$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: px82ScWsahPfHVzRMKKDuGiz3S0K2+XTBGQpmQjexzM= Subject key identifier: F9:C0:69:3E:62:40:41:1C:AA:15:F8:35:CD:9F:A7:12:AB:F5:3F:F3 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 777AC0F519A4D1EC2B5554287A40D92BD0C99E54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 04AF Signing time: Sat 18 Oct 2025 10:51:50 +0000 Manifest this update: Sat 18 Oct 2025 10:46:50 +0000 Manifest next update: Tue 21 Oct 2025 14:39:50 +0000 Files and hashes: 1: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=) 2: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=) 3: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: JjAC5tUl4t9d4kp23hG1rPfaWTLrriorl142VulpDr0=) 4: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:c0:f5:19:a4:d1:ec:2b:55:54:28:7a:40:d9:2b:d0:c9:9e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Oct 18 10:46:50 2025 GMT Not After : Oct 21 14:39:50 2025 GMT Subject: CN=F9C0693E6240411CAA15F835CD9FA712ABF53FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:f6:9f:7a:e8:76:a2:22:fc:40:53:f2:73: c7:ab:3b:bb:8f:61:53:ff:03:15:9c:47:b2:60:3a: e5:f8:0a:0c:86:c4:bd:f7:a4:e0:cd:d6:e1:ea:a6: 5d:e2:7d:36:c6:3b:26:d1:26:46:3a:ff:82:14:ae: aa:f8:93:bb:2d:d8:16:a3:f2:7f:8c:d0:03:7e:59: 14:b9:f3:68:81:b4:63:65:fd:16:ca:7d:36:8e:b9: f0:7d:e2:83:80:0e:a4:a3:0e:a4:39:8a:2c:4f:24: 27:b3:7f:61:99:ab:c2:1e:6e:e7:d7:9a:66:ee:d6: f6:49:11:e9:9a:4e:a0:1a:13:6b:f4:93:a4:17:89: a0:d3:66:4b:3a:46:5a:88:fb:35:e3:0f:6c:c3:29: 81:e6:b4:61:93:ae:ab:94:9c:c4:87:78:8d:19:3e: f7:34:a2:1e:be:43:e7:65:cb:c3:8d:d6:47:a4:3c: 6e:e0:39:90:6d:0c:cb:55:9f:91:39:0b:0b:6c:ab: ca:29:30:6a:d9:71:5b:3b:33:3b:c8:ae:c0:c9:7c: 56:21:64:96:5f:7e:3e:f5:73:3b:da:bc:73:38:a4: 86:4a:13:39:71:ff:7d:46:65:85:6c:74:fc:28:82: 5a:00:40:cf:03:b7:91:92:bf:a2:b4:ce:0d:47:80: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C0:69:3E:62:40:41:1C:AA:15:F8:35:CD:9F:A7:12:AB:F5:3F:F3 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:3b:63:b0:ce:50:a1:60:a0:d6:a5:b1:d8:29:1a:1b:ba: ca:5e:47:53:86:d6:d8:a0:5a:c9:fc:7f:4c:da:02:38:4c:52: 6c:c1:e3:1d:96:d2:7d:28:c3:ab:b7:19:02:8a:56:9a:5f:80: e4:c1:7a:69:17:36:15:98:55:43:1f:cf:15:3f:9b:f4:4c:fe: c9:f9:8e:04:0b:9a:46:36:22:55:59:42:58:83:38:18:cb:be: f4:bc:ee:a6:fb:55:43:34:2a:fe:c4:22:ba:ea:ed:0e:12:16: b5:26:2a:26:67:c3:a3:41:4c:f5:e2:51:c7:54:06:39:85:53: 44:65:c2:ae:4c:f2:d1:e5:6f:2f:53:8c:26:5c:ee:67:a3:53: ec:f8:7d:13:9f:a7:fa:28:e8:2b:15:7c:0c:ca:0d:ea:98:a3: d6:2c:74:ff:d3:4e:a0:69:41:44:f5:4d:1a:49:69:c6:41:87: 3f:61:02:47:73:bf:84:a4:f0:ce:98:8a:4b:88:21:fc:a5:8a: 13:a7:dc:62:5a:3c:62:36:51:f5:94:3d:f3:7d:6d:45:80:42: 0b:1a:f8:bb:17:8c:ad:89:c5:d4:e4:ed:f7:ec:b2:16:8e:90: 78:3e:bf:b5:04:fe:c2:73:e3:2a:99:79:c3:8b:48:a4:10:28: 7d:e1:a5:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3rA9Rmk0ewrVVQoekDZK9DJnlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNTEwMTgxMDQ2NTBaFw0yNTEwMjExNDM5NTBaMDMxMTAvBgNV BAMTKEY5QzA2OTNFNjI0MDQxMUNBQTE1RjgzNUNEOUZBNzEyQUJGNTNGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uPafeuh2oiL8QFPyc8erO7uP YVP/AxWcR7JgOuX4CgyGxL33pODN1uHqpl3ifTbGOybRJkY6/4IUrqr4k7st2Baj 8n+M0AN+WRS582iBtGNl/RbKfTaOufB94oOADqSjDqQ5iixPJCezf2GZq8IebufX mmbu1vZJEemaTqAaE2v0k6QXiaDTZks6RlqI+zXjD2zDKYHmtGGTrquUnMSHeI0Z Pvc0oh6+Q+dly8ON1kekPG7gOZBtDMtVn5E5Cwtsq8opMGrZcVs7MzvIrsDJfFYh ZJZffj71czvavHM4pIZKEzlx/31GZYVsdPwogloAQM8Dt5GSv6K0zg1HgInlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+cBpPmJAQRyqFfg1zZ+nEqv1P/MwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGblO2OwzlChYKDWpbHYKRobuspeR1OG1tig Wsn8f0zaAjhMUmzB4x2W0n0ow6u3GQKKVppfgOTBemkXNhWYVUMfzxU/m/RM/sn5 jgQLmkY2IlVZQliDOBjLvvS87qb7VUM0Kv7EIrrq7Q4SFrUmKiZnw6NBTPXiUcdU BjmFU0Rlwq5M8tHlby9TjCZc7mejU+z4fROfp/oo6CsVfAzKDeqYo9YsdP/TTqBp QUT1TRpJacZBhz9hAkdzv4Sk8M6YikuIIfylihOn3GJaPGI2UfWUPfN9bUWAQgsa +LsXjK2JxdTk7ffsshaOkHg+v7UE/sJz4yqZecOLSKQQKH3hpaM= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:51 2025 by rpki-client