$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: 7NIC2cor60XT4+qVC60GWB1k8YU002hDmU5kPvXBlMY= Subject key identifier: FA:BB:35:91:00:CD:DA:36:F5:93:DB:CC:38:F7:DD:7B:0A:E3:E4:47 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 0E8783439F9148C7564A9EA9AC67713FDA1B7325 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01B3 Signing time: Sat 15 Nov 2025 12:01:22 +0000 Manifest this update: Sat 15 Nov 2025 11:56:22 +0000 Manifest next update: Tue 18 Nov 2025 13:12:22 +0000 Files and hashes: 1: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: EQEdqR6ZmGEgmq78N3cJXsFGdsdEKF2n/B1Z01J3KBE=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 13:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:87:83:43:9f:91:48:c7:56:4a:9e:a9:ac:67:71:3f:da:1b:73:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Nov 15 11:56:22 2025 GMT Not After : Nov 18 13:12:22 2025 GMT Subject: CN=FABB359100CDDA36F593DBCC38F7DD7B0AE3E447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:e5:6d:98:af:c1:fd:ea:52:ab:1e:73:f6: 44:af:27:16:22:84:eb:92:05:9b:67:5d:33:ec:8f: 04:a4:f2:f1:2e:c2:ae:fd:a5:d4:03:ae:39:7d:a5: eb:9e:c3:07:a0:17:15:ee:2e:c7:17:3e:1c:50:01: 76:e1:a7:43:51:16:b2:53:90:f0:da:18:70:b6:08: c0:3f:39:15:5a:ca:e2:78:3d:98:9c:63:1b:32:5f: f0:93:54:39:01:dc:48:ea:5c:d8:5e:d6:81:49:7f: 9d:fb:75:df:11:ba:15:f0:5c:85:c7:f6:38:63:59: 99:78:35:db:f7:e3:bf:fa:71:b7:9d:92:0d:91:5d: 78:be:c4:46:da:4e:b0:2a:0f:49:75:96:9f:bf:99: b2:c3:5b:57:e6:5e:7d:36:cb:13:a1:5b:20:48:57: 6b:52:e3:58:99:14:28:7e:b1:28:52:23:31:56:c0: a3:72:3d:07:9a:62:67:69:c6:8d:b4:f5:9b:84:bd: 8e:90:d3:91:b5:ab:9f:57:de:7b:cd:3f:36:7d:d5: fa:e6:ab:ee:69:42:6c:57:be:96:69:1b:9e:2a:c0: 3f:fc:58:50:49:b4:b3:32:a5:5b:16:77:52:59:41: 36:0f:8f:e9:d2:12:f8:fe:17:e7:c9:9c:5d:cf:71: fe:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:35:91:00:CD:DA:36:F5:93:DB:CC:38:F7:DD:7B:0A:E3:E4:47 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:46:35:cf:bf:3c:b4:bf:1b:df:98:11:44:75:5b:fc:1c:42: ea:e0:68:4c:73:0c:1a:25:50:3c:99:55:64:64:04:6e:59:a3: f6:6a:4e:b0:60:58:bb:eb:f3:04:2a:a4:ec:64:cd:9f:70:37: 3b:24:48:37:a8:b7:b3:23:cd:a5:33:54:9d:72:25:7c:23:9c: 0e:7d:86:13:2b:3e:de:d7:91:27:4a:94:9c:8d:99:d9:64:cb: 9f:9e:e7:ec:fc:3e:c6:9b:a4:8e:3d:d5:c7:50:ee:6e:d0:dc: 65:50:05:2a:80:7f:e4:51:86:17:2c:0e:cf:1e:e3:51:29:cb: a5:77:c5:43:b4:28:2f:66:ab:83:1b:d2:e6:da:06:7a:95:85: 17:1c:7f:bc:f7:6c:fc:cd:74:8c:27:93:09:b9:62:93:6d:5a: 63:d6:25:5d:60:b8:82:97:6c:10:db:ee:de:cb:f0:7c:2d:b9: bf:4d:d1:f1:bc:e7:92:99:29:0d:02:0f:06:14:36:ce:34:02: 7a:83:9c:5c:19:65:c7:4b:26:1b:5b:b3:10:32:23:50:bc:09: 21:68:84:68:2e:80:45:66:f2:e5:f9:07:7a:7d:d1:4c:a0:cf: 69:90:48:75:be:c9:b1:af:3e:4e:cc:aa:b2:ec:49:55:55:8c: 4c:a1:05:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoeDQ5+RSMdWSp6prGdxP9obcyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTExMTUxMTU2MjJaFw0yNTExMTgxMzEyMjJaMDMxMTAvBgNV BAMTKEZBQkIzNTkxMDBDRERBMzZGNTkzREJDQzM4RjdERDdCMEFFM0U0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWB+VtmK/B/epSqx5z9kSvJxYi hOuSBZtnXTPsjwSk8vEuwq79pdQDrjl9peuewwegFxXuLscXPhxQAXbhp0NRFrJT kPDaGHC2CMA/ORVayuJ4PZicYxsyX/CTVDkB3EjqXNhe1oFJf537dd8RuhXwXIXH 9jhjWZl4Ndv347/6cbedkg2RXXi+xEbaTrAqD0l1lp+/mbLDW1fmXn02yxOhWyBI V2tS41iZFCh+sShSIzFWwKNyPQeaYmdpxo209ZuEvY6Q05G1q59X3nvNPzZ91frm q+5pQmxXvpZpG54qwD/8WFBJtLMypVsWd1JZQTYPj+nSEvj+F+fJnF3Pcf6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rs1kQDN2jb1k9vMOPfdewrj5EcwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1GNc+/PLS/G9+YEUR1W/wcQurgaExzDBol UDyZVWRkBG5Zo/ZqTrBgWLvr8wQqpOxkzZ9wNzskSDeot7MjzaUzVJ1yJXwjnA59 hhMrPt7XkSdKlJyNmdlky5+e5+z8PsabpI491cdQ7m7Q3GVQBSqAf+RRhhcsDs8e 41Epy6V3xUO0KC9mq4Mb0ubaBnqVhRccf7z3bPzNdIwnkwm5YpNtWmPWJV1guIKX bBDb7t7L8Hwtub9N0fG855KZKQ0CDwYUNs40AnqDnFwZZcdLJhtbsxAyI1C8CSFo hGgugEVm8uX5B3p90Uygz2mQSHW+ybGvPk7MqrLsSVVVjEyhBR4= -----END CERTIFICATE-----Generated at Mon Nov 17 12:07:01 2025 by rpki-client