$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json) Hash identifier: qUbJDaqUTavAxLHFOlO3Pfh2M0y8+rZayGV/zz4FRd8= Subject key identifier: FA:76:93:60:2B:1C:2E:07:44:4E:1F:C5:46:9C:E8:A2:4F:BF:F4:74 Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Certificate serial: 0FDD96BFAB2B40B983A3FE64AA329D7BE24FE22A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft Manifest number: 11 Signing time: Sun 02 Nov 2025 02:11:03 +0000 Manifest this update: Sun 02 Nov 2025 02:06:03 +0000 Manifest next update: Wed 05 Nov 2025 11:09:03 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=) 2: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: OPzXC5ugZGEAMqan1Q1tompJWfzeTnGCp2xFADj+Qho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dd:96:bf:ab:2b:40:b9:83:a3:fe:64:aa:32:9d:7b:e2:4f:e2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Validity Not Before: Nov 2 02:06:03 2025 GMT Not After : Nov 5 11:09:03 2025 GMT Subject: CN=FA7693602B1C2E07444E1FC5469CE8A24FBFF474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:8d:aa:dd:bf:63:aa:72:01:d3:11:99:44: 31:e9:41:97:f2:30:66:8c:2d:e1:4f:b7:7f:86:f5: c7:e7:f2:97:49:e2:80:22:1e:48:57:75:a2:1c:2c: 09:2d:db:7a:b9:0f:e9:59:f0:af:6d:e4:db:d4:d1: 47:59:04:da:5a:b9:30:0c:fa:31:bf:55:61:ba:1e: 5d:23:32:ec:cf:99:b5:05:45:96:73:a7:21:d8:9f: 19:9c:4a:47:fe:b8:f1:e0:1d:9c:2f:68:23:2c:47: ac:2e:f9:1d:3b:c8:8a:f2:3b:a3:88:28:d2:da:01: 5b:1e:17:d2:6b:ae:77:1d:c6:a6:4f:ff:40:42:94: b7:51:35:24:30:d9:fb:b9:47:ad:36:4a:ca:8d:f0: 33:c6:a8:5f:19:9a:9a:f9:70:82:d7:69:ae:58:c2: 95:0f:41:5f:b1:69:a2:e1:ce:50:69:d0:07:f0:78: e7:83:cd:22:a5:f0:ba:77:2a:cc:0f:78:54:23:5b: 16:e9:4c:48:65:2f:4f:16:5e:95:7e:92:80:73:e0: cf:7a:76:91:0e:47:c7:f0:73:1e:49:e1:78:c0:99: f2:33:15:92:fd:66:fd:40:d6:5c:46:c1:a6:77:b9: 96:68:bf:21:6b:3a:34:1a:09:b8:d3:1d:55:fb:68: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:76:93:60:2B:1C:2E:07:44:4E:1F:C5:46:9C:E8:A2:4F:BF:F4:74 X509v3 Authority Key Identifier: keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:7d:42:70:65:f6:01:d5:ec:45:ab:06:cc:33:22:3c:54: a2:d1:8c:6b:f6:78:6f:63:32:12:00:51:80:47:04:d1:bd:86: b9:ec:80:2a:e5:ae:03:1a:3e:64:49:07:a1:3c:79:a9:f9:96: 2c:9c:d7:f7:6c:de:2a:1e:8d:16:cb:2b:69:88:c0:6b:9f:3e: 00:d0:24:e0:8f:96:07:d5:dd:58:02:cf:b0:ca:af:c1:13:a1: cc:7a:b3:84:c0:93:32:f9:cd:7f:38:84:b4:e7:f9:ae:81:c9: e8:4c:44:fb:e6:c7:40:5a:7a:36:8b:f1:79:ec:18:13:eb:4e: 60:b3:b0:d3:8a:19:9f:7e:25:bd:60:9e:42:a1:ef:ab:a4:c6: ea:55:6e:70:49:8d:f5:79:7d:76:de:d6:37:d8:f4:6e:09:0d: 98:60:12:78:94:80:0d:f6:dc:c8:46:c0:3b:04:21:44:e7:15: 0f:dd:da:57:ba:a7:14:40:4d:92:d8:8c:67:53:b8:03:a1:46: a0:7b:f3:d2:f3:c1:35:1c:48:8d:01:2d:04:48:d9:92:df:f9: 1a:6e:44:7f:7d:51:69:77:38:0f:b0:46:0c:d9:5c:90:bc:63: 34:aa:86:53:32:88:12:ce:67:ee:22:12:cd:c8:61:be:4c:5c: fb:12:b2:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD92Wv6srQLmDo/5kqjKde+JP4iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdB OTZGMzZDRTAeFw0yNTExMDIwMjA2MDNaFw0yNTExMDUxMTA5MDNaMDMxMTAvBgNV BAMTKEZBNzY5MzYwMkIxQzJFMDc0NDRFMUZDNTQ2OUNFOEEyNEZCRkY0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIY2q3b9jqnIB0xGZRDHpQZfy MGaMLeFPt3+G9cfn8pdJ4oAiHkhXdaIcLAkt23q5D+lZ8K9t5NvU0UdZBNpauTAM +jG/VWG6Hl0jMuzPmbUFRZZzpyHYnxmcSkf+uPHgHZwvaCMsR6wu+R07yIryO6OI KNLaAVseF9JrrncdxqZP/0BClLdRNSQw2fu5R602SsqN8DPGqF8Zmpr5cILXaa5Y wpUPQV+xaaLhzlBp0AfweOeDzSKl8Lp3KswPeFQjWxbpTEhlL08WXpV+koBz4M96 dpEOR8fwcx5J4XjAmfIzFZL9Zv1A1lxGwaZ3uZZovyFrOjQaCbjTHVX7aE7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+naTYCscLgdETh/FRpzook+/9HQwHwYDVR0j BBgwFoAUXyLSCE93S2jZ3pdjOXtWV6lvNs4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWIxYTc5MC1kY2VkLTQ2NGEtODk1ZC05MDM1YTBjYzVmMmYvMC81RjIyRDIwODRG Nzc0QjY4RDlERTk3NjMzOTdCNTY1N0E5NkYzNkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdBOTZG MzZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2 NTdBOTZGMzZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp+fUJwZfYB1exFqwbMMyI8VKLRjGv2eG9j MhIAUYBHBNG9hrnsgCrlrgMaPmRJB6E8ean5liyc1/ds3ioejRbLK2mIwGufPgDQ JOCPlgfV3VgCz7DKr8ETocx6s4TAkzL5zX84hLTn+a6ByehMRPvmx0BaejaL8Xns GBPrTmCzsNOKGZ9+Jb1gnkKh76ukxupVbnBJjfV5fXbe1jfY9G4JDZhgEniUgA32 3MhGwDsEIUTnFQ/d2le6pxRATZLYjGdTuAOhRqB789LzwTUcSI0BLQRI2ZLf+Rpu RH99UWl3OA+wRgzZXJC8YzSqhlMyiBLOZ+4iEs3IYb5MXPsSsmo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:49 2025 by rpki-client