$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: I6e92+vseNd9plX4PsxuJGyDkqUcSsCJHmgDzJH7b+s= Subject key identifier: 4B:12:06:55:F6:D4:94:10:53:58:BD:36:F1:1B:B4:ED:4C:24:8D:C8 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 42C1137A2D6200306C0CF22A3E5031A7546DD1B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0226 Signing time: Mon 03 Nov 2025 21:22:23 +0000 Manifest this update: Mon 03 Nov 2025 21:17:23 +0000 Manifest next update: Fri 07 Nov 2025 01:17:23 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 2: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: aA5qpgEertt6aOboFJOia6JnvJUMngx8NNxuHljazNc=) 3: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c1:13:7a:2d:62:00:30:6c:0c:f2:2a:3e:50:31:a7:54:6d:d1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Nov 3 21:17:23 2025 GMT Not After : Nov 7 01:17:23 2025 GMT Subject: CN=4B120655F6D494105358BD36F11BB4ED4C248DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:66:ad:c6:da:97:f7:d8:94:df:82:90:6a: e7:82:6d:53:ec:f5:39:fd:5a:6d:40:e1:e2:1f:17: 7c:c8:22:1c:5d:0b:26:c4:50:f3:80:ca:fe:18:a1: 48:ac:a2:46:c9:6e:70:37:8e:8d:d5:c6:f2:a8:10: 0f:a8:9d:65:a5:19:a4:35:ea:a6:68:f1:08:90:da: d7:53:b3:d7:13:dd:51:12:f2:72:9d:55:cb:11:47: 04:5b:65:7a:ce:d6:db:6d:eb:23:a7:3d:1d:c3:ef: ef:85:f9:38:17:04:b2:30:59:3d:96:9e:20:0b:84: 60:88:03:8e:85:75:eb:f5:39:e9:3a:07:84:6f:21: 2d:be:1a:62:38:1a:bc:8c:41:cf:84:87:fa:f2:b0: 9a:71:83:a6:50:96:34:bd:24:45:1d:41:4f:a0:4c: bb:4f:05:88:bf:36:76:dc:ae:de:14:b3:0c:bd:e4: cd:90:b9:3a:2f:f4:70:da:7c:7c:4e:38:cf:11:b1: a1:bf:f0:5b:54:39:35:bc:53:77:73:4f:ea:bb:99: 78:20:85:c4:ec:59:15:c6:45:8a:23:5d:2b:16:d0: 5d:d6:46:2c:65:d1:fa:0b:36:8f:4d:59:8b:b5:e9: 83:00:ed:8e:66:4c:20:32:16:7c:92:ae:e2:4c:a8: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:06:55:F6:D4:94:10:53:58:BD:36:F1:1B:B4:ED:4C:24:8D:C8 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b2:c8:c5:08:4b:b7:26:3d:76:7f:04:51:ee:b9:88:45:26: 76:47:27:8a:67:18:c5:b5:d9:98:e8:ca:00:24:46:48:6e:ad: dc:22:bc:51:20:f6:75:9c:42:7f:9d:d5:70:ab:e8:dc:82:50: 86:0c:7a:b9:1e:5e:2c:ca:53:4b:32:57:e7:89:eb:7e:53:f9: 42:38:62:8c:cd:69:5a:fd:87:11:b0:ff:42:6e:bc:af:da:bf: 58:31:3a:aa:65:7d:94:12:e3:57:cb:4e:64:20:76:86:d3:be: d6:d4:54:1d:e2:bf:56:f9:ff:1b:1b:28:ce:fb:fa:fb:7e:43: 17:70:49:1a:b9:82:38:a3:6a:39:7a:a8:67:34:21:8f:24:5c: 7c:7c:01:4c:0a:52:b7:48:8f:67:9e:33:63:fe:47:6f:6c:3a: e2:5c:6b:19:03:cc:ea:e6:9f:98:b4:aa:e8:48:35:74:08:9a: da:95:56:a0:79:32:dc:57:ea:ac:a2:b2:99:89:15:65:ba:1e: 33:bb:d4:b9:87:ad:3d:2a:e5:a5:d1:b2:04:9c:7c:fc:21:13: 7c:a4:13:43:b1:d5:9d:75:f4:89:3e:f7:0b:b4:a4:16:32:11: 0a:65:ee:2d:50:a1:07:d4:c9:59:39:c1:2a:ae:a9:37:48:79: a7:82:0b:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsETei1iADBsDPIqPlAxp1Rt0bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTExMDMyMTE3MjNaFw0yNTExMDcwMTE3MjNaMDMxMTAvBgNV BAMTKDRCMTIwNjU1RjZENDk0MTA1MzU4QkQzNkYxMUJCNEVENEMyNDhEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNWatxtqX99iU34KQaueCbVPs 9Tn9Wm1A4eIfF3zIIhxdCybEUPOAyv4YoUisokbJbnA3jo3VxvKoEA+onWWlGaQ1 6qZo8QiQ2tdTs9cT3VES8nKdVcsRRwRbZXrO1ttt6yOnPR3D7++F+TgXBLIwWT2W niALhGCIA46Fdev1Oek6B4RvIS2+GmI4GryMQc+Eh/rysJpxg6ZQljS9JEUdQU+g TLtPBYi/Nnbcrt4Uswy95M2QuTov9HDafHxOOM8RsaG/8FtUOTW8U3dzT+q7mXgg hcTsWRXGRYojXSsW0F3WRixl0foLNo9NWYu16YMA7Y5mTCAyFnySruJMqNSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxIGVfbUlBBTWL028Ru07UwkjcgwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeyyMUIS7cmPXZ/BFHuuYhFJnZHJ4pnGMW1 2ZjoygAkRkhurdwivFEg9nWcQn+d1XCr6NyCUIYMerkeXizKU0syV+eJ635T+UI4 YozNaVr9hxGw/0JuvK/av1gxOqplfZQS41fLTmQgdobTvtbUVB3iv1b5/xsbKM77 +vt+QxdwSRq5gjijajl6qGc0IY8kXHx8AUwKUrdIj2eeM2P+R29sOuJcaxkDzOrm n5i0quhINXQImtqVVqB5MtxX6qyispmJFWW6HjO71LmHrT0q5aXRsgScfPwhE3yk E0Ox1Z119Ik+9wu0pBYyEQpl7i1QoQfUyVk5wSquqTdIeaeCC0M= -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:49 2025 by rpki-client