$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json) Hash identifier: hgsH4TkJs1Z3nz1lumtmqqzTJWHM/wXQ6KyqPB3sNoo= Subject key identifier: A3:D4:49:D8:8C:D2:86:D8:29:5C:2D:33:9E:2B:21:4E:9F:68:43:02 Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Certificate serial: 3B6D7E13A2251E2692532B5BD9F39FA96B5DAF64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft Manifest number: 0529 Signing time: Mon 03 Nov 2025 18:50:00 +0000 Manifest this update: Mon 03 Nov 2025 18:45:00 +0000 Manifest next update: Thu 06 Nov 2025 23:17:00 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=) 2: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: kM7H0EAKldqSlDDN86TcsX67mUquZ4Hqi5OS6XbX+Cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6d:7e:13:a2:25:1e:26:92:53:2b:5b:d9:f3:9f:a9:6b:5d:af:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Validity Not Before: Nov 3 18:45:00 2025 GMT Not After : Nov 6 23:17:00 2025 GMT Subject: CN=A3D449D88CD286D8295C2D339E2B214E9F684302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:e4:90:33:08:f6:a2:a4:d5:5b:30:92:5f: e5:9c:ea:4d:d7:1c:4e:e6:42:02:4b:a5:f2:54:70: fc:ed:7e:7d:be:d8:bf:ee:cb:bd:b7:a6:f5:68:eb: aa:f0:00:3b:49:9b:d8:52:8b:ab:6f:c0:58:5d:f8: b1:25:8e:a8:45:85:34:ea:41:18:fa:4e:64:d8:8c: de:a6:4c:6b:ba:3e:85:0f:62:2f:b1:34:5e:86:21: 16:c2:63:cd:bc:46:9e:d6:a8:b6:32:17:14:e2:7a: 05:86:7d:71:48:38:37:83:36:b4:99:8b:01:fb:0a: e0:63:5d:67:63:98:4d:69:01:4a:00:5a:f5:02:e3: 15:23:3f:fe:50:4f:5f:3d:b1:3d:cf:1b:c5:56:eb: 39:3f:18:29:92:7c:ea:fc:ab:83:d2:f7:3d:0f:3c: 91:2a:1c:06:f3:df:2b:ae:3e:52:f1:07:bf:c3:c3: 96:bc:a0:03:e0:90:fe:4d:c6:c9:60:71:c2:70:8c: aa:57:a5:6c:89:65:95:41:d5:ed:91:37:17:72:3f: fd:ab:be:e4:f5:39:26:f4:03:66:9e:7b:d3:d2:9d: 90:50:22:44:b0:d5:1c:12:8c:f8:58:cc:62:ce:be: d4:c9:c6:f9:13:52:f8:a9:ad:32:00:6e:bf:4b:d2: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:49:D8:8C:D2:86:D8:29:5C:2D:33:9E:2B:21:4E:9F:68:43:02 X509v3 Authority Key Identifier: keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fa:e3:4f:a6:9e:b7:87:d2:c0:15:1b:04:33:3f:7c:e5:20: 49:86:26:35:c2:24:d9:8c:bf:c3:22:ad:1e:2e:ab:7e:7a:97: 33:90:8b:db:84:5f:d9:36:4e:a0:6f:eb:ff:4c:5a:33:fc:29: 1d:bb:46:3c:68:9c:e3:21:b7:e4:17:c7:c3:c6:ba:3c:90:5f: 90:3e:35:ea:9b:3e:30:3a:aa:fc:69:df:80:8b:13:9e:35:8d: bf:f1:16:fa:a6:63:fd:9f:2f:f5:17:55:70:38:78:7f:db:81: 29:70:57:e4:f8:57:13:e2:ad:3b:35:b5:01:ea:74:82:0b:63: 16:e6:97:a6:ae:6f:59:cf:03:00:6f:ba:36:4c:dc:7c:e2:64: e0:03:6a:57:71:a4:2a:30:15:d9:82:9f:f5:5c:cc:56:d9:1a: 4a:bd:0a:27:05:c9:f2:9b:78:f3:4a:29:ee:05:69:22:6c:1f: 6d:41:8e:54:e8:3e:21:89:da:20:b3:dd:77:00:fe:81:51:ec: e7:68:c1:e8:43:92:1b:7c:be:9e:f7:6c:95:01:f7:b0:c5:88: 18:7e:22:0f:41:92:5f:4a:d8:98:41:be:dc:ec:a1:4a:04:eb: c5:bf:7c:23:90:b2:4c:fe:81:46:5d:99:5c:88:6f:4a:e4:4d: cf:e1:5d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO21+E6IlHiaSUytb2fOfqWtdr2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy NkU4QkE5ODAeFw0yNTExMDMxODQ1MDBaFw0yNTExMDYyMzE3MDBaMDMxMTAvBgNV BAMTKEEzRDQ0OUQ4OENEMjg2RDgyOTVDMkQzMzlFMkIyMTRFOUY2ODQzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGeSQMwj2oqTVWzCSX+Wc6k3X HE7mQgJLpfJUcPztfn2+2L/uy723pvVo66rwADtJm9hSi6tvwFhd+LEljqhFhTTq QRj6TmTYjN6mTGu6PoUPYi+xNF6GIRbCY828Rp7WqLYyFxTiegWGfXFIODeDNrSZ iwH7CuBjXWdjmE1pAUoAWvUC4xUjP/5QT189sT3PG8VW6zk/GCmSfOr8q4PS9z0P PJEqHAbz3yuuPlLxB7/Dw5a8oAPgkP5NxslgccJwjKpXpWyJZZVB1e2RNxdyP/2r vuT1OSb0A2aee9PSnZBQIkSw1RwSjPhYzGLOvtTJxvkTUviprTIAbr9L0q9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9RJ2IzShtgpXC0znishTp9oQwIwHwYDVR0j BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4 QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2 ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr640+mnreH0sAVGwQzP3zlIEmGJjXCJNmM v8MirR4uq356lzOQi9uEX9k2TqBv6/9MWjP8KR27RjxonOMht+QXx8PGujyQX5A+ NeqbPjA6qvxp34CLE541jb/xFvqmY/2fL/UXVXA4eH/bgSlwV+T4VxPirTs1tQHq dIILYxbml6aub1nPAwBvujZM3HziZOADaldxpCowFdmCn/VczFbZGkq9CicFyfKb ePNKKe4FaSJsH21BjlToPiGJ2iCz3XcA/oFR7OdowehDkht8vp73bJUB97DFiBh+ Ig9Bkl9K2JhBvtzsoUoE68W/fCOQskz+gUZdmVyIb0rkTc/hXTk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:45 2025 by rpki-client