$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: 8InG84sBGC24aCNNUzALFUGwOBJtnJ218WJPq6vTUwQ= Subject key identifier: A7:FD:E7:07:0F:49:7D:EB:75:EE:C0:84:73:ED:96:E0:A7:7D:AD:1E Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 4F95D650B2D4203FFE69DC989A4D248EBFB93998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: F5 Signing time: Sun 19 Oct 2025 01:51:39 +0000 Manifest this update: Sun 19 Oct 2025 01:46:39 +0000 Manifest next update: Wed 22 Oct 2025 11:20:39 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: ZULflKLpTRU5xZNsajBHN31cA68jv9SZBo4YlRfmcDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:d6:50:b2:d4:20:3f:fe:69:dc:98:9a:4d:24:8e:bf:b9:39:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Oct 19 01:46:39 2025 GMT Not After : Oct 22 11:20:39 2025 GMT Subject: CN=A7FDE7070F497DEB75EEC08473ED96E0A77DAD1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:8f:52:40:60:23:11:6c:85:ee:23:d8:47: dd:00:19:4e:5f:81:43:d7:9d:6e:8a:e0:12:3a:f2: 7e:33:c5:fe:3a:c7:90:1e:1f:46:9b:40:d7:d3:36: 32:95:d5:0d:9b:b5:07:63:96:a0:56:81:39:2a:57: fe:3a:25:d3:3a:f5:e1:0f:bd:01:cb:93:53:db:43: 57:96:47:e1:86:ea:74:c8:b2:12:5e:46:a0:00:ae: 8b:bb:1c:41:ba:26:aa:e0:9f:9f:9f:16:d0:ee:42: fb:5d:08:25:59:5e:a6:fe:d2:98:dd:62:94:42:7e: 65:a2:54:f0:56:38:d2:ce:29:32:65:22:d6:c7:0d: 97:5f:a7:be:39:64:8c:62:09:3c:15:f9:81:1d:58: 42:f8:54:05:47:a9:94:5c:4b:7e:29:29:d3:2c:f1: 32:03:e6:1d:dd:78:96:49:78:26:23:4a:06:ac:1d: 86:37:d5:52:9f:d0:eb:96:2b:59:5a:e5:13:82:a1: 3d:14:40:4b:7d:f7:64:cd:ea:47:48:be:46:a6:23: 3e:4b:67:c3:66:9a:00:48:68:58:f4:c0:69:01:59: 19:d9:9c:f5:51:27:96:5c:e8:08:52:2f:50:08:88: d1:65:55:03:a4:d5:20:fb:de:4f:f9:28:73:98:0f: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:E7:07:0F:49:7D:EB:75:EE:C0:84:73:ED:96:E0:A7:7D:AD:1E X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:00:a7:62:b5:7f:7c:22:94:60:31:cd:ad:13:26:92:18:82: 7f:89:85:79:ee:8e:75:0c:fc:8d:b0:15:ef:de:16:d7:ec:46: 12:38:0d:fa:69:9f:49:e0:4b:3d:c0:30:97:44:fc:16:b9:df: 0b:a9:16:4a:4c:19:49:9c:78:59:df:5b:38:00:64:77:43:a2: 66:fd:c7:9d:0b:e5:05:5b:46:63:ef:43:50:81:b2:a5:f1:7f: c0:51:2a:0d:b6:f9:6b:2b:03:03:54:0b:71:e1:4d:11:da:73: 3e:57:cc:cf:2c:fc:24:fb:de:ea:4d:34:60:71:1a:ae:81:f5: 5f:64:f0:22:dc:64:d5:59:19:c6:be:2a:45:69:2d:7f:51:62: 1e:ed:2e:57:10:ce:cf:91:6f:98:da:e2:83:c5:1f:80:27:bf: f0:d4:f3:f7:7d:2c:fc:c7:1d:58:13:77:20:fb:7f:df:4b:6b: fb:96:4a:22:26:93:09:a1:88:d1:f2:76:ed:39:0b:4f:80:03: ce:8a:c9:2b:98:a6:d4:df:3c:0a:77:3e:98:fa:ef:6d:ed:b1: 9e:31:78:0f:78:11:59:dd:62:f5:e4:e9:2d:41:11:0d:02:cd: 07:45:cc:55:39:28:b7:ee:a8:09:c4:39:87:87:75:f0:4f:c2: b2:69:72:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5XWULLUID/+adyYmk0kjr+5OZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTEwMTkwMTQ2MzlaFw0yNTEwMjIxMTIwMzlaMDMxMTAvBgNV BAMTKEE3RkRFNzA3MEY0OTdERUI3NUVFQzA4NDczRUQ5NkUwQTc3REFEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrY9SQGAjEWyF7iPYR90AGU5f gUPXnW6K4BI68n4zxf46x5AeH0abQNfTNjKV1Q2btQdjlqBWgTkqV/46JdM69eEP vQHLk1PbQ1eWR+GG6nTIshJeRqAArou7HEG6Jqrgn5+fFtDuQvtdCCVZXqb+0pjd YpRCfmWiVPBWONLOKTJlItbHDZdfp745ZIxiCTwV+YEdWEL4VAVHqZRcS34pKdMs 8TID5h3deJZJeCYjSgasHYY31VKf0OuWK1la5ROCoT0UQEt992TN6kdIvkamIz5L Z8NmmgBIaFj0wGkBWRnZnPVRJ5Zc6AhSL1AIiNFlVQOk1SD73k/5KHOYD4N/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/3nBw9Jfet17sCEc+2W4Kd9rR4wHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIAp2K1f3wilGAxza0TJpIYgn+JhXnujnUM /I2wFe/eFtfsRhI4Dfppn0ngSz3AMJdE/Ba53wupFkpMGUmceFnfWzgAZHdDomb9 x50L5QVbRmPvQ1CBsqXxf8BRKg22+WsrAwNUC3HhTRHacz5XzM8s/CT73upNNGBx Gq6B9V9k8CLcZNVZGca+KkVpLX9RYh7tLlcQzs+Rb5ja4oPFH4Anv/DU8/d9LPzH HVgTdyD7f99La/uWSiImkwmhiNHydu05C0+AA86KySuYptTfPAp3Ppj6723tsZ4x eA94EVndYvXk6S1BEQ0CzQdFzFU5KLfuqAnEOYeHdfBPwrJpchI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:24 2025 by rpki-client