$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: 6/OC1lHjtOQiPBw7OKkw7/xQu9wczvDp613z4wPWffw= Subject key identifier: 52:6B:A0:05:94:70:47:2F:DC:25:42:9D:5D:3E:70:6E:C8:9F:AE:CC Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 527BE3A24172621FF50958DF018D9F8DF9D96867 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0152 Signing time: Mon 03 Nov 2025 20:11:39 +0000 Manifest this update: Mon 03 Nov 2025 20:06:39 +0000 Manifest next update: Fri 07 Nov 2025 06:37:39 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: GYV7K985Nskkcn9hqWTncKTLcUmJH2AtK1zrDjIvZUM=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7b:e3:a2:41:72:62:1f:f5:09:58:df:01:8d:9f:8d:f9:d9:68:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Nov 3 20:06:39 2025 GMT Not After : Nov 7 06:37:39 2025 GMT Subject: CN=526BA0059470472FDC25429D5D3E706EC89FAECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:d6:ae:98:ed:37:d6:93:0c:2d:98:60:71: ee:01:48:dd:e3:00:94:8c:8d:c3:dd:44:b1:b9:e7: 48:3f:33:7a:9d:ae:67:4d:fc:c5:f1:dd:db:6c:2e: dd:81:c5:d5:96:d2:d7:46:bf:ea:23:7a:97:57:3c: 06:e4:af:99:bb:ce:e3:42:05:ae:58:b6:e3:c4:b0: 18:04:02:60:e7:11:ad:f3:63:36:9b:13:58:0b:ca: 0f:f8:8f:20:a3:7c:dd:0f:27:6c:26:97:4c:4a:50: f3:ea:2c:42:be:fd:5e:93:55:62:f0:60:35:bb:24: 82:d2:f7:a7:1b:6f:a1:bb:22:89:cf:8d:42:0d:d6: ad:c9:36:67:9f:e8:78:11:aa:0b:db:32:d2:b3:f6: 9f:86:54:5a:92:f7:09:61:ba:a0:eb:7c:b6:63:81: 4c:0e:aa:86:fc:00:8c:d5:e4:bf:d6:17:6d:07:77: f3:0f:79:0d:ce:c4:48:ad:a7:28:76:4d:9d:7a:51: 1d:25:fc:6e:0e:24:0d:30:58:ad:78:92:bf:af:71: 5a:3a:40:66:b4:a8:af:10:a5:29:11:a8:3f:02:13: 40:df:b4:7b:19:8e:7b:97:5e:46:50:0b:f3:0d:bd: 5a:a0:59:27:76:40:72:ea:ac:66:6d:02:cf:c8:f0: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:A0:05:94:70:47:2F:DC:25:42:9D:5D:3E:70:6E:C8:9F:AE:CC X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f6:29:66:c3:8e:2f:d1:28:02:20:66:a4:03:14:7d:3e:6f: 39:b6:fb:26:e6:96:f7:a6:26:c8:58:46:04:ed:d4:33:6d:b1: 73:de:6f:62:b0:af:27:e4:1d:63:a2:b1:c9:5b:80:86:7f:65: 87:49:76:9f:a4:84:37:36:0e:13:7b:58:08:bb:74:a5:14:51: d4:0c:79:c4:69:d1:d8:d7:ab:91:83:f7:29:f8:ac:3b:03:32: e9:28:11:df:3b:a3:1d:be:ce:82:bf:1a:2f:74:21:f7:cd:5b: 98:99:c1:4c:78:7a:93:aa:5b:f9:03:22:00:dd:c8:6d:1a:1c: 69:2a:6a:25:14:3f:1a:89:6b:4e:43:0e:e3:d5:14:b7:b9:38: 0c:f9:04:62:36:a2:8c:58:78:b4:84:8c:19:a3:e5:04:bd:dd: b2:d7:17:42:6b:44:c1:9f:3f:93:18:86:69:04:e9:2a:9f:29: 64:38:3b:1d:79:e2:1a:f1:fb:2c:e3:0d:c0:00:74:89:b7:2c: a7:98:a9:63:7b:97:19:b5:df:40:7c:ea:8a:2b:71:f5:12:64: f5:5c:16:b4:13:9d:d1:96:1e:a3:07:6b:73:cf:98:49:57:ce: aa:e4:a3:ab:d8:dc:1c:e0:07:cc:da:32:90:5f:b5:dd:0c:e7: b1:73:13:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnvjokFyYh/1CVjfAY2fjfnZaGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTExMDMyMDA2MzlaFw0yNTExMDcwNjM3MzlaMDMxMTAvBgNV BAMTKDUyNkJBMDA1OTQ3MDQ3MkZEQzI1NDI5RDVEM0U3MDZFQzg5RkFFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLNaumO031pMMLZhgce4BSN3j AJSMjcPdRLG550g/M3qdrmdN/MXx3dtsLt2BxdWW0tdGv+ojepdXPAbkr5m7zuNC Ba5YtuPEsBgEAmDnEa3zYzabE1gLyg/4jyCjfN0PJ2wml0xKUPPqLEK+/V6TVWLw YDW7JILS96cbb6G7IonPjUIN1q3JNmef6HgRqgvbMtKz9p+GVFqS9wlhuqDrfLZj gUwOqob8AIzV5L/WF20Hd/MPeQ3OxEitpyh2TZ16UR0l/G4OJA0wWK14kr+vcVo6 QGa0qK8QpSkRqD8CE0DftHsZjnuXXkZQC/MNvVqgWSd2QHLqrGZtAs/I8OidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmugBZRwRy/cJUKdXT5wbsifrswwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH2KWbDji/RKAIgZqQDFH0+bzm2+ybmlvem JshYRgTt1DNtsXPeb2KwryfkHWOisclbgIZ/ZYdJdp+khDc2DhN7WAi7dKUUUdQM ecRp0djXq5GD9yn4rDsDMukoEd87ox2+zoK/Gi90IffNW5iZwUx4epOqW/kDIgDd yG0aHGkqaiUUPxqJa05DDuPVFLe5OAz5BGI2ooxYeLSEjBmj5QS93bLXF0JrRMGf P5MYhmkE6SqfKWQ4Ox154hrx+yzjDcAAdIm3LKeYqWN7lxm130B86oorcfUSZPVc FrQTndGWHqMHa3PPmElXzqrko6vY3BzgB8zaMpBftd0M57FzE+A= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:26 2025 by rpki-client