$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: 4VZG+K5HB5mad2MebR1ulRAJP6OHiNkOhCi8ILSPnvE= Subject key identifier: 71:FF:3C:F7:41:A1:BC:C5:11:92:36:AB:19:E9:22:F1:CE:82:E3:DE Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 24D53455F934910865995F9B23336A304907DCC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 0175 Signing time: Sun 19 Oct 2025 14:32:17 +0000 Manifest this update: Sun 19 Oct 2025 14:27:17 +0000 Manifest next update: Wed 22 Oct 2025 19:36:17 +0000 Files and hashes: 1: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 3: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: wwvDj4AoIh++8p5ZIAvUMwjxZ1Y24Xa3ct7msunWt60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d5:34:55:f9:34:91:08:65:99:5f:9b:23:33:6a:30:49:07:dc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Oct 19 14:27:17 2025 GMT Not After : Oct 22 19:36:17 2025 GMT Subject: CN=71FF3CF741A1BCC5119236AB19E922F1CE82E3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:7f:1e:fe:18:6e:80:f4:b6:79:80:21:12: a6:4e:e6:cd:21:de:ae:91:a8:a1:5d:a0:9a:b7:62: b4:b5:73:23:4e:de:51:ae:e2:72:27:75:36:e9:3e: bd:5a:57:ea:99:31:dd:72:6c:02:ef:05:36:c4:47: 64:48:c1:5e:b5:16:eb:89:52:6c:9d:5a:16:9e:30: 83:4c:48:d8:30:9a:45:bc:59:16:76:10:a6:ad:da: e4:2d:0f:21:09:3a:0c:ff:44:0c:a7:d3:af:0d:67: 02:e0:ce:95:c6:ae:44:50:34:56:41:75:f4:33:9a: 13:a7:a0:d4:51:9c:62:90:db:6b:a1:44:a7:17:6e: 0a:42:01:da:dc:70:93:75:65:48:e4:74:22:bd:e8: 13:bf:ed:fb:51:1a:1f:29:7b:67:4c:f9:f5:f9:00: 64:4d:37:5d:87:09:22:08:d8:7e:6e:99:e7:ff:c8: 5c:59:72:c5:67:4f:a0:25:1e:7f:ab:4a:16:28:fd: d1:2d:08:b3:2a:c4:aa:f4:a3:1d:04:ef:3a:4e:04: b7:34:c1:77:98:ea:c5:72:1f:fa:4a:85:05:7e:e1: c3:40:59:70:95:45:15:27:62:15:1a:dd:62:30:db: 44:15:f3:e9:6b:07:ae:dc:ae:7c:eb:2d:aa:86:83: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FF:3C:F7:41:A1:BC:C5:11:92:36:AB:19:E9:22:F1:CE:82:E3:DE X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:20:e3:c1:06:31:3e:22:e7:56:6d:3e:9b:df:2c:99:e5: 0d:c6:09:36:4c:f0:e8:f5:0e:3d:8b:44:f9:53:85:40:b3:0a: 6d:26:a1:19:8a:5b:82:a0:76:f0:e6:93:2b:7e:fd:93:a4:2f: e7:6c:72:e5:92:cf:93:a4:62:17:96:18:5b:04:6b:b2:55:73: 56:b4:00:8a:e5:c3:07:3f:f0:3a:db:19:3d:eb:ff:f0:3d:c0: dc:87:c4:09:f7:2d:96:c1:b1:96:5c:b8:ec:e0:26:3c:16:0e: b5:9e:e2:b8:fd:02:af:7d:c8:3f:d8:50:55:51:6a:6a:39:ab: 5a:64:cd:43:4b:f4:cf:8f:9c:ec:4c:0f:a3:0c:34:c1:b6:4c: da:20:ca:92:db:8c:4d:ab:13:f6:f0:d0:87:29:4c:0f:b1:57: 72:c6:6e:46:8d:47:60:0f:f2:9c:10:bb:09:7b:f2:06:cc:5f: 84:29:fb:49:82:76:84:cf:4a:9f:33:6b:a0:67:e6:13:4e:a9: 85:7d:4a:43:22:55:e6:26:d9:b7:b3:c5:f3:07:70:65:f8:a0: 72:c3:37:bc:af:63:65:ef:76:80:9c:8c:05:b2:49:eb:4f:58: 2c:11:84:b3:0a:b8:de:ce:b8:b9:92:cd:4d:97:f3:28:80:6d: d2:9f:78:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNU0Vfk0kQhlmV+bIzNqMEkH3MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTEwMTkxNDI3MTdaFw0yNTEwMjIxOTM2MTdaMDMxMTAvBgNV BAMTKDcxRkYzQ0Y3NDFBMUJDQzUxMTkyMzZBQjE5RTkyMkYxQ0U4MkUzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXX8e/hhugPS2eYAhEqZO5s0h 3q6RqKFdoJq3YrS1cyNO3lGu4nIndTbpPr1aV+qZMd1ybALvBTbER2RIwV61FuuJ UmydWhaeMINMSNgwmkW8WRZ2EKat2uQtDyEJOgz/RAyn068NZwLgzpXGrkRQNFZB dfQzmhOnoNRRnGKQ22uhRKcXbgpCAdrccJN1ZUjkdCK96BO/7ftRGh8pe2dM+fX5 AGRNN12HCSII2H5umef/yFxZcsVnT6AlHn+rShYo/dEtCLMqxKr0ox0E7zpOBLc0 wXeY6sVyH/pKhQV+4cNAWXCVRRUnYhUa3WIw20QV8+lrB67crnzrLaqGg0wFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcf8890GhvMURkjarGeki8c6C494wHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF2IOPBBjE+IudWbT6b3yyZ5Q3GCTZM8Oj1 Dj2LRPlThUCzCm0moRmKW4KgdvDmkyt+/ZOkL+dscuWSz5OkYheWGFsEa7JVc1a0 AIrlwwc/8DrbGT3r//A9wNyHxAn3LZbBsZZcuOzgJjwWDrWe4rj9Aq99yD/YUFVR amo5q1pkzUNL9M+PnOxMD6MMNMG2TNogypLbjE2rE/bw0IcpTA+xV3LGbkaNR2AP 8pwQuwl78gbMX4Qp+0mCdoTPSp8za6Bn5hNOqYV9SkMiVeYm2bezxfMHcGX4oHLD N7yvY2XvdoCcjAWySetPWCwRhLMKuN7OuLmSzU2X8yiAbdKfeA8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:45 2025 by rpki-client