$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: hXG293IUgh3mDoqjqRwbuDhPbR169nku6KkoPt6qLJc= Subject key identifier: FA:2B:B5:1A:BC:A1:7E:CB:E0:63:C5:4F:2D:30:FE:44:05:17:9B:2A Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 766EE47CF1812225BB1F3056546B02D370D3C342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 024A Signing time: Sun 16 Nov 2025 11:21:49 +0000 Manifest this update: Sun 16 Nov 2025 11:16:49 +0000 Manifest next update: Wed 19 Nov 2025 15:24:49 +0000 Files and hashes: 1: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: PEcL+4vagR8+KCrqSITQbritLc3Q/hkg/wTzbXT8ing=) 2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6e:e4:7c:f1:81:22:25:bb:1f:30:56:54:6b:02:d3:70:d3:c3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Nov 16 11:16:49 2025 GMT Not After : Nov 19 15:24:49 2025 GMT Subject: CN=FA2BB51ABCA17ECBE063C54F2D30FE4405179B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:5d:51:3d:96:d5:8c:49:91:ed:80:1d:09: 57:75:d2:1a:9f:03:8b:10:b0:1e:52:3b:cd:8f:9a: 7f:ed:d2:ca:8b:a0:c4:45:8b:85:38:11:f9:a1:da: 8e:36:dd:3a:c0:2d:91:39:ba:42:b4:c0:91:17:fa: 02:42:2b:a0:ea:05:ea:77:6c:39:42:89:3b:6c:57: 19:18:f4:23:01:5c:05:51:cf:31:9f:cf:94:02:cc: db:f1:47:8a:6f:c4:9f:2d:e8:3a:06:40:b2:9a:0b: 75:ce:dc:2f:9b:60:e0:fd:43:c8:2e:72:fa:b8:d0: 38:3d:56:f7:59:38:5f:d2:8e:d7:9b:e9:94:8f:c2: 34:e2:18:dd:d8:c5:b2:15:57:60:be:57:29:0f:9e: e3:42:14:21:06:7d:d9:66:38:53:d5:c4:e6:7a:5a: bd:56:3b:a0:63:48:fd:ee:4b:30:37:5b:02:ea:b3: 84:7c:3d:40:0d:43:67:ed:a9:53:d4:a6:9e:9a:b9: f1:5f:84:6b:2a:bd:75:2a:d5:4b:fd:30:d7:f8:70: 02:fc:3c:68:86:e9:d6:84:df:62:85:ae:8c:b0:73: c4:b3:c7:1c:f0:3b:e6:ad:0d:ef:f3:48:cc:b9:f4: 26:3b:5f:b0:ea:7f:40:ba:c5:9f:28:67:87:e8:e6: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:B5:1A:BC:A1:7E:CB:E0:63:C5:4F:2D:30:FE:44:05:17:9B:2A X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6f:b0:90:ee:18:ee:29:ad:19:17:1b:ed:22:31:62:60:cc: d7:87:fb:70:6e:94:f1:1e:b5:9c:15:ca:14:7d:c3:6b:00:9e: f7:cd:e2:60:75:07:35:e5:8f:c6:2a:d5:24:41:32:d5:33:39: b7:37:57:ab:13:88:48:66:f8:7f:8e:28:46:81:06:a8:e6:8b: d2:78:cf:25:16:c4:1a:bb:35:ad:d7:d6:93:80:13:25:e0:2f: 7a:f2:7f:25:9c:d1:1d:69:63:54:16:ee:25:2c:ab:eb:49:10: c6:e9:34:0b:3f:8f:b1:49:98:13:fe:80:8f:2d:09:3e:5f:c7: 37:68:47:7b:b3:84:3f:45:5e:fc:af:73:fc:27:46:95:d7:74: 04:57:0e:a1:30:2f:bc:e0:c6:fd:f9:3b:e6:95:36:36:15:fe: 10:f3:dc:4a:8d:13:89:d2:2e:a4:45:8b:76:66:3d:ba:a8:56: 24:85:e6:b6:c1:18:17:a4:04:39:d6:8b:9a:03:6b:59:6d:ec: dd:83:75:bc:f0:2a:a7:2c:2f:e1:88:ff:fe:9b:cf:56:00:be: c5:b0:d6:fc:fa:9b:a7:19:2f:23:7b:5b:5b:a8:35:4a:d7:20: 27:5d:3f:57:ad:da:9d:8f:55:1e:7b:5b:3f:df:15:87:16:7d: 30:56:0c:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm7kfPGBIiW7HzBWVGsC03DTw0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNTExMTYxMTE2NDlaFw0yNTExMTkxNTI0NDlaMDMxMTAvBgNV BAMTKEZBMkJCNTFBQkNBMTdFQ0JFMDYzQzU0RjJEMzBGRTQ0MDUxNzlCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9V1RPZbVjEmR7YAdCVd10hqf A4sQsB5SO82Pmn/t0sqLoMRFi4U4Efmh2o423TrALZE5ukK0wJEX+gJCK6DqBep3 bDlCiTtsVxkY9CMBXAVRzzGfz5QCzNvxR4pvxJ8t6DoGQLKaC3XO3C+bYOD9Q8gu cvq40Dg9VvdZOF/Sjteb6ZSPwjTiGN3YxbIVV2C+VykPnuNCFCEGfdlmOFPVxOZ6 Wr1WO6BjSP3uSzA3WwLqs4R8PUANQ2ftqVPUpp6aufFfhGsqvXUq1Uv9MNf4cAL8 PGiG6daE32KFroywc8SzxxzwO+atDe/zSMy59CY7X7Dqf0C6xZ8oZ4fo5tXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iu1GryhfsvgY8VPLTD+RAUXmyowHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdvsJDuGO4prRkXG+0iMWJgzNeH+3BulPEe tZwVyhR9w2sAnvfN4mB1BzXlj8Yq1SRBMtUzObc3V6sTiEhm+H+OKEaBBqjmi9J4 zyUWxBq7Na3X1pOAEyXgL3ryfyWc0R1pY1QW7iUsq+tJEMbpNAs/j7FJmBP+gI8t CT5fxzdoR3uzhD9FXvyvc/wnRpXXdARXDqEwL7zgxv35O+aVNjYV/hDz3EqNE4nS LqRFi3ZmPbqoViSF5rbBGBekBDnWi5oDa1lt7N2DdbzwKqcsL+GI//6bz1YAvsWw 1vz6m6cZLyN7W1uoNUrXICddP1et2p2PVR57Wz/fFYcWfTBWDJM= -----END CERTIFICATE-----Generated at Mon Nov 17 19:06:59 2025 by rpki-client