$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: mfWPDb4oSLMdcC3ScZWZOR1VAQbg3F+uprtx9W3CLzM= Subject key identifier: CB:E0:BF:85:02:86:84:56:81:B7:9C:7A:5E:C6:9F:44:42:1A:C0:A2 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 42810FF53FF48D9AFAB03E20D53BFC90AF89BD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0358 Signing time: Tue 04 Nov 2025 09:40:38 +0000 Manifest this update: Tue 04 Nov 2025 09:35:38 +0000 Manifest next update: Fri 07 Nov 2025 14:39:38 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 4: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: bFDLzUKC7exe/BTRTzBzkcN4Xu2XOBuDG4dk3P/bNkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:81:0f:f5:3f:f4:8d:9a:fa:b0:3e:20:d5:3b:fc:90:af:89:bd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Nov 4 09:35:38 2025 GMT Not After : Nov 7 14:39:38 2025 GMT Subject: CN=CBE0BF850286845681B79C7A5EC69F44421AC0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:e1:ed:f6:ee:40:7f:25:aa:1a:42:07:ee: bb:a6:39:e6:29:58:57:42:dc:19:51:59:02:c3:a6: e7:45:3b:24:8b:c6:fa:44:ee:14:4d:af:24:fb:19: 1b:e2:26:8a:12:cd:19:0c:cf:d4:28:7b:ad:d9:d5: 5b:0a:d4:4a:c8:b0:ba:05:b1:3a:11:ac:51:90:47: 8b:8c:a7:59:60:e7:d5:87:d4:59:c9:bb:ae:3f:87: 22:26:b2:0a:5c:4d:9a:3e:b7:fe:a4:56:ee:ce:92: 52:26:d0:8d:44:ea:c4:8d:76:d4:6c:72:b7:40:e7: 63:a3:e5:db:37:db:02:fd:03:a7:c3:75:3c:1b:35: f0:c2:ec:6c:33:5b:6f:ce:92:32:12:d7:20:71:e2: dc:c5:e4:cc:4e:eb:8a:0c:9d:e3:7d:d8:79:08:2a: c7:35:cc:1c:11:74:91:a5:86:42:d5:40:09:fc:dc: 4b:6b:df:ab:25:c2:25:ba:90:25:b9:00:da:5a:b8: 02:f5:8a:40:ef:0a:93:84:3e:11:e7:67:1d:dc:d2: e3:fc:5a:c9:27:cc:fc:66:12:c4:fd:51:e5:bf:df: f7:1d:d7:f0:87:da:bf:c8:54:a6:ee:a3:e7:0f:dc: 98:c6:b9:23:4d:9c:f9:fe:7e:57:5b:88:67:cd:9b: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E0:BF:85:02:86:84:56:81:B7:9C:7A:5E:C6:9F:44:42:1A:C0:A2 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:52:66:41:fb:22:67:73:76:cb:bd:97:0f:a5:32:23:d6:9b: 53:11:f0:f4:6d:ec:11:9b:4c:ae:3f:a4:c5:8f:ec:d8:76:06: 55:7f:09:a0:32:f4:40:98:2f:7a:47:53:6a:be:7a:40:25:cb: 97:34:37:81:0f:7c:db:61:0f:05:61:f8:32:e3:64:03:0e:da: 6b:22:88:df:d5:c9:ff:dd:40:11:26:19:a4:7a:ec:e3:25:5f: a9:8d:35:a9:6d:2a:c0:a1:db:96:c3:bb:c5:2a:22:de:39:b3: bd:cc:19:2f:a8:dd:da:cc:e5:6c:0b:34:05:83:fd:f7:ae:10: 77:0d:62:20:36:e6:1f:12:aa:ed:a0:1a:83:e0:85:9f:88:6c: 45:5e:81:1c:4d:df:36:f8:c2:a7:c7:61:07:9b:dc:53:04:71: e1:e9:6d:c9:b2:c9:50:06:46:83:8d:ce:14:52:96:9e:9f:7d: 5f:c6:02:0f:d9:d1:80:ca:01:e1:1e:5f:08:7c:d2:65:e8:bc: b9:e2:5d:7f:a0:aa:f9:11:ca:a2:f0:1c:76:80:3c:c1:2a:99: 33:2a:c3:c7:2c:f0:92:98:72:ff:f3:97:62:34:98:6a:a6:15: 34:d3:30:67:64:ef:33:9a:cf:ac:ad:b8:ee:0c:2e:a3:f2:19: ee:4a:cb:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoEP9T/0jZr6sD4g1Tv8kK+JvU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTExMDQwOTM1MzhaFw0yNTExMDcxNDM5MzhaMDMxMTAvBgNV BAMTKENCRTBCRjg1MDI4Njg0NTY4MUI3OUM3QTVFQzY5RjQ0NDIxQUMwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDOHt9u5AfyWqGkIH7rumOeYp WFdC3BlRWQLDpudFOySLxvpE7hRNryT7GRviJooSzRkMz9Qoe63Z1VsK1ErIsLoF sToRrFGQR4uMp1lg59WH1FnJu64/hyImsgpcTZo+t/6kVu7OklIm0I1E6sSNdtRs crdA52Oj5ds32wL9A6fDdTwbNfDC7GwzW2/OkjIS1yBx4tzF5MxO64oMneN92HkI Ksc1zBwRdJGlhkLVQAn83Etr36slwiW6kCW5ANpauAL1ikDvCpOEPhHnZx3c0uP8 WsknzPxmEsT9UeW/3/cd1/CH2r/IVKbuo+cP3JjGuSNNnPn+fldbiGfNmwgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+C/hQKGhFaBt5x6XsafREIawKIwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRSZkH7Imdzdsu9lw+lMiPWm1MR8PRt7BGb TK4/pMWP7Nh2BlV/CaAy9ECYL3pHU2q+ekAly5c0N4EPfNthDwVh+DLjZAMO2msi iN/Vyf/dQBEmGaR67OMlX6mNNaltKsCh25bDu8UqIt45s73MGS+o3drM5WwLNAWD /feuEHcNYiA25h8Squ2gGoPghZ+IbEVegRxN3zb4wqfHYQeb3FMEceHpbcmyyVAG RoONzhRSlp6ffV/GAg/Z0YDKAeEeXwh80mXovLniXX+gqvkRyqLwHHaAPMEqmTMq w8cs8JKYcv/zl2I0mGqmFTTTMGdk7zOaz6ytuO4MLqPyGe5Ky1s= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:55 2025 by rpki-client