$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: Bh53ucw9Yk2MaxD7MrzEGvjviQNZtTCYRM+sZGkza0c= Subject key identifier: 1F:F5:A0:C7:21:04:D9:7D:67:BA:03:AE:F8:6F:F2:4A:9B:73:4F:4B Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 7C9B3E37F8C37CFA7A9794C3E7C5FA3B32DC707D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 021F Signing time: Tue 04 Nov 2025 20:11:45 +0000 Manifest this update: Tue 04 Nov 2025 20:06:45 +0000 Manifest next update: Sat 08 Nov 2025 01:37:45 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: ONYT/aUNBovPfoJGoPMACmsIRG9htI8H3qdhIdHSDJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9b:3e:37:f8:c3:7c:fa:7a:97:94:c3:e7:c5:fa:3b:32:dc:70:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Nov 4 20:06:45 2025 GMT Not After : Nov 8 01:37:45 2025 GMT Subject: CN=1FF5A0C72104D97D67BA03AEF86FF24A9B734F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:c9:8d:53:fb:bb:f6:e6:2c:9d:5d:c2:c2: b3:30:1b:79:f7:b1:a2:80:78:77:4b:3d:66:b1:11: 25:aa:4c:43:e4:f8:cf:33:be:81:f7:b7:a2:37:dc: 32:68:75:e4:9a:53:49:ce:d8:03:60:53:ca:17:5d: 0a:6d:c9:1f:69:41:a9:00:7f:09:90:98:03:06:c5: 8b:0f:cd:fa:96:98:c0:02:c4:b0:62:dc:01:3c:1c: 94:ba:21:6a:c1:c6:36:e7:22:a7:9a:30:b4:9d:2f: ed:8a:a6:8a:03:c5:4c:5f:24:77:65:08:1d:b4:a0: 26:9a:3e:94:f7:7f:64:d5:ee:ae:1a:c7:dd:c3:49: 44:5c:6e:7c:03:06:07:1a:84:30:4c:ab:33:af:1f: de:e2:d9:2c:61:e4:91:e2:88:23:45:50:41:45:e8: fb:13:2e:77:74:79:6d:a7:35:0d:11:23:6c:e8:28: 61:4d:65:c2:43:cd:6e:d4:9f:f4:46:13:f8:b7:95: 40:33:79:eb:57:e9:0c:6c:34:94:5c:a7:c5:9e:66: 8b:98:cf:fe:5f:8c:fd:18:b3:24:09:91:1f:84:2b: 96:cb:76:c6:d4:4d:bf:da:ab:11:2b:75:0d:bd:15: 31:81:2e:36:3a:49:a5:e0:07:f1:ab:87:fa:5e:d3: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:A0:C7:21:04:D9:7D:67:BA:03:AE:F8:6F:F2:4A:9B:73:4F:4B X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b8:fe:7a:57:e9:0f:89:b1:3c:de:e7:b5:77:d2:d6:40:4b: 35:3a:13:db:35:10:b1:8c:8b:0f:73:ab:25:90:52:b9:e3:4d: 19:ea:43:d5:71:95:e1:63:c2:60:93:fb:99:ff:66:c5:c8:5a: 34:5e:5c:70:a0:64:c8:6a:1b:27:2f:0d:fa:7d:56:e9:da:67: 13:b3:d7:9c:fe:5a:88:19:da:29:10:63:40:48:04:b2:26:4b: 72:4b:76:e7:f7:79:f8:78:c1:6e:ed:32:28:b2:95:02:c2:70: a9:50:ba:89:f1:85:69:ba:d2:84:05:17:e4:48:29:6c:71:e4: 1d:20:cf:6c:2d:50:05:b4:87:38:2c:bb:24:f5:99:06:11:00: af:32:84:1e:6b:8e:2b:98:2e:6b:05:05:06:18:70:8d:6a:c4: 0a:d0:2a:ee:fc:bc:a3:ea:4d:3b:90:2b:b6:ad:72:21:3a:f3: bc:03:c8:43:7d:cb:cf:28:e7:4b:3c:07:57:60:f7:10:49:d0: ee:02:d6:dc:7d:42:91:ff:e7:c7:24:7f:07:67:8b:49:a4:e2: 04:b7:a0:3b:ba:71:1c:d6:0d:7c:49:d7:f3:bf:e9:9a:20:e3: c2:91:59:fe:ab:78:d6:3b:a1:3d:62:28:72:33:a1:dc:8f:bd: 38:91:6b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJs+N/jDfPp6l5TD58X6OzLccH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTExMDQyMDA2NDVaFw0yNTExMDgwMTM3NDVaMDMxMTAvBgNV BAMTKDFGRjVBMEM3MjEwNEQ5N0Q2N0JBMDNBRUY4NkZGMjRBOUI3MzRGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBsmNU/u79uYsnV3CwrMwG3n3 saKAeHdLPWaxESWqTEPk+M8zvoH3t6I33DJodeSaU0nO2ANgU8oXXQptyR9pQakA fwmQmAMGxYsPzfqWmMACxLBi3AE8HJS6IWrBxjbnIqeaMLSdL+2KpooDxUxfJHdl CB20oCaaPpT3f2TV7q4ax93DSURcbnwDBgcahDBMqzOvH97i2Sxh5JHiiCNFUEFF 6PsTLnd0eW2nNQ0RI2zoKGFNZcJDzW7Un/RGE/i3lUAzeetX6QxsNJRcp8WeZouY z/5fjP0YsyQJkR+EK5bLdsbUTb/aqxErdQ29FTGBLjY6SaXgB/Grh/pe03uZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/WgxyEE2X1nugOu+G/ySptzT0swHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy4/npX6Q+JsTze57V30tZASzU6E9s1ELGM iw9zqyWQUrnjTRnqQ9VxleFjwmCT+5n/ZsXIWjReXHCgZMhqGycvDfp9VunaZxOz 15z+WogZ2ikQY0BIBLImS3JLduf3efh4wW7tMiiylQLCcKlQuonxhWm60oQFF+RI KWxx5B0gz2wtUAW0hzgsuyT1mQYRAK8yhB5rjiuYLmsFBQYYcI1qxArQKu78vKPq TTuQK7atciE687wDyEN9y88o50s8B1dg9xBJ0O4C1tx9QpH/58ckfwdni0mk4gS3 oDu6cRzWDXxJ1/O/6Zog48KRWf6reNY7oT1iKHIzodyPvTiRa14= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:48 2025 by rpki-client