$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: AGZACZEKAOZvuHEHQb6feRuEC1K+WTZbb5FUf55pIMw= Subject key identifier: 86:78:52:68:74:BB:92:E4:BA:9B:A7:63:FD:72:7D:2F:7F:5B:69:A9 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 0D6BCB07CCAEB00BDF60AB8E7743447FBEFE6554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01A7 Signing time: Sat 18 Oct 2025 22:51:19 +0000 Manifest this update: Sat 18 Oct 2025 22:46:19 +0000 Manifest next update: Wed 22 Oct 2025 09:17:19 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: x5JnbiP7aupck9Og0i9ovy7q1c1tjIZzZT6wwBzAaNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6b:cb:07:cc:ae:b0:0b:df:60:ab:8e:77:43:44:7f:be:fe:65:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Oct 18 22:46:19 2025 GMT Not After : Oct 22 09:17:19 2025 GMT Subject: CN=8678526874BB92E4BA9BA763FD727D2F7F5B69A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:60:ba:0a:50:20:9c:52:f0:aa:8c:24:c1: 15:3d:c1:d0:65:c9:99:a1:f9:2a:dc:45:ae:ac:b1: c4:c9:90:bc:3c:3e:65:f4:e8:38:7d:32:92:6d:f7: 5b:79:64:bf:3d:c1:f0:dc:2f:11:a3:83:c0:96:55: 68:98:35:9b:4c:9c:7e:d0:2b:1f:25:65:78:90:d8: 1a:9b:73:d7:4c:c6:03:12:26:e6:5f:8f:2f:52:ab: 1a:a3:8b:38:83:de:af:2b:03:4a:2d:b9:56:e7:b0: 1d:e8:3c:97:1f:df:b5:33:5e:0b:78:53:35:78:61: 03:bd:28:85:02:02:56:7a:e4:7e:3d:51:76:47:64: 30:79:56:ad:8e:04:6f:0c:d0:8a:cd:01:5b:18:3a: 5e:a5:97:53:cc:5a:b2:18:5a:db:fe:4b:1a:a4:fc: 55:99:4d:1c:a5:d2:8a:68:c0:58:3f:76:25:b4:cb: 56:10:07:f9:f8:d9:4c:45:a0:12:37:59:df:8a:39: 20:f5:8e:f7:e5:72:a5:2f:51:99:8b:2d:e2:d3:9a: b8:cc:ec:ae:b0:c7:2c:99:3c:8d:c2:a8:ad:0e:7c: 5d:82:3e:b4:60:3a:60:d9:8c:a1:a0:59:7d:bb:8e: eb:cd:e1:6b:e5:1b:aa:71:d5:09:1e:1c:0e:58:3b: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:52:68:74:BB:92:E4:BA:9B:A7:63:FD:72:7D:2F:7F:5B:69:A9 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:be:ca:7a:d7:df:a4:3e:29:1a:6b:9d:83:d1:ba:c2:30:36: 06:c6:20:ae:cb:5c:1f:67:49:63:06:ec:71:96:af:1c:6f:ec: 23:32:41:b8:89:70:20:b1:2f:7c:3e:28:8f:e5:9c:90:0a:64: 74:31:46:ee:83:e7:99:6c:59:1b:d0:36:40:e6:4c:bb:8f:5e: 22:b9:0b:47:d8:e5:2c:6a:85:f6:a5:51:a0:12:bb:0e:44:9e: d5:ea:a4:e3:af:91:a2:45:85:f3:78:2f:21:51:08:2f:e7:3d: 76:e1:f1:09:4f:c1:e5:42:7d:ec:0a:62:9b:6b:f7:2b:8c:7f: 81:52:f3:da:5e:fe:fe:93:2c:3d:87:ae:fb:02:b0:b0:09:62: 38:79:0f:27:38:32:24:f6:e7:e6:8b:19:22:2a:18:d0:e0:1a: 1a:03:df:b1:8f:0e:d0:67:63:d3:d8:03:07:1f:4c:1c:27:79: c5:b0:f2:73:8b:44:ef:4a:9d:7f:bf:de:b5:24:ae:0f:53:06: 3f:11:3a:54:4f:c7:27:90:83:71:cc:ba:c5:e5:14:85:71:04: 07:b7:eb:ec:dc:72:9f:a0:9e:4c:bb:74:d2:08:41:17:d7:0f: ed:1e:6f:7f:45:47:47:a4:73:75:4c:a7:46:7b:64:10:e8:46: bb:34:1e:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWvLB8yusAvfYKuOd0NEf77+ZVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTEwMTgyMjQ2MTlaFw0yNTEwMjIwOTE3MTlaMDMxMTAvBgNV BAMTKDg2Nzg1MjY4NzRCQjkyRTRCQTlCQTc2M0ZENzI3RDJGN0Y1QjY5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsE2C6ClAgnFLwqowkwRU9wdBl yZmh+SrcRa6sscTJkLw8PmX06Dh9MpJt91t5ZL89wfDcLxGjg8CWVWiYNZtMnH7Q Kx8lZXiQ2Bqbc9dMxgMSJuZfjy9SqxqjiziD3q8rA0otuVbnsB3oPJcf37UzXgt4 UzV4YQO9KIUCAlZ65H49UXZHZDB5Vq2OBG8M0IrNAVsYOl6ll1PMWrIYWtv+Sxqk /FWZTRyl0opowFg/diW0y1YQB/n42UxFoBI3Wd+KOSD1jvflcqUvUZmLLeLTmrjM 7K6wxyyZPI3CqK0OfF2CPrRgOmDZjKGgWX27juvN4WvlG6px1QkeHA5YOxsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnhSaHS7kuS6m6dj/XJ9L39baakwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu+ynrX36Q+KRprnYPRusIwNgbGIK7LXB9n SWMG7HGWrxxv7CMyQbiJcCCxL3w+KI/lnJAKZHQxRu6D55lsWRvQNkDmTLuPXiK5 C0fY5SxqhfalUaASuw5EntXqpOOvkaJFhfN4LyFRCC/nPXbh8QlPweVCfewKYptr 9yuMf4FS89pe/v6TLD2HrvsCsLAJYjh5Dyc4MiT25+aLGSIqGNDgGhoD37GPDtBn Y9PYAwcfTBwnecWw8nOLRO9KnX+/3rUkrg9TBj8ROlRPxyeQg3HMusXlFIVxBAe3 6+zccp+gnky7dNIIQRfXD+0eb39FR0ekc3VMp0Z7ZBDoRrs0Hjk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:57:53 2025 by rpki-client