$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: CHrVqlXQDHki3uoa93MRBHVS6N3KAijUug5AWcz8DJg= Subject key identifier: 9B:14:BE:D7:D6:28:C6:DA:F3:0D:59:40:CA:39:AD:4F:C2:C6:A6:D9 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 65FFC8080B4C6A55389B688DAA1E884692471315 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0525 Signing time: Mon 03 Nov 2025 20:21:43 +0000 Manifest this update: Mon 03 Nov 2025 20:16:43 +0000 Manifest next update: Thu 06 Nov 2025 21:19:43 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: 3U1JGW07gVMN8xAGL56QeJPSv/RW9giSqTCmFFrIWFk=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ff:c8:08:0b:4c:6a:55:38:9b:68:8d:aa:1e:88:46:92:47:13:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Nov 3 20:16:43 2025 GMT Not After : Nov 6 21:19:43 2025 GMT Subject: CN=9B14BED7D628C6DAF30D5940CA39AD4FC2C6A6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:c0:ce:04:16:4e:4a:96:61:33:06:b7:53: 5b:8d:fe:5e:52:d2:51:7b:e2:77:2a:fc:80:e2:be: 11:73:bc:07:6d:33:69:23:3d:ca:2c:5f:6d:87:7f: 76:ca:09:6b:4a:79:5d:8d:77:bb:43:a4:ad:6f:f4: 71:f3:76:ad:74:e3:c6:24:82:55:7d:52:3b:45:77: c5:b6:6a:4a:48:1f:1a:3a:aa:61:43:3c:5a:28:84: 90:bb:b1:eb:13:2b:0c:6d:a3:a4:9e:6a:9a:c0:77: 81:68:52:90:a8:0b:fd:55:9b:df:75:e9:ad:8a:69: 21:3a:70:56:34:58:f0:b2:f2:c0:5d:44:f0:39:3f: 59:91:9e:b0:b8:c9:c6:a3:45:e8:d6:02:5a:9b:56: 56:04:b0:47:fa:68:91:cc:e8:29:78:c5:80:c8:3f: 56:e4:d4:a1:bb:c1:50:20:83:ec:0e:9b:2a:ff:0c: 8d:22:73:26:84:44:06:e7:a6:83:e6:6d:a2:76:7b: 61:b0:33:64:9a:bf:7a:70:86:5d:67:37:84:43:c8: 99:66:e7:12:af:7a:c6:04:d9:bc:ca:e5:8b:db:db: b6:6a:9c:92:35:20:85:50:d9:e7:b9:9c:01:7d:c3: 29:96:55:5d:df:9d:95:a2:db:f2:6f:1d:dc:6c:2f: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:BE:D7:D6:28:C6:DA:F3:0D:59:40:CA:39:AD:4F:C2:C6:A6:D9 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d5:e3:4d:e3:e4:72:31:83:1d:ce:cc:c2:b1:4d:40:75:92: ad:49:88:21:d6:d6:46:af:0e:a5:48:8c:54:14:d3:dc:5f:6f: cd:84:d6:6f:3c:41:6c:49:f3:02:bc:d0:6c:c7:1e:7e:c4:91: ea:f2:59:5c:ac:13:94:20:c9:3f:8d:ee:b3:33:86:86:01:e7: dc:7a:ee:55:ca:54:d6:d2:2d:4c:b0:5c:19:06:a9:7f:8e:e8: a4:88:4a:e0:aa:45:9e:27:f8:c3:bf:70:8a:84:21:78:54:f7: f5:6e:cc:a6:2b:ef:dd:cd:ae:ed:19:dd:c4:89:49:d4:ac:cd: d0:37:ab:5c:c2:cd:04:36:f7:0f:23:bb:e8:8a:97:c8:e8:a5: d0:fe:a1:72:5a:b5:85:20:86:10:70:69:c7:c9:b7:fc:11:30: 8a:12:79:91:69:ae:30:28:68:84:88:81:3f:27:12:b3:f1:0c: 8c:2d:df:48:76:56:f3:5c:dc:99:b0:82:d8:9c:ca:01:07:ed: 4d:cf:8e:72:c9:8e:d6:03:f8:f3:80:81:95:d3:52:ca:74:0f: cd:25:f9:12:dd:8b:ba:8f:65:11:e8:53:aa:5a:93:4b:30:fb: e1:4d:4c:07:87:de:a2:bf:34:10:63:57:30:73:33:b7:48:6d: c6:d4:44:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZf/ICAtMalU4m2iNqh6IRpJHExUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTExMDMyMDE2NDNaFw0yNTExMDYyMTE5NDNaMDMxMTAvBgNV BAMTKDlCMTRCRUQ3RDYyOEM2REFGMzBENTk0MENBMzlBRDRGQzJDNkE2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvcDOBBZOSpZhMwa3U1uN/l5S 0lF74ncq/IDivhFzvAdtM2kjPcosX22Hf3bKCWtKeV2Nd7tDpK1v9HHzdq1048Yk glV9UjtFd8W2akpIHxo6qmFDPFoohJC7sesTKwxto6SeaprAd4FoUpCoC/1Vm991 6a2KaSE6cFY0WPCy8sBdRPA5P1mRnrC4ycajRejWAlqbVlYEsEf6aJHM6Cl4xYDI P1bk1KG7wVAgg+wOmyr/DI0icyaERAbnpoPmbaJ2e2GwM2Sav3pwhl1nN4RDyJlm 5xKvesYE2bzK5Yvb27ZqnJI1IIVQ2ee5nAF9wymWVV3fnZWi2/JvHdxsL1sbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmxS+19YoxtrzDVlAyjmtT8LGptkwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLV403j5HIxgx3OzMKxTUB1kq1JiCHW1kav DqVIjFQU09xfb82E1m88QWxJ8wK80GzHHn7EkeryWVysE5QgyT+N7rMzhoYB59x6 7lXKVNbSLUywXBkGqX+O6KSISuCqRZ4n+MO/cIqEIXhU9/VuzKYr793Nru0Z3cSJ SdSszdA3q1zCzQQ29w8ju+iKl8jopdD+oXJatYUghhBwacfJt/wRMIoSeZFprjAo aISIgT8nErPxDIwt30h2VvNc3JmwgticygEH7U3PjnLJjtYD+POAgZXTUsp0D80l +RLdi7qPZRHoU6pak0sw++FNTAeH3qK/NBBjVzBzM7dIbcbUREE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:59 2025 by rpki-client