$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: US6vXfbKQ58sZ456GGrDoK+a43J+15HLj0koWvrQvn8= Subject key identifier: A3:79:8B:7A:48:A9:2A:15:92:AF:6C:F4:09:DA:DF:53:47:B9:4C:88 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 78B994FC7DF31275A88055D2820D89795D9C2387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 051F Signing time: Mon 03 Nov 2025 11:30:04 +0000 Manifest this update: Mon 03 Nov 2025 11:25:04 +0000 Manifest next update: Thu 06 Nov 2025 22:38:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 3: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: JZ7986x4eT0yN4lLAHMAFbKHtuaQlfOHBS5ClcZdNJ8=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b9:94:fc:7d:f3:12:75:a8:80:55:d2:82:0d:89:79:5d:9c:23:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Nov 3 11:25:04 2025 GMT Not After : Nov 6 22:38:04 2025 GMT Subject: CN=A3798B7A48A92A1592AF6CF409DADF5347B94C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:42:cc:5e:a4:3d:28:26:11:ff:a4:d2:57: b6:e6:bb:91:ea:e6:4a:3f:c8:ed:ea:85:45:9b:ce: 68:ce:cf:eb:6f:52:05:87:e9:80:d7:21:64:8d:b2: 3b:63:3b:db:ed:4f:8c:55:fe:5c:3c:3e:04:73:23: 47:fa:ae:86:d5:10:a1:01:86:e7:ed:03:3b:50:cc: 88:e4:ed:87:8a:0b:ac:09:30:b6:02:a1:c2:db:d2: 4d:aa:e4:49:be:14:c7:e7:05:3e:dc:ca:5a:2f:9c: 84:c6:01:6b:d7:73:26:ac:68:04:fd:1d:d1:ae:40: 97:36:9e:98:03:0c:b9:7b:5f:c4:58:83:97:6d:41: c9:70:ea:27:0b:43:f3:1c:c5:b0:64:2d:bc:ed:4b: c1:6c:65:0f:aa:09:c2:df:e8:a2:f7:7a:92:cf:80: bb:bd:53:89:72:78:78:75:bd:eb:63:7a:ea:28:69: 4c:02:98:8e:43:af:1f:6b:28:6d:4b:bf:1b:6f:f4: ac:d4:da:b5:1c:03:8a:99:f5:6b:c4:72:b3:20:0f: be:c6:31:ba:80:e0:02:1c:cc:3c:0a:fd:31:41:1e: 0f:18:71:26:23:ab:94:57:74:bc:8e:2f:9b:c4:83: f0:36:54:a5:a2:e7:31:29:b1:8c:71:65:4d:a0:aa: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:79:8B:7A:48:A9:2A:15:92:AF:6C:F4:09:DA:DF:53:47:B9:4C:88 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:74:80:32:bb:9c:34:9d:d2:2b:c5:53:28:0a:b7:6a:01:8d: 12:b5:8b:54:c4:5d:ef:f0:5c:66:a6:59:0c:cc:18:de:e0:dc: ac:32:04:2f:54:52:8d:9a:41:29:ed:74:cf:9b:11:70:4b:04: 0d:96:fb:a7:73:fa:94:7a:e4:85:10:3c:22:2e:68:c2:ec:66: c3:95:23:cf:c9:5c:1c:ab:f8:e3:3c:85:e7:d6:b7:72:d6:c2: 8a:46:3e:bb:32:49:e1:a6:7a:f6:3c:d3:c6:a4:f1:c1:57:0e: 32:f5:55:ef:e1:7e:1c:60:1e:5d:91:d7:6e:b9:2f:3c:20:4d: cb:99:31:70:73:d5:3c:a4:d3:28:42:f8:83:69:3c:0b:eb:e7: d9:54:b5:8a:13:6a:af:b8:6e:44:87:70:dd:f8:72:98:fe:87: f1:82:49:ca:b7:cd:64:09:44:9c:b0:5f:e8:50:d5:a7:c4:96: 71:c7:e7:39:32:38:ce:f1:fb:90:31:3f:de:89:0b:00:9e:0f: e2:01:b0:67:dc:f9:27:1d:3f:a1:bb:2c:73:51:2b:e3:81:16: f3:04:67:f1:d9:83:70:f3:15:b7:52:46:6e:65:4c:8b:c7:3d: 73:ff:91:12:39:e7:06:46:d8:49:1d:39:0e:99:37:9e:ba:3c: 5d:02:37:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLmU/H3zEnWogFXSgg2JeV2cI4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTExMDMxMTI1MDRaFw0yNTExMDYyMjM4MDRaMDMxMTAvBgNV BAMTKEEzNzk4QjdBNDhBOTJBMTU5MkFGNkNGNDA5REFERjUzNDdCOTRDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjELMXqQ9KCYR/6TSV7bmu5Hq 5ko/yO3qhUWbzmjOz+tvUgWH6YDXIWSNsjtjO9vtT4xV/lw8PgRzI0f6robVEKEB huftAztQzIjk7YeKC6wJMLYCocLb0k2q5Em+FMfnBT7cylovnITGAWvXcyasaAT9 HdGuQJc2npgDDLl7X8RYg5dtQclw6icLQ/McxbBkLbztS8FsZQ+qCcLf6KL3epLP gLu9U4lyeHh1vetjeuooaUwCmI5Drx9rKG1Lvxtv9KzU2rUcA4qZ9WvEcrMgD77G MbqA4AIczDwK/TFBHg8YcSYjq5RXdLyOL5vEg/A2VKWi5zEpsYxxZU2gquRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo3mLekipKhWSr2z0CdrfU0e5TIgwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANB0gDK7nDSd0ivFUygKt2oBjRK1i1TEXe/w XGamWQzMGN7g3KwyBC9UUo2aQSntdM+bEXBLBA2W+6dz+pR65IUQPCIuaMLsZsOV I8/JXByr+OM8hefWt3LWwopGPrsySeGmevY808ak8cFXDjL1Ve/hfhxgHl2R1265 LzwgTcuZMXBz1Tyk0yhC+INpPAvr59lUtYoTaq+4bkSHcN34cpj+h/GCScq3zWQJ RJywX+hQ1afElnHH5zkyOM7x+5AxP96JCwCeD+IBsGfc+ScdP6G7LHNRK+OBFvME Z/HZg3DzFbdSRm5lTIvHPXP/kRI55wZG2EkdOQ6ZN566PF0CNz8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:56 2025 by rpki-client