$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: oN6CYZZh7vIQW21e0pb7be2Nxfr/uwpuNxoCSx8NdgA= Subject key identifier: 37:67:AE:CB:2E:84:D6:82:AB:59:EB:07:A2:76:84:CE:76:B4:34:54 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 6D498AEC61FE9B814BC81DFEE2825801682D0B31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 03:50:45 +0000 Manifest this update: Sun 19 Oct 2025 03:45:45 +0000 Manifest next update: Wed 22 Oct 2025 07:20:45 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: QvjCe48G6NF1URzd8Uks7hMdtLXvWyHctxEi50xAHBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:49:8a:ec:61:fe:9b:81:4b:c8:1d:fe:e2:82:58:01:68:2d:0b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Oct 19 03:45:45 2025 GMT Not After : Oct 22 07:20:45 2025 GMT Subject: CN=3767AECB2E84D682AB59EB07A27684CE76B43454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:ad:9f:ca:27:02:ca:54:79:02:c3:3f:24: 07:b4:4e:b9:20:3c:35:4d:de:0c:c6:3a:64:4c:54: 07:0d:a7:7c:d8:69:a0:10:91:ac:e4:6c:c4:34:1a: 8c:f2:b2:7c:62:ef:2a:20:3f:94:ef:1d:2b:96:03: b5:7a:fb:31:96:a6:2e:8b:51:13:1e:58:d5:b2:10: d4:b5:2b:00:9a:19:95:ee:78:1e:65:41:a3:60:38: a6:76:40:df:53:f5:42:c6:e5:3e:cd:13:3f:1a:63: 63:25:8b:96:0e:2e:2f:bc:d8:0f:ca:30:be:f9:ec: 4c:b4:c9:84:b2:02:77:c6:71:7c:53:17:45:47:af: 81:c5:65:25:00:86:60:59:4b:79:a8:7f:62:7f:81: 8e:47:56:53:1f:65:c3:8d:0c:33:6e:30:9f:0b:38: f3:80:c6:ee:cb:61:16:ea:1b:e8:bd:a5:48:36:cc: ab:c2:6b:eb:15:21:77:66:b6:2f:66:df:a3:8f:b8: a0:c0:41:10:4e:29:d8:20:1e:b7:24:2c:89:98:3c: f4:df:d2:4b:3a:c9:11:6a:e3:c5:5f:86:2e:2e:9a: 2c:37:f3:64:f5:e8:7b:fe:1b:cb:67:73:5e:69:29: 20:d1:ac:90:f5:53:44:55:d7:c1:e3:44:ba:4e:41: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:AE:CB:2E:84:D6:82:AB:59:EB:07:A2:76:84:CE:76:B4:34:54 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cc:00:e2:23:4c:58:e8:c4:37:9c:9e:8c:6f:c7:a5:fb:f8: 53:09:ba:81:31:aa:e0:5a:4d:53:c4:6c:3e:0c:38:20:65:99: 06:5e:96:94:ab:16:f5:20:5f:44:dd:0b:e5:e8:3d:65:26:5c: 16:61:97:43:77:15:cf:06:4f:f3:6c:12:07:68:55:d3:81:40: 90:3f:13:aa:e4:f5:34:be:9f:8f:22:33:48:be:e2:9b:4c:b4: b5:cd:f0:20:3c:26:fe:fe:f9:43:f3:ed:8d:02:7b:8b:55:ff: 6e:0b:af:2a:58:43:e1:09:65:20:08:82:ad:2f:ae:ba:c1:9a: 0a:af:e2:37:2f:5d:75:ee:08:ca:37:91:2a:6a:56:4c:72:f2: 7e:40:83:8e:74:5e:e6:23:4c:90:72:df:dc:e6:bc:ea:c9:b1: f7:50:02:37:cb:47:c1:2e:0d:88:0c:fd:29:d0:e7:ea:01:33: 86:6a:e3:56:3f:2e:0c:e1:21:80:8b:68:ec:da:0b:8e:74:5c: fb:5f:c3:d1:e5:ee:3f:48:5e:68:36:85:3b:3b:77:19:50:11: f9:2d:75:2c:91:4d:3b:2e:04:7c:25:8a:f1:a4:0e:a8:8e:84: 67:d7:6b:24:53:ff:ed:d2:a7:41:cf:0a:22:23:77:84:f1:36: 6b:eb:f7:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUmK7GH+m4FLyB3+4oJYAWgtCzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTEwMTkwMzQ1NDVaFw0yNTEwMjIwNzIwNDVaMDMxMTAvBgNV BAMTKDM3NjdBRUNCMkU4NEQ2ODJBQjU5RUIwN0EyNzY4NENFNzZCNDM0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaa2fyicCylR5AsM/JAe0Trkg PDVN3gzGOmRMVAcNp3zYaaAQkazkbMQ0Gozysnxi7yogP5TvHSuWA7V6+zGWpi6L URMeWNWyENS1KwCaGZXueB5lQaNgOKZ2QN9T9ULG5T7NEz8aY2Mli5YOLi+82A/K ML757Ey0yYSyAnfGcXxTF0VHr4HFZSUAhmBZS3mof2J/gY5HVlMfZcONDDNuMJ8L OPOAxu7LYRbqG+i9pUg2zKvCa+sVIXdmti9m36OPuKDAQRBOKdggHrckLImYPPTf 0ks6yRFq48Vfhi4umiw382T16Hv+G8tnc15pKSDRrJD1U0RV18HjRLpOQe9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2euyy6E1oKrWesHonaEzna0NFQwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETMAOIjTFjoxDecnoxvx6X7+FMJuoExquBa TVPEbD4MOCBlmQZelpSrFvUgX0TdC+XoPWUmXBZhl0N3Fc8GT/NsEgdoVdOBQJA/ E6rk9TS+n48iM0i+4ptMtLXN8CA8Jv7++UPz7Y0Ce4tV/24LrypYQ+EJZSAIgq0v rrrBmgqv4jcvXXXuCMo3kSpqVkxy8n5Ag450XuYjTJBy39zmvOrJsfdQAjfLR8Eu DYgM/SnQ5+oBM4Zq41Y/LgzhIYCLaOzaC450XPtfw9Hl7j9IXmg2hTs7dxlQEfkt dSyRTTsuBHwlivGkDqiOhGfXayRT/+3Sp0HPCiIjd4TxNmvr93k= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:05 2025 by rpki-client