$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: 8y1+QqEP0oCc7k2ss8NteZuglNvr4EyddT/cmH9wnts= Subject key identifier: D1:5C:94:DC:D4:DA:EE:22:5D:7E:7D:BF:1F:81:0B:FE:E9:15:5D:49 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 6E829CEE359E884979EB4DB7DC9E1EE9E9860CD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 16:20:46 +0000 Manifest this update: Mon 03 Nov 2025 16:15:46 +0000 Manifest next update: Fri 07 Nov 2025 01:36:46 +0000 Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: WUHnPyQpXfizgDJ70YHTx+vNYs2BeYw4ven6hR6cHMQ=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:82:9c:ee:35:9e:88:49:79:eb:4d:b7:dc:9e:1e:e9:e9:86:0c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Nov 3 16:15:46 2025 GMT Not After : Nov 7 01:36:46 2025 GMT Subject: CN=D15C94DCD4DAEE225D7E7DBF1F810BFEE9155D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:e6:90:42:42:cd:24:62:e8:13:82:ee:4a: 53:7b:38:e0:c7:db:3c:48:4c:e1:98:2b:f6:39:e7: 38:b2:14:bd:de:ad:6d:8c:0f:73:3f:cd:d4:e0:c6: 67:38:2c:9c:2a:de:77:a1:c5:b7:56:25:c1:d1:2a: 49:e0:7a:2f:f4:b5:df:47:66:71:77:5a:14:4a:4a: 7b:99:93:2b:48:26:72:32:19:a4:ec:a7:cb:db:28: 53:46:a4:d8:9f:a8:43:32:46:1a:ba:49:0f:d7:a0: 3c:d7:3d:aa:b8:96:e6:07:66:64:8b:14:57:0e:40: 86:dc:83:eb:12:46:a2:3c:c0:a0:83:d7:50:1f:37: 3c:30:ab:f3:d7:7d:e0:41:55:78:ed:4d:0f:17:a3: cb:1e:c1:de:a8:15:4f:f5:be:1c:d0:56:26:e4:25: 8e:e5:f3:79:6f:75:54:97:31:71:28:35:2d:9c:ff: 37:d7:e5:ac:cd:7b:ed:c5:1d:6a:1e:23:a4:9b:bd: 24:e3:d4:af:64:ef:f4:d1:34:81:4f:c3:ad:9e:33: 9e:dc:ad:74:bc:7b:5b:b2:e2:61:bf:cf:c5:72:98: cb:7c:cd:a4:d2:31:8e:f3:84:e9:21:7b:4f:1a:cd: 08:66:0c:d7:12:bf:70:69:91:e7:3d:63:93:6d:0d: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5C:94:DC:D4:DA:EE:22:5D:7E:7D:BF:1F:81:0B:FE:E9:15:5D:49 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9f:a2:bd:bf:07:7f:b5:87:9d:68:b7:db:15:c8:b3:2d:53: cd:21:51:31:83:35:54:1f:77:6f:da:96:7e:f4:81:62:2c:3f: 5a:57:35:3d:7d:1d:f5:f6:8c:3f:fe:68:fa:cd:0c:7a:1f:c3: 36:55:a0:7e:88:28:14:2b:58:fa:e7:d9:2f:c6:0b:46:3e:15: ec:17:f5:bd:55:ac:24:81:f7:19:ea:3b:54:5a:5b:f7:e2:51: c0:eb:57:e7:1d:4c:18:b1:da:20:8b:7e:b6:bd:91:c3:24:22: df:a7:bc:30:2e:45:d1:0a:e2:8b:19:d7:36:ba:8f:d1:1b:bd: d7:89:0a:70:1a:4d:80:7d:ef:18:3c:25:20:c0:a8:59:a8:40: 5a:aa:a4:a9:40:30:91:57:34:b5:7d:1f:89:ca:e4:e0:ee:b5: 38:a9:e7:a1:64:a9:e6:e1:90:72:da:f4:de:ec:43:ad:fa:0e: e5:53:80:89:61:42:3a:ce:de:a8:5d:23:a3:84:00:2b:1b:c3: 0e:9e:2b:aa:f4:44:12:e8:76:03:36:04:d5:36:21:9b:fc:8c: 5d:5d:37:1f:0e:42:77:de:cf:f5:71:e4:07:95:49:11:27:1b: e4:a3:a8:92:df:ff:7a:ba:c7:19:12:d7:76:7f:36:58:74:99: 0d:6e:12:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboKc7jWeiEl560233J4e6emGDNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTExMDMxNjE1NDZaFw0yNTExMDcwMTM2NDZaMDMxMTAvBgNV BAMTKEQxNUM5NERDRDREQUVFMjI1RDdFN0RCRjFGODEwQkZFRTkxNTVENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNuaQQkLNJGLoE4LuSlN7OODH 2zxITOGYK/Y55ziyFL3erW2MD3M/zdTgxmc4LJwq3nehxbdWJcHRKkngei/0td9H ZnF3WhRKSnuZkytIJnIyGaTsp8vbKFNGpNifqEMyRhq6SQ/XoDzXPaq4luYHZmSL FFcOQIbcg+sSRqI8wKCD11AfNzwwq/PXfeBBVXjtTQ8Xo8sewd6oFU/1vhzQVibk JY7l83lvdVSXMXEoNS2c/zfX5azNe+3FHWoeI6SbvSTj1K9k7/TRNIFPw62eM57c rXS8e1uy4mG/z8VymMt8zaTSMY7zhOkhe08azQhmDNcSv3Bpkec9Y5NtDUgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VyU3NTa7iJdfn2/H4EL/ukVXUkwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyfor2/B3+1h51ot9sVyLMtU80hUTGDNVQf d2/aln70gWIsP1pXNT19HfX2jD/+aPrNDHofwzZVoH6IKBQrWPrn2S/GC0Y+FewX 9b1VrCSB9xnqO1RaW/fiUcDrV+cdTBix2iCLfra9kcMkIt+nvDAuRdEK4osZ1za6 j9EbvdeJCnAaTYB97xg8JSDAqFmoQFqqpKlAMJFXNLV9H4nK5ODutTip56Fkqebh kHLa9N7sQ636DuVTgIlhQjrO3qhdI6OEACsbww6eK6r0RBLodgM2BNU2IZv8jF1d Nx8OQnfez/Vx5AeVSREnG+SjqJLf/3q6xxkS13Z/Nlh0mQ1uEu8= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client