$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: gBUrAairiYjckxMbPD0AkNL9uCbSJMAeGnbn6iTcyg8= Subject key identifier: F5:E7:6A:E7:12:F2:D0:83:60:73:3E:E5:C0:F1:29:3B:F7:66:B3:85 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 07C46D89ED748BF8A2E2C4057D6954EF0208C958 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 19:01:06 +0000 Manifest this update: Mon 03 Nov 2025 18:56:06 +0000 Manifest next update: Fri 07 Nov 2025 02:27:06 +0000 Files and hashes: 1: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) 2: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: ivQGL9/r+394L1QfEFJsv4iCeAYl44ryD3UwjiPRxKw=) 3: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c4:6d:89:ed:74:8b:f8:a2:e2:c4:05:7d:69:54:ef:02:08:c9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Nov 3 18:56:06 2025 GMT Not After : Nov 7 02:27:06 2025 GMT Subject: CN=F5E76AE712F2D08360733EE5C0F1293BF766B385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:0f:9c:a1:fc:c5:7c:78:19:8f:a4:7a:88: 1e:b0:f4:eb:8f:37:74:90:22:49:ac:f0:d3:15:1b: fb:c8:bd:54:67:07:8d:ee:3b:db:ba:ca:e2:34:69: bd:dc:ec:f3:48:23:ae:61:77:4e:1d:6e:c2:34:dd: 61:33:b7:df:65:04:5c:2e:35:c9:ff:71:ce:17:17: f3:55:a1:49:1d:2b:a2:e3:1c:e3:c0:a5:70:4b:61: 40:03:f4:db:8e:0a:e8:dd:57:7b:72:00:7c:1c:3a: 4f:e9:4a:de:7b:d5:2f:c6:35:51:56:a2:79:8d:1c: f1:98:3f:26:a9:0f:a9:eb:43:2c:98:03:81:67:01: c7:61:5a:a8:49:2b:48:ef:57:74:53:66:46:ba:78: b5:7a:8b:42:67:89:a4:d8:c7:66:86:52:27:a1:d6: 8d:1a:96:ef:50:af:45:67:97:7f:ab:06:03:a4:e0: dc:9d:d5:1b:fa:fe:95:33:65:2f:d3:0d:3b:7a:87: ae:63:fb:9f:19:93:3c:a3:26:2c:c0:99:b0:5a:06: c4:d3:f7:9f:9c:6d:5c:ec:cd:6a:7e:ae:1c:62:e6: 56:0a:97:f4:1c:94:a1:53:1d:a2:36:9d:ca:1e:77: f2:33:96:ca:75:28:4f:7d:d6:39:9c:d1:d3:b2:40: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:6A:E7:12:F2:D0:83:60:73:3E:E5:C0:F1:29:3B:F7:66:B3:85 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9f:29:48:69:b2:bf:4b:39:21:a3:5e:e9:bf:e3:30:45:ae: a6:f1:ed:0b:f6:a1:90:66:15:99:67:09:dd:2b:8a:87:10:d3: 51:84:d1:39:41:ef:8e:dd:c1:b3:f8:d9:b1:e0:24:81:4a:ba: 79:34:05:8c:73:c4:62:c5:48:05:cc:76:9d:0e:0c:03:7e:db: d0:84:90:92:ec:27:09:20:38:7f:dd:df:02:ae:70:38:18:e7: fe:14:c3:f8:df:66:89:23:2f:b9:80:a8:3e:d2:9c:80:a3:a6: 03:06:27:f3:04:b5:72:4b:07:14:bc:0b:f3:96:f9:03:ff:a4: 60:99:6f:df:bd:d2:23:d5:a3:41:25:b1:60:cb:9c:03:c1:d1: 7b:3e:10:61:41:f6:13:19:f4:2e:78:64:3c:d8:f0:9f:5e:9f: 9c:d3:f5:ac:fa:03:33:6e:ae:51:22:31:0b:b6:84:9e:5f:b6: 91:7c:fd:e7:2d:16:16:a0:f9:c8:b7:aa:ee:30:6d:81:a0:cf: a3:9e:f1:22:71:72:b9:5f:61:25:1d:93:89:b5:f1:cf:56:15: 04:c3:c7:2e:6c:7c:f9:84:33:fb:e8:87:fa:69:67:8a:32:a0: c4:66:5d:77:aa:90:32:00:71:2f:d8:dd:4e:39:1e:33:c7:18: e8:0f:78:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8Rtie10i/ii4sQFfWlU7wIIyVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTExMDMxODU2MDZaFw0yNTExMDcwMjI3MDZaMDMxMTAvBgNV BAMTKEY1RTc2QUU3MTJGMkQwODM2MDczM0VFNUMwRjEyOTNCRjc2NkIzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBw+cofzFfHgZj6R6iB6w9OuP N3SQIkms8NMVG/vIvVRnB43uO9u6yuI0ab3c7PNII65hd04dbsI03WEzt99lBFwu Ncn/cc4XF/NVoUkdK6LjHOPApXBLYUAD9NuOCujdV3tyAHwcOk/pSt571S/GNVFW onmNHPGYPyapD6nrQyyYA4FnAcdhWqhJK0jvV3RTZka6eLV6i0JniaTYx2aGUieh 1o0alu9Qr0Vnl3+rBgOk4Nyd1Rv6/pUzZS/TDTt6h65j+58ZkzyjJizAmbBaBsTT 95+cbVzszWp+rhxi5lYKl/QclKFTHaI2ncoed/Izlsp1KE991jmc0dOyQKCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9edq5xLy0INgcz7lwPEpO/dms4UwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOfKUhpsr9LOSGjXum/4zBFrqbx7Qv2oZBm FZlnCd0riocQ01GE0TlB747dwbP42bHgJIFKunk0BYxzxGLFSAXMdp0ODAN+29CE kJLsJwkgOH/d3wKucDgY5/4Uw/jfZokjL7mAqD7SnICjpgMGJ/MEtXJLBxS8C/OW +QP/pGCZb9+90iPVo0ElsWDLnAPB0Xs+EGFB9hMZ9C54ZDzY8J9en5zT9az6AzNu rlEiMQu2hJ5ftpF8/ectFhag+ci3qu4wbYGgz6Oe8SJxcrlfYSUdk4m18c9WFQTD xy5sfPmEM/voh/ppZ4oyoMRmXXeqkDIAcS/Y3U45HjPHGOgPeFE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:38 2025 by rpki-client