$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: dIg0e39cZNwllsbYeCl1VClTFvgOoGGWbeUjAAnBk64= Subject key identifier: 9E:87:C5:36:C7:03:F3:AF:FB:53:CE:D1:89:3F:EE:29:18:8D:9F:8C Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 7CC9E059F74A80112ABD4FC260BC10FFA8149552 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 052C Signing time: Wed 05 Nov 2025 03:40:47 +0000 Manifest this update: Wed 05 Nov 2025 03:35:47 +0000 Manifest next update: Sat 08 Nov 2025 13:02:47 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 3: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 4: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) 5: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: FIPBxQPvtXKaR+Sc2dwyRicklwAItSnUNcvrT2UZ0eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 13:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c9:e0:59:f7:4a:80:11:2a:bd:4f:c2:60:bc:10:ff:a8:14:95:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Nov 5 03:35:47 2025 GMT Not After : Nov 8 13:02:47 2025 GMT Subject: CN=9E87C536C703F3AFFB53CED1893FEE29188D9F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d8:6a:2a:e4:a1:98:5b:ea:2e:bd:93:1a:00: 5f:76:40:f7:32:64:aa:6d:ac:77:fc:a2:0e:f2:a9: 49:db:c6:98:c7:e2:c9:48:6f:1e:c9:c9:8b:a3:f9: 72:90:84:88:87:de:c3:f5:03:0a:c8:37:b6:ad:8a: 96:eb:ae:6e:03:28:9e:72:ce:32:16:31:50:be:d9: da:41:5f:8e:ff:d5:67:ac:24:e3:ca:c1:33:48:a8: a0:27:ba:db:98:1c:25:89:40:25:8f:66:f9:37:77: 02:e4:f1:69:9f:21:d1:0d:ee:bc:07:3a:79:67:5d: 03:73:26:ce:e2:f0:8e:30:8a:59:4e:83:ea:98:b5: c3:c9:a7:ec:e8:1f:4d:92:80:14:64:16:72:92:25: 4d:79:18:50:d8:9f:a8:dd:7f:27:8b:d6:5e:dd:b0: 28:fe:6e:7c:f9:60:82:0c:fd:4b:49:d5:32:b7:2a: d2:1d:da:44:ed:1a:0f:b9:ac:19:5e:47:df:6d:54: 26:c7:b6:96:87:79:d2:ff:ec:8f:20:14:a7:16:fd: 3f:0b:4c:5d:7c:72:05:82:70:39:a8:b3:81:77:f9: ff:cf:4a:37:48:27:3c:8f:64:15:55:55:d6:77:94: a8:df:92:bb:50:42:5a:6d:77:d7:a4:73:da:90:7f: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:87:C5:36:C7:03:F3:AF:FB:53:CE:D1:89:3F:EE:29:18:8D:9F:8C X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:96:d5:d4:a3:74:d8:a3:0a:35:0e:c6:a8:7a:28:6e:fc: 2a:ac:3b:98:c5:2d:2b:80:2b:ed:6a:be:66:e7:e3:33:0c:ab: 52:77:d3:32:ca:78:58:ff:55:6b:38:4f:d8:7c:d2:4e:0b:e8: b8:b0:72:0d:89:94:c5:fc:1b:f9:3c:0a:17:f1:8f:e5:9b:09: 8a:73:1d:36:ce:03:81:8d:8b:99:0c:fa:95:e8:66:19:1a:fd: de:f6:e6:e2:be:fe:b7:2a:a4:2c:92:d3:b7:42:ae:f0:14:47: 63:ac:0d:9a:c0:07:6e:08:92:5e:3e:aa:62:0d:5a:e7:ab:13: d2:be:2d:27:81:40:75:bf:c8:da:de:52:bb:1c:9b:38:4d:63: 45:76:91:8d:5f:d3:b2:ce:50:d3:12:ab:4c:8b:5c:dd:56:37: 6b:c2:c1:9d:93:51:ba:56:8b:0a:88:1d:1f:25:5a:bd:b4:ff: 2e:44:51:58:9d:27:3d:6e:26:b1:17:af:00:d4:1a:a2:0e:84: 4c:4b:26:75:56:c8:fc:ac:54:0b:98:e5:10:5a:76:45:5f:3e: 07:d3:31:4f:62:0b:cd:f8:c4:3b:df:e8:37:cb:93:e1:ed:e7: 2a:1a:fb:e0:8a:b7:b0:8f:c0:6d:4a:da:16:55:ba:b1:0b:69: d8:ca:a0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMngWfdKgBEqvU/CYLwQ/6gUlVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTExMDUwMzM1NDdaFw0yNTExMDgxMzAyNDdaMDMxMTAvBgNV BAMTKDlFODdDNTM2QzcwM0YzQUZGQjUzQ0VEMTg5M0ZFRTI5MTg4RDlGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD62Goq5KGYW+ouvZMaAF92QPcy ZKptrHf8og7yqUnbxpjH4slIbx7JyYuj+XKQhIiH3sP1AwrIN7atipbrrm4DKJ5y zjIWMVC+2dpBX47/1WesJOPKwTNIqKAnutuYHCWJQCWPZvk3dwLk8WmfIdEN7rwH OnlnXQNzJs7i8I4willOg+qYtcPJp+zoH02SgBRkFnKSJU15GFDYn6jdfyeL1l7d sCj+bnz5YIIM/UtJ1TK3KtId2kTtGg+5rBleR99tVCbHtpaHedL/7I8gFKcW/T8L TF18cgWCcDmos4F3+f/PSjdIJzyPZBVVVdZ3lKjfkrtQQlptd9ekc9qQf2enAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnofFNscD86/7U87RiT/uKRiNn4wwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVoltXUo3TYowo1Dsaoeihu/CqsO5jFLSuA K+1qvmbn4zMMq1J30zLKeFj/VWs4T9h80k4L6Liwcg2JlMX8G/k8Chfxj+WbCYpz HTbOA4GNi5kM+pXoZhka/d725uK+/rcqpCyS07dCrvAUR2OsDZrAB24Ikl4+qmIN WuerE9K+LSeBQHW/yNreUrscmzhNY0V2kY1f07LOUNMSq0yLXN1WN2vCwZ2TUbpW iwqIHR8lWr20/y5EUVidJz1uJrEXrwDUGqIOhExLJnVWyPysVAuY5RBadkVfPgfT MU9iC834xDvf6DfLk+Ht5yoa++CKt7CPwG1K2hZVurELadjKoA4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:45 2025 by rpki-client