$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: VPevop1c2S4S6JW4pizgV/+t2yFFWql8XkKNYYtS484= Subject key identifier: 8A:5E:AD:85:16:43:A2:1B:ED:75:36:36:08:47:2F:31:00:FA:37:0F Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 541E287B52815F56804C2F0315CC151086ECA9AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0523 Signing time: Wed 05 Nov 2025 05:12:23 +0000 Manifest this update: Wed 05 Nov 2025 05:07:23 +0000 Manifest next update: Sat 08 Nov 2025 10:34:23 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 2: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 3: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: 78G9X/76VnNAH4VuTUjJDnCUMlS+kln9mkg29KB6EoE=) 4: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1e:28:7b:52:81:5f:56:80:4c:2f:03:15:cc:15:10:86:ec:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Nov 5 05:07:23 2025 GMT Not After : Nov 8 10:34:23 2025 GMT Subject: CN=8A5EAD851643A21BED75363608472F3100FA370F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:bd:8d:a0:a3:74:be:a8:37:6d:de:05:d6: 4c:0f:e2:76:1e:fd:7a:fb:be:8c:e6:df:0a:5c:e8: 43:68:7a:92:a8:76:33:16:e6:e8:0c:eb:94:0c:a2: cf:6f:b7:68:f7:ac:64:88:4a:9f:2d:ba:19:8e:aa: 10:80:27:35:e0:32:d0:2b:51:3d:6c:8d:d1:ec:83: 06:03:d1:da:2f:66:fa:5a:ef:a6:40:7c:c0:46:5d: 55:f7:50:ec:05:08:bb:47:f3:f0:1c:ab:01:c8:c4: be:41:8f:aa:54:eb:59:e7:8a:e9:29:e2:e2:6b:78: c1:da:cb:70:22:62:c8:ad:4b:b3:d7:3d:d6:cc:0e: cd:f9:a7:b2:84:f2:1b:af:38:50:8e:af:80:c6:e5: fe:a0:d2:e7:26:27:58:7c:23:37:80:50:cd:67:d6: e0:6f:89:97:28:7f:a7:ad:47:5c:b5:d9:5d:da:49: fe:0e:58:97:64:88:de:cb:4f:88:4e:37:13:9c:fb: 81:22:06:dc:7c:df:ac:c3:d7:c3:7b:96:cc:3d:2b: 84:ab:c2:2e:d0:4f:c2:27:c1:f7:e9:02:59:de:13: 92:70:48:48:2f:0e:fc:18:49:1b:ce:7b:f2:97:20: 06:63:5c:41:eb:aa:ff:29:1d:e5:22:c4:17:04:2d: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5E:AD:85:16:43:A2:1B:ED:75:36:36:08:47:2F:31:00:FA:37:0F X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f7:e5:fb:d8:2c:b8:c9:2b:39:b2:d2:92:8d:e5:64:74:75: 08:6a:7a:98:76:b2:7a:7f:08:9c:9b:45:9a:4c:47:f7:90:25: 59:01:6b:51:65:29:ac:ac:ae:c5:2e:e7:78:6f:84:5f:5b:f4: 7b:9a:67:7c:2d:e4:aa:5d:99:53:2d:9d:af:02:16:7b:d1:f1: a5:24:75:59:08:bb:8d:72:7d:09:68:03:19:33:bf:46:a9:d9: 11:85:53:54:7b:ef:f5:ed:9a:f0:6f:cb:d3:a6:2e:c2:0c:5e: 85:76:36:1d:31:c5:7e:56:70:9a:c8:99:6b:ea:59:58:8b:68: ac:4e:23:ea:7a:e3:ba:8a:e8:a0:3c:29:a8:0e:b4:88:f0:9a: 08:0a:e3:54:44:44:fc:8d:b1:50:66:b8:59:ca:70:18:c5:02: de:49:58:81:48:4e:2f:a3:f4:3a:57:c5:ed:bf:b5:c6:3e:9a: 10:20:5b:ac:cd:3e:ef:b9:15:11:86:b5:02:c7:d7:38:99:9f: 7d:4b:5a:ea:0c:44:f1:d2:c5:06:b2:76:16:65:ab:57:0f:be: 40:9b:96:21:e6:28:cb:10:a7:da:31:26:ba:03:36:17:02:84: 77:f2:e2:4f:d3:83:58:ea:48:71:6e:16:5b:73:30:19:ed:6b: 47:55:f2:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVB4oe1KBX1aATC8DFcwVEIbsqawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTExMDUwNTA3MjNaFw0yNTExMDgxMDM0MjNaMDMxMTAvBgNV BAMTKDhBNUVBRDg1MTY0M0EyMUJFRDc1MzYzNjA4NDcyRjMxMDBGQTM3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2L2NoKN0vqg3bd4F1kwP4nYe /Xr7vozm3wpc6ENoepKodjMW5ugM65QMos9vt2j3rGSISp8tuhmOqhCAJzXgMtAr UT1sjdHsgwYD0dovZvpa76ZAfMBGXVX3UOwFCLtH8/AcqwHIxL5Bj6pU61nniukp 4uJreMHay3AiYsitS7PXPdbMDs35p7KE8huvOFCOr4DG5f6g0ucmJ1h8IzeAUM1n 1uBviZcof6etR1y12V3aSf4OWJdkiN7LT4hONxOc+4EiBtx836zD18N7lsw9K4Sr wi7QT8InwffpAlneE5JwSEgvDvwYSRvOe/KXIAZjXEHrqv8pHeUixBcELTGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUil6thRZDohvtdTY2CEcvMQD6Nw8wHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD35fvYLLjJKzmy0pKN5WR0dQhqeph2snp/ CJybRZpMR/eQJVkBa1FlKaysrsUu53hvhF9b9HuaZ3wt5KpdmVMtna8CFnvR8aUk dVkIu41yfQloAxkzv0ap2RGFU1R77/XtmvBvy9OmLsIMXoV2Nh0xxX5WcJrImWvq WViLaKxOI+p647qK6KA8KagOtIjwmggK41RERPyNsVBmuFnKcBjFAt5JWIFITi+j 9DpXxe2/tcY+mhAgW6zNPu+5FRGGtQLH1ziZn31LWuoMRPHSxQaydhZlq1cPvkCb liHmKMsQp9oxJroDNhcChHfy4k/Tg1jqSHFuFltzMBnta0dV8hU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:32:41 2025 by rpki-client