$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: i5iCFm1o31dx5ECiLD012tFZtsSbCqg7G2U+6zp+y18= Subject key identifier: 01:1F:9A:B5:65:8E:EB:F8:8E:F7:B5:26:0E:35:21:6C:55:9A:3E:25 Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 0FD8577E17889D69215C5C597067F361D5C0D22C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: 9F Signing time: Tue 04 Nov 2025 02:11:23 +0000 Manifest this update: Tue 04 Nov 2025 02:06:23 +0000 Manifest next update: Fri 07 Nov 2025 05:35:23 +0000 Files and hashes: 1: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: pAbZqfylqMrX9CAdfcFK2bFIzKO+Nve3Heo5O6ORrnc=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: IcWkQYDLFcPwwtzYdPcj5i2iEcvHXh39BUHPHZLmTXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d8:57:7e:17:88:9d:69:21:5c:5c:59:70:67:f3:61:d5:c0:d2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Nov 4 02:06:23 2025 GMT Not After : Nov 7 05:35:23 2025 GMT Subject: CN=011F9AB5658EEBF88EF7B5260E35216C559A3E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:78:27:0e:62:b0:7c:88:e8:1c:91:95:cb: da:c1:4c:b8:cb:e2:f1:b8:45:17:dc:1c:ef:7a:ca: 82:80:87:90:c9:a7:3b:51:cd:74:38:a9:a3:c1:bd: 7d:31:10:d8:b9:b0:7c:ec:76:f2:87:82:80:fd:85: 99:51:93:4a:39:fd:b9:b7:74:26:20:55:94:5b:38: 51:cf:68:06:a3:6f:44:ed:1e:5a:a5:d3:72:89:aa: 21:f7:af:af:26:75:6a:0b:df:67:73:0e:db:0c:e0: 0f:b0:97:e5:4d:a4:d2:34:f2:8e:da:7a:ea:71:b3: 5e:d5:67:63:dd:25:55:46:2c:58:e5:28:74:82:53: 9a:ac:a3:47:d4:e6:c6:af:79:df:e4:b1:77:42:e0: db:ca:97:7b:23:6f:0c:5b:69:67:0d:4a:f5:09:11: 77:49:d7:73:1a:ed:00:9e:bf:96:e2:5a:92:55:32: 75:ce:d1:7f:35:2d:df:29:46:95:45:55:d5:eb:c1: db:a4:7f:5f:cb:5d:8c:47:af:7d:ff:3d:13:25:70: 9c:6e:1e:ac:d3:fb:91:d7:18:f6:45:54:06:c3:8c: 1d:88:f0:78:e9:e0:5e:d2:a8:1b:1c:55:08:d2:52: 5a:20:76:1e:82:9f:b4:29:b7:eb:73:5f:f2:1b:31: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:9A:B5:65:8E:EB:F8:8E:F7:B5:26:0E:35:21:6C:55:9A:3E:25 X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:bb:3b:a8:dd:46:d3:19:52:cb:db:6e:be:a0:25:b4:23: 1e:d8:07:d4:7c:85:97:af:6b:49:2d:06:12:76:d6:96:04:c6: 24:c5:28:0e:f8:bf:07:4f:f7:88:2f:b9:21:a0:73:98:44:3c: c9:34:a1:ba:77:2e:6d:d8:95:ed:8c:e5:58:10:a6:a8:22:4c: 41:3f:1a:8d:22:e0:80:e7:02:39:d1:f4:74:9d:11:aa:57:9a: 47:95:63:e9:fd:bb:24:72:37:a5:3f:81:01:f8:8b:4d:95:9b: 1a:d4:75:e8:a8:15:7c:40:ce:2c:d3:6e:c3:97:cb:a6:55:7a: f2:f0:f9:21:59:b0:43:8d:74:16:c4:02:76:37:27:01:f7:92: 54:6d:fa:90:9a:c9:16:0d:0b:e4:3e:c1:70:96:52:3e:ea:37: 1e:25:ad:e0:bc:f4:96:8c:87:26:47:e9:63:da:94:a3:6c:ab: 92:f2:c4:cd:5b:21:bd:48:af:41:d6:eb:12:09:6a:d8:47:b5: 4d:e7:bc:17:e8:13:16:4a:1c:0b:cc:5f:db:9e:31:c2:a6:c5: 27:0a:2e:be:d8:95:28:43:c4:b3:18:bc:07:5a:96:f9:08:9d: 4a:5a:71:a4:a4:8a:6a:90:a1:76:74:09:da:a0:f5:f6:bf:2d: 8e:07:18:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9hXfheInWkhXFxZcGfzYdXA0iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNTExMDQwMjA2MjNaFw0yNTExMDcwNTM1MjNaMDMxMTAvBgNV BAMTKDAxMUY5QUI1NjU4RUVCRjg4RUY3QjUyNjBFMzUyMTZDNTU5QTNFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqngnDmKwfIjoHJGVy9rBTLjL 4vG4RRfcHO96yoKAh5DJpztRzXQ4qaPBvX0xENi5sHzsdvKHgoD9hZlRk0o5/bm3 dCYgVZRbOFHPaAajb0TtHlql03KJqiH3r68mdWoL32dzDtsM4A+wl+VNpNI08o7a eupxs17VZ2PdJVVGLFjlKHSCU5qso0fU5saved/ksXdC4NvKl3sjbwxbaWcNSvUJ EXdJ13Ma7QCev5biWpJVMnXO0X81Ld8pRpVFVdXrwdukf1/LXYxHr33/PRMlcJxu HqzT+5HXGPZFVAbDjB2I8Hjp4F7SqBscVQjSUlogdh6Cn7Qpt+tzX/IbMXNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAR+atWWO6/iO97UmDjUhbFWaPiUwHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSEuzuo3UbTGVLL226+oCW0Ix7YB9R8hZev a0ktBhJ21pYExiTFKA74vwdP94gvuSGgc5hEPMk0obp3Lm3Yle2M5VgQpqgiTEE/ Go0i4IDnAjnR9HSdEapXmkeVY+n9uyRyN6U/gQH4i02VmxrUdeioFXxAzizTbsOX y6ZVevLw+SFZsEONdBbEAnY3JwH3klRt+pCayRYNC+Q+wXCWUj7qNx4lreC89JaM hyZH6WPalKNsq5LyxM1bIb1Ir0HW6xIJathHtU3nvBfoExZKHAvMX9ueMcKmxScK Lr7YlShDxLMYvAdalvkInUpacaSkimqQoXZ0Cdqg9fa/LY4HGE0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:51 2025 by rpki-client