$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: sPdJb7X1KHJ5ObcgjKTraa5ZxeuRGn83TGSxucjCyig= Subject key identifier: 01:06:D7:70:53:EB:51:5E:2E:4C:21:5C:24:BF:85:CC:0B:2E:80:80 Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 56DEA2B4C200D97F6F9AD30BFD4777100BDC62AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: B5 Signing time: Sat 18 Oct 2025 18:50:02 +0000 Manifest this update: Sat 18 Oct 2025 18:45:02 +0000 Manifest next update: Tue 21 Oct 2025 20:44:02 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: qz6EYYfCHlTS2QZfEOYXLj9/ol1N2yep3u5dGAQpqxE=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:de:a2:b4:c2:00:d9:7f:6f:9a:d3:0b:fd:47:77:10:0b:dc:62:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Oct 18 18:45:02 2025 GMT Not After : Oct 21 20:44:02 2025 GMT Subject: CN=0106D77053EB515E2E4C215C24BF85CC0B2E8080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:b2:23:74:3d:e4:f0:1f:e1:0c:67:79:86: 5b:27:bf:34:ae:bc:f4:11:a5:00:2d:e6:ec:b1:e2: be:b3:0c:34:12:62:81:30:21:be:07:27:45:67:5f: 70:2e:4e:20:bc:6e:92:12:0f:fd:28:50:14:84:1d: 2e:b8:52:b9:c2:46:6e:9d:35:2e:ad:69:7d:00:83: 0e:3e:63:df:1e:25:4e:0a:f4:93:f9:5c:63:bf:1b: 42:e0:07:49:cd:0b:50:1f:6c:aa:c2:62:25:ac:18: 95:92:e1:ff:82:bf:6d:7d:d0:76:9a:47:60:b6:33: af:ad:8a:72:c6:42:f2:e6:f8:82:db:61:b2:5a:f6: dc:d7:49:5a:fe:59:ee:8d:00:3e:6f:50:51:7b:a7: 79:c7:28:03:c1:07:55:c6:bf:6f:2b:2a:23:5a:c7: 94:ad:7c:db:09:a6:14:0c:e1:48:bc:c5:fa:7f:a4: 29:41:8e:0a:24:e9:40:c9:d4:c0:d4:2d:c2:c1:e9: 59:db:3a:87:f7:2c:0e:4b:c0:19:8e:87:6c:ed:dd: fe:d5:1d:4a:8c:36:d5:1b:d2:7d:da:e6:7d:96:0f: 9d:ed:9d:57:5e:c4:e6:ab:c6:43:f0:53:83:74:46: aa:73:a6:58:2c:79:7c:7f:a6:32:b8:9b:7b:99:e4: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:D7:70:53:EB:51:5E:2E:4C:21:5C:24:BF:85:CC:0B:2E:80:80 X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:db:46:04:42:0d:e5:fa:c4:43:bf:ea:c0:0d:df:2b:7b:b7: de:8e:a7:2d:56:68:90:3f:2f:71:b7:79:eb:77:57:4c:a4:35: 28:2a:88:83:04:6a:65:eb:53:89:21:fb:ef:a9:29:d7:64:50: 8a:41:62:e1:92:10:a2:d8:77:6e:4a:2b:e0:bb:9f:da:67:a0: 3e:36:26:b7:f5:01:f8:37:9c:d6:d3:5f:4f:58:91:54:31:70: 85:94:7b:d9:76:35:b5:43:ba:85:f5:b0:eb:08:30:bb:e7:73: 27:fd:1f:c7:4a:88:7f:6b:af:4f:2f:6c:35:e3:c4:71:35:04: 33:7e:f9:1f:f3:34:5b:d5:63:7e:0f:16:1b:4f:a3:a8:e2:40: be:57:b4:d6:40:89:21:58:8c:1e:f8:c3:b1:4f:57:16:b8:25: 40:ad:71:5c:ef:f1:86:11:17:d8:8c:d8:4f:1e:b1:05:46:39: 06:cc:0b:75:97:d9:12:df:f9:ba:94:53:81:98:b2:ff:8a:2e: a5:48:40:b7:9c:ed:af:d6:71:a3:25:65:bb:21:03:cf:04:cc: 5b:66:94:53:8c:27:82:a3:38:99:8f:21:75:af:05:54:bc:08: 6b:b5:d4:43:fa:c0:b6:2c:03:02:2d:c6:59:4e:39:2c:13:ff: 84:74:6a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVt6itMIA2X9vmtML/Ud3EAvcYqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTEwMTgxODQ1MDJaFw0yNTEwMjEyMDQ0MDJaMDMxMTAvBgNV BAMTKDAxMDZENzcwNTNFQjUxNUUyRTRDMjE1QzI0QkY4NUNDMEIyRTgwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicLIjdD3k8B/hDGd5hlsnvzSu vPQRpQAt5uyx4r6zDDQSYoEwIb4HJ0VnX3AuTiC8bpISD/0oUBSEHS64UrnCRm6d NS6taX0Agw4+Y98eJU4K9JP5XGO/G0LgB0nNC1AfbKrCYiWsGJWS4f+Cv2190Haa R2C2M6+tinLGQvLm+ILbYbJa9tzXSVr+We6NAD5vUFF7p3nHKAPBB1XGv28rKiNa x5StfNsJphQM4Ui8xfp/pClBjgok6UDJ1MDULcLB6VnbOof3LA5LwBmOh2zt3f7V HUqMNtUb0n3a5n2WD53tnVdexOarxkPwU4N0RqpzplgseXx/pjK4m3uZ5MyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQbXcFPrUV4uTCFcJL+FzAsugIAwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjbRgRCDeX6xEO/6sAN3yt7t96Opy1WaJA/ L3G3eet3V0ykNSgqiIMEamXrU4kh+++pKddkUIpBYuGSEKLYd25KK+C7n9pnoD42 Jrf1Afg3nNbTX09YkVQxcIWUe9l2NbVDuoX1sOsIMLvncyf9H8dKiH9rr08vbDXj xHE1BDN++R/zNFvVY34PFhtPo6jiQL5XtNZAiSFYjB74w7FPVxa4JUCtcVzv8YYR F9iM2E8esQVGOQbMC3WX2RLf+bqUU4GYsv+KLqVIQLec7a/WcaMlZbshA88EzFtm lFOMJ4KjOJmPIXWvBVS8CGu11EP6wLYsAwItxllOOSwT/4R0au8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:08 2025 by rpki-client