$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: xRLuk7eITx96UKhS1n7PsP00tN9XhtBCsyaL7u5fd4g= Subject key identifier: AF:0A:61:02:04:BC:88:B3:67:0A:33:FB:EC:81:DE:6D:F4:55:1D:A4 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 60773C384132127503CB41BAA22D332F735C0429 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 0148 Signing time: Tue 04 Nov 2025 02:52:07 +0000 Manifest this update: Tue 04 Nov 2025 02:47:07 +0000 Manifest next update: Fri 07 Nov 2025 12:20:07 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=) 2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: NZ2aIYwe2t3EtpJmpblW4LZFYs/VaVS8jDBU/M0lHSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:77:3c:38:41:32:12:75:03:cb:41:ba:a2:2d:33:2f:73:5c:04:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Nov 4 02:47:07 2025 GMT Not After : Nov 7 12:20:07 2025 GMT Subject: CN=AF0A610204BC88B3670A33FBEC81DE6DF4551DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:46:7e:e6:6e:ee:0f:66:65:e9:9a:df:fc: 49:87:a1:f4:ce:cf:46:04:93:9d:65:8c:06:d2:3f: c6:25:ed:23:a2:8c:e9:62:73:5d:f4:b9:ac:4a:bc: 38:fd:14:57:f6:38:f4:1e:aa:d6:79:9a:21:4f:f5: 65:79:67:31:e4:5d:e0:f4:9c:0f:87:72:d7:d8:64: 84:18:4b:86:e0:db:55:b6:4b:f2:e6:6a:ee:32:d3: 2a:ba:c2:e8:19:7e:fc:86:88:b3:e1:e8:d9:c0:f6: a4:91:9d:68:d6:43:cc:db:0f:02:ff:5f:3f:8b:ff: 9b:4d:07:39:35:36:e8:a0:29:ed:e0:d0:5f:53:91: d5:c2:d1:7d:b6:95:a2:97:61:09:c6:ab:45:a6:09: c0:1c:44:3c:12:30:f8:f8:bd:e5:c3:90:9a:f6:33: f6:d5:cc:f0:af:e7:26:ea:d6:37:dc:7b:49:67:ef: 4c:11:f5:51:be:fc:a0:04:73:a0:a1:55:cf:1c:1a: 97:06:a7:a2:f1:3f:2a:83:45:9f:0d:c6:11:89:01: c2:96:19:aa:34:9f:c3:5e:5d:73:07:45:38:9e:a8: 0c:a2:ea:f4:b8:67:f1:98:5a:8e:ca:3f:b0:ba:02: bd:49:d4:6e:70:a1:dc:26:40:d2:cf:8e:f0:ed:c6: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0A:61:02:04:BC:88:B3:67:0A:33:FB:EC:81:DE:6D:F4:55:1D:A4 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:80:f4:d7:77:fb:3e:39:c7:61:5d:18:a1:a6:f0:b3:c0:d9: 85:7a:f2:f4:f4:19:cc:92:81:6e:d1:b9:3a:c7:cb:98:3f:37: b1:78:50:74:3f:71:97:b3:e4:7c:03:2b:fa:80:9b:c2:ee:42: ac:f2:a0:5c:40:6f:7c:e9:52:b7:aa:63:3f:bd:67:f0:48:4d: e5:c8:74:a3:70:84:f7:28:f9:76:56:64:c6:f5:db:da:c3:e1: 5b:51:87:95:7e:f2:f1:99:e8:d9:fd:81:d2:15:4e:e9:69:7d: c0:10:2e:c7:09:e8:da:38:b2:fe:84:7b:d0:6c:f9:d1:b3:3c: d6:9f:e9:48:2f:5e:8e:7d:fc:d0:38:f6:3c:cd:c6:8f:37:c3: 53:00:f9:3d:6e:73:9b:f3:1f:d3:01:c0:a4:a0:c1:2f:50:71: 38:e8:8f:4d:48:66:c1:f9:d6:10:23:a1:4f:ad:c6:31:0e:a4: be:11:19:16:1e:e9:61:4a:8a:5e:05:13:04:a1:08:2b:1b:31: 7f:00:ff:51:f0:7a:70:c7:86:37:b8:7a:b9:fe:68:56:09:1e: f5:5f:ee:3e:06:08:d2:75:a0:70:d2:4c:e2:fc:a0:a5:1d:01: 8d:53:13:1d:e9:03:f1:9d:37:fa:99:5f:68:74:af:1e:26:79: 69:a8:55:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHc8OEEyEnUDy0G6oi0zL3NcBCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTExMDQwMjQ3MDdaFw0yNTExMDcxMjIwMDdaMDMxMTAvBgNV BAMTKEFGMEE2MTAyMDRCQzg4QjM2NzBBMzNGQkVDODFERTZERjQ1NTFEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74UZ+5m7uD2Zl6Zrf/EmHofTO z0YEk51ljAbSP8Yl7SOijOlic130uaxKvDj9FFf2OPQeqtZ5miFP9WV5ZzHkXeD0 nA+HctfYZIQYS4bg21W2S/Lmau4y0yq6wugZfvyGiLPh6NnA9qSRnWjWQ8zbDwL/ Xz+L/5tNBzk1NuigKe3g0F9TkdXC0X22laKXYQnGq0WmCcAcRDwSMPj4veXDkJr2 M/bVzPCv5ybq1jfce0ln70wR9VG+/KAEc6ChVc8cGpcGp6LxPyqDRZ8NxhGJAcKW Gao0n8NeXXMHRTieqAyi6vS4Z/GYWo7KP7C6Ar1J1G5wodwmQNLPjvDtxrCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrwphAgS8iLNnCjP77IHebfRVHaQwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaA9Nd3+z45x2FdGKGm8LPA2YV68vT0GcyS gW7RuTrHy5g/N7F4UHQ/cZez5HwDK/qAm8LuQqzyoFxAb3zpUreqYz+9Z/BITeXI dKNwhPco+XZWZMb129rD4VtRh5V+8vGZ6Nn9gdIVTulpfcAQLscJ6No4sv6Ee9Bs +dGzPNaf6UgvXo59/NA49jzNxo83w1MA+T1uc5vzH9MBwKSgwS9QcTjoj01IZsH5 1hAjoU+txjEOpL4RGRYe6WFKil4FEwShCCsbMX8A/1HwenDHhje4ern+aFYJHvVf 7j4GCNJ1oHDSTOL8oKUdAY1TEx3pA/GdN/qZX2h0rx4meWmoVcA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:15 2025 by rpki-client