$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: eVYqcuoQYqSl0uttuJRR6qw5LW+IPV7v0TdDjJAFl94= Subject key identifier: 83:04:8E:75:12:F4:56:B9:1D:BE:8E:31:D1:40:4F:60:F6:4D:3E:88 Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: F66401625FA9B522FB9613B835E1EBB616ECEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 011F Signing time: Sun 02 Nov 2025 12:01:29 +0000 Manifest this update: Sun 02 Nov 2025 11:56:29 +0000 Manifest next update: Wed 05 Nov 2025 21:39:29 +0000 Files and hashes: 1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=) 2: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: ba/S7Li1GZfRBKvErhLq/Oi0SDMKyIMDaEIPfiDiJKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f6:64:01:62:5f:a9:b5:22:fb:96:13:b8:35:e1:eb:b6:16:ec:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Nov 2 11:56:29 2025 GMT Not After : Nov 5 21:39:29 2025 GMT Subject: CN=83048E7512F456B91DBE8E31D1404F60F64D3E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:01:0d:bf:78:19:39:5f:a9:a3:77:ef:45: fb:ac:0f:0d:c2:7f:1b:8d:e1:be:0e:2d:99:d0:42: e1:12:0b:58:04:93:8a:9d:63:60:62:1b:85:e6:c0: 23:38:05:bd:f2:67:2f:b6:7a:dc:38:6c:fc:47:37: 25:7d:f9:88:fe:11:0b:3b:84:e7:19:07:f5:ea:b9: 8d:ec:2f:c0:3c:c1:72:9c:f1:5e:b3:da:f2:a8:b6: 6b:88:f8:cd:f1:4c:c6:51:a8:47:62:b7:64:6a:c7: e7:cb:17:a3:41:9e:1c:75:04:b9:9c:80:71:c8:dd: 2e:9e:28:71:1c:65:63:9f:ab:12:c8:38:70:40:b7: a5:e3:1c:7f:68:40:0e:ba:16:72:9b:a0:ea:b0:d5: 13:df:72:92:15:aa:6e:9e:12:f2:d9:cb:e3:4d:71: bc:85:c5:36:ea:52:a2:73:0c:a1:59:93:ef:34:9d: 21:4c:44:fb:91:81:fa:a2:f0:64:ae:6d:ef:4d:77: eb:d3:7a:e1:f3:db:85:95:1d:c3:a6:bc:fd:7b:98: 60:97:f4:7d:48:36:f7:38:6e:46:df:b7:4d:62:b3: a6:01:8e:48:b0:81:8a:40:5f:42:74:57:7d:e1:51: ab:25:4b:e5:ed:b7:12:b0:16:be:b0:e5:d1:c1:36: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:04:8E:75:12:F4:56:B9:1D:BE:8E:31:D1:40:4F:60:F6:4D:3E:88 X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ef:b0:e0:af:48:06:0b:31:85:eb:b9:a4:a7:f9:06:0b:93: cc:b9:a7:cc:20:80:63:e8:6f:a6:97:40:70:81:d5:91:84:10: 8e:71:f2:5b:45:fa:53:f3:8f:0d:54:ba:1b:3d:ed:74:2f:5d: 2e:74:02:5d:96:9f:fe:19:71:96:c4:e1:2a:bc:69:66:72:34: e3:f2:45:46:42:25:8c:36:ed:54:aa:8a:e7:11:0c:ad:4d:c9: 27:81:c0:3c:45:39:fe:83:cb:ad:20:94:b5:e6:43:4f:d3:7e: 53:c0:43:4c:ab:e0:fc:29:9b:1c:88:61:fc:b0:47:a5:c2:d5: 58:27:02:2e:39:70:1f:64:5e:ed:9f:09:2d:ea:6c:96:84:a3: d4:86:45:17:a7:07:6c:3b:94:b3:dc:fa:66:88:18:08:85:61: e6:6f:d8:27:4e:f9:02:6d:2a:57:7d:05:53:04:41:ed:21:a5: cb:94:97:fd:d4:12:c0:0e:cb:20:7b:91:1b:7c:5f:69:0e:95: b2:38:cb:82:14:b3:6d:3d:98:36:8c:41:47:be:24:35:15:d2: b8:1f:47:cf:b1:91:3a:c7:42:49:41:45:bb:28:44:cb:2d:8c: 6a:8a:eb:f8:48:fa:85:74:20:99:08:6c:43:e1:f9:d5:ea:94: 3a:67:19:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPZkAWJfqbUi+5YTuDXh67YW7O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTExMDIxMTU2MjlaFw0yNTExMDUyMTM5MjlaMDMxMTAvBgNV BAMTKDgzMDQ4RTc1MTJGNDU2QjkxREJFOEUzMUQxNDA0RjYwRjY0RDNFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZAENv3gZOV+po3fvRfusDw3C fxuN4b4OLZnQQuESC1gEk4qdY2BiG4XmwCM4Bb3yZy+2etw4bPxHNyV9+Yj+EQs7 hOcZB/XquY3sL8A8wXKc8V6z2vKotmuI+M3xTMZRqEdit2Rqx+fLF6NBnhx1BLmc gHHI3S6eKHEcZWOfqxLIOHBAt6XjHH9oQA66FnKboOqw1RPfcpIVqm6eEvLZy+NN cbyFxTbqUqJzDKFZk+80nSFMRPuRgfqi8GSube9Nd+vTeuHz24WVHcOmvP17mGCX 9H1INvc4bkbft01is6YBjkiwgYpAX0J0V33hUaslS+XttxKwFr6w5dHBNqmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwSOdRL0Vrkdvo4x0UBPYPZNPogwHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbvsOCvSAYLMYXruaSn+QYLk8y5p8wggGPo b6aXQHCB1ZGEEI5x8ltF+lPzjw1Uuhs97XQvXS50Al2Wn/4ZcZbE4Sq8aWZyNOPy RUZCJYw27VSqiucRDK1NySeBwDxFOf6Dy60glLXmQ0/TflPAQ0yr4PwpmxyIYfyw R6XC1VgnAi45cB9kXu2fCS3qbJaEo9SGRRenB2w7lLPc+maIGAiFYeZv2CdO+QJt Kld9BVMEQe0hpcuUl/3UEsAOyyB7kRt8X2kOlbI4y4IUs209mDaMQUe+JDUV0rgf R8+xkTrHQklBRbsoRMstjGqK6/hI+oV0IJkIbEPh+dXqlDpnGVg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:08 2025 by rpki-client