$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: 7DeUhv4TdZevhiEuoGFh0YrF5vF6bVcF/qJBJtZ4Qjw= Subject key identifier: 0F:7F:C9:09:A3:61:C9:1F:E2:BE:13:7A:2C:00:68:13:16:EC:09:3D Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 7AEEF49E4F0BBBD70E47C4787F9A158336F401E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 0119 Signing time: Sun 19 Oct 2025 13:11:29 +0000 Manifest this update: Sun 19 Oct 2025 13:06:29 +0000 Manifest next update: Wed 22 Oct 2025 23:38:29 +0000 Files and hashes: 1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=) 2: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: KCVyMu1okQoUgbWAnnvcirf/h0+ACw1iYbaYTpHQXVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ee:f4:9e:4f:0b:bb:d7:0e:47:c4:78:7f:9a:15:83:36:f4:01:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Oct 19 13:06:29 2025 GMT Not After : Oct 22 23:38:29 2025 GMT Subject: CN=0F7FC909A361C91FE2BE137A2C00681316EC093D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:28:60:4b:58:c3:c5:93:a6:ad:66:d9:ed: c5:34:96:fa:74:05:ce:68:61:59:34:dd:dc:6c:35: 0f:d9:84:d1:46:05:dc:2f:33:af:e2:67:43:dc:ec: 37:19:f9:25:46:5b:b5:df:95:42:41:21:49:88:96: 75:da:9c:4e:17:30:b0:b6:49:cd:3d:54:21:af:03: 20:01:6f:39:9c:b4:93:49:28:93:3d:5d:e5:9f:c0: e5:c2:19:f9:2d:ab:a4:74:01:ea:d2:3f:d6:5b:bc: 8c:b7:c2:ed:ac:5d:a4:43:5a:71:b9:3c:fe:41:c6: 24:ab:96:be:96:4c:d6:3b:af:45:b9:ac:c4:41:b6: c5:94:89:50:04:02:a6:89:bb:48:ea:14:8c:9d:ca: e5:b8:a1:87:19:09:2c:e9:6f:76:2f:c4:86:f9:bb: e1:75:67:86:1d:b8:e8:1f:18:16:97:1b:2a:eb:59: bd:56:f4:5d:dd:08:6f:88:6d:ca:e5:7f:5e:c3:b9: 84:f5:76:87:61:24:66:3e:86:84:25:a9:e9:83:5a: e4:d6:c0:1b:f0:7d:0f:62:15:bc:3a:9a:92:37:1e: e4:61:0c:89:1f:19:a3:c5:9d:e8:aa:62:d3:d4:09: df:28:1e:1a:04:7b:98:28:d4:3f:40:14:e3:73:34: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7F:C9:09:A3:61:C9:1F:E2:BE:13:7A:2C:00:68:13:16:EC:09:3D X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:00:a2:a9:a3:b3:3d:1f:dc:d0:b6:a9:5d:4c:e3:62:a4:fd: 95:e0:bc:34:73:f6:96:4e:4a:f9:a6:76:9e:03:b2:68:bf:70: 7e:2e:c7:d8:3e:09:f8:01:51:a1:f0:f0:9b:ee:b0:c9:d2:e9: c2:1d:ce:01:3c:5c:d6:63:80:4e:a3:9b:d9:f5:4f:47:22:fe: 96:66:2c:3d:fb:e1:2f:fd:fa:5d:37:41:26:cf:96:5c:2b:0c: 04:1a:b6:0a:34:d9:94:a0:10:2f:e1:fa:cc:38:cc:18:de:d0: d5:f2:37:72:eb:85:14:1b:44:0c:a8:2e:ec:0f:81:ce:a8:f8: b5:4c:a1:3e:8d:79:0d:fb:a9:33:31:ef:4a:f1:b6:d8:a1:0c: 20:fb:33:b5:d6:0d:b9:53:1b:d3:95:e8:a9:f7:84:45:8b:fa: 73:69:d8:a4:7b:4e:c8:38:d2:17:98:0c:c9:11:3d:39:86:18: 53:af:9b:2d:0b:5c:5f:cb:a3:b6:b1:cc:fe:75:7b:d3:13:6f: 15:34:b4:6b:47:8a:b8:e4:17:e7:6a:5d:3c:91:5f:09:04:52: d5:13:e6:1e:04:fb:10:72:16:88:21:da:7b:58:91:1c:74:69: b1:af:b8:a3:54:dd:9e:b2:0d:69:24:21:aa:d5:2c:e7:b8:6f: e1:70:ce:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeu70nk8Lu9cOR8R4f5oVgzb0AecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTEwMTkxMzA2MjlaFw0yNTEwMjIyMzM4MjlaMDMxMTAvBgNV BAMTKDBGN0ZDOTA5QTM2MUM5MUZFMkJFMTM3QTJDMDA2ODEzMTZFQzA5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MyhgS1jDxZOmrWbZ7cU0lvp0 Bc5oYVk03dxsNQ/ZhNFGBdwvM6/iZ0Pc7DcZ+SVGW7XflUJBIUmIlnXanE4XMLC2 Sc09VCGvAyABbzmctJNJKJM9XeWfwOXCGfktq6R0AerSP9ZbvIy3wu2sXaRDWnG5 PP5BxiSrlr6WTNY7r0W5rMRBtsWUiVAEAqaJu0jqFIydyuW4oYcZCSzpb3YvxIb5 u+F1Z4YduOgfGBaXGyrrWb1W9F3dCG+Ibcrlf17DuYT1dodhJGY+hoQlqemDWuTW wBvwfQ9iFbw6mpI3HuRhDIkfGaPFneiqYtPUCd8oHhoEe5go1D9AFONzNMUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3/JCaNhyR/ivhN6LABoExbsCT0wHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAAoqmjsz0f3NC2qV1M42Kk/ZXgvDRz9pZO Svmmdp4Dsmi/cH4ux9g+CfgBUaHw8JvusMnS6cIdzgE8XNZjgE6jm9n1T0ci/pZm LD374S/9+l03QSbPllwrDAQatgo02ZSgEC/h+sw4zBje0NXyN3LrhRQbRAyoLuwP gc6o+LVMoT6NeQ37qTMx70rxttihDCD7M7XWDblTG9OV6Kn3hEWL+nNp2KR7Tsg4 0heYDMkRPTmGGFOvmy0LXF/Lo7axzP51e9MTbxU0tGtHirjkF+dqXTyRXwkEUtUT 5h4E+xByFogh2ntYkRx0abGvuKNU3Z6yDWkkIarVLOe4b+Fwzko= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:14 2025 by rpki-client