$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: x1pO3ArdE+hj4zGCTuWdmh8L9dhbLQ2NktWFuaLTwBo= Subject key identifier: 85:59:47:CF:23:60:FA:3C:06:7E:A2:C0:7F:51:29:82:DD:36:BC:56 Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 34F400D2877298674066F82FD07678F47B98B8F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: 0138 Signing time: Mon 03 Nov 2025 04:40:47 +0000 Manifest this update: Mon 03 Nov 2025 04:35:47 +0000 Manifest next update: Thu 06 Nov 2025 10:28:47 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=) 2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: MeKq9jx4Kh1OUP0sByTOn+aqERHsa98Nwz+6oJhp3W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f4:00:d2:87:72:98:67:40:66:f8:2f:d0:76:78:f4:7b:98:b8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Nov 3 04:35:47 2025 GMT Not After : Nov 6 10:28:47 2025 GMT Subject: CN=855947CF2360FA3C067EA2C07F512982DD36BC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:a8:7a:0e:67:df:c2:0b:bc:67:7e:44:b5: 25:ea:fd:e3:46:f3:04:9f:ce:94:13:b1:e5:a3:6e: 50:e4:8c:46:cb:25:c0:ac:95:6e:3e:d2:05:ef:e7: 53:9e:4b:37:00:07:6c:58:98:1d:4b:cd:63:ad:5c: 16:4b:43:d0:c1:6a:44:64:82:4d:1f:db:18:02:3c: a6:f5:65:97:37:20:8a:27:de:c6:4a:30:14:f7:12: 4a:81:65:78:0d:81:17:0f:4b:bf:e7:32:f1:b9:3a: 69:a2:3d:a9:7d:e5:fd:75:11:0e:45:2b:4b:1d:6c: da:01:69:6b:51:e6:f3:3e:1c:91:5b:af:2c:da:c2: 8e:1a:b4:8b:4f:52:69:b3:ec:73:6b:93:83:36:a0: ee:2b:51:30:11:23:19:03:5a:0d:52:82:f7:d9:ce: 3f:b1:46:48:f9:88:a3:d6:dd:19:a1:cf:0e:5a:b2: 0a:82:b9:a6:49:6d:8b:93:3e:7f:c8:26:1f:68:84: 04:55:2f:01:4f:ac:b2:55:5b:88:fe:f4:28:3f:89: a5:b9:fd:b7:4a:be:00:ad:10:71:10:b4:75:68:06: 8b:5a:d7:d6:c2:8c:0f:c6:ed:7f:03:66:29:79:47: f1:61:c9:7f:f4:5e:5a:25:da:90:4d:f6:3d:82:bb: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:47:CF:23:60:FA:3C:06:7E:A2:C0:7F:51:29:82:DD:36:BC:56 X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ef:7d:31:f9:56:c8:1d:40:21:ef:cd:0c:48:e9:db:77:0b: c9:79:6b:b8:65:c6:33:58:5e:88:fc:a7:a0:39:4e:4b:03:33: 89:76:2d:df:90:3f:81:77:95:1e:fa:27:89:5d:4c:97:fe:32: 4f:61:f9:25:38:01:0d:ae:d8:a5:89:39:d6:22:ec:cd:e8:74: fd:97:89:e5:80:9e:5c:62:1b:ab:e8:5f:fc:14:8c:5c:cd:df: cb:52:15:e5:08:2d:f1:b0:56:7b:fd:6d:c8:b7:ab:3a:f8:6f: f1:94:0c:4c:b2:b4:b8:32:0f:bb:8e:6e:81:1c:f7:83:65:01: d9:d7:33:da:a9:8e:ca:bb:af:e7:75:83:21:0b:42:3d:a2:3c: bf:70:c3:e4:e5:9d:a0:74:3d:c7:23:85:c1:54:6a:21:1a:40: 3e:25:0d:84:9a:58:56:e1:0f:90:0c:0b:e6:c6:a4:3f:f8:e8: 10:18:b8:3d:20:77:04:06:02:ca:05:10:f6:c0:ab:57:24:f0: ca:03:59:61:a1:56:2e:05:2f:e9:70:4d:50:dc:12:98:7d:59: 95:ea:7c:44:0f:ef:40:c7:f3:9e:22:1f:bd:f8:e6:df:f5:b9: 02:8a:46:8d:94:b5:ab:68:99:9d:67:99:72:7f:06:66:45:cb: 51:82:8c:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPQA0odymGdAZvgv0HZ49HuYuPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTExMDMwNDM1NDdaFw0yNTExMDYxMDI4NDdaMDMxMTAvBgNV BAMTKDg1NTk0N0NGMjM2MEZBM0MwNjdFQTJDMDdGNTEyOTgyREQzNkJDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVH6h6Dmffwgu8Z35EtSXq/eNG 8wSfzpQTseWjblDkjEbLJcCslW4+0gXv51OeSzcAB2xYmB1LzWOtXBZLQ9DBakRk gk0f2xgCPKb1ZZc3IIon3sZKMBT3EkqBZXgNgRcPS7/nMvG5OmmiPal95f11EQ5F K0sdbNoBaWtR5vM+HJFbryzawo4atItPUmmz7HNrk4M2oO4rUTARIxkDWg1SgvfZ zj+xRkj5iKPW3Rmhzw5asgqCuaZJbYuTPn/IJh9ohARVLwFPrLJVW4j+9Cg/iaW5 /bdKvgCtEHEQtHVoBota19bCjA/G7X8DZil5R/FhyX/0Xlol2pBN9j2Cu5JnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVlHzyNg+jwGfqLAf1Epgt02vFYwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnvfTH5VsgdQCHvzQxI6dt3C8l5a7hlxjNY Xoj8p6A5TksDM4l2Ld+QP4F3lR76J4ldTJf+Mk9h+SU4AQ2u2KWJOdYi7M3odP2X ieWAnlxiG6voX/wUjFzN38tSFeUILfGwVnv9bci3qzr4b/GUDEyytLgyD7uOboEc 94NlAdnXM9qpjsq7r+d1gyELQj2iPL9ww+TlnaB0PccjhcFUaiEaQD4lDYSaWFbh D5AMC+bGpD/46BAYuD0gdwQGAsoFEPbAq1ck8MoDWWGhVi4FL+lwTVDcEph9WZXq fEQP70DH854iH7345t/1uQKKRo2UtatomZ1nmXJ/BmZFy1GCjMo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:40 2025 by rpki-client