$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: SISHIzXJA0OrSNy1lX76Y5B22WdnN2X2d1QDdOkrRcs= Subject key identifier: 6D:33:D0:2B:F6:11:66:20:15:CB:72:DF:DA:60:73:5F:84:14:F6:F2 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 1236172485E83DFF40A9166B4935AEEE98B69957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 014B Signing time: Mon 03 Nov 2025 17:21:16 +0000 Manifest this update: Mon 03 Nov 2025 17:16:16 +0000 Manifest next update: Fri 07 Nov 2025 01:50:16 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: FiPA9o18KIsm+SYZh6OYtKXJIaKDO8RQ6bXu0Hcr5XQ=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:36:17:24:85:e8:3d:ff:40:a9:16:6b:49:35:ae:ee:98:b6:99:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Nov 3 17:16:16 2025 GMT Not After : Nov 7 01:50:16 2025 GMT Subject: CN=6D33D02BF611662015CB72DFDA60735F8414F6F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:2b:7b:2f:18:c0:21:85:61:f8:b2:de:7b: 41:d9:b3:de:28:68:1f:63:49:c7:d7:2f:39:09:fa: fc:e7:7d:2c:38:a4:0e:79:9f:15:d3:02:c6:0f:ca: 50:c3:75:69:73:3e:8a:1f:16:03:d2:52:3d:8d:d2: d5:24:71:8e:d2:66:30:99:e7:2d:17:cf:16:05:15: a3:7d:70:12:6d:88:c2:5a:ed:0f:be:cf:91:a2:17: c9:b6:ab:da:ba:61:01:0a:e4:af:5f:91:62:f0:4a: d0:6b:c6:5f:ca:a2:f8:00:22:5d:2c:c1:33:ca:4c: b2:fe:31:ed:b0:14:e8:a8:ca:9c:8e:4a:0c:88:3e: e4:9d:e9:78:d9:7e:4b:70:66:38:b8:a3:eb:be:3d: 50:a2:83:33:48:b5:f9:19:48:26:e2:fe:25:78:38: ee:bd:e6:c5:f6:e6:91:4a:1d:82:76:e5:e3:17:a0: 62:eb:5e:88:a0:b3:78:5e:6b:16:1b:dc:f6:2d:96: ea:7b:84:90:11:bb:5d:3b:ef:ba:7d:8c:42:ce:17: a6:1b:be:6c:06:8d:22:8d:9d:d7:05:e3:df:d9:a6: 94:c1:30:dd:17:0d:73:01:d1:25:a7:83:6d:e7:7a: 63:d4:c2:80:3e:8b:1c:68:63:25:49:88:3b:28:43: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:33:D0:2B:F6:11:66:20:15:CB:72:DF:DA:60:73:5F:84:14:F6:F2 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c7:c7:20:52:17:b2:7a:ca:c8:41:42:6b:65:ac:f4:e8:b9: af:a3:25:20:d6:4e:fd:68:4f:8e:ac:82:85:90:0b:e9:f0:ea: 85:59:f4:56:de:7c:74:2b:7b:6f:ab:e5:d0:6f:f1:d0:e8:23: f7:35:fc:e5:57:a5:94:20:0e:0a:3f:77:2f:2d:7b:be:67:ba: 90:5c:60:f1:cb:e8:db:91:f2:12:e1:a8:25:ca:81:c2:d4:0a: c8:3f:45:3f:0f:de:6c:07:d7:dd:8b:64:fb:b4:db:e6:1d:f3: cf:dd:83:0a:e9:3b:65:35:b9:95:08:e5:c9:c4:ef:70:90:6c: b9:e5:81:ac:3a:3a:3b:44:d7:28:c0:8c:0c:68:9e:a9:51:b7: de:f1:95:4f:49:ac:82:01:47:29:a8:e5:f3:b9:d0:42:33:8b: e7:7f:c2:e8:c5:23:e5:02:8d:b3:26:12:7d:2e:b9:14:11:f3: e6:53:72:3c:d0:f8:d5:37:76:59:2c:78:39:36:e0:46:66:de: 13:31:a8:14:a3:e0:c8:e1:2f:2f:50:bd:de:8d:07:c0:b4:9a: 57:ae:c7:93:0c:08:32:0c:f2:e4:c1:82:98:31:e8:dd:34:eb: d6:c7:26:27:a3:84:fc:68:f2:87:26:85:5d:6c:fe:bf:05:77: 8c:f5:a4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjYXJIXoPf9AqRZrSTWu7pi2mVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTExMDMxNzE2MTZaFw0yNTExMDcwMTUwMTZaMDMxMTAvBgNV BAMTKDZEMzNEMDJCRjYxMTY2MjAxNUNCNzJERkRBNjA3MzVGODQxNEY2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3St7LxjAIYVh+LLee0HZs94o aB9jScfXLzkJ+vznfSw4pA55nxXTAsYPylDDdWlzPoofFgPSUj2N0tUkcY7SZjCZ 5y0XzxYFFaN9cBJtiMJa7Q++z5GiF8m2q9q6YQEK5K9fkWLwStBrxl/KovgAIl0s wTPKTLL+Me2wFOioypyOSgyIPuSd6XjZfktwZji4o+u+PVCigzNItfkZSCbi/iV4 OO695sX25pFKHYJ25eMXoGLrXoigs3heaxYb3PYtlup7hJARu10777p9jELOF6Yb vmwGjSKNndcF49/ZppTBMN0XDXMB0SWng23nemPUwoA+ixxoYyVJiDsoQ5o7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbTPQK/YRZiAVy3Lf2mBzX4QU9vIwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3HxyBSF7J6yshBQmtlrPToua+jJSDWTv1o T46sgoWQC+nw6oVZ9FbefHQre2+r5dBv8dDoI/c1/OVXpZQgDgo/dy8te75nupBc YPHL6NuR8hLhqCXKgcLUCsg/RT8P3mwH192LZPu02+Yd88/dgwrpO2U1uZUI5cnE 73CQbLnlgaw6OjtE1yjAjAxonqlRt97xlU9JrIIBRymo5fO50EIzi+d/wujFI+UC jbMmEn0uuRQR8+ZTcjzQ+NU3dlkseDk24EZm3hMxqBSj4MjhLy9Qvd6NB8C0mleu x5MMCDIM8uTBgpgx6N0069bHJiejhPxo8ocmhV1s/r8Fd4z1pPQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:01 2025 by rpki-client