$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: gzAp/moqNCoRpuJOP1jjkDCpZQ5hjCNEMbboeXR5N1s= Subject key identifier: 68:A3:B6:26:03:C5:EF:7F:A7:8B:79:E6:14:0C:28:9A:EB:92:27:AC Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 7BE86C7405709223AD3C86FC4D4079F236E78CC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01C3 Signing time: Wed 05 Nov 2025 16:11:41 +0000 Manifest this update: Wed 05 Nov 2025 16:06:41 +0000 Manifest next update: Sat 08 Nov 2025 22:02:41 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: jwBm9U9s2SgQ38FclUPlTr+DU2ECtAX7p4m+YM/I+YQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e8:6c:74:05:70:92:23:ad:3c:86:fc:4d:40:79:f2:36:e7:8c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Nov 5 16:06:41 2025 GMT Not After : Nov 8 22:02:41 2025 GMT Subject: CN=68A3B62603C5EF7FA78B79E6140C289AEB9227AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:06:8a:2a:7a:c6:cc:58:1a:e0:06:0d:58: a0:8c:07:55:28:84:bf:95:2c:55:be:e1:06:31:4c: a4:fb:4f:67:13:7f:ee:d5:ca:57:42:33:15:85:63: b8:38:dc:ac:f8:0f:8d:61:c9:3c:1d:d5:d7:64:6f: 2f:c8:92:ba:50:44:96:ea:da:fd:1e:1a:06:be:87: 33:56:f3:f0:1b:bf:b2:8b:7d:4e:0b:4f:b0:85:90: 93:18:5e:6a:bd:ae:07:db:e1:0d:53:d8:97:a1:ea: 51:9b:36:2e:22:95:70:82:40:46:95:68:a4:45:25: 75:80:ae:c3:8a:42:04:c9:63:6e:87:46:b8:0c:a9: d7:fa:f0:af:74:35:1b:99:22:34:a2:28:78:49:9a: d7:9d:d3:82:2c:2b:74:be:a6:48:ce:c6:38:bb:53: 5d:31:76:b0:3d:8c:ae:82:02:73:83:b5:1c:f7:23: 1b:f4:81:01:a5:5c:06:8c:78:61:45:1a:a0:08:d5: dc:6a:8a:c7:7b:c1:e5:c0:b5:e1:2a:77:d4:72:d5: 0c:7c:70:e5:c5:23:bb:6b:5d:ee:dd:78:17:f7:2c: ff:13:45:63:52:54:5f:dd:87:12:29:61:79:bc:9a: f5:04:f5:1c:06:b8:e9:79:6b:59:7a:33:64:a2:80: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:B6:26:03:C5:EF:7F:A7:8B:79:E6:14:0C:28:9A:EB:92:27:AC X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c2:56:af:90:88:e3:fd:9a:ee:40:57:4d:c1:73:4f:d6:0b: fd:ca:18:e2:3a:e9:44:8a:8d:15:73:eb:27:7e:6d:11:13:8d: e2:24:9f:72:fe:e1:5e:c7:30:53:f3:e8:60:b7:28:3f:0d:6d: a7:68:b6:44:6a:ba:62:f3:9c:1a:6b:50:5a:e9:26:fa:91:c4: 0f:db:8b:6a:76:ec:da:29:41:ec:61:89:90:48:58:ab:b3:0d: 6c:ad:1d:e6:fa:db:e2:ac:7e:6a:0b:2c:54:77:2e:30:db:51: ba:c8:e6:7b:05:73:7b:ad:46:9b:be:02:0d:d5:45:bd:f8:31: d4:20:48:14:59:34:9b:7f:af:fe:96:9d:cf:da:93:bf:1b:cb: 42:9a:c5:3c:75:e8:56:04:ab:5f:11:a8:2e:00:81:b1:a3:41: 4b:01:23:ff:3b:6a:5e:8c:b3:c2:dd:57:80:77:b5:33:9e:3d: fe:f4:a8:41:ec:75:8d:d7:7e:ac:cf:86:2d:59:fb:a6:15:a1: 82:46:ff:f9:23:00:78:20:7a:d7:93:84:de:0f:7c:42:72:61: ac:b3:b4:59:45:b7:30:d5:9f:28:c4:8b:c6:6e:a7:f6:89:f1: f3:fc:66:a7:b5:92:24:da:4b:3f:70:77:d6:12:00:87:07:36: 10:9f:ae:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+hsdAVwkiOtPIb8TUB58jbnjMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTExMDUxNjA2NDFaFw0yNTExMDgyMjAyNDFaMDMxMTAvBgNV BAMTKDY4QTNCNjI2MDNDNUVGN0ZBNzhCNzlFNjE0MEMyODlBRUI5MjI3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkQaKKnrGzFga4AYNWKCMB1Uo hL+VLFW+4QYxTKT7T2cTf+7VyldCMxWFY7g43Kz4D41hyTwd1ddkby/IkrpQRJbq 2v0eGga+hzNW8/Abv7KLfU4LT7CFkJMYXmq9rgfb4Q1T2Jeh6lGbNi4ilXCCQEaV aKRFJXWArsOKQgTJY26HRrgMqdf68K90NRuZIjSiKHhJmted04IsK3S+pkjOxji7 U10xdrA9jK6CAnODtRz3Ixv0gQGlXAaMeGFFGqAI1dxqisd7weXAteEqd9Ry1Qx8 cOXFI7trXe7deBf3LP8TRWNSVF/dhxIpYXm8mvUE9RwGuOl5a1l6M2SigMb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKO2JgPF73+ni3nmFAwomuuSJ6wwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbCVq+QiOP9mu5AV03Bc0/WC/3KGOI66USK jRVz6yd+bRETjeIkn3L+4V7HMFPz6GC3KD8NbadotkRqumLznBprUFrpJvqRxA/b i2p27NopQexhiZBIWKuzDWytHeb62+KsfmoLLFR3LjDbUbrI5nsFc3utRpu+Ag3V Rb34MdQgSBRZNJt/r/6Wnc/ak78by0KaxTx16FYEq18RqC4AgbGjQUsBI/87al6M s8LdV4B3tTOePf70qEHsdY3XfqzPhi1Z+6YVoYJG//kjAHggeteThN4PfEJyYayz tFlFtzDVnyjEi8Zup/aJ8fP8Zqe1kiTaSz9wd9YSAIcHNhCfrtU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:46 2025 by rpki-client