$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: R5T9E2bMQW38h+/Hqhdc+1ndh4NOOGVgJvSgRD8lF7U= Subject key identifier: 49:B4:27:24:45:6A:FC:56:52:B9:7B:29:9A:7C:5B:F6:41:07:EF:EA Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 57C73B36AC71B63D99EC554FA8FD700A8F4645B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 0114 Signing time: Mon 20 Oct 2025 16:31:33 +0000 Manifest this update: Mon 20 Oct 2025 16:26:33 +0000 Manifest next update: Thu 23 Oct 2025 16:46:33 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) 2: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: J/HjNqkhXnFKpfYqMHZGuWCjUTYmN3PhhdGKBTB3fF8=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c7:3b:36:ac:71:b6:3d:99:ec:55:4f:a8:fd:70:0a:8f:46:45:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Oct 20 16:26:33 2025 GMT Not After : Oct 23 16:46:33 2025 GMT Subject: CN=49B42724456AFC5652B97B299A7C5BF64107EFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:87:ed:bb:c8:dd:97:97:f7:b0:13:21:c9: 5e:fd:39:a7:a4:1a:72:c3:59:c3:aa:bf:e8:bc:ce: b6:0d:7c:2e:e6:e2:f3:ef:42:be:3d:88:5c:a5:6b: 50:76:b6:47:25:20:36:81:e2:85:ef:41:f1:0b:02: d7:a7:e2:89:4d:5f:b0:3a:ae:1f:cc:6d:d4:b2:6b: d5:31:57:e6:62:db:7f:c2:2b:aa:0e:69:4c:27:f1: e7:f5:ae:26:a2:c9:3f:25:fc:3c:a7:59:93:d2:df: 9e:49:7b:50:7c:8a:c7:ed:ff:20:be:30:70:d7:e4: b4:4c:96:c4:db:45:0e:bf:b2:80:89:8e:d7:34:ca: fc:07:c0:dc:2f:ec:9d:22:79:14:82:7a:78:56:fc: 71:36:61:18:d8:16:82:16:74:14:94:42:8c:9b:df: 18:74:0a:9d:ce:87:1b:37:16:a8:91:64:eb:5d:4b: b2:6f:79:74:36:01:ad:ef:62:17:0b:77:14:ce:77: 62:b8:91:49:45:32:ec:5f:a7:d8:c5:3b:b6:8e:d8: c7:8d:f1:de:e9:bd:17:d0:68:69:37:d2:34:ea:8a: e2:3a:86:ce:d0:8b:d7:db:a9:d5:8e:a2:da:02:eb: d3:f7:e2:c8:b9:21:aa:25:4e:4e:dd:5e:c9:54:e7: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:27:24:45:6A:FC:56:52:B9:7B:29:9A:7C:5B:F6:41:07:EF:EA X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:82:53:a7:09:6b:4a:a5:0b:b4:30:5b:79:78:77:34:de: 31:f3:23:31:99:78:da:6a:d3:88:96:16:40:fd:32:3d:70:24: 07:44:1c:c9:13:e5:4a:c5:79:b0:c5:76:ca:38:f5:54:7a:f0: a3:4e:c6:73:d9:13:d0:c7:d3:15:94:d6:53:c6:3f:61:32:fe: cd:87:f8:fa:c0:2b:fa:15:b8:c4:f8:3d:ae:7e:a2:52:a5:51: 8d:0c:82:3a:80:66:fb:bc:33:c4:ba:b9:6e:5e:13:f4:77:db: e6:d9:c6:f1:4a:33:40:71:a1:a7:6e:e2:23:54:1f:31:82:b5: 68:f8:f3:b0:8b:08:62:ac:e8:15:87:03:b2:c3:76:67:96:6b: 7b:72:76:64:4e:08:0a:2a:3e:4d:7c:37:94:76:d4:84:a2:0d: c6:9b:2d:74:b0:50:59:81:40:ef:38:90:ae:0b:ce:54:d3:28: 21:10:a4:4f:54:7d:7f:d2:0d:92:d8:69:b1:6c:66:67:50:ae: 8b:99:94:c7:5b:21:27:7b:aa:35:95:4f:27:5d:bf:21:44:44: f4:3b:c0:9d:8c:4b:e4:0a:b0:7c:b3:6d:25:b6:fe:5e:6e:63: 37:85:95:89:7e:81:05:8c:b8:67:5e:9f:f5:ee:84:80:25:77: f8:57:02:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8c7Nqxxtj2Z7FVPqP1wCo9GRbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTEwMjAxNjI2MzNaFw0yNTEwMjMxNjQ2MzNaMDMxMTAvBgNV BAMTKDQ5QjQyNzI0NDU2QUZDNTY1MkI5N0IyOTlBN0M1QkY2NDEwN0VGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffIftu8jdl5f3sBMhyV79Oaek GnLDWcOqv+i8zrYNfC7m4vPvQr49iFyla1B2tkclIDaB4oXvQfELAten4olNX7A6 rh/MbdSya9UxV+Zi23/CK6oOaUwn8ef1riaiyT8l/DynWZPS355Je1B8isft/yC+ MHDX5LRMlsTbRQ6/soCJjtc0yvwHwNwv7J0ieRSCenhW/HE2YRjYFoIWdBSUQoyb 3xh0Cp3Ohxs3FqiRZOtdS7JveXQ2Aa3vYhcLdxTOd2K4kUlFMuxfp9jFO7aO2MeN 8d7pvRfQaGk30jTqiuI6hs7Qi9fbqdWOotoC69P34si5IaolTk7dXslU540DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbQnJEVq/FZSuXspmnxb9kEH7+owHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvaglOnCWtKpQu0MFt5eHc03jHzIzGZeNpq 04iWFkD9Mj1wJAdEHMkT5UrFebDFdso49VR68KNOxnPZE9DH0xWU1lPGP2Ey/s2H +PrAK/oVuMT4Pa5+olKlUY0MgjqAZvu8M8S6uW5eE/R32+bZxvFKM0Bxoadu4iNU HzGCtWj487CLCGKs6BWHA7LDdmeWa3tydmROCAoqPk18N5R21ISiDcabLXSwUFmB QO84kK4LzlTTKCEQpE9UfX/SDZLYabFsZmdQrouZlMdbISd7qjWVTyddvyFERPQ7 wJ2MS+QKsHyzbSW2/l5uYzeFlYl+gQWMuGden/XuhIAld/hXAug= -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:01 2025 by rpki-client