$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: 211UT9rYuC83JkGEv4iobpUGO/OOk7n1wTicO6H2G/o= Subject key identifier: D6:F6:FF:74:4A:DD:3F:97:6F:AB:A1:35:1C:EF:B7:AE:49:18:F7:37 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 0343BB0F739D6D6C072DCDE6E4A79C2FF6BC9A51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: FF Signing time: Mon 20 Oct 2025 06:32:20 +0000 Manifest this update: Mon 20 Oct 2025 06:27:20 +0000 Manifest next update: Thu 23 Oct 2025 06:36:20 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 2: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: pYVG+0/O8R/iIQenRQ1IgGW3Y2mzj3oabXFtocSdhww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:43:bb:0f:73:9d:6d:6c:07:2d:cd:e6:e4:a7:9c:2f:f6:bc:9a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Oct 20 06:27:20 2025 GMT Not After : Oct 23 06:36:20 2025 GMT Subject: CN=D6F6FF744ADD3F976FABA1351CEFB7AE4918F737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:8d:fd:44:1a:c2:e8:87:bb:f9:b0:a5:1a: ca:70:6e:75:5d:85:3a:dd:eb:40:c5:9c:01:de:42: 5a:8a:8d:c1:a2:63:2e:62:2d:57:f9:fe:bc:67:77: b3:36:15:54:ca:f8:10:b7:a5:85:a1:17:dd:8d:d0: 93:b6:8e:29:b1:4e:fe:0c:e1:f3:1c:66:bf:d3:6c: cd:b7:42:34:42:40:ab:c4:c1:25:43:a2:4b:ee:e1: 73:be:ed:99:5b:3b:a8:82:68:69:0c:c7:f4:a6:0a: 9d:b1:fe:4b:46:9b:85:41:83:46:e2:d9:04:bc:0a: 60:fe:c1:8a:ee:e3:60:6b:51:f5:ed:8f:26:6a:00: a2:0b:b4:56:50:22:8a:b1:d4:3c:d1:59:2d:7e:39: 45:c1:91:5f:3b:a5:1b:a0:31:a0:17:72:6d:8d:b2: d2:7b:35:a4:36:1f:99:36:c3:37:12:9e:d8:c9:77: 0f:34:af:c1:85:f6:80:5a:be:3c:08:ad:24:4b:b4: df:f8:7d:7f:56:8d:f5:2b:85:64:55:e1:b6:3b:0d: a3:0c:64:b3:b3:ca:d5:85:3f:d1:3d:83:c8:1c:79: fe:ea:6f:c5:c2:7c:c4:c8:13:36:fe:55:f2:5f:03: bb:db:14:cd:41:16:ed:d6:5c:f5:0a:e4:18:89:5d: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:FF:74:4A:DD:3F:97:6F:AB:A1:35:1C:EF:B7:AE:49:18:F7:37 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:71:88:2b:7a:42:cc:e4:4b:b4:07:22:67:81:34:80:b0:37: 7c:84:f3:8b:d1:33:a3:f0:a8:b6:20:0a:f0:ac:2e:72:f0:22: 8e:ec:1a:7f:70:42:01:85:7f:9b:8a:17:e1:60:03:31:d0:03: 31:45:c4:62:c0:58:1f:63:b9:b5:ce:1c:4b:db:7c:42:1d:8f: 60:37:2e:5d:ca:69:f9:9c:3a:38:e3:c4:f7:a4:4e:1e:10:d8: 5f:29:aa:1e:4b:63:f7:f1:f7:d0:7a:50:69:93:c4:dd:da:68: 06:9f:40:96:2d:42:85:ad:83:fa:57:f8:1b:0d:ac:48:c9:a4: f0:d8:28:b8:0d:cc:c3:69:61:f7:dc:ee:1c:88:ed:3e:66:02: 0a:60:62:e7:44:da:fa:39:25:83:f2:43:d3:5e:ed:98:8e:fa: 83:46:9f:ee:c0:59:ad:f1:90:2c:ef:d6:be:bf:8c:67:85:82: c4:1e:e1:ac:e1:db:0f:13:a6:6d:c4:d2:2e:f5:d2:8d:bc:00: e0:e9:6f:09:bd:bb:13:de:5b:bf:30:d7:66:e7:31:c7:b5:aa: 53:f0:0d:ee:2b:84:a5:4b:83:8f:ab:26:8d:33:10:82:52:c6: 38:df:44:b2:50:de:de:57:95:e6:af:d2:c1:17:20:e7:9c:d2: fd:b8:e3:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0O7D3OdbWwHLc3m5KecL/a8mlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTEwMjAwNjI3MjBaFw0yNTEwMjMwNjM2MjBaMDMxMTAvBgNV BAMTKEQ2RjZGRjc0NEFERDNGOTc2RkFCQTEzNTFDRUZCN0FFNDkxOEY3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkI39RBrC6Ie7+bClGspwbnVd hTrd60DFnAHeQlqKjcGiYy5iLVf5/rxnd7M2FVTK+BC3pYWhF92N0JO2jimxTv4M 4fMcZr/TbM23QjRCQKvEwSVDokvu4XO+7ZlbO6iCaGkMx/SmCp2x/ktGm4VBg0bi 2QS8CmD+wYru42BrUfXtjyZqAKILtFZQIoqx1DzRWS1+OUXBkV87pRugMaAXcm2N stJ7NaQ2H5k2wzcSntjJdw80r8GF9oBavjwIrSRLtN/4fX9WjfUrhWRV4bY7DaMM ZLOzytWFP9E9g8gcef7qb8XCfMTIEzb+VfJfA7vbFM1BFu3WXPUK5BiJXUqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1vb/dErdP5dvq6E1HO+3rkkY9zcwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVxiCt6QszkS7QHImeBNICwN3yE84vRM6Pw qLYgCvCsLnLwIo7sGn9wQgGFf5uKF+FgAzHQAzFFxGLAWB9jubXOHEvbfEIdj2A3 Ll3KafmcOjjjxPekTh4Q2F8pqh5LY/fx99B6UGmTxN3aaAafQJYtQoWtg/pX+BsN rEjJpPDYKLgNzMNpYffc7hyI7T5mAgpgYudE2vo5JYPyQ9Ne7ZiO+oNGn+7AWa3x kCzv1r6/jGeFgsQe4azh2w8Tpm3E0i710o28AODpbwm9uxPeW78w12bnMce1qlPw De4rhKVLg4+rJo0zEIJSxjjfRLJQ3t5Xleav0sEXIOec0v244+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:53:09 2025 by rpki-client