$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: /AfA1u7vDx3JTgtCk8ybITjuLxTOx4gikt++AJWGpOs= Subject key identifier: 5F:40:D6:F9:95:E4:11:C2:0B:A5:60:44:6A:A5:7D:66:09:3F:60:1C Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 5A812D88CA48F335D0E537FF107E054FC5BB0FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 051D Signing time: Sun 26 Oct 2025 17:20:51 +0000 Manifest this update: Sun 26 Oct 2025 17:15:51 +0000 Manifest next update: Wed 29 Oct 2025 20:34:51 +0000 Files and hashes: 1: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: 09Z9qO7W6Qp6u0Xq6zTm5k63PXHb3xset2TORSYEXz4=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:81:2d:88:ca:48:f3:35:d0:e5:37:ff:10:7e:05:4f:c5:bb:0f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Oct 26 17:15:51 2025 GMT Not After : Oct 29 20:34:51 2025 GMT Subject: CN=5F40D6F995E411C20BA560446AA57D66093F601C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:79:17:27:ae:40:c7:d6:25:68:a3:3d:e2: 80:95:1d:cb:84:b6:03:ff:5b:bb:d4:ec:46:f8:ff: 9d:6f:48:ec:3d:6f:67:ca:76:da:be:d9:4b:0c:6c: 7e:45:8a:e7:79:22:40:ff:6e:65:a5:8d:32:fa:e8: 17:11:a7:b7:c2:f8:f5:5e:ae:18:ff:86:cf:fe:05: 54:28:bf:05:e3:4f:64:e1:ea:a3:f3:5f:88:5b:6a: bb:f5:54:e1:f0:e6:ae:58:6f:4c:ec:d5:a2:ca:de: df:10:40:82:22:07:cf:10:82:bb:2f:87:d3:9a:9c: 02:5d:da:a7:d0:2b:9e:56:92:a4:0a:92:18:e2:5c: db:20:29:57:06:0e:a0:fd:82:4d:80:96:a0:3a:2a: cb:3d:b7:dd:bd:d7:8a:95:cb:6b:28:bc:35:4f:8c: e8:19:a2:e1:b4:4f:42:29:62:ae:cb:85:63:46:ae: 02:7c:8f:60:76:d7:6c:d3:b6:4a:3f:71:33:92:9c: 72:e0:1d:92:9e:f0:67:0a:f3:02:ce:bf:c1:3e:5e: 1d:62:14:59:4b:11:c6:dc:fa:ee:62:ef:bc:12:0c: cc:2b:c1:22:1e:fa:6c:72:d6:fe:23:d9:0e:33:38: be:1c:05:e3:4b:e9:6d:83:db:a2:46:0d:e3:6d:47: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:D6:F9:95:E4:11:C2:0B:A5:60:44:6A:A5:7D:66:09:3F:60:1C X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b7:23:63:94:1f:ce:7e:e8:95:6c:b7:0b:13:32:5b:e0:95: af:7c:e9:58:7f:44:50:4c:3c:ca:8e:f6:b5:50:eb:3f:3b:45: 73:8f:7d:59:b2:73:9e:6e:ca:d9:05:86:71:77:d5:63:f5:fd: 88:7d:3f:ac:37:76:bc:54:bc:08:e6:a4:20:af:2e:8c:f1:fa: 40:ef:33:26:87:8c:bc:42:5b:bc:b6:42:82:42:5b:b1:db:f9: ae:38:4f:9b:b3:2f:d2:2c:78:96:5a:7a:d3:18:4d:f5:68:51: d7:96:55:49:5e:ff:bd:c9:9a:fc:b4:64:eb:3c:f0:69:e6:0c: 9d:26:cd:3b:3a:df:a2:06:ee:5e:2b:c5:e8:f1:f4:d8:45:0c: d8:80:4b:96:8c:7e:af:79:df:75:d4:8a:17:d8:9d:a1:b3:de: 0a:58:7c:ff:be:5c:75:ac:65:08:56:c2:22:85:37:86:ac:cb: 3e:1c:87:94:16:d6:15:14:e5:ec:2d:8d:88:b5:c0:d0:a0:1e: 53:ec:5b:69:18:af:bb:59:56:57:67:63:b8:9a:72:3b:5d:c3: d4:b6:6d:82:69:30:81:df:62:12:41:7e:49:18:d9:3a:29:ef: 42:c7:2a:af:74:a6:37:13:60:cf:22:f3:2e:a1:05:0b:5d:34: 71:d4:bd:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoEtiMpI8zXQ5Tf/EH4FT8W7D9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTEwMjYxNzE1NTFaFw0yNTEwMjkyMDM0NTFaMDMxMTAvBgNV BAMTKDVGNDBENkY5OTVFNDExQzIwQkE1NjA0NDZBQTU3RDY2MDkzRjYwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgHkXJ65Ax9YlaKM94oCVHcuE tgP/W7vU7Eb4/51vSOw9b2fKdtq+2UsMbH5Fiud5IkD/bmWljTL66BcRp7fC+PVe rhj/hs/+BVQovwXjT2Th6qPzX4hbarv1VOHw5q5Yb0zs1aLK3t8QQIIiB88Qgrsv h9OanAJd2qfQK55WkqQKkhjiXNsgKVcGDqD9gk2AlqA6Kss9t92914qVy2sovDVP jOgZouG0T0IpYq7LhWNGrgJ8j2B212zTtko/cTOSnHLgHZKe8GcK8wLOv8E+Xh1i FFlLEcbc+u5i77wSDMwrwSIe+mxy1v4j2Q4zOL4cBeNL6W2D26JGDeNtR3ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0DW+ZXkEcILpWBEaqV9Zgk/YBwwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi3I2OUH85+6JVstwsTMlvgla986Vh/RFBM PMqO9rVQ6z87RXOPfVmyc55uytkFhnF31WP1/Yh9P6w3drxUvAjmpCCvLozx+kDv MyaHjLxCW7y2QoJCW7Hb+a44T5uzL9IseJZaetMYTfVoUdeWVUle/73Jmvy0ZOs8 8GnmDJ0mzTs636IG7l4rxejx9NhFDNiAS5aMfq9533XUihfYnaGz3gpYfP++XHWs ZQhWwiKFN4asyz4ch5QW1hUU5ewtjYi1wNCgHlPsW2kYr7tZVldnY7iacjtdw9S2 bYJpMIHfYhJBfkkY2Top70LHKq90pjcTYM8i8y6hBQtdNHHUvTs= -----END CERTIFICATE-----Generated at Tue Oct 28 15:43:31 2025 by rpki-client