$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: 6Vu5xuKoWyNe0dRXkUOVPckHu2AiU1G3Bz3P7gL/33k= Subject key identifier: 5E:97:82:68:45:7D:C9:93:D5:20:E8:62:58:10:EB:E0:09:DA:3E:15 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 54463D5BAB61407D22446A2489C1FE03BA74306D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01AE Signing time: Mon 03 Nov 2025 22:41:19 +0000 Manifest this update: Mon 03 Nov 2025 22:36:19 +0000 Manifest next update: Fri 07 Nov 2025 08:05:19 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: yv7VXyStHnWnarSS1Ul939ZSsNsTDfWOCt/P/RfngCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:46:3d:5b:ab:61:40:7d:22:44:6a:24:89:c1:fe:03:ba:74:30:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Nov 3 22:36:19 2025 GMT Not After : Nov 7 08:05:19 2025 GMT Subject: CN=5E978268457DC993D520E8625810EBE009DA3E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:36:e1:88:7c:65:85:aa:ca:2a:b0:b8:67: 8c:c8:57:f1:dc:ac:4c:dc:f4:d8:d7:47:38:8b:82: e6:36:b5:93:1b:61:f8:29:b3:45:94:ad:e5:db:ec: 1f:3c:80:26:94:af:35:ff:6b:92:01:e9:28:4c:b8: 60:e4:dc:39:ab:fc:00:84:fe:a5:06:20:5a:5c:28: 7b:6c:7d:f6:41:dc:73:c9:12:bc:94:9c:01:bd:af: ea:fb:5e:dc:1f:b8:e2:63:b7:54:ee:1f:a0:4f:cc: 52:0f:3e:3a:d2:69:d6:2f:81:e9:c0:5d:27:a5:11: 7f:69:23:7d:0c:f6:3f:15:51:07:74:50:4b:3d:cd: dc:ae:77:9b:d2:92:84:f7:35:df:ed:01:7e:59:0b: 05:89:85:f3:db:d7:38:c0:69:cf:06:fc:e5:07:ae: 79:ef:96:bd:29:1c:b4:b4:a4:4d:3e:aa:ae:ed:db: dd:a4:b6:dc:b1:b5:3d:5c:3e:14:dc:31:d5:90:95: 53:9d:49:33:b1:07:c5:c2:d5:68:5f:b3:19:e6:38: 43:e2:b7:54:34:69:c0:9f:79:f5:07:ad:97:03:b1: 64:97:25:56:81:a9:3a:f7:b9:40:55:e6:4e:b0:46: bd:be:26:9e:ea:62:1d:df:37:a5:6f:02:ff:39:3e: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:97:82:68:45:7D:C9:93:D5:20:E8:62:58:10:EB:E0:09:DA:3E:15 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:fd:14:82:e8:2f:aa:3e:75:a4:25:db:a0:32:39:23:75: d5:5e:a9:3e:21:b7:7f:20:1c:ea:a3:e8:1a:d8:14:e4:a6:ed: 98:82:58:0e:d7:3b:ed:4b:e4:5d:86:04:8e:d2:b0:bd:fb:cc: c6:72:d6:24:a6:fb:44:35:5e:f6:e6:b7:79:bb:15:85:5e:28: 63:43:cd:22:bb:23:f5:bc:03:dd:16:0d:40:c4:05:69:21:05: 06:7b:f6:34:05:ca:2b:d1:04:57:95:67:d1:cd:35:1d:37:1c: 93:93:b6:d7:65:ad:ff:c0:54:4a:ad:79:d4:f6:17:ee:3c:01: 92:38:d3:af:eb:75:3d:51:9c:ee:5b:d5:e3:ea:04:59:c6:d0: e9:7d:d6:6e:00:58:28:fa:11:1f:45:28:58:a1:a3:a5:60:19: 7f:f5:74:77:f8:16:08:2a:f1:98:20:27:90:3d:38:42:00:6e: 28:08:83:5f:ab:82:ac:83:aa:9b:14:1c:52:9f:5c:00:c9:0e: 29:34:b3:8a:9c:0f:bb:a9:7d:47:af:dc:57:c6:e3:67:98:27: 4e:64:e8:cb:e4:b6:d4:0e:7f:ae:77:bd:0e:1a:bc:1d:82:fd: 76:5f:39:c1:ea:c9:b3:16:fc:f0:b2:8b:80:dd:86:37:21:bf: 69:04:fe:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEY9W6thQH0iRGokicH+A7p0MG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTExMDMyMjM2MTlaFw0yNTExMDcwODA1MTlaMDMxMTAvBgNV BAMTKDVFOTc4MjY4NDU3REM5OTNENTIwRTg2MjU4MTBFQkUwMDlEQTNFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9jbhiHxlharKKrC4Z4zIV/Hc rEzc9NjXRziLguY2tZMbYfgps0WUreXb7B88gCaUrzX/a5IB6ShMuGDk3Dmr/ACE /qUGIFpcKHtsffZB3HPJEryUnAG9r+r7XtwfuOJjt1TuH6BPzFIPPjrSadYvgenA XSelEX9pI30M9j8VUQd0UEs9zdyud5vSkoT3Nd/tAX5ZCwWJhfPb1zjAac8G/OUH rnnvlr0pHLS0pE0+qq7t292kttyxtT1cPhTcMdWQlVOdSTOxB8XC1WhfsxnmOEPi t1Q0acCfefUHrZcDsWSXJVaBqTr3uUBV5k6wRr2+Jp7qYh3fN6VvAv85PslJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXpeCaEV9yZPVIOhiWBDr4AnaPhUwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEp/RSC6C+qPnWkJdugMjkjddVeqT4ht38g HOqj6BrYFOSm7ZiCWA7XO+1L5F2GBI7SsL37zMZy1iSm+0Q1Xvbmt3m7FYVeKGND zSK7I/W8A90WDUDEBWkhBQZ79jQFyivRBFeVZ9HNNR03HJOTttdlrf/AVEqtedT2 F+48AZI406/rdT1RnO5b1ePqBFnG0Ol91m4AWCj6ER9FKFiho6VgGX/1dHf4Fggq 8ZggJ5A9OEIAbigIg1+rgqyDqpsUHFKfXADJDik0s4qcD7upfUev3FfG42eYJ05k 6MvkttQOf653vQ4avB2C/XZfOcHqybMW/PCyi4Ddhjchv2kE/pI= -----END CERTIFICATE-----Generated at Tue Nov 4 08:10:24 2025 by rpki-client