$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: uU+qq4B6E9ywG+dlXlyglEdowUaX7miO7PbEB1YSO9g= Subject key identifier: EB:16:FA:3A:80:AB:E0:53:74:CC:AA:F3:14:7F:9F:48:57:42:26:72 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 5F20BDE7C3493A7FA7CBB1EC16DC0708E21A491A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 02EC Signing time: Sun 19 Oct 2025 05:30:03 +0000 Manifest this update: Sun 19 Oct 2025 05:25:03 +0000 Manifest next update: Wed 22 Oct 2025 06:45:03 +0000 Files and hashes: 1: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 2: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 3: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 4: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 5: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: AxKf5QYwIck9QEUNXKVcD6nXVNj7z816/L4OqvABe0A=) 6: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 7: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:20:bd:e7:c3:49:3a:7f:a7:cb:b1:ec:16:dc:07:08:e2:1a:49:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Oct 19 05:25:03 2025 GMT Not After : Oct 22 06:45:03 2025 GMT Subject: CN=EB16FA3A80ABE05374CCAAF3147F9F4857422672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:44:d2:1a:0a:b4:6a:0c:33:88:b3:ba:34: ad:5c:91:4f:27:66:0d:36:28:f6:dc:d8:bb:fc:a0: 8d:5a:c1:2b:27:96:78:a1:1d:61:53:bb:7b:88:2d: aa:e6:e8:5b:5a:0e:26:7b:cb:d7:4c:7c:b0:8a:a8: 66:8f:c4:93:f8:a4:b0:d0:3b:7b:b1:06:42:68:b9: f4:4e:40:25:2f:be:bb:fa:5c:7e:f6:e3:34:48:ed: 0c:be:7e:ac:79:13:f8:8e:02:27:11:8d:9f:23:12: 3c:eb:b0:ab:df:1b:5d:3e:de:74:22:54:89:0a:33: db:c2:f4:0f:f6:a4:b4:32:c9:ed:ec:8f:ff:36:17: 68:67:f4:a9:ce:92:4b:0d:a1:80:93:27:01:60:f7: b0:5c:e5:cd:4b:05:63:40:51:61:3a:47:80:f1:cd: c6:46:b4:ac:ec:3e:a7:ef:10:be:0c:9a:c9:ba:ea: 1b:2b:10:f7:77:b7:bf:aa:f4:b8:fc:6f:06:0f:a0: fc:d8:2f:93:99:fb:c6:37:b5:a4:16:0e:7b:48:bb: 45:17:26:16:f9:ab:b5:1d:c5:2e:d9:29:ab:fb:f3: 07:cf:6b:99:d1:a6:27:0f:09:0f:5b:94:a0:af:50: 10:50:86:9f:d6:c2:de:52:ca:65:27:90:4b:7e:7c: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:FA:3A:80:AB:E0:53:74:CC:AA:F3:14:7F:9F:48:57:42:26:72 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:77:f9:e9:09:ef:9d:a1:e8:0f:67:97:81:b2:5e:25:84:4e: 84:48:ec:90:62:3b:9e:ac:fd:30:a8:e2:cf:37:c2:67:1d:06: a5:d9:c1:56:29:51:74:13:a0:5e:df:7c:f4:4d:1d:ae:3f:bb: e3:57:0e:67:61:07:99:32:c2:1d:93:0b:b3:9d:84:36:4b:f9: 25:a2:43:cd:9c:96:80:2d:ee:5e:7b:68:6d:10:ef:83:d7:1c: 81:77:62:c2:cb:e8:cf:e6:79:78:9a:a6:60:3e:5b:b1:19:39: 17:7c:82:66:06:18:37:3e:dc:f2:80:a3:01:c8:2d:19:f1:d8: 72:1b:1b:4c:cf:da:36:b0:49:0c:39:c0:f6:10:31:7d:cf:e3: ec:ab:83:a3:23:82:37:f0:9c:a6:54:85:ae:91:94:d9:05:d4: 33:2d:b0:33:04:be:74:0d:5b:38:30:24:54:34:ea:a4:f0:d3: 0f:bd:19:0a:9f:d4:e9:1d:1c:3d:88:50:bb:fe:83:63:9f:c1: ee:2e:5e:40:6b:ab:7d:c0:96:b9:cb:88:c6:6c:46:d8:37:73: 9a:1a:e4:7d:8b:8a:7d:06:ac:cc:2d:6b:bc:07:86:d0:2f:5a: d5:47:e2:12:e6:d6:3f:00:3e:a4:c6:94:9a:8f:d7:ab:1e:ac: 6e:d6:2d:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyC958NJOn+ny7HsFtwHCOIaSRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTEwMTkwNTI1MDNaFw0yNTEwMjIwNjQ1MDNaMDMxMTAvBgNV BAMTKEVCMTZGQTNBODBBQkUwNTM3NENDQUFGMzE0N0Y5RjQ4NTc0MjI2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JkTSGgq0agwziLO6NK1ckU8n Zg02KPbc2Lv8oI1awSsnlnihHWFTu3uILarm6FtaDiZ7y9dMfLCKqGaPxJP4pLDQ O3uxBkJoufROQCUvvrv6XH724zRI7Qy+fqx5E/iOAicRjZ8jEjzrsKvfG10+3nQi VIkKM9vC9A/2pLQyye3sj/82F2hn9KnOkksNoYCTJwFg97Bc5c1LBWNAUWE6R4Dx zcZGtKzsPqfvEL4Mmsm66hsrEPd3t7+q9Lj8bwYPoPzYL5OZ+8Y3taQWDntIu0UX Jhb5q7UdxS7ZKav78wfPa5nRpicPCQ9blKCvUBBQhp/Wwt5SymUnkEt+fDu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xb6OoCr4FN0zKrzFH+fSFdCJnIwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL53+ekJ752h6A9nl4GyXiWEToRI7JBiO56s /TCo4s83wmcdBqXZwVYpUXQToF7ffPRNHa4/u+NXDmdhB5kywh2TC7OdhDZL+SWi Q82cloAt7l57aG0Q74PXHIF3YsLL6M/meXiapmA+W7EZORd8gmYGGDc+3PKAowHI LRnx2HIbG0zP2jawSQw5wPYQMX3P4+yrg6MjgjfwnKZUha6RlNkF1DMtsDMEvnQN WzgwJFQ06qTw0w+9GQqf1OkdHD2IULv+g2Ofwe4uXkBrq33AlrnLiMZsRtg3c5oa 5H2Lin0GrMwta7wHhtAvWtVH4hLm1j8APqTGlJqP16serG7WLXM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:13 2025 by rpki-client