$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: Rq9HC0SZOqksd3DEqkxPmoMpaQ8Ic9vUQEqigm4U9pI= Subject key identifier: 78:CB:99:4C:1B:98:33:C8:E6:ED:F5:15:CA:3C:2D:C1:B3:47:46:7C Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 1C4DF13D1095D311F6A94972B6F94DC899CE0F40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01F2 Signing time: Sun 02 Nov 2025 18:30:45 +0000 Manifest this update: Sun 02 Nov 2025 18:25:45 +0000 Manifest next update: Wed 05 Nov 2025 21:55:45 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: CEku57aOOudGUgNF9cAe2m90BhL2cMjCfs7zNLRe8uM=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:f1:3d:10:95:d3:11:f6:a9:49:72:b6:f9:4d:c8:99:ce:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Nov 2 18:25:45 2025 GMT Not After : Nov 5 21:55:45 2025 GMT Subject: CN=78CB994C1B9833C8E6EDF515CA3C2DC1B347467C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:2b:28:32:4d:a6:43:8d:4c:d1:1d:44:16: 6c:bf:dc:5a:b9:5b:a3:d7:33:1e:77:d6:00:0e:f2: 13:54:fc:4f:a8:81:07:e2:30:4c:ef:b0:0c:3b:ce: 09:bf:56:33:45:25:db:ba:39:4e:57:c9:0f:b1:c2: b5:80:4b:ff:f6:b8:d0:fd:f6:6a:5f:e4:df:f1:52: 23:6a:ca:56:50:97:24:ab:81:78:80:81:8e:13:5a: 0b:5f:f4:a8:19:1a:25:a8:a6:35:c0:4d:e7:fa:b2: f1:ab:7c:99:b0:c4:6c:62:d3:55:d1:6d:7e:5f:01: a2:f1:33:ed:cf:38:4a:02:85:f7:d4:53:8e:0e:9f: ed:34:d7:62:d8:77:3f:07:29:6d:69:72:25:4e:da: a9:a6:f6:fe:08:cc:dc:bd:68:e3:e2:d3:c8:a9:57: b4:61:68:63:7e:69:c3:60:dd:61:2c:77:9c:e3:8b: 54:c9:78:48:ac:08:f0:84:db:f3:bc:c0:21:7e:61: d8:b2:6e:87:81:53:f6:69:e4:f8:1f:15:bb:74:3e: 09:37:83:fb:32:21:ee:29:c3:e1:17:8d:af:ea:fe: 0a:1e:61:f3:74:94:03:5a:a8:1b:df:31:3b:3c:fe: 61:08:2a:22:c8:d5:da:cd:65:82:e0:b1:a0:bb:69: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CB:99:4C:1B:98:33:C8:E6:ED:F5:15:CA:3C:2D:C1:B3:47:46:7C X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:42:b8:90:dc:ca:dd:23:ea:92:96:58:65:a3:e8:f9:89: 4b:30:e5:13:12:cc:d7:12:b1:20:04:d9:6d:87:5a:48:75:7c: 2b:ec:36:8c:be:b7:12:f5:06:e8:68:75:f5:27:72:27:93:35: ff:2f:da:53:90:db:14:18:91:bb:2a:2c:42:b9:0d:32:44:13: a8:54:60:fc:b5:0b:db:8b:f3:69:07:f7:2f:67:ff:2e:4c:ce: a6:2c:b1:46:fa:35:61:56:42:4c:7d:c8:92:99:ac:7c:3b:0e: 1e:64:8b:b0:f6:ca:d2:02:d6:77:f5:2e:28:51:e6:bc:0d:5e: 4b:7b:4a:28:bd:67:85:64:e6:c0:1f:9a:b3:db:75:c8:dd:c4: 09:78:b8:12:e4:3d:cf:cc:71:be:66:bd:de:1a:cc:e2:47:c2: de:7f:2d:97:44:e2:ad:52:aa:86:8a:c1:8c:52:4b:f7:00:71: 26:b0:d0:d8:9d:c5:3a:96:36:94:78:14:6f:4e:8e:ef:72:78: 49:1f:03:28:1d:80:9b:6f:70:79:2b:c3:ee:4f:4e:34:0f:ec: e3:02:7b:4f:09:8d:f7:c3:d8:ca:aa:0e:5f:9c:aa:11:ce:43: 28:10:2f:c8:d7:81:51:04:71:7e:58:2e:f8:b3:d8:a6:8d:ed: 81:fb:9a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHE3xPRCV0xH2qUlytvlNyJnOD0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTExMDIxODI1NDVaFw0yNTExMDUyMTU1NDVaMDMxMTAvBgNV BAMTKDc4Q0I5OTRDMUI5ODMzQzhFNkVERjUxNUNBM0MyREMxQjM0NzQ2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpCsoMk2mQ41M0R1EFmy/3Fq5 W6PXMx531gAO8hNU/E+ogQfiMEzvsAw7zgm/VjNFJdu6OU5XyQ+xwrWAS//2uND9 9mpf5N/xUiNqylZQlySrgXiAgY4TWgtf9KgZGiWopjXATef6svGrfJmwxGxi01XR bX5fAaLxM+3POEoChffUU44On+0012LYdz8HKW1pciVO2qmm9v4IzNy9aOPi08ip V7RhaGN+acNg3WEsd5zji1TJeEisCPCE2/O8wCF+YdiyboeBU/Zp5PgfFbt0Pgk3 g/syIe4pw+EXja/q/goeYfN0lANaqBvfMTs8/mEIKiLI1drNZYLgsaC7abUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMuZTBuYM8jm7fUVyjwtwbNHRnwwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3+QriQ3MrdI+qSllhlo+j5iUsw5RMSzNcS sSAE2W2HWkh1fCvsNoy+txL1BuhodfUncieTNf8v2lOQ2xQYkbsqLEK5DTJEE6hU YPy1C9uL82kH9y9n/y5MzqYssUb6NWFWQkx9yJKZrHw7Dh5ki7D2ytIC1nf1LihR 5rwNXkt7Sii9Z4Vk5sAfmrPbdcjdxAl4uBLkPc/Mcb5mvd4azOJHwt5/LZdE4q1S qoaKwYxSS/cAcSaw0NidxTqWNpR4FG9Oju9yeEkfAygdgJtvcHkrw+5PTjQP7OMC e08JjffD2MqqDl+cqhHOQygQL8jXgVEEcX5YLviz2KaN7YH7mik= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:56 2025 by rpki-client