$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft File: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft (raw, json) Hash identifier: pnIAIZb+KfhyrSqUBqkTDVfJ+5eEA81SEFQY/2YsPAw= Subject key identifier: F9:E8:B7:10:87:D7:B1:2E:B5:42:B8:96:84:39:37:33:0C:F4:3D:D7 Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB Certificate issuer: /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Certificate serial: 547EF5C16FCF6648C62C83F09F877D0FB7850D26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft Manifest number: 04EC Signing time: Thu 13 Nov 2025 19:00:52 +0000 Manifest this update: Thu 13 Nov 2025 18:55:52 +0000 Manifest next update: Mon 17 Nov 2025 04:57:52 +0000 Files and hashes: 1: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: 8vEqnPeXr9755NhRmkDVV3kvpgE2wfzA2jlzpFzSE/0=) 2: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: /RTTrDt1roX5iqnN5YmyZ+CyR+tqtyybCHqOwLYwxXI=) 3: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: hmq0uoHwUsEo+oTXEtyTpYYQCEB74jpeYd9ceOhWLKI=) 4: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl (hash: CMUK4dMvg4SrmR2TKZzwdw7p1fg8GnMZkIK1xjuefRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Nov 2025 04:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7e:f5:c1:6f:cf:66:48:c6:2c:83:f0:9f:87:7d:0f:b7:85:0d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Validity Not Before: Nov 13 18:55:52 2025 GMT Not After : Nov 17 04:57:52 2025 GMT Subject: CN=F9E8B71087D7B12EB542B896843937330CF43DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:aa:3a:69:d7:92:42:f7:92:8c:58:06:4f: 50:8b:64:16:25:36:26:a2:f3:1d:cc:7e:b0:06:3c: 05:33:5e:79:b3:58:33:01:23:3c:bb:d6:dc:89:6f: 3d:48:f1:f0:ac:74:c3:29:b0:b5:04:1f:f5:1f:ac: c2:a1:5e:76:2a:a2:03:b1:6f:8c:59:4a:4a:62:38: 15:f8:95:fd:eb:53:d0:cd:2a:0c:9a:d5:51:8c:26: 78:d5:25:67:7f:b8:12:e3:7d:ff:d4:e7:10:89:66: 91:4b:e9:d9:1e:d5:d0:22:9a:94:f9:d7:87:34:06: 0e:ec:cd:73:5a:f3:d4:a6:78:b6:6d:b3:c9:38:c5: e6:4d:55:35:d3:18:a8:7c:2c:41:fa:c2:a6:c4:9b: 2c:8b:97:99:50:f8:52:80:44:36:c1:24:4a:27:48: c8:78:83:13:bb:31:1d:d2:2f:1e:ef:23:42:ea:1c: d4:b8:58:de:11:fc:99:fc:54:66:5e:07:f4:38:3f: c6:ff:db:28:ad:7b:9b:d7:3e:f6:2f:cd:5b:5d:32: eb:f3:5b:92:cd:2b:1f:1c:42:37:cb:e7:fa:6a:65: 95:3e:33:a8:a0:d3:ae:48:60:14:41:d2:8a:d4:e6: 82:ba:82:ff:22:66:61:66:c2:1f:0f:ee:5e:f0:13: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E8:B7:10:87:D7:B1:2E:B5:42:B8:96:84:39:37:33:0C:F4:3D:D7 X509v3 Authority Key Identifier: keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:31:8a:3c:36:65:a6:e1:65:a3:59:42:41:44:01:1c:df:0b: bf:7d:65:12:a7:1e:7d:1e:59:74:2b:08:f6:e8:2e:5b:ef:2e: 79:a3:a6:e2:0b:1a:0a:53:59:35:9a:af:0a:1e:d8:68:69:64: 1c:ef:6e:c2:d1:a9:91:66:19:fb:40:1e:42:d0:26:cd:42:10: 8a:98:f0:aa:d8:41:a3:35:74:22:95:0b:87:9b:8e:35:a6:16: 49:da:4e:7d:ac:2d:7b:91:01:7a:fb:fb:af:b9:aa:8e:04:1a: 76:f8:62:d1:cb:7d:0c:ea:84:78:c0:3c:09:e5:76:06:3a:1b: b2:fc:03:60:8e:52:54:44:f2:d4:17:78:ac:25:75:a8:8f:95: 2e:c7:44:fd:00:03:b9:7f:90:c4:8f:c8:01:c8:bf:56:32:42: 92:85:c6:dc:e8:7a:51:77:9f:fe:1c:6c:99:49:50:59:fa:22: c8:2e:c1:86:21:81:eb:05:6e:16:85:d3:32:ad:39:12:43:36: 0a:7c:fe:eb:66:66:03:1e:29:34:c7:28:0a:f2:e7:11:40:bf: 6a:ef:08:45:79:e2:c4:8d:0a:9c:83:ca:18:7d:b6:8f:df:77: 0c:fb:3c:55:2d:41:79:ea:e6:a0:55:ea:f4:ff:0a:29:c6:04: ae:ee:9d:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVH71wW/PZkjGLIPwn4d9D7eFDSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQz QTBFRDVCQjAeFw0yNTExMTMxODU1NTJaFw0yNTExMTcwNDU3NTJaMDMxMTAvBgNV BAMTKEY5RThCNzEwODdEN0IxMkVCNTQyQjg5Njg0MzkzNzMzMENGNDNERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguKo6adeSQveSjFgGT1CLZBYl Niai8x3MfrAGPAUzXnmzWDMBIzy71tyJbz1I8fCsdMMpsLUEH/UfrMKhXnYqogOx b4xZSkpiOBX4lf3rU9DNKgya1VGMJnjVJWd/uBLjff/U5xCJZpFL6dke1dAimpT5 14c0Bg7szXNa89SmeLZts8k4xeZNVTXTGKh8LEH6wqbEmyyLl5lQ+FKARDbBJEon SMh4gxO7MR3SLx7vI0LqHNS4WN4R/Jn8VGZeB/Q4P8b/2yite5vXPvYvzVtdMuvz W5LNKx8cQjfL5/pqZZU+M6ig065IYBRB0orU5oK6gv8iZmFmwh8P7l7wE6F3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ei3EIfXsS61QriWhDk3Mwz0PdcwHwYDVR0j BBgwFoAUUop5npS9UFL29YrP3Z9N7ToO1bswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OThmMTljMy1lNGUxLTQxYTEtYWFmMC1kNjEzYWNhNDkzMGMvMC81MjhBNzk5RTk0 QkQ1MDUyRjZGNThBQ0ZERDlGNERFRDNBMEVENUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQzQTBF RDVCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk4ZjE5YzMtZTRlMS00MWExLWFh ZjAtZDYxM2FjYTQ5MzBjLzAvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRE RUQzQTBFRDVCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsxijw2ZabhZaNZQkFEARzfC799ZRKnHn0e WXQrCPboLlvvLnmjpuILGgpTWTWarwoe2GhpZBzvbsLRqZFmGftAHkLQJs1CEIqY 8KrYQaM1dCKVC4ebjjWmFknaTn2sLXuRAXr7+6+5qo4EGnb4YtHLfQzqhHjAPAnl dgY6G7L8A2COUlRE8tQXeKwldaiPlS7HRP0AA7l/kMSPyAHIv1YyQpKFxtzoelF3 n/4cbJlJUFn6IsguwYYhgesFbhaF0zKtORJDNgp8/utmZgMeKTTHKAry5xFAv2rv CEV54sSNCpyDyhh9to/fdwz7PFUtQXnq5qBV6vT/CinGBK7unbw= -----END CERTIFICATE-----Generated at Fri Nov 14 23:51:34 2025 by rpki-client