$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: P1448mylnehKWzzRCAmcu6sOyb1f6wsPkLFyDgO8KVo= Subject key identifier: 90:F9:52:A7:BE:31:66:9D:0A:D8:67:24:2A:48:A0:B9:7B:2D:A0:32 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 1A3A36E741FF825CA79F543DD7EC3E76DEE64D0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: AF Signing time: Tue 04 Nov 2025 03:10:38 +0000 Manifest this update: Tue 04 Nov 2025 03:05:38 +0000 Manifest next update: Fri 07 Nov 2025 08:23:38 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: HOkqQ7NOutxdGNxD4KIfr9NgHeYPr+GY+SspWOoDBjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3a:36:e7:41:ff:82:5c:a7:9f:54:3d:d7:ec:3e:76:de:e6:4d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Nov 4 03:05:38 2025 GMT Not After : Nov 7 08:23:38 2025 GMT Subject: CN=90F952A7BE31669D0AD867242A48A0B97B2DA032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:18:ca:7a:39:2f:f6:11:9c:e0:1e:32:0b: 52:30:8e:76:4e:ec:e0:32:4f:72:6e:9e:79:4f:a5: 45:ed:53:6e:04:ee:d5:ef:bd:ab:4f:72:29:24:81: 37:4c:e1:a0:94:fb:3e:48:70:84:ea:9b:bf:21:5a: a2:f1:a5:aa:6e:f4:73:f6:af:a2:c1:ad:90:57:8b: 07:e7:e9:be:1b:1e:cc:0f:ba:f0:92:52:1d:3b:1c: e9:99:f2:bd:5f:b5:e6:0c:88:bc:16:a2:3c:9a:89: f6:07:9f:9a:81:cb:3c:cc:a5:5e:b2:bc:b9:aa:73: 87:49:fa:2e:c5:f5:7b:84:6d:6f:a7:d2:3c:30:09: 9f:13:75:10:69:7e:a3:5f:09:2c:c7:c6:56:63:4c: 2d:a7:75:72:b7:85:27:94:d7:d6:0e:da:2c:73:77: 26:77:aa:02:0e:7e:6a:d2:8f:c4:05:e4:8d:f4:14: d9:77:ca:5b:06:a6:1c:19:69:19:fa:b3:f2:90:00: 87:bf:a4:20:3c:e4:3d:2c:b8:40:27:2a:b6:b0:53: 1d:72:6e:92:0a:b5:73:2a:7b:00:a1:96:d2:e6:21: f6:ad:b1:51:2a:0f:49:17:e8:ee:ed:33:72:bd:12: 1a:76:ed:19:41:d6:76:38:fe:d2:06:4d:e5:9a:7f: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F9:52:A7:BE:31:66:9D:0A:D8:67:24:2A:48:A0:B9:7B:2D:A0:32 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bc:56:05:e7:ba:01:d1:b9:2f:ee:ba:2c:32:34:c9:f1:57: 4f:85:e5:91:81:54:8a:77:50:a7:0c:05:5d:b8:f4:5d:6f:bc: a8:19:ac:53:aa:a9:d4:d7:fa:a7:cd:79:ca:f0:c9:a8:29:84: f0:b5:05:da:1e:29:b6:58:cb:52:4c:3d:10:7c:13:bc:aa:bd: 26:17:ec:20:92:c9:b3:44:c8:1d:60:06:e0:9d:c9:a4:b9:43: 08:92:5e:33:c2:40:93:69:be:d2:13:7c:cb:17:83:1a:23:ff: 58:da:87:8a:23:73:23:bd:19:80:fc:22:a2:93:a4:1d:60:e2: 10:76:03:74:8c:ea:82:f1:2f:59:95:a9:6a:7f:6e:18:73:9e: 70:82:9b:04:ca:88:85:43:d3:60:80:9a:29:8e:38:d0:c7:81: 27:c1:62:9c:57:f9:d2:3d:b4:0b:ed:36:65:a6:00:7e:fe:54: 41:0b:00:9b:d1:75:c1:34:d2:a9:af:20:14:e4:7c:24:a0:77: 9c:d0:81:2b:6e:f5:2c:3b:99:42:3c:c2:e8:b2:f4:0b:0f:36: 7a:98:4b:8d:76:89:4d:19:ad:73:ac:13:65:f8:0f:de:d7:6b: 34:24:f1:d5:7e:16:aa:4c:6d:66:f3:b4:0b:c8:25:6f:8f:8f: f0:4c:96:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjo250H/glynn1Q91+w+dt7mTQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTExMDQwMzA1MzhaFw0yNTExMDcwODIzMzhaMDMxMTAvBgNV BAMTKDkwRjk1MkE3QkUzMTY2OUQwQUQ4NjcyNDJBNDhBMEI5N0IyREEwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADxjKejkv9hGc4B4yC1IwjnZO 7OAyT3JunnlPpUXtU24E7tXvvatPcikkgTdM4aCU+z5IcITqm78hWqLxpapu9HP2 r6LBrZBXiwfn6b4bHswPuvCSUh07HOmZ8r1fteYMiLwWojyaifYHn5qByzzMpV6y vLmqc4dJ+i7F9XuEbW+n0jwwCZ8TdRBpfqNfCSzHxlZjTC2ndXK3hSeU19YO2ixz dyZ3qgIOfmrSj8QF5I30FNl3ylsGphwZaRn6s/KQAIe/pCA85D0suEAnKrawUx1y bpIKtXMqewChltLmIfatsVEqD0kX6O7tM3K9Ehp27RlB1nY4/tIGTeWaf1XlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPlSp74xZp0K2GckKkiguXstoDIwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa8VgXnugHRuS/uuiwyNMnxV0+F5ZGBVIp3 UKcMBV249F1vvKgZrFOqqdTX+qfNecrwyagphPC1BdoeKbZYy1JMPRB8E7yqvSYX 7CCSybNEyB1gBuCdyaS5QwiSXjPCQJNpvtITfMsXgxoj/1jah4ojcyO9GYD8IqKT pB1g4hB2A3SM6oLxL1mVqWp/bhhznnCCmwTKiIVD02CAmimOONDHgSfBYpxX+dI9 tAvtNmWmAH7+VEELAJvRdcE00qmvIBTkfCSgd5zQgStu9Sw7mUI8wuiy9AsPNnqY S412iU0ZrXOsE2X4D97XazQk8dV+FqpMbWbztAvIJW+Pj/BMltM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:05 2025 by rpki-client