$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: P9MJy5L3PUxiJ9aIvnhZE1G9vVlZKXHpraV/FvyZ3IY= Subject key identifier: AD:E1:DC:CC:E3:AB:D6:2C:C3:52:62:78:C0:E6:CF:2A:1D:3C:E5:F0 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 0BC29B0D1F49164B68B4F8D90C158D77C3C23A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 02A4 Signing time: Mon 03 Nov 2025 03:20:50 +0000 Manifest this update: Mon 03 Nov 2025 03:15:50 +0000 Manifest next update: Thu 06 Nov 2025 12:17:50 +0000 Files and hashes: 1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: amRkPax+cGWfBf6cS3aL1mPgJ3EdWZzi8SkHZaSzY7s=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c2:9b:0d:1f:49:16:4b:68:b4:f8:d9:0c:15:8d:77:c3:c2:3a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Nov 3 03:15:50 2025 GMT Not After : Nov 6 12:17:50 2025 GMT Subject: CN=ADE1DCCCE3ABD62CC3526278C0E6CF2A1D3CE5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:5a:09:1c:57:e0:61:e3:70:58:9d:50:b1: a4:a3:77:d3:3d:06:13:51:48:4e:a9:73:29:be:a9: 04:1b:33:ef:01:f6:24:88:7f:30:bb:dc:16:d1:b9: 9f:6f:4d:e8:b3:9c:4a:5a:d6:4d:cd:6c:fa:4e:1b: 3a:22:1c:5a:e3:9c:70:aa:5d:ba:5e:9f:b8:9c:6e: 6c:10:10:72:2d:f2:d6:20:9b:33:fb:bc:42:3e:0a: 02:3e:56:43:7d:72:ac:8f:57:1d:2c:fe:17:04:dd: 13:2c:ea:e9:fc:91:f4:15:90:11:33:c8:4d:73:6b: 2f:59:d5:e5:42:8f:07:5d:64:16:f7:c6:07:f3:91: d6:1d:68:16:e2:90:ee:da:10:b7:96:c3:de:2f:3c: 32:92:bc:68:e6:37:65:ad:33:bb:65:c6:1b:ef:cc: e2:79:1c:47:95:82:5a:d0:6c:c6:f2:e0:36:03:f7: 07:59:22:6d:53:42:e1:97:30:0d:87:09:5e:90:42: d6:38:1e:df:92:7d:55:56:e1:c2:9a:5e:3a:6f:d3: 6d:08:2e:ca:31:19:9e:b4:c1:e1:fc:54:78:ea:a2: 2b:40:ca:ee:5c:6f:be:cd:35:85:fc:b8:e7:bc:90: a3:b4:fa:4e:c2:94:82:e2:c7:fe:ed:95:4f:20:f2: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E1:DC:CC:E3:AB:D6:2C:C3:52:62:78:C0:E6:CF:2A:1D:3C:E5:F0 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:15:7c:3e:cb:33:0b:9d:e6:dc:84:ef:3e:15:50:b5:38: 95:94:c5:a9:ef:7c:74:0b:15:d0:a6:7b:44:1c:21:60:e0:a6: 3b:ff:2b:4c:2e:39:c3:fc:08:ae:51:4f:04:ca:7f:ea:7a:29: e2:8f:7b:7d:da:84:69:ac:0b:fe:d3:42:d4:a9:c2:7f:29:1c: 5d:b9:56:a5:94:a5:e9:f9:4b:41:d8:55:03:34:a0:12:55:cd: 6c:1a:8a:e5:ba:9b:46:ab:26:1c:6a:cc:5d:6f:39:29:6c:0b: fa:49:63:2a:88:3c:38:62:4b:f8:2f:14:0e:8d:38:d0:a2:f1: 96:fe:a1:b6:76:51:b6:20:4b:24:94:e0:1d:b6:d4:87:d7:f8: 0a:2c:25:0c:33:f8:31:a0:2a:8b:b7:83:07:f8:f4:ab:ea:77: 94:e6:70:64:e5:5e:6d:94:64:69:f7:27:29:a7:8b:9b:56:dc: 54:8c:86:a8:57:7e:44:67:af:ad:fe:1f:16:79:f9:fd:46:f3: b5:64:cd:a1:63:4e:b9:a7:48:8b:aa:fd:a2:04:a1:1d:61:ce: 7e:c8:aa:4f:0a:63:ff:b8:8c:84:69:c4:63:3c:6c:04:fd:09: 9e:04:ac:5c:0d:2e:aa:09:90:18:bb:87:87:fe:a6:c4:12:f8: 2f:e7:5c:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8KbDR9JFktotPjZDBWNd8PCOm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTExMDMwMzE1NTBaFw0yNTExMDYxMjE3NTBaMDMxMTAvBgNV BAMTKEFERTFEQ0NDRTNBQkQ2MkNDMzUyNjI3OEMwRTZDRjJBMUQzQ0U1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t1oJHFfgYeNwWJ1QsaSjd9M9 BhNRSE6pcym+qQQbM+8B9iSIfzC73BbRuZ9vTeiznEpa1k3NbPpOGzoiHFrjnHCq Xbpen7icbmwQEHIt8tYgmzP7vEI+CgI+VkN9cqyPVx0s/hcE3RMs6un8kfQVkBEz yE1zay9Z1eVCjwddZBb3xgfzkdYdaBbikO7aELeWw94vPDKSvGjmN2WtM7tlxhvv zOJ5HEeVglrQbMby4DYD9wdZIm1TQuGXMA2HCV6QQtY4Ht+SfVVW4cKaXjpv020I LsoxGZ60weH8VHjqoitAyu5cb77NNYX8uOe8kKO0+k7ClILix/7tlU8g8qOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUreHczOOr1izDUmJ4wObPKh085fAwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm2FXw+yzMLnebchO8+FVC1OJWUxanvfHQL FdCme0QcIWDgpjv/K0wuOcP8CK5RTwTKf+p6KeKPe33ahGmsC/7TQtSpwn8pHF25 VqWUpen5S0HYVQM0oBJVzWwaiuW6m0arJhxqzF1vOSlsC/pJYyqIPDhiS/gvFA6N ONCi8Zb+obZ2UbYgSySU4B221IfX+AosJQwz+DGgKou3gwf49Kvqd5TmcGTlXm2U ZGn3Jymni5tW3FSMhqhXfkRnr63+HxZ5+f1G87VkzaFjTrmnSIuq/aIEoR1hzn7I qk8KY/+4jIRpxGM8bAT9CZ4ErFwNLqoJkBi7h4f+psQS+C/nXN4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:30 2025 by rpki-client