$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: cWeX+DhTWhJNiB3srKDX8VvFQsrfZUVVZK51huuJK8k= Subject key identifier: F1:5D:A9:A8:7D:B2:DB:EF:DB:B8:AF:69:26:8F:01:8B:5C:41:67:6F Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 20A8110391D3BCA50A122A6ECBA5F2C5E85C6C0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01B9 Signing time: Mon 03 Nov 2025 20:32:00 +0000 Manifest this update: Mon 03 Nov 2025 20:27:00 +0000 Manifest next update: Fri 07 Nov 2025 03:36:00 +0000 Files and hashes: 1: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: A0ESgPhXmXOPE64sTFcNtSJtGXfun39fRaEX1f/cTLM=) 2: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 3: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 4: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 5: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=) 6: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a8:11:03:91:d3:bc:a5:0a:12:2a:6e:cb:a5:f2:c5:e8:5c:6c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Nov 3 20:27:00 2025 GMT Not After : Nov 7 03:36:00 2025 GMT Subject: CN=F15DA9A87DB2DBEFDBB8AF69268F018B5C41676F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:8f:b1:bd:6a:2d:94:dd:cf:00:a9:73:b3: 4d:f8:d8:9f:37:90:8b:72:93:50:c7:63:b3:f0:fb: e8:3e:03:ec:5a:c0:11:52:14:5e:e1:f1:7c:e3:87: 4b:79:d6:30:c8:40:f1:17:cb:00:83:3b:d4:82:5d: 1b:57:1d:e9:92:84:bf:b9:c0:6e:f3:78:cb:96:aa: d2:4a:11:87:4f:49:1d:85:8f:8a:58:fc:57:85:40: 66:42:82:c7:d0:10:c8:f2:1a:d6:7a:29:d6:0e:e4: 83:b9:76:c3:a7:6d:b8:b7:1a:02:85:fa:0b:30:2c: 24:37:bf:12:9a:0a:dd:4c:58:b5:5a:54:77:a9:35: f5:fb:1f:43:dd:8b:34:e9:f8:7f:1c:ce:d4:ca:59: f8:c3:a6:d3:06:80:17:04:fe:4b:12:a5:75:e3:95: 37:96:f3:e2:59:a2:60:5b:c0:32:10:7a:88:a1:f0: 8e:7b:ac:69:75:f7:f1:6b:71:e8:50:d1:16:09:d3: 4b:af:ff:2f:70:18:8f:ff:a7:5f:45:6c:a4:16:92: 56:24:c1:ce:98:8a:f7:de:89:72:c4:70:3c:fa:7f: 3b:93:ef:11:ca:fd:82:f7:49:d5:83:dc:07:c1:c0: 69:44:23:27:72:a2:a8:93:7f:15:5d:3f:bd:b6:f9: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:A9:A8:7D:B2:DB:EF:DB:B8:AF:69:26:8F:01:8B:5C:41:67:6F X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e6:8e:a3:f3:21:41:80:f8:e3:3a:a1:08:38:ae:54:aa:39: aa:ec:ed:69:d0:2a:41:a3:36:db:81:d5:ab:6e:5c:d7:cf:44: a7:f3:57:d2:8b:43:19:37:24:a1:49:b4:bd:2c:75:be:16:86: be:db:b2:ee:ac:78:fa:44:5d:85:4f:df:b9:07:3f:fc:88:47: bf:ac:2c:3c:fb:45:6b:d0:76:31:c7:f2:1c:a9:e1:87:30:20: 9d:0d:d7:95:dd:5d:2a:7d:40:26:49:97:f8:cf:dd:ae:22:87: 62:0b:4d:6e:38:55:4d:a8:98:8e:c3:dc:22:72:94:38:5d:42: c5:af:32:3f:76:4c:9f:62:91:7e:00:c5:a9:d4:3c:98:76:8a: a3:08:22:bf:cc:d7:92:44:10:57:a4:f2:06:b6:ae:34:e1:37: 91:76:6f:32:60:da:ef:51:f7:06:23:22:78:d6:8b:89:bb:75: 35:e8:7a:64:64:c9:b0:c1:af:40:1c:9a:e7:6e:a0:b4:c7:1a: 58:00:8e:a2:a2:25:bc:49:8b:f3:94:51:51:cd:8c:bc:88:69: 28:db:6d:ab:a8:73:68:61:37:b2:4f:6d:d6:1d:d9:01:c3:4c: 66:cc:94:ca:6e:3a:f5:ff:0d:92:13:8b:b5:22:38:84:60:00: dd:bd:1a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKgRA5HTvKUKEipuy6XyxehcbA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTExMDMyMDI3MDBaFw0yNTExMDcwMzM2MDBaMDMxMTAvBgNV BAMTKEYxNURBOUE4N0RCMkRCRUZEQkI4QUY2OTI2OEYwMThCNUM0MTY3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgI+xvWotlN3PAKlzs0342J83 kItyk1DHY7Pw++g+A+xawBFSFF7h8Xzjh0t51jDIQPEXywCDO9SCXRtXHemShL+5 wG7zeMuWqtJKEYdPSR2Fj4pY/FeFQGZCgsfQEMjyGtZ6KdYO5IO5dsOnbbi3GgKF +gswLCQ3vxKaCt1MWLVaVHepNfX7H0PdizTp+H8cztTKWfjDptMGgBcE/ksSpXXj lTeW8+JZomBbwDIQeoih8I57rGl19/FrcehQ0RYJ00uv/y9wGI//p19FbKQWklYk wc6YivfeiXLEcDz6fzuT7xHK/YL3SdWD3AfBwGlEIydyoqiTfxVdP722+U1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8V2pqH2y2+/buK9pJo8Bi1xBZ28wHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjmjqPzIUGA+OM6oQg4rlSqOars7WnQKkGj NtuB1atuXNfPRKfzV9KLQxk3JKFJtL0sdb4Whr7bsu6sePpEXYVP37kHP/yIR7+s LDz7RWvQdjHH8hyp4YcwIJ0N15XdXSp9QCZJl/jP3a4ih2ILTW44VU2omI7D3CJy lDhdQsWvMj92TJ9ikX4AxanUPJh2iqMIIr/M15JEEFek8ga2rjThN5F2bzJg2u9R 9wYjInjWi4m7dTXoemRkybDBr0AcmuduoLTHGlgAjqKiJbxJi/OUUVHNjLyIaSjb bauoc2hhN7JPbdYd2QHDTGbMlMpuOvX/DZITi7UiOIRgAN29Gv0= -----END CERTIFICATE-----Generated at Tue Nov 4 06:03:00 2025 by rpki-client