$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: /8Qm+Ie4aK/JLtuWGohYJFp+RWLtiyv4TOCDt27T13w= Subject key identifier: F7:48:4D:D3:87:41:24:21:9A:6B:26:85:35:66:57:26:56:9B:A7:C5 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 0A04A90584253199032AE01E9452CA57CFD9890E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 022B Signing time: Mon 20 Oct 2025 06:52:06 +0000 Manifest this update: Mon 20 Oct 2025 06:47:06 +0000 Manifest next update: Thu 23 Oct 2025 18:38:06 +0000 Files and hashes: 1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: LpH9LUscpNP4wCv4UkUDyY39lNd/geJ5qpmXACg2mXI=) 2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 3: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:a9:05:84:25:31:99:03:2a:e0:1e:94:52:ca:57:cf:d9:89:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Oct 20 06:47:06 2025 GMT Not After : Oct 23 18:38:06 2025 GMT Subject: CN=F7484DD3874124219A6B268535665726569BA7C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:fa:b3:0e:9e:dd:91:ea:45:77:c6:cf:da: 92:99:ff:63:89:cf:71:40:c0:5f:53:f7:f5:78:11: de:18:47:cd:53:a2:5c:95:45:7f:20:2c:41:12:f3: 13:16:8c:2a:ab:1d:f4:b5:a4:4a:36:0b:e9:8f:e4: b6:c0:d2:fb:b6:17:1f:c9:f0:07:9a:9b:d5:14:52: 99:3f:ee:b1:d5:87:50:2a:96:66:01:c5:07:69:93: 23:94:a6:71:e9:31:10:87:d2:15:b6:3c:5e:b4:c6: 06:2c:db:0d:4d:21:f1:39:e5:10:a3:a1:94:83:95: eb:e6:b4:d1:59:5e:43:1a:7a:19:8e:75:73:38:bf: 8c:38:df:48:7c:c1:5c:65:65:95:1c:d4:20:8a:5c: d9:3b:cd:de:2d:c2:77:be:c7:86:e0:ec:8e:e9:c0: 82:4a:7e:1c:4e:7e:58:62:2e:55:e4:78:1a:08:25: 84:97:f4:22:34:0f:ee:81:98:65:04:1a:48:01:d3: ca:a6:b3:4c:81:68:f0:76:4b:1a:50:c2:0f:c2:1b: a9:ac:2c:bd:11:79:58:29:df:bb:c8:91:60:53:c7: 7a:fd:48:61:dd:28:b3:6c:fd:56:4d:d0:47:13:cd: 1b:e1:f7:99:42:29:c2:c3:99:7a:6b:75:62:9d:c8: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:48:4D:D3:87:41:24:21:9A:6B:26:85:35:66:57:26:56:9B:A7:C5 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e0:8e:c8:38:e0:85:19:18:e9:51:45:a7:af:1c:c2:1f:85: 69:fa:34:0d:cc:1c:37:f2:59:a7:44:e7:ef:ac:be:2a:ee:e6: 05:aa:31:f8:b3:7f:f3:65:07:56:5e:df:ed:60:dd:45:2e:eb: 31:cb:23:e8:ca:52:2e:41:47:d0:30:54:be:ed:1e:95:1a:f4: 3d:0d:9a:b6:9b:d5:a0:c0:75:64:f5:98:4b:ed:cb:22:c1:1c: f5:61:3d:ed:f5:e7:d7:08:d1:45:a4:33:69:f6:fc:d1:91:c3: 32:27:7f:d1:45:af:38:a7:e5:89:1d:70:44:bd:43:c3:ac:35: 08:6c:a6:3e:81:f8:13:52:5c:cd:cb:00:33:a8:16:ee:19:12: 6b:0c:3f:65:a8:45:b1:ca:b7:df:ed:01:78:ee:fa:85:d1:92: 76:25:0d:3f:38:2e:2a:c9:12:9b:3a:87:98:7e:82:2f:83:97: 2d:49:11:dd:19:5f:27:a8:8f:4f:cb:29:4f:c7:0a:af:e3:33: b4:21:40:53:8d:0b:97:ed:3d:23:b0:68:d2:70:68:f2:a7:da: 1f:24:66:63:05:b7:5c:5a:f8:35:fc:ca:41:62:c8:0c:6f:73: d3:3e:3d:27:20:79:fd:14:9f:5b:22:f9:5e:1f:c5:39:f6:a9: d4:de:c6:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgSpBYQlMZkDKuAelFLKV8/ZiQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTEwMjAwNjQ3MDZaFw0yNTEwMjMxODM4MDZaMDMxMTAvBgNV BAMTKEY3NDg0REQzODc0MTI0MjE5QTZCMjY4NTM1NjY1NzI2NTY5QkE3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHH/qzDp7dkepFd8bP2pKZ/2OJ z3FAwF9T9/V4Ed4YR81TolyVRX8gLEES8xMWjCqrHfS1pEo2C+mP5LbA0vu2Fx/J 8Aeam9UUUpk/7rHVh1AqlmYBxQdpkyOUpnHpMRCH0hW2PF60xgYs2w1NIfE55RCj oZSDlevmtNFZXkMaehmOdXM4v4w430h8wVxlZZUc1CCKXNk7zd4twne+x4bg7I7p wIJKfhxOflhiLlXkeBoIJYSX9CI0D+6BmGUEGkgB08qms0yBaPB2SxpQwg/CG6ms LL0ReVgp37vIkWBTx3r9SGHdKLNs/VZN0EcTzRvh95lCKcLDmXprdWKdyNqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90hN04dBJCGaayaFNWZXJlabp8UwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDgjsg44IUZGOlRRaevHMIfhWn6NA3MHDfy WadE5++sviru5gWqMfizf/NlB1Ze3+1g3UUu6zHLI+jKUi5BR9AwVL7tHpUa9D0N mrab1aDAdWT1mEvtyyLBHPVhPe3159cI0UWkM2n2/NGRwzInf9FFrzin5YkdcES9 Q8OsNQhspj6B+BNSXM3LADOoFu4ZEmsMP2WoRbHKt9/tAXju+oXRknYlDT84LirJ Eps6h5h+gi+Dly1JEd0ZXyeoj0/LKU/HCq/jM7QhQFONC5ftPSOwaNJwaPKn2h8k ZmMFt1xa+DX8ykFiyAxvc9M+PScgef0Un1si+V4fxTn2qdTexjg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:17 2025 by rpki-client