$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: KR0E1WltdrBlmYMatxiIcfE8IhzNCtZ7Rs3PYRnkH8o= Subject key identifier: 23:50:66:A7:49:24:18:2E:9E:D2:C1:AE:41:35:38:7F:44:2E:AC:A1 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 4BB041318D2DFBF8AFA9E301309F8B37F298F90A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: D5 Signing time: Fri 17 Oct 2025 19:52:07 +0000 Manifest this update: Fri 17 Oct 2025 19:47:07 +0000 Manifest next update: Mon 20 Oct 2025 23:37:07 +0000 Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: PQVHjxMn/kL/xcYoBbMsXquAd80lxTJ0wB/mHacGGf0=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b0:41:31:8d:2d:fb:f8:af:a9:e3:01:30:9f:8b:37:f2:98:f9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Oct 17 19:47:07 2025 GMT Not After : Oct 20 23:37:07 2025 GMT Subject: CN=235066A74924182E9ED2C1AE4135387F442EACA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:e0:2a:4f:75:6a:ce:d7:f5:8e:9a:3e:a3: ef:5c:d2:b9:04:25:1c:1f:58:04:2c:0a:c1:96:7b: 9b:23:45:50:5e:c6:eb:43:b6:c3:03:d5:ed:d3:ae: 34:f3:78:47:9e:a1:62:ea:14:4a:9c:5c:04:e7:e8: 44:6c:5e:58:15:b2:f0:aa:bf:b6:60:2b:6a:22:04: 0e:d0:39:53:dc:8e:8a:37:77:04:67:d5:6f:e9:5f: 2f:76:cd:66:4a:f3:10:4d:27:49:a4:84:41:1c:bf: 33:bb:05:97:63:37:7a:6c:08:12:b2:34:1f:a9:76: bb:c4:68:de:ea:8f:22:20:1a:4b:7a:24:94:7b:44: 05:e5:79:fb:48:26:43:54:2b:9a:03:e7:08:e1:f4: 71:a5:b4:e8:93:eb:2e:5d:ba:94:ae:93:2b:e0:b9: 6e:6c:5c:a1:9b:5a:ca:dd:69:74:ca:de:35:78:32: d1:4b:f8:59:52:43:f4:2c:da:c2:90:be:e8:87:3b: 3a:4e:f3:f5:46:86:a8:dc:59:50:53:62:10:72:dd: ad:d9:c6:5f:60:91:c0:fd:05:a2:05:19:3b:6d:90: 10:a8:fb:2d:39:60:94:15:fc:86:60:d4:b5:c4:95: 42:ad:26:c9:b4:9b:68:f1:65:b5:61:38:dd:47:28: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:66:A7:49:24:18:2E:9E:D2:C1:AE:41:35:38:7F:44:2E:AC:A1 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:46:b1:a5:cf:e4:79:60:80:bb:ab:af:59:94:f1:ad:95:5e: e3:a2:05:44:56:9b:53:53:b0:a9:0a:45:d2:64:24:46:af:31: c8:c2:92:49:fa:34:08:a1:3c:a3:8f:54:0d:2f:dd:94:66:94: 18:04:27:f3:82:5c:4c:f0:c4:f3:8b:12:86:6f:a9:75:0a:14: aa:c6:a6:63:43:0a:f6:bd:fa:5b:ca:18:88:66:d8:ba:09:0f: 0f:66:89:27:d3:d1:ec:49:50:e0:fb:d7:6c:90:6f:cb:77:ae: 36:59:ab:fc:22:8a:5a:8f:d7:0c:05:08:aa:86:50:0d:23:7a: 52:14:c1:18:76:e3:cc:e1:ec:43:71:0c:c6:c4:1c:51:30:a7: de:5e:a2:11:72:7d:2a:db:df:b0:9a:af:4d:85:82:d4:82:bf: e8:4f:23:2d:07:da:b5:63:50:b3:ce:a0:58:cf:f8:fa:f2:34: d4:ce:6b:b1:48:93:b8:13:f8:ac:f4:07:51:3b:cd:3c:79:53: dc:b3:c1:ed:27:4f:76:f3:aa:dc:15:93:0a:93:3c:1a:66:81: 4b:38:5b:86:f7:0e:80:cc:b8:dc:76:52:e0:10:e3:99:6d:33: 04:3c:9a:2d:75:a7:0f:5b:d0:bc:f3:e8:c6:5f:e9:d0:a8:40: 61:ec:87:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7BBMY0t+/ivqeMBMJ+LN/KY+QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNTEwMTcxOTQ3MDdaFw0yNTEwMjAyMzM3MDdaMDMxMTAvBgNV BAMTKDIzNTA2NkE3NDkyNDE4MkU5RUQyQzFBRTQxMzUzODdGNDQyRUFDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulOAqT3Vqztf1jpo+o+9c0rkE JRwfWAQsCsGWe5sjRVBexutDtsMD1e3TrjTzeEeeoWLqFEqcXATn6ERsXlgVsvCq v7ZgK2oiBA7QOVPcjoo3dwRn1W/pXy92zWZK8xBNJ0mkhEEcvzO7BZdjN3psCBKy NB+pdrvEaN7qjyIgGkt6JJR7RAXleftIJkNUK5oD5wjh9HGltOiT6y5dupSukyvg uW5sXKGbWsrdaXTK3jV4MtFL+FlSQ/Qs2sKQvuiHOzpO8/VGhqjcWVBTYhBy3a3Z xl9gkcD9BaIFGTttkBCo+y05YJQV/IZg1LXElUKtJsm0m2jxZbVhON1HKKNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI1Bmp0kkGC6e0sGuQTU4f0QurKEwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFGsaXP5HlggLurr1mU8a2VXuOiBURWm1NT sKkKRdJkJEavMcjCkkn6NAihPKOPVA0v3ZRmlBgEJ/OCXEzwxPOLEoZvqXUKFKrG pmNDCva9+lvKGIhm2LoJDw9miSfT0exJUOD712yQb8t3rjZZq/wiilqP1wwFCKqG UA0jelIUwRh248zh7ENxDMbEHFEwp95eohFyfSrb37Car02FgtSCv+hPIy0H2rVj ULPOoFjP+PryNNTOa7FIk7gT+Kz0B1E7zTx5U9yzwe0nT3bzqtwVkwqTPBpmgUs4 W4b3DoDMuNx2UuAQ45ltMwQ8mi11pw9b0Lzz6MZf6dCoQGHsh/M= -----END CERTIFICATE-----Generated at Mon Oct 20 01:11:41 2025 by rpki-client