$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: itJQAI8RxmjHQN1gfUAxVdhobDjy8UJvF3JPGSrKPYM= Subject key identifier: 55:D5:93:FA:AA:58:2C:7D:C5:5A:82:B2:13:C3:8E:E1:CE:C8:EF:94 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 4669B6570325B46277278BCD98C0D55CBC729F1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 0520 Signing time: Sun 02 Nov 2025 05:40:51 +0000 Manifest this update: Sun 02 Nov 2025 05:35:51 +0000 Manifest next update: Wed 05 Nov 2025 15:45:51 +0000 Files and hashes: 1: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: LIpRQxJLi1n99JN3A8t2MAfw01LKqG7qi8VlodnfPD0=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:69:b6:57:03:25:b4:62:77:27:8b:cd:98:c0:d5:5c:bc:72:9f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Nov 2 05:35:51 2025 GMT Not After : Nov 5 15:45:51 2025 GMT Subject: CN=55D593FAAA582C7DC55A82B213C38EE1CEC8EF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:99:9a:04:14:13:a4:17:3c:eb:fe:14:81: 95:bc:55:bf:d1:fa:84:39:f3:df:e4:15:4b:c0:12: c3:b4:f8:4a:d2:64:c6:7a:5c:a9:83:fc:83:ab:d2: 08:a6:b4:1c:64:fd:c4:2c:6f:fb:d1:ab:a2:31:32: ba:f8:85:ad:6e:b7:f8:17:06:54:d8:0d:d8:0f:68: c0:3f:71:5b:85:71:7e:f8:d9:72:e4:3d:cb:43:33: bf:f1:c8:f5:85:79:d8:13:c1:0f:89:af:b2:aa:01: 50:ae:c2:fe:ec:67:bf:64:d2:75:a8:b7:1b:9f:bd: cf:c5:f0:79:3a:b8:d9:e3:87:5d:7f:9b:f9:3b:d2: 6c:56:65:8c:62:2c:a8:66:69:64:f8:84:da:05:34: 7e:31:7d:b2:d7:e6:26:b9:ef:9e:4a:7b:6a:c0:b3: ba:1d:44:99:45:83:81:4c:2a:e9:a7:d0:81:80:ed: 04:f5:10:a8:13:e1:f1:8c:24:f9:9a:d4:8d:0c:69: f8:d9:d9:1d:e3:5d:10:72:ce:9e:59:6d:d7:e3:e0: 97:89:d4:36:cb:14:a7:0e:c8:a4:33:2b:31:e2:79: 85:c0:02:33:ee:fb:8e:05:24:61:4b:6f:5b:48:bb: 71:88:3c:b8:04:69:ef:bf:fb:d9:9c:9a:67:80:27: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:93:FA:AA:58:2C:7D:C5:5A:82:B2:13:C3:8E:E1:CE:C8:EF:94 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:0d:05:77:f6:d7:7c:d2:d5:7b:0c:4f:45:d3:70:85:d9: 33:f3:89:60:4f:a8:f5:61:e5:30:e3:da:5c:ff:14:a4:b3:bd: 2d:55:93:12:5b:35:8a:ed:b6:32:34:cd:64:1d:06:7b:7f:d4: 60:41:83:a7:46:54:a7:d7:65:38:74:8f:32:4b:35:a5:01:5c: 2a:c6:a3:3c:4d:ae:fc:d5:77:81:13:53:f7:9a:81:e2:3d:84: ce:55:a4:57:9c:11:59:12:4f:ec:d1:b4:0d:8b:77:88:8d:6f: f7:74:06:4f:1d:6b:58:d3:6d:7e:a2:54:b3:d2:58:01:cc:af: 68:af:d2:ed:a2:26:5e:c9:46:6c:98:ed:c8:3b:48:68:22:c9: 2f:2b:ce:e6:03:82:98:1f:c4:33:b4:c6:7b:81:7e:11:9e:42: 37:60:2d:77:df:10:c6:70:37:0d:91:0b:e2:dd:8b:85:5c:56: fc:3b:b1:cf:c3:7e:be:df:d2:ec:6c:52:66:d8:cb:10:72:41: 84:85:1e:c9:f6:00:18:dd:3e:59:b5:54:47:61:24:73:8f:26: 1b:5b:d7:67:a5:c2:fb:60:7b:7e:47:de:db:1c:f9:37:80:3e: 26:54:b6:12:0e:4e:8f:67:e5:d9:9b:37:2d:6a:a3:d9:03:1a: 1f:81:ae:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmm2VwMltGJ3J4vNmMDVXLxynx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTExMDIwNTM1NTFaFw0yNTExMDUxNTQ1NTFaMDMxMTAvBgNV BAMTKDU1RDU5M0ZBQUE1ODJDN0RDNTVBODJCMjEzQzM4RUUxQ0VDOEVGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJ5maBBQTpBc86/4UgZW8Vb/R +oQ589/kFUvAEsO0+ErSZMZ6XKmD/IOr0gimtBxk/cQsb/vRq6IxMrr4ha1ut/gX BlTYDdgPaMA/cVuFcX742XLkPctDM7/xyPWFedgTwQ+Jr7KqAVCuwv7sZ79k0nWo txufvc/F8Hk6uNnjh11/m/k70mxWZYxiLKhmaWT4hNoFNH4xfbLX5ia5755Ke2rA s7odRJlFg4FMKumn0IGA7QT1EKgT4fGMJPma1I0MafjZ2R3jXRByzp5Zbdfj4JeJ 1DbLFKcOyKQzKzHieYXAAjPu+44FJGFLb1tIu3GIPLgEae+/+9mcmmeAJzdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdWT+qpYLH3FWoKyE8OO4c7I75QwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSODQV39td80tV7DE9F03CF2TPziWBPqPVh 5TDj2lz/FKSzvS1VkxJbNYrttjI0zWQdBnt/1GBBg6dGVKfXZTh0jzJLNaUBXCrG ozxNrvzVd4ETU/eageI9hM5VpFecEVkST+zRtA2Ld4iNb/d0Bk8da1jTbX6iVLPS WAHMr2iv0u2iJl7JRmyY7cg7SGgiyS8rzuYDgpgfxDO0xnuBfhGeQjdgLXffEMZw Nw2RC+Ldi4VcVvw7sc/Dfr7f0uxsUmbYyxByQYSFHsn2ABjdPlm1VEdhJHOPJhtb 12elwvtge35H3tsc+TeAPiZUthIOTo9n5dmbNy1qo9kDGh+Brp4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:18 2025 by rpki-client