$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft File: 542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json) Hash identifier: I2M4hR5y7R1LZZCKypZ/wrbX7sPQx86dnm+ddmefhSU= Subject key identifier: 7D:BA:80:6E:D0:78:A8:22:1D:6D:9A:C6:23:F9:F9:F6:F0:8B:E9:9B Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF Certificate issuer: /CN=542851974B72056B3D43792A5ED83E94DA8583CF Certificate serial: 53781B3D51EC524B0A77C0B8CEE408245BA0AB05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft Manifest number: 0149 Signing time: Fri 17 Oct 2025 10:00:46 +0000 Manifest this update: Fri 17 Oct 2025 09:55:46 +0000 Manifest next update: Mon 20 Oct 2025 21:48:46 +0000 Files and hashes: 1: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: 698jR3jKZ8pHoaDchjQqCam2SnsQK52skK3UhMYukls=) 2: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: pDuHxztSSzaNxiWdPKfqn1iY4RyIWJeb3mp+7ElqvGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 21:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:78:1b:3d:51:ec:52:4b:0a:77:c0:b8:ce:e4:08:24:5b:a0:ab:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF Validity Not Before: Oct 17 09:55:46 2025 GMT Not After : Oct 20 21:48:46 2025 GMT Subject: CN=7DBA806ED078A8221D6D9AC623F9F9F6F08BE99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:7d:eb:3f:47:03:57:63:af:fb:c0:b1:86: 0c:c6:87:43:c3:cc:18:ec:55:a4:3a:0d:c9:97:e0: 09:4f:f6:a6:8f:0b:a3:5a:41:69:96:4b:99:71:ce: fe:81:99:90:93:db:7c:b2:f9:ff:73:00:c1:ce:a3: f8:86:27:35:b7:10:51:42:57:24:ca:97:ce:11:d4: 12:28:51:f4:01:ad:c9:19:e8:83:c2:33:16:68:84: f8:82:06:9e:71:63:e7:f8:d2:a4:bf:cc:9d:ef:ca: 46:1b:f7:4f:28:b7:d6:6e:9f:ea:3f:bb:9e:42:ba: 01:fe:b6:2d:66:3f:45:fa:69:0c:4b:cc:c4:ee:6a: 7c:10:5f:77:fb:58:4b:24:0d:ad:a8:72:25:3a:b2: fb:1a:6a:79:b7:a3:d5:82:1e:10:b5:74:59:33:46: 9f:53:30:da:bc:e1:40:30:39:07:8c:17:47:c6:c5: 38:b3:a7:6e:fe:a4:c9:d0:65:e8:b9:a5:48:05:55: 63:c6:b6:8f:91:32:f2:fe:ba:2c:ae:30:26:2f:a1: 64:67:0e:ab:26:9e:ad:d6:db:56:5f:29:ee:c3:fe: ce:a1:eb:6a:f5:38:fe:75:88:0d:e9:95:c6:3f:db: c8:68:d5:6d:2a:03:59:c7:4f:77:e7:6f:3a:23:ab: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BA:80:6E:D0:78:A8:22:1D:6D:9A:C6:23:F9:F9:F6:F0:8B:E9:9B X509v3 Authority Key Identifier: keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:41:3b:96:e7:5c:7d:7f:d9:89:85:09:76:b6:63:37:37: 99:ec:f3:72:d0:13:d5:54:c2:45:dd:3a:9c:16:52:51:84:9e: ed:1e:43:7e:65:7e:70:61:e9:ec:12:08:bf:35:8f:fa:fb:55: a8:d0:d0:94:b7:7e:9d:9b:4f:68:0f:a5:d5:d5:88:3f:0c:6f: 02:4e:7e:4b:51:d6:87:69:52:64:ca:d6:37:31:96:8b:bc:ba: f3:58:8b:e8:34:7d:10:f6:05:93:f4:d9:21:37:ff:17:e0:9a: 78:36:22:c4:04:33:d1:18:67:f5:3f:85:46:47:6c:12:b9:d6: 06:17:e4:70:57:6a:41:ce:79:58:10:eb:5c:92:81:41:07:ca: 8f:17:05:56:ae:9b:d6:dc:3c:d4:09:24:68:e5:0e:e7:fc:28: 01:56:6c:06:b3:0c:26:6c:87:4b:5d:65:92:95:75:3a:ee:87: 17:c3:29:b0:44:9f:8d:0d:32:08:89:ab:0a:bd:57:fa:1e:87: 62:ee:aa:8c:0e:e2:5f:24:be:b0:8c:0a:90:32:9a:eb:5e:ee: ed:e6:df:b9:de:27:db:f7:b8:e3:85:08:4e:45:19:50:40:a6: da:d8:28:ec:46:29:23:48:c2:3f:fc:20:c5:d8:61:03:be:2c: f4:de:13:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3gbPVHsUksKd8C4zuQIJFugqwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTRE QTg1ODNDRjAeFw0yNTEwMTcwOTU1NDZaFw0yNTEwMjAyMTQ4NDZaMDMxMTAvBgNV BAMTKDdEQkE4MDZFRDA3OEE4MjIxRDZEOUFDNjIzRjlGOUY2RjA4QkU5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UX3rP0cDV2Ov+8CxhgzGh0PD zBjsVaQ6DcmX4AlP9qaPC6NaQWmWS5lxzv6BmZCT23yy+f9zAMHOo/iGJzW3EFFC VyTKl84R1BIoUfQBrckZ6IPCMxZohPiCBp5xY+f40qS/zJ3vykYb908ot9Zun+o/ u55CugH+ti1mP0X6aQxLzMTuanwQX3f7WEskDa2ociU6svsaanm3o9WCHhC1dFkz Rp9TMNq84UAwOQeMF0fGxTizp27+pMnQZei5pUgFVWPGto+RMvL+uiyuMCYvoWRn Dqsmnq3W21ZfKe7D/s6h62r1OP51iA3plcY/28ho1W0qA1nHT3fnbzojq06jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbqAbtB4qCIdbZrGI/n59vCL6ZswHwYDVR0j BBgwFoAUVChRl0tyBWs9Q3kqXtg+lNqFg88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzM1ZTE1Zi1kNDQ5LTQ2ZDgtYmUwZS04NWUzODliZWRjNWUvMC81NDI4NTE5NzRC NzIwNTZCM0Q0Mzc5MkE1RUQ4M0U5NERBODU4M0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTREQTg1 ODNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNF OTREQTg1ODNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcjQTuW51x9f9mJhQl2tmM3N5ns83LQE9VU wkXdOpwWUlGEnu0eQ35lfnBh6ewSCL81j/r7VajQ0JS3fp2bT2gPpdXViD8MbwJO fktR1odpUmTK1jcxlou8uvNYi+g0fRD2BZP02SE3/xfgmng2IsQEM9EYZ/U/hUZH bBK51gYX5HBXakHOeVgQ61ySgUEHyo8XBVaum9bcPNQJJGjlDuf8KAFWbAazDCZs h0tdZZKVdTruhxfDKbBEn40NMgiJqwq9V/oeh2LuqowO4l8kvrCMCpAymute7u3m 37neJ9v3uOOFCE5FGVBAptrYKOxGKSNIwj/8IMXYYQO+LPTeE7A= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:25 2025 by rpki-client