJx9ABJot9W0 N5rpJkGzJjh1xjoN9VKVmgrzRYgG3qtp7ovRk2B9M6bxjwduUA7iH1/OlzobUV/M Sl9QfcsOs0FN7YxlC2vA0BkB/aw9AbrGXoHdD8EV7zkUlzmQ17ZEwTfAHIYUUCXt RFD71ozj+j14CVYFF6n02r3uN/gy62p4fbVOGsrwe+9gXGHzf7ROgt/VDwQOavoT ror0ePHMu09gaNh5lX2Bo9ckHP1KDqLKo/f8DNdusCHOvRuIUskoor1GUnvQPY5u d/wxcXxI0xrR00Lr9n04W3sqFyaC7p3ra0zrlRWxYVKg8eJv3/Q= -----END CERTIFICATE-----Generated at Mon Oct 27 09:21:11 2025 by rpki-client