$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: U2I+HSQln9bMiM/5b8ckggDCjTTvtlTFdY6Nbuu4SwI= Subject key identifier: D1:69:59:1E:C0:A9:97:4E:80:6A:85:24:C9:77:CC:96:13:79:2F:A6 Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 13D2989E0BA06235B013108BCE394B16C66D6C6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 0205 Signing time: Mon 03 Nov 2025 05:11:11 +0000 Manifest this update: Mon 03 Nov 2025 05:06:11 +0000 Manifest next update: Thu 06 Nov 2025 12:45:11 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: cRvfamEPWEseMtXaw5Z8k2Vqu4gvHWAFg4lUXnUDZlE=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d2:98:9e:0b:a0:62:35:b0:13:10:8b:ce:39:4b:16:c6:6d:6c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Nov 3 05:06:11 2025 GMT Not After : Nov 6 12:45:11 2025 GMT Subject: CN=D169591EC0A9974E806A8524C977CC9613792FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:3d:06:1a:ae:47:01:13:57:c2:62:4a:8e: 81:d0:f7:87:56:c7:92:20:d5:63:a4:d2:46:57:e9: 3f:b2:a1:40:08:26:b7:74:25:0e:55:52:44:4b:af: 49:0c:47:ee:b1:14:2e:ed:bc:73:9a:b9:6e:bd:7e: ca:cf:c9:e7:e6:f3:c6:24:d3:8f:c2:e1:3c:cc:cf: 64:b3:7f:1e:b0:0f:3e:66:1c:ec:e2:87:1b:70:35: c5:63:0b:7f:80:38:41:85:fc:a8:ff:d0:2f:f0:95: e6:07:09:73:80:7c:8d:40:0c:eb:5b:12:54:41:49: 8f:fe:32:25:38:73:43:62:76:04:6c:cb:9d:91:58: d4:c4:52:62:42:31:e4:12:eb:75:e3:c5:f0:27:c3: 64:fd:2f:c0:9e:82:a8:58:19:52:61:e9:7c:92:06: 07:b0:5b:5f:9b:02:02:db:62:8c:14:38:49:e6:60: 53:08:fa:06:48:b2:fa:b5:52:80:22:c8:62:59:58: 0f:42:eb:53:ad:6a:c9:d8:0c:ca:a9:f6:68:8e:3f: 01:ca:b2:29:08:4c:7a:cd:7b:c3:77:44:88:84:85: de:ce:cc:55:2b:c1:35:84:38:6f:03:bc:46:2d:a3: c9:82:50:8b:c2:fa:80:4f:ba:03:86:ad:1b:3c:00: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:59:1E:C0:A9:97:4E:80:6A:85:24:C9:77:CC:96:13:79:2F:A6 X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:29:59:68:85:eb:9c:3a:85:8a:96:a3:d0:91:a9:af:49:c8: fb:ef:20:07:59:1d:cc:3c:08:fa:25:28:56:32:ec:d4:96:46: aa:84:f2:45:d3:3f:1c:2d:72:70:89:25:f3:78:7a:17:d9:b2: 8f:0f:5e:60:f8:57:02:3e:2e:f0:06:3e:f6:64:58:4f:c3:bd: e4:78:13:f1:b1:e4:5d:6c:d5:f5:81:e5:93:06:e9:65:71:32: 07:15:f9:c7:7b:5e:50:16:b7:1b:4a:52:67:53:7f:a2:6e:4e: b1:55:1d:86:de:67:67:7c:5c:95:5c:0c:43:a9:2e:64:f5:e0: e1:70:db:26:05:5c:6d:54:dd:9c:68:8f:c5:bc:6f:22:f7:f8: a6:4b:da:1c:10:33:34:6f:11:5b:b4:0e:6c:9d:5b:96:a4:b1: 58:03:57:91:61:67:7d:1a:1a:60:bc:23:3c:77:f4:56:34:2c: 80:b3:9d:35:07:09:4f:0b:7d:e2:8d:c7:cd:f9:88:5b:fb:ef: 10:1b:25:46:a0:b3:7d:87:08:d9:0e:d5:6e:82:80:e9:f9:c4: c5:5a:2c:a7:c5:31:38:75:c5:a6:70:77:c1:f8:16:0a:61:f2: e3:a6:d9:ea:b2:0a:bf:44:bb:72:0a:c1:56:79:96:ce:99:e5: 21:20:74:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9KYngugYjWwExCLzjlLFsZtbGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTExMDMwNTA2MTFaFw0yNTExMDYxMjQ1MTFaMDMxMTAvBgNV BAMTKEQxNjk1OTFFQzBBOTk3NEU4MDZBODUyNEM5NzdDQzk2MTM3OTJGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMD0GGq5HARNXwmJKjoHQ94dW x5Ig1WOk0kZX6T+yoUAIJrd0JQ5VUkRLr0kMR+6xFC7tvHOauW69fsrPyefm88Yk 04/C4TzMz2Szfx6wDz5mHOzihxtwNcVjC3+AOEGF/Kj/0C/wleYHCXOAfI1ADOtb ElRBSY/+MiU4c0NidgRsy52RWNTEUmJCMeQS63XjxfAnw2T9L8CegqhYGVJh6XyS BgewW1+bAgLbYowUOEnmYFMI+gZIsvq1UoAiyGJZWA9C61OtasnYDMqp9miOPwHK sikITHrNe8N3RIiEhd7OzFUrwTWEOG8DvEYto8mCUIvC+oBPugOGrRs8ACxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0WlZHsCpl06AaoUkyXfMlhN5L6YwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIopWWiF65w6hYqWo9CRqa9JyPvvIAdZHcw8 CPolKFYy7NSWRqqE8kXTPxwtcnCJJfN4ehfZso8PXmD4VwI+LvAGPvZkWE/DveR4 E/Gx5F1s1fWB5ZMG6WVxMgcV+cd7XlAWtxtKUmdTf6JuTrFVHYbeZ2d8XJVcDEOp LmT14OFw2yYFXG1U3Zxoj8W8byL3+KZL2hwQMzRvEVu0DmydW5aksVgDV5FhZ30a GmC8Izx39FY0LICznTUHCU8LfeKNx835iFv77xAbJUags32HCNkO1W6CgOn5xMVa LKfFMTh1xaZwd8H4Fgph8uOm2eqyCr9Eu3IKwVZ5ls6Z5SEgdP8= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:55 2025 by rpki-client