$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: Gs93QYvpQMIETmjfvT08MuPleaBW1mLQ2EaVW7VajW4= Subject key identifier: 1D:85:D3:31:8D:FD:27:12:FC:55:DE:39:7E:AB:03:5A:B8:A2:41:E0 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 4AF57D9FE2D001B4571A77F5B0EFF0576720BAA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 024D Signing time: Sun 26 Oct 2025 10:42:04 +0000 Manifest this update: Sun 26 Oct 2025 10:37:04 +0000 Manifest next update: Wed 29 Oct 2025 19:20:04 +0000 Files and hashes: 1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: gIQKRi/tsTfV7b3RZevMsBIJp1tbiBN0MVyo1PXFHJc=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 19:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:7d:9f:e2:d0:01:b4:57:1a:77:f5:b0:ef:f0:57:67:20:ba:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Oct 26 10:37:04 2025 GMT Not After : Oct 29 19:20:04 2025 GMT Subject: CN=1D85D3318DFD2712FC55DE397EAB035AB8A241E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:6e:6d:96:9c:ed:3c:2a:6f:3f:c0:4e:a3: 65:14:c5:7f:01:8e:d6:72:1d:12:02:4b:17:2f:a6: ed:9a:bc:ee:ac:a2:52:4f:9e:07:bb:e5:54:1d:32: 7c:16:40:47:91:a4:d0:1a:97:02:cb:2d:d7:2a:aa: dc:72:d6:4f:4e:1d:03:62:98:9c:b9:6c:a0:52:37: ec:f2:64:ba:58:fc:d9:97:9d:5d:a5:a2:4c:64:0e: 40:77:cd:b2:b6:74:c5:bf:f7:26:85:15:4c:8e:14: 36:ca:4d:4c:12:52:3a:4e:3f:51:aa:30:bf:64:fb: 80:83:2a:88:bb:1d:ae:9c:e2:24:8b:df:2f:62:81: af:a2:47:5b:ce:3d:b6:b5:52:66:62:b7:2e:c7:11: 56:3b:43:5e:c4:56:8c:bb:98:51:ee:66:e7:68:ab: 99:ea:83:8b:9e:d3:c4:c0:7c:11:ad:01:69:51:5e: bd:4f:b0:72:a6:bc:55:7d:f5:7e:50:7b:b1:d2:c1: 7a:75:d0:5f:b5:90:2a:2f:60:85:86:9c:f9:72:bb: 24:50:77:5f:86:6d:c3:04:68:ce:66:4a:c2:f4:77: 61:f1:5f:51:6e:9e:1a:70:99:39:ac:65:02:2b:8c: 22:e2:2e:e0:20:3b:ea:67:f0:9b:2c:42:91:ec:30: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:85:D3:31:8D:FD:27:12:FC:55:DE:39:7E:AB:03:5A:B8:A2:41:E0 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:05:d0:3f:0d:5f:e0:73:6a:63:f5:78:f6:b2:9d:f5:fd: 9b:2e:76:97:ad:83:f1:a3:54:e1:28:94:45:f4:2c:7b:56:63: 4a:ae:9e:3b:2a:67:c7:08:a4:2f:02:5e:f9:4d:dd:7f:57:7f: 08:38:45:f3:f7:3d:f2:c9:90:04:28:e4:76:12:fd:26:4a:52: 6c:bf:e9:ed:f6:33:b7:75:32:21:c9:98:5e:d4:a3:99:57:b0: 4a:a2:5d:d3:c8:4c:c5:67:c6:1e:63:a9:84:2b:28:76:f7:ce: 4c:25:ca:32:0d:87:f7:a3:74:d4:9a:61:66:e1:f3:a1:1d:23: 65:28:69:06:6e:cd:4e:1c:bb:04:84:dc:89:ba:c7:33:6d:bb: 06:77:0a:c2:8e:97:68:4f:a1:a2:8b:c7:9b:68:02:b6:cd:cc: ce:98:53:8b:8f:be:6e:bb:69:ff:02:08:cd:08:a2:06:74:e5: 2f:38:b8:46:06:1c:1b:62:c8:5a:99:a9:a6:35:ec:cf:99:f3: 84:0d:97:e6:21:f3:17:83:db:f6:ce:07:0f:47:bf:f8:ab:ad: 01:69:cf:9a:0f:53:07:80:84:66:a7:fe:dd:bb:3f:94:2f:2e: 3a:a9:0e:b8:14:d9:4d:ce:be:95:f9:df:6c:1e:b4:18:84:f2: ab:39:db:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvV9n+LQAbRXGnf1sO/wV2cguqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTEwMjYxMDM3MDRaFw0yNTEwMjkxOTIwMDRaMDMxMTAvBgNV BAMTKDFEODVEMzMxOERGRDI3MTJGQzU1REUzOTdFQUIwMzVBQjhBMjQxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuK25tlpztPCpvP8BOo2UUxX8B jtZyHRICSxcvpu2avO6solJPnge75VQdMnwWQEeRpNAalwLLLdcqqtxy1k9OHQNi mJy5bKBSN+zyZLpY/NmXnV2lokxkDkB3zbK2dMW/9yaFFUyOFDbKTUwSUjpOP1Gq ML9k+4CDKoi7Ha6c4iSL3y9iga+iR1vOPba1UmZity7HEVY7Q17EVoy7mFHuZudo q5nqg4ue08TAfBGtAWlRXr1PsHKmvFV99X5Qe7HSwXp10F+1kCovYIWGnPlyuyRQ d1+GbcMEaM5mSsL0d2HxX1FunhpwmTmsZQIrjCLiLuAgO+pn8JssQpHsMF3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYXTMY39JxL8Vd45fqsDWriiQeAwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiFBdA/DV/gc2pj9Xj2sp31/Zsudpetg/Gj VOEolEX0LHtWY0qunjsqZ8cIpC8CXvlN3X9Xfwg4RfP3PfLJkAQo5HYS/SZKUmy/ 6e32M7d1MiHJmF7Uo5lXsEqiXdPITMVnxh5jqYQrKHb3zkwlyjINh/ejdNSaYWbh 86EdI2UoaQZuzU4cuwSE3Im6xzNtuwZ3CsKOl2hPoaKLx5toArbNzM6YU4uPvm67 af8CCM0IogZ05S84uEYGHBtiyFqZqaY17M+Z84QNl+Yh8xeD2/bOBw9Hv/irrQFp z5oPUweAhGan/t27P5QvLjqpDrgU2U3OvpX532wetBiE8qs521g= -----END CERTIFICATE-----Generated at Tue Oct 28 06:25:48 2025 by rpki-client