$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: FPllDnxhzKyDotxIQXbxpJKOuatToCOQWXZbG8kMlXc= Subject key identifier: D5:72:54:A3:CB:60:1F:56:B2:DA:D7:D9:2A:68:90:D3:B9:65:3B:AD Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 2A50A2081266747C29FA2656EACE47C2C3BC4260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 02:21:11 +0000 Manifest this update: Mon 03 Nov 2025 02:16:11 +0000 Manifest next update: Thu 06 Nov 2025 12:17:11 +0000 Files and hashes: 1: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 2: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 5: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: KhD6iq7G3TK7Th5kKZOWxZc0zue3UU2F6ROFiani46E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:50:a2:08:12:66:74:7c:29:fa:26:56:ea:ce:47:c2:c3:bc:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Nov 3 02:16:11 2025 GMT Not After : Nov 6 12:17:11 2025 GMT Subject: CN=D57254A3CB601F56B2DAD7D92A6890D3B9653BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:ff:2a:16:9e:e3:ce:e2:de:01:38:d1:e9: 05:a5:5c:2e:12:8f:25:0e:0a:6b:a8:78:26:03:8f: e8:60:c4:47:1f:bc:1c:c3:51:7d:da:a7:31:61:38: 7e:3c:a5:74:fe:d7:4c:53:37:1e:33:76:f9:28:0b: b8:56:97:32:66:4f:cf:f0:08:57:95:6c:75:ed:fc: 61:d7:34:ec:b9:3c:c8:00:e8:bd:25:cc:50:0b:44: c9:ae:83:bb:a4:e0:0d:33:44:65:d9:14:2d:24:2b: 60:49:69:25:1d:53:b2:be:da:81:7e:6e:ac:14:f1: 24:38:a6:54:a0:cf:2f:ac:c6:3c:23:62:a6:fb:6e: f7:03:41:5c:80:be:63:38:5d:20:90:59:6d:ee:14: c2:c9:a1:e9:4e:a8:73:21:d6:6a:a8:08:ea:9f:05: 5c:31:4a:09:67:bc:db:7c:ca:92:26:3a:2f:3f:f3: a5:d7:f5:84:f4:8d:56:a7:3f:1a:c1:65:50:e1:d7: 7a:ae:3c:a0:5c:2e:67:84:a9:9a:07:ce:d0:5c:7c: cc:97:0f:03:2e:29:0d:6b:31:49:d0:1b:11:03:97: bd:9f:f9:1b:f5:de:95:3c:b7:85:5f:67:fa:72:f1: f2:ce:69:d5:b0:e0:a8:33:55:ec:d9:c8:64:1b:7f: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:72:54:A3:CB:60:1F:56:B2:DA:D7:D9:2A:68:90:D3:B9:65:3B:AD X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:d7:47:09:50:5d:93:5e:e7:cc:cf:f1:e2:96:38:2f:9a: 6d:d8:57:8c:7a:9d:b4:bf:d3:44:35:8b:f2:1c:16:8d:9c:06: 63:0b:2c:df:cc:19:c4:c2:96:46:44:e8:cf:ad:60:1c:4f:c7: 7f:d9:63:f2:26:4f:69:a6:40:cb:2d:34:c9:85:6e:75:96:05: 81:56:54:d8:a0:c3:cb:a5:e0:8a:54:00:77:17:5b:93:49:38: 0e:ca:1a:26:8a:51:8f:c0:34:0d:81:68:3e:6d:a5:f0:79:fa: af:8b:db:9f:c4:f7:47:b5:d5:8b:9a:f9:f3:ef:8a:fd:c2:07: b2:76:a7:4f:61:e5:fe:48:6a:4f:e8:73:13:05:86:c3:5f:e4: ed:b1:a3:66:61:b2:d7:bf:24:f5:98:d1:15:35:ad:3b:07:b1: 1f:c7:4b:f2:69:11:0b:9c:31:bf:04:11:84:8f:b7:66:fc:15: 96:ba:e8:fa:cc:4d:72:a6:9a:35:74:fa:60:7f:1a:95:0a:43: a8:3e:ef:20:ca:f7:b9:09:82:2e:f0:f6:30:fb:a5:c8:19:3c: fc:24:2f:ff:24:14:5d:64:7c:00:65:c8:f2:f2:19:64:fc:71: 8c:f3:e1:1b:c1:9f:a6:cf:99:c0:cc:69:c5:cf:11:10:8d:87: 97:8b:31:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlCiCBJmdHwp+iZW6s5HwsO8QmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTExMDMwMjE2MTFaFw0yNTExMDYxMjE3MTFaMDMxMTAvBgNV BAMTKEQ1NzI1NEEzQ0I2MDFGNTZCMkRBRDdEOTJBNjg5MEQzQjk2NTNCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkv8qFp7jzuLeATjR6QWlXC4S jyUOCmuoeCYDj+hgxEcfvBzDUX3apzFhOH48pXT+10xTNx4zdvkoC7hWlzJmT8/w CFeVbHXt/GHXNOy5PMgA6L0lzFALRMmug7uk4A0zRGXZFC0kK2BJaSUdU7K+2oF+ bqwU8SQ4plSgzy+sxjwjYqb7bvcDQVyAvmM4XSCQWW3uFMLJoelOqHMh1mqoCOqf BVwxSglnvNt8ypImOi8/86XX9YT0jVanPxrBZVDh13quPKBcLmeEqZoHztBcfMyX DwMuKQ1rMUnQGxEDl72f+Rv13pU8t4VfZ/py8fLOadWw4KgzVezZyGQbfyl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XJUo8tgH1ay2tfZKmiQ07llO60wHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrW10cJUF2TXufMz/Hiljgvmm3YV4x6nbS/ 00Q1i/IcFo2cBmMLLN/MGcTClkZE6M+tYBxPx3/ZY/ImT2mmQMstNMmFbnWWBYFW VNigw8ul4IpUAHcXW5NJOA7KGiaKUY/ANA2BaD5tpfB5+q+L25/E90e11Yua+fPv iv3CB7J2p09h5f5Iak/ocxMFhsNf5O2xo2Zhste/JPWY0RU1rTsHsR/HS/JpEQuc Mb8EEYSPt2b8FZa66PrMTXKmmjV0+mB/GpUKQ6g+7yDK97kJgi7w9jD7pcgZPPwk L/8kFF1kfABlyPLyGWT8cYzz4RvBn6bPmcDMacXPERCNh5eLMXU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:22 2025 by rpki-client