$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: qi+p5uAiBSoQybyy3UW2wBGrBRiWBw1SI0plBLNSC+M= Subject key identifier: 2E:F0:84:D5:BE:22:9B:C8:1B:2C:3F:41:E6:32:80:A1:7E:FD:60:2C Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 56E654B48D7EE1CB9EB0351074BE6DCD8488FDB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 01F7 Signing time: Mon 03 Nov 2025 23:51:10 +0000 Manifest this update: Mon 03 Nov 2025 23:46:10 +0000 Manifest next update: Fri 07 Nov 2025 10:26:10 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 2: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: Fmdfkc/xNN9S5i1KEEUbH6t81XnMh1sohR84hGHmeeY=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e6:54:b4:8d:7e:e1:cb:9e:b0:35:10:74:be:6d:cd:84:88:fd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Nov 3 23:46:10 2025 GMT Not After : Nov 7 10:26:10 2025 GMT Subject: CN=2EF084D5BE229BC81B2C3F41E63280A17EFD602C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:1a:da:2b:62:8e:bb:56:54:1b:bc:70:85: 68:12:7d:4a:ba:fd:c3:ce:d5:c5:e4:cb:79:81:d9: 94:3b:15:1f:ec:e2:80:ad:ba:ef:f4:07:52:03:d3: 28:e2:80:f3:85:81:d0:5e:d1:fd:5b:74:1b:82:b2: da:62:52:2a:e7:9c:a7:31:5d:13:e3:e4:a4:83:6c: 35:47:30:ea:1f:1d:5a:35:b6:9b:ad:f5:49:e7:dc: c8:95:9b:bd:30:97:08:ac:ae:9b:91:a4:23:d9:f0: d2:04:51:e9:db:18:46:b3:a2:ed:f0:63:64:44:0f: 09:f1:54:6e:fb:a8:4c:83:04:1a:04:6b:b6:13:3b: 64:cc:b3:a2:86:35:01:0b:95:c0:38:39:7c:e9:28: 4d:26:9a:75:3e:97:b3:6c:ae:bc:5d:bc:e2:0d:93: bf:e6:50:18:f2:ca:39:bd:14:42:b2:6e:6a:f5:60: 95:14:00:88:de:7d:ba:79:56:70:89:82:f8:43:13: fc:61:80:a6:e2:57:d2:74:8d:79:8c:57:d3:a0:b2: c7:fe:8c:be:ab:c8:75:33:f1:83:a8:5e:28:c0:e1: 10:3a:91:22:b6:1c:e6:e5:4d:e9:f9:2f:ff:c9:fa: 69:de:63:11:4d:6a:3c:6d:6e:b7:db:47:f7:05:c1: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F0:84:D5:BE:22:9B:C8:1B:2C:3F:41:E6:32:80:A1:7E:FD:60:2C X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:69:62:ab:68:63:b6:87:10:39:01:96:5f:1c:84:4c:59:eb: a6:7a:af:9e:b9:d9:35:69:db:c3:c8:da:66:ab:f1:96:74:6f: 92:e2:eb:76:cb:a9:e8:4e:d2:a9:70:96:ea:42:45:48:35:45: 3f:44:89:5b:ec:44:3b:9d:62:10:cb:7f:12:96:e5:27:ce:ff: 37:b8:7e:75:45:2d:c9:fa:84:26:45:ad:b1:c3:c4:83:16:6f: c0:8b:71:f0:c5:f4:50:3c:66:32:06:6d:02:b1:b2:51:56:63: be:ca:a2:e4:54:3b:e9:c9:7e:6a:ae:40:33:38:2e:e7:14:1b: 02:08:10:d1:db:42:71:0d:52:50:47:02:c1:1b:e1:0c:19:e2: 5a:49:ad:74:71:ef:43:3d:f6:af:3f:d0:63:98:21:d8:94:50: 49:18:dc:89:75:e0:2b:96:11:fe:fe:52:b7:e5:2e:1a:fe:ba: ab:5e:78:62:38:9d:1f:68:8e:0b:f0:33:c4:a0:52:7c:4e:81: 14:cf:cb:41:17:72:17:df:7f:d2:20:24:d8:8c:3b:11:0b:70: 62:5a:2d:34:f9:30:c6:27:05:57:0e:17:ba:0b:fa:a1:5f:d9: 34:69:0e:08:92:85:4f:10:8d:5d:ac:e9:56:db:65:ac:90:41: 22:7c:62:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuZUtI1+4cuesDUQdL5tzYSI/bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTExMDMyMzQ2MTBaFw0yNTExMDcxMDI2MTBaMDMxMTAvBgNV BAMTKDJFRjA4NEQ1QkUyMjlCQzgxQjJDM0Y0MUU2MzI4MEExN0VGRDYwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBxraK2KOu1ZUG7xwhWgSfUq6 /cPO1cXky3mB2ZQ7FR/s4oCtuu/0B1ID0yjigPOFgdBe0f1bdBuCstpiUirnnKcx XRPj5KSDbDVHMOofHVo1tput9Unn3MiVm70wlwisrpuRpCPZ8NIEUenbGEazou3w Y2REDwnxVG77qEyDBBoEa7YTO2TMs6KGNQELlcA4OXzpKE0mmnU+l7NsrrxdvOIN k7/mUBjyyjm9FEKybmr1YJUUAIjefbp5VnCJgvhDE/xhgKbiV9J0jXmMV9Ogssf+ jL6ryHUz8YOoXijA4RA6kSK2HOblTen5L//J+mneYxFNajxtbrfbR/cFwdrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvCE1b4im8gbLD9B5jKAoX79YCwwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxpYqtoY7aHEDkBll8chExZ66Z6r5652TVp 28PI2mar8ZZ0b5Li63bLqehO0qlwlupCRUg1RT9EiVvsRDudYhDLfxKW5SfO/ze4 fnVFLcn6hCZFrbHDxIMWb8CLcfDF9FA8ZjIGbQKxslFWY77KouRUO+nJfmquQDM4 LucUGwIIENHbQnENUlBHAsEb4QwZ4lpJrXRx70M99q8/0GOYIdiUUEkY3Il14CuW Ef7+UrflLhr+uqteeGI4nR9ojgvwM8SgUnxOgRTPy0EXchfff9IgJNiMOxELcGJa LTT5MMYnBVcOF7oL+qFf2TRpDgiShU8QjV2s6VbbZayQQSJ8YnQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:30 2025 by rpki-client