$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: w3eu60QWjXS5lb2tXl5nQDtYAB4tFNcp9Lq7Bu8i2fc= Subject key identifier: 82:CC:76:53:D9:87:E5:87:CB:16:5B:0E:C6:4C:4D:7C:D6:CD:27:B3 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 79E9ED32500C406C961C88C6417BCD326071CEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 86 Signing time: Sun 02 Nov 2025 20:51:57 +0000 Manifest this update: Sun 02 Nov 2025 20:46:57 +0000 Manifest next update: Wed 05 Nov 2025 22:31:57 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: UPcak3U2QpePyOCM1GOdHTJyztmlibwHIpCCDedcGEw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e9:ed:32:50:0c:40:6c:96:1c:88:c6:41:7b:cd:32:60:71:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Nov 2 20:46:57 2025 GMT Not After : Nov 5 22:31:57 2025 GMT Subject: CN=82CC7653D987E587CB165B0EC64C4D7CD6CD27B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:a2:f4:82:e4:14:48:27:30:cf:f5:88:88: b3:d5:43:7b:e7:b8:d6:f9:8d:2d:98:52:71:58:07: d0:f5:cf:cc:e4:c6:a8:bc:cc:4e:ea:c9:85:7f:68: 25:51:1b:63:12:50:a6:e5:76:61:cf:1a:ef:71:6a: 43:d1:6c:a7:7a:b3:1a:5d:92:cc:ee:ce:e9:48:1c: d8:0d:3d:b1:d4:2d:06:f1:11:10:d5:d6:bf:f7:4f: 5a:00:3c:47:35:0a:17:88:0f:04:20:97:71:03:38: 1d:16:ac:36:ba:3e:a9:62:83:53:cd:89:9e:ee:f9: 2b:38:19:83:3f:a0:de:f3:e6:a3:3f:43:62:7c:c0: 21:58:d9:db:5a:64:75:b2:ab:e7:be:c0:65:00:98: 19:70:f6:c4:7d:c6:b3:c4:94:d7:1d:25:71:9b:37: 46:6e:7a:65:53:73:c8:a7:fe:5a:cb:1e:45:6d:36: 58:ff:10:1a:20:47:7b:cf:c7:75:4f:ae:48:f7:ce: 41:58:21:7a:7a:3b:25:d0:9e:11:10:5c:b1:b9:97: 9a:aa:14:1c:64:24:4d:7d:a5:7d:b7:ce:bd:07:a8: 61:05:a0:97:50:13:d6:4c:a2:af:59:99:ae:65:e4: d9:f0:be:23:b0:07:85:97:93:7b:d7:9b:c1:29:30: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CC:76:53:D9:87:E5:87:CB:16:5B:0E:C6:4C:4D:7C:D6:CD:27:B3 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f1:1a:14:a2:cf:f9:89:b7:19:a6:69:a9:27:38:70:52:a9: 7a:21:91:19:f2:ff:1f:ad:fb:98:a6:2f:c4:4a:ff:f1:2e:79: 1b:fe:fc:3f:ee:e8:b8:86:e0:0d:e0:cb:bb:ef:00:27:4d:24: 53:dd:38:a5:0f:f7:9b:27:23:03:ef:90:66:d4:e9:fc:96:c3: 1a:b5:9c:05:17:2f:68:97:dc:0e:b2:59:7b:02:a2:35:2c:9e: 92:00:29:2e:bd:91:d0:d0:07:b2:3e:dd:c1:7a:5c:4f:6e:20: b0:12:1a:05:66:e5:41:3e:b4:e4:93:b8:a3:c0:5f:df:30:8d: 16:00:fd:e0:4b:aa:84:4f:bf:31:9c:04:3d:c4:25:65:69:f0: ee:9f:52:31:d3:13:78:7e:2e:72:63:e0:06:0c:a1:5e:ca:30: 9d:78:50:9c:af:2f:d4:ac:89:e4:3a:75:cc:d0:ce:a7:53:6a: 76:79:5f:92:e5:4a:e0:08:32:42:ce:f5:61:00:85:7f:7f:48: b8:6c:ca:d0:3a:0e:ac:9b:67:e3:cf:5e:6b:a9:35:be:fe:0f: 83:db:24:d2:45:d1:e8:1f:f1:ec:c6:ef:23:d2:25:30:6e:07: 48:9e:a4:63:08:67:91:9d:d2:d9:b3:d1:cd:34:9c:57:ae:fb: 6a:97:4a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeentMlAMQGyWHIjGQXvNMmBxztswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTExMDIyMDQ2NTdaFw0yNTExMDUyMjMxNTdaMDMxMTAvBgNV BAMTKDgyQ0M3NjUzRDk4N0U1ODdDQjE2NUIwRUM2NEM0RDdDRDZDRDI3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZ6L0guQUSCcwz/WIiLPVQ3vn uNb5jS2YUnFYB9D1z8zkxqi8zE7qyYV/aCVRG2MSUKbldmHPGu9xakPRbKd6sxpd kszuzulIHNgNPbHULQbxERDV1r/3T1oAPEc1CheIDwQgl3EDOB0WrDa6Pqlig1PN iZ7u+Ss4GYM/oN7z5qM/Q2J8wCFY2dtaZHWyq+e+wGUAmBlw9sR9xrPElNcdJXGb N0ZuemVTc8in/lrLHkVtNlj/EBogR3vPx3VPrkj3zkFYIXp6OyXQnhEQXLG5l5qq FBxkJE19pX23zr0HqGEFoJdQE9ZMoq9Zma5l5NnwviOwB4WXk3vXm8EpMJJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsx2U9mH5YfLFlsOxkxNfNbNJ7MwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrxGhSiz/mJtxmmaaknOHBSqXohkRny/x+t +5imL8RK//EueRv+/D/u6LiG4A3gy7vvACdNJFPdOKUP95snIwPvkGbU6fyWwxq1 nAUXL2iX3A6yWXsCojUsnpIAKS69kdDQB7I+3cF6XE9uILASGgVm5UE+tOSTuKPA X98wjRYA/eBLqoRPvzGcBD3EJWVp8O6fUjHTE3h+LnJj4AYMoV7KMJ14UJyvL9Ss ieQ6dczQzqdTanZ5X5LlSuAIMkLO9WEAhX9/SLhsytA6DqybZ+PPXmupNb7+D4Pb JNJF0egf8ezG7yPSJTBuB0iepGMIZ5Gd0tmz0c00nFeu+2qXSr4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:52 2025 by rpki-client