$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: P8RUPoQM0WIhEcaO6lCYha62Y9BmLVXmvKfrCjYgWWc= Subject key identifier: 81:6F:6C:DA:19:BE:9B:33:43:17:EB:DF:57:BE:3D:ED:6B:77:A1:68 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 4F2D3F534256A441DB46A18BA1AA1CEC336F8773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: BD Signing time: Sun 19 Oct 2025 13:51:04 +0000 Manifest this update: Sun 19 Oct 2025 13:46:04 +0000 Manifest next update: Wed 22 Oct 2025 20:22:04 +0000 Files and hashes: 1: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 2: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: 1AVOfXmesA44WYCmVfv239HgWrw+I1o8vD4QNiDXvO4=) 3: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2d:3f:53:42:56:a4:41:db:46:a1:8b:a1:aa:1c:ec:33:6f:87:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Oct 19 13:46:04 2025 GMT Not After : Oct 22 20:22:04 2025 GMT Subject: CN=816F6CDA19BE9B334317EBDF57BE3DED6B77A168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:d8:6e:14:95:40:80:81:ad:82:cf:11:e6: 32:a9:67:65:14:a2:40:e4:9f:9b:af:ee:e1:67:0c: a7:00:4a:37:61:61:40:27:d0:33:aa:87:93:32:fa: 81:69:4c:b1:5e:c0:aa:d6:d3:a3:0b:77:93:6d:84: 1a:e9:fa:95:e0:6a:4a:7a:66:11:7b:59:48:1a:e0: 75:c0:1b:12:aa:5d:6d:2d:79:cb:1d:89:55:49:54: 29:7b:a2:cf:67:95:90:06:3d:8c:96:44:ab:94:b3: db:73:90:34:5f:68:db:b0:d9:a0:74:6d:b5:ca:b6: c7:9a:d2:00:c8:7a:51:5f:1f:ef:3e:1e:1a:67:00: cb:67:50:cf:f5:15:f2:ff:e8:e9:ae:74:6d:1c:d6: e5:8d:d2:6e:10:15:6c:2c:38:e4:3d:43:58:70:4b: 97:f2:9b:a6:a4:cb:c8:75:a2:00:f5:7b:c2:78:9c: ff:4d:c0:08:0e:a0:88:7a:ef:c9:92:9e:de:44:08: 30:7f:af:d8:8b:af:c0:6f:bd:bf:84:70:7b:e3:c4: 16:f5:60:9c:06:d6:76:d9:08:5d:9c:cd:86:cf:56: 92:6a:2e:29:80:7d:32:93:4b:8f:a8:3b:f9:60:79: 2c:f1:7a:9e:2f:b9:f0:0f:37:dc:61:ef:8d:ad:aa: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:6C:DA:19:BE:9B:33:43:17:EB:DF:57:BE:3D:ED:6B:77:A1:68 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:46:ca:80:09:b5:a2:b1:14:d2:8a:38:10:4e:49:93:84: 9a:0e:1f:61:1f:98:e8:77:1a:0f:72:56:52:74:bc:f9:b8:fc: be:27:81:0d:d3:05:66:a8:9d:52:e9:a6:5a:d8:7a:25:06:e5: 64:64:9c:79:35:88:3e:90:e8:b4:90:5b:de:cf:0d:6a:0b:8f: 18:b7:2d:35:2c:e1:89:9f:ee:53:b8:c4:ec:a9:59:bd:6c:ec: 04:33:40:e3:c7:eb:3f:43:6a:9e:c9:bd:db:7f:d8:54:94:f9: 00:93:01:47:e8:e5:61:61:46:9c:12:a2:ca:29:3d:4a:89:48: 62:7d:db:98:02:41:1c:fd:44:44:ac:07:39:72:09:bd:75:a6: 43:e2:07:a7:44:9b:34:e4:ed:ed:08:47:62:0d:cb:a1:0c:44: 38:ca:fa:51:ad:5b:d9:ea:4b:e1:40:d3:f3:a0:34:ab:55:5e: 0b:e0:ac:6b:19:82:08:5f:0b:d3:42:00:ca:42:f1:98:16:d0: 62:21:05:e6:f1:be:41:22:d4:18:4b:3e:fc:d2:68:7b:19:51: 02:ad:e8:99:7d:a6:13:7f:0c:fb:25:65:dd:16:60:8c:4f:3e: 4d:1f:22:d8:11:02:bf:5e:22:11:4c:ad:c8:fa:cd:2a:e7:1a: 06:62:b0:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTy0/U0JWpEHbRqGLoaoc7DNvh3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTEwMTkxMzQ2MDRaFw0yNTEwMjIyMDIyMDRaMDMxMTAvBgNV BAMTKDgxNkY2Q0RBMTlCRTlCMzM0MzE3RUJERjU3QkUzREVENkI3N0ExNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ethuFJVAgIGtgs8R5jKpZ2UU okDkn5uv7uFnDKcASjdhYUAn0DOqh5My+oFpTLFewKrW06MLd5NthBrp+pXgakp6 ZhF7WUga4HXAGxKqXW0tecsdiVVJVCl7os9nlZAGPYyWRKuUs9tzkDRfaNuw2aB0 bbXKtsea0gDIelFfH+8+HhpnAMtnUM/1FfL/6OmudG0c1uWN0m4QFWwsOOQ9Q1hw S5fym6aky8h1ogD1e8J4nP9NwAgOoIh678mSnt5ECDB/r9iLr8Bvvb+EcHvjxBb1 YJwG1nbZCF2czYbPVpJqLimAfTKTS4+oO/lgeSzxep4vufAPN9xh742tqrKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgW9s2hm+mzNDF+vfV7497Wt3oWgwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP8RsqACbWisRTSijgQTkmThJoOH2EfmOh3 Gg9yVlJ0vPm4/L4ngQ3TBWaonVLpplrYeiUG5WRknHk1iD6Q6LSQW97PDWoLjxi3 LTUs4Ymf7lO4xOypWb1s7AQzQOPH6z9Dap7Jvdt/2FSU+QCTAUfo5WFhRpwSosop PUqJSGJ925gCQRz9RESsBzlyCb11pkPiB6dEmzTk7e0IR2INy6EMRDjK+lGtW9nq S+FA0/OgNKtVXgvgrGsZgghfC9NCAMpC8ZgW0GIhBebxvkEi1BhLPvzSaHsZUQKt 6Jl9phN/DPslZd0WYIxPPk0fItgRAr9eIhFMrcj6zSrnGgZisOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:36 2025 by rpki-client