$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: nBrahzEJvJfuD+m6/PsrtVIs8uEjZV6lVr4JfsIekXk= Subject key identifier: 32:82:09:5C:86:A2:01:CB:34:0D:1C:E1:E4:24:47:20:3B:0D:1D:30 Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 531608FE6E928200ECC82F8165D55FF6306DD68D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 017C Signing time: Tue 04 Nov 2025 05:52:15 +0000 Manifest this update: Tue 04 Nov 2025 05:47:15 +0000 Manifest next update: Fri 07 Nov 2025 15:19:15 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 2: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: 0zYSOGDEefcaLLIx0Wt1Uaspb8SzXqNQTT6bBJzeu08=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:08:fe:6e:92:82:00:ec:c8:2f:81:65:d5:5f:f6:30:6d:d6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Nov 4 05:47:15 2025 GMT Not After : Nov 7 15:19:15 2025 GMT Subject: CN=3282095C86A201CB340D1CE1E42447203B0D1D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:c7:56:5b:24:09:1b:f4:10:72:65:07:6e: a7:19:69:e0:f2:de:3e:2b:5a:12:f0:c3:20:2c:c6: 8d:bb:dc:35:a3:a5:e9:1a:74:de:04:e3:5d:7d:1a: 9e:a0:dd:80:9b:da:38:2f:a6:da:38:49:2e:1b:1c: b8:76:40:1c:19:97:a2:07:a8:a1:ba:2b:ce:79:fa: 8a:87:70:61:0d:48:03:87:5a:ab:8e:f3:d4:0f:58: b3:9a:a4:84:97:cf:ff:10:2d:ab:2f:7a:4a:48:eb: 0e:b6:0b:bd:8a:d3:0a:6c:5a:bb:30:31:9b:a5:ce: a0:26:7f:43:ba:31:76:0c:25:5b:4a:56:45:15:5b: d2:3f:fa:f6:e5:72:35:48:32:c8:36:de:d0:53:cf: 60:17:c7:23:b4:6c:a2:ed:f2:61:89:9a:e5:e1:38: 06:05:a1:43:0d:38:06:cc:dd:87:0b:83:b5:5b:d2: 3c:84:87:24:56:c5:2e:02:d5:e4:fb:a2:1f:e2:0e: 86:60:bd:73:ce:bc:e5:a1:92:25:66:44:c2:7c:c9: b2:26:66:1f:3c:ff:f1:bb:05:77:de:fc:25:62:0e: 34:be:c8:a6:82:20:d6:99:49:08:2d:ee:3b:83:c1: 1a:3e:e3:96:26:54:e4:4a:5b:99:c2:bc:52:67:8e: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:82:09:5C:86:A2:01:CB:34:0D:1C:E1:E4:24:47:20:3B:0D:1D:30 X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b7:67:f8:d0:35:75:6d:4d:98:f0:3f:7c:c5:c6:e7:15:84: 00:24:64:00:17:63:fa:2a:d6:96:11:6c:23:89:11:80:ba:72: 21:93:05:1f:6c:b0:a1:e4:e0:12:a3:20:ef:d4:a4:45:74:12: dd:01:95:27:6a:83:6d:d0:8c:e2:e5:cc:d7:f1:dc:b2:63:91: fc:4a:d7:55:ae:2f:f4:c9:d7:fa:32:90:e5:18:6d:7b:8a:5b: ce:0e:99:bf:98:5d:68:28:f9:35:7d:37:e7:5e:cd:70:05:5a: 96:7d:99:1c:1f:34:9f:52:3f:c5:b3:e5:8d:ce:72:0b:fb:3f: 49:e0:c1:fe:8a:fd:80:2c:b7:23:56:0e:3c:4e:00:79:e6:eb: 39:ff:1c:d6:1e:69:8e:79:48:e0:12:2f:7f:c7:5c:29:a0:f6: 1e:e6:d5:6a:66:59:c4:c3:6d:f3:cb:c5:ed:e4:bf:c9:13:1c: 40:ca:2f:5d:6d:79:d5:21:9f:c4:b7:96:65:73:e7:46:d3:48: fa:78:6f:04:e1:89:25:ee:ef:b7:4c:45:bb:3d:33:67:3e:c7: 6c:f7:9d:c2:35:a2:b2:12:d6:87:b6:dd:46:90:a5:ca:07:d2: db:01:29:a3:80:b6:e1:b2:3a:60:a2:c7:b7:2f:ad:0f:d9:fb: 3f:a4:77:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxYI/m6SggDsyC+BZdVf9jBt1o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTExMDQwNTQ3MTVaFw0yNTExMDcxNTE5MTVaMDMxMTAvBgNV BAMTKDMyODIwOTVDODZBMjAxQ0IzNDBEMUNFMUU0MjQ0NzIwM0IwRDFEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdsdWWyQJG/QQcmUHbqcZaeDy 3j4rWhLwwyAsxo273DWjpekadN4E4119Gp6g3YCb2jgvpto4SS4bHLh2QBwZl6IH qKG6K855+oqHcGENSAOHWquO89QPWLOapISXz/8QLasvekpI6w62C72K0wpsWrsw MZulzqAmf0O6MXYMJVtKVkUVW9I/+vblcjVIMsg23tBTz2AXxyO0bKLt8mGJmuXh OAYFoUMNOAbM3YcLg7Vb0jyEhyRWxS4C1eT7oh/iDoZgvXPOvOWhkiVmRMJ8ybIm Zh88//G7BXfe/CViDjS+yKaCINaZSQgt7juDwRo+45YmVORKW5nCvFJnjrxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoIJXIaiAcs0DRzh5CRHIDsNHTAwHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu3Z/jQNXVtTZjwP3zFxucVhAAkZAAXY/oq 1pYRbCOJEYC6ciGTBR9ssKHk4BKjIO/UpEV0Et0BlSdqg23QjOLlzNfx3LJjkfxK 11WuL/TJ1/oykOUYbXuKW84Omb+YXWgo+TV9N+dezXAFWpZ9mRwfNJ9SP8Wz5Y3O cgv7P0ngwf6K/YAstyNWDjxOAHnm6zn/HNYeaY55SOASL3/HXCmg9h7m1WpmWcTD bfPLxe3kv8kTHEDKL11tedUhn8S3lmVz50bTSPp4bwThiSXu77dMRbs9M2c+x2z3 ncI1orIS1oe23UaQpcoH0tsBKaOAtuGyOmCix7cvrQ/Z+z+kd78= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:17 2025 by rpki-client