$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: 8HQBT4jA9eUnG0Xmjd2VNC5cF/scHeSL7GkE3RBP+Dk= Subject key identifier: D8:C7:D4:55:50:0B:46:53:EF:57:A8:6F:F8:F6:DC:06:4D:0B:EB:25 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 0364AB7448F52839994A7BAE7A7F82D77193BD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: EC Signing time: Mon 03 Nov 2025 13:02:00 +0000 Manifest this update: Mon 03 Nov 2025 12:57:00 +0000 Manifest next update: Thu 06 Nov 2025 18:12:00 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: XDSwWWRMdKVqQGtb2h+T2hWd9r18Imkbd3sNTfu69Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:64:ab:74:48:f5:28:39:99:4a:7b:ae:7a:7f:82:d7:71:93:bd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Nov 3 12:57:00 2025 GMT Not After : Nov 6 18:12:00 2025 GMT Subject: CN=D8C7D455500B4653EF57A86FF8F6DC064D0BEB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:65:e8:ae:aa:14:57:fb:4e:5c:2d:a1:ff: 3a:7d:b1:c1:89:66:7a:14:e8:f6:7c:40:00:1d:1a: e1:e0:d5:8b:63:6d:94:d5:8d:1b:0c:7c:1f:88:72: 1b:07:4e:b9:cb:95:88:ee:a6:ce:a7:30:d4:e1:33: 41:8e:a5:9b:08:06:f6:52:d0:cc:3e:ab:d7:2b:55: bc:81:e8:4e:f5:2f:ad:0b:91:d0:35:3a:55:90:f5: 9d:03:7d:fb:0f:ed:a5:fd:a4:6c:9d:41:cb:5a:de: 6d:8f:6d:79:f2:4a:1c:f2:e6:52:e6:e0:f0:68:43: 58:43:d3:6f:4d:60:63:e1:bd:2c:09:30:1f:f8:d5: 55:c6:0b:f0:82:01:d7:14:94:72:a2:13:fd:9d:0b: 3a:9e:e7:e4:28:09:a2:96:c5:33:45:54:fa:c3:22: 83:59:32:6f:b6:55:a3:e5:61:e9:de:d8:df:a8:a4: 45:68:f7:a5:f4:95:58:5b:e5:fd:c1:14:66:d7:c2: de:a1:37:4f:44:d6:dd:60:1f:ca:c0:6c:da:68:87: c2:a4:43:77:de:c7:00:41:48:7c:16:bd:66:a7:92: 0a:fe:ad:76:9b:41:90:15:0f:c7:16:bf:cc:71:3e: d1:5d:09:2e:51:21:23:71:f9:28:74:94:90:1b:b0: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:D4:55:50:0B:46:53:EF:57:A8:6F:F8:F6:DC:06:4D:0B:EB:25 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:97:c1:ce:41:a5:be:52:a2:32:c9:e7:5a:ea:ca:b5:ff:e7: 54:fe:15:30:b8:d3:3d:f6:07:c8:4c:4d:4b:a1:22:99:42:9e: c8:88:97:dd:5b:35:57:40:a9:07:6c:8a:78:e4:fd:3e:0c:98: e6:3a:29:c2:5d:fb:1b:15:c1:78:4c:5f:6a:46:0b:92:eb:3d: b2:ca:19:c7:6d:a0:3e:51:c3:4b:f9:7e:60:8d:64:01:92:56: a0:0c:d0:70:42:40:7c:ae:a3:91:13:e0:0d:01:4e:e1:d9:09: 50:0a:d1:38:a7:80:8e:27:6a:8b:cf:0c:51:db:a7:3f:b9:f1: d4:59:12:1e:73:55:24:33:7a:44:d8:1b:32:b0:01:44:19:55: 57:43:66:07:aa:53:ad:4d:e0:f5:ca:a9:3a:2d:35:e7:ac:38: e2:01:4c:5d:96:e7:37:19:9a:86:27:ed:ce:5e:7b:a8:77:a3: 8b:66:87:5a:05:0e:d3:16:ad:a7:07:08:25:8d:c0:ea:ba:99: 17:25:32:b9:eb:bc:16:62:56:f8:0b:37:fe:b5:17:08:d8:8f: 38:83:e4:d8:d1:0b:e6:da:1f:bb:3e:1e:ee:34:8f:88:35:73: 42:c3:a6:e4:a3:13:7e:5d:f8:4d:c2:1c:16:0e:2e:94:dc:2a: 94:b3:1d:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2SrdEj1KDmZSnuuen+C13GTvU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTExMDMxMjU3MDBaFw0yNTExMDYxODEyMDBaMDMxMTAvBgNV BAMTKEQ4QzdENDU1NTAwQjQ2NTNFRjU3QTg2RkY4RjZEQzA2NEQwQkVCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3mXorqoUV/tOXC2h/zp9scGJ ZnoU6PZ8QAAdGuHg1YtjbZTVjRsMfB+IchsHTrnLlYjups6nMNThM0GOpZsIBvZS 0Mw+q9crVbyB6E71L60LkdA1OlWQ9Z0DffsP7aX9pGydQcta3m2PbXnyShzy5lLm 4PBoQ1hD029NYGPhvSwJMB/41VXGC/CCAdcUlHKiE/2dCzqe5+QoCaKWxTNFVPrD IoNZMm+2VaPlYene2N+opEVo96X0lVhb5f3BFGbXwt6hN09E1t1gH8rAbNpoh8Kk Q3fexwBBSHwWvWankgr+rXabQZAVD8cWv8xxPtFdCS5RISNx+Sh0lJAbsDeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MfUVVALRlPvV6hv+PbcBk0L6yUwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuXwc5Bpb5SojLJ51rqyrX/51T+FTC40z32 B8hMTUuhIplCnsiIl91bNVdAqQdsinjk/T4MmOY6KcJd+xsVwXhMX2pGC5LrPbLK GcdtoD5Rw0v5fmCNZAGSVqAM0HBCQHyuo5ET4A0BTuHZCVAK0TingI4naovPDFHb pz+58dRZEh5zVSQzekTYGzKwAUQZVVdDZgeqU61N4PXKqTotNeesOOIBTF2W5zcZ moYn7c5ee6h3o4tmh1oFDtMWracHCCWNwOq6mRclMrnrvBZiVvgLN/61FwjYjziD 5NjRC+baH7s+Hu40j4g1c0LDpuSjE35d+E3CHBYOLpTcKpSzHV0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:32 2025 by rpki-client