$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: vnxGRkpxY3td3jK7H/H+2vkAZNyz848ky3lIZ2N5MgY= Subject key identifier: 3D:16:BD:63:5E:96:28:D1:68:2C:07:0B:39:23:FC:23:28:33:05:97 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 520F048BEAEC06A1C6B13AB012675C9B5B753252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: C9 Signing time: Sun 02 Nov 2025 22:11:09 +0000 Manifest this update: Sun 02 Nov 2025 22:06:09 +0000 Manifest next update: Thu 06 Nov 2025 09:30:09 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: plzCDLEbdS6SspAbWPopy2uTd9Nm4jc7qkJT9ykN1V0=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0f:04:8b:ea:ec:06:a1:c6:b1:3a:b0:12:67:5c:9b:5b:75:32:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Nov 2 22:06:09 2025 GMT Not After : Nov 6 09:30:09 2025 GMT Subject: CN=3D16BD635E9628D1682C070B3923FC2328330597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:f5:16:65:04:b0:59:28:e5:24:81:93:3d: b6:7b:54:d2:95:b0:f0:36:57:9a:5d:68:ce:e6:7d: d3:e0:25:94:76:fd:d7:68:0d:0b:0e:1f:48:0c:16: 87:1d:58:1e:f4:14:b8:8b:29:d4:76:3e:93:4a:9f: 06:e4:67:a9:88:46:f1:8a:d0:e9:93:5d:71:99:00: 66:e3:05:a2:fb:05:1b:38:96:2d:53:a2:e4:40:3a: 2e:1c:57:6d:88:2f:c9:31:91:3e:38:4d:53:11:15: 28:ec:61:7f:d9:f9:29:5a:ac:d1:e6:0e:15:15:7c: fd:30:40:f9:34:ec:ce:b4:2e:4b:77:c8:cc:4b:c2: fe:1b:22:52:ca:80:dc:10:92:2d:c7:e9:7d:01:8b: cb:5c:8b:85:88:2b:5b:c5:61:7a:d9:4e:76:d3:85: 78:a9:f8:4c:bf:f2:44:7d:02:a3:58:60:cd:88:b1: 3f:8f:a6:7a:1b:2b:fe:dc:e5:9e:8e:fd:75:90:47: 77:66:fc:57:41:61:ee:23:65:f6:66:11:3d:d6:43: ce:a2:8f:eb:57:91:5d:ba:b4:92:bf:8b:c3:4a:f7: 1b:7a:2e:c4:2e:90:b1:c7:e4:c0:ce:75:f5:85:c2: 74:80:e4:3a:ab:ba:dc:55:2b:ef:6d:77:78:e9:44: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:BD:63:5E:96:28:D1:68:2C:07:0B:39:23:FC:23:28:33:05:97 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5d:6d:fc:30:8e:a6:00:8e:94:27:ca:ea:b3:96:14:1f:59: 98:25:2d:3c:dc:07:0b:2c:42:1b:6c:4c:7a:91:87:37:94:cd: 45:b2:72:d2:d8:2c:70:3f:89:43:c2:3e:a7:5c:18:e7:95:e3: a7:1c:fb:80:a8:85:8e:ab:a7:e5:f3:dd:c9:98:a6:62:1a:c0: cb:43:d8:77:70:6f:ea:ba:cf:af:63:4e:21:10:9e:8f:d6:2b: e0:5b:0d:4e:17:60:2d:38:ef:93:5a:e9:9e:c1:d0:f7:f6:d6: a7:39:c2:0e:48:e4:21:6d:26:ef:0c:ea:0e:84:3a:fd:11:93: 1b:8c:bd:eb:97:2f:a7:eb:1c:54:48:75:c6:15:5b:31:d9:09: 03:d9:ae:b6:d5:17:2a:8f:8c:74:da:93:75:b0:7a:b3:ca:e3: 4d:c4:6c:16:9f:05:6a:83:9f:76:03:ab:c3:f2:cb:06:ff:57: 7d:87:e4:ab:5e:7f:b0:c1:a2:74:d1:d7:ca:d9:bd:2b:ab:24: 9a:8c:80:89:b7:dc:6e:80:f6:8f:9b:75:d7:83:81:c7:5c:72: 04:36:4c:49:c2:a5:ed:be:96:d8:03:72:9c:41:fd:f5:1f:50: 44:28:f9:e9:8d:8f:5a:35:b3:81:09:14:22:dd:b7:e3:b8:54: 19:65:f3:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUg8Ei+rsBqHGsTqwEmdcm1t1MlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTExMDIyMjA2MDlaFw0yNTExMDYwOTMwMDlaMDMxMTAvBgNV BAMTKDNEMTZCRDYzNUU5NjI4RDE2ODJDMDcwQjM5MjNGQzIzMjgzMzA1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5fUWZQSwWSjlJIGTPbZ7VNKV sPA2V5pdaM7mfdPgJZR2/ddoDQsOH0gMFocdWB70FLiLKdR2PpNKnwbkZ6mIRvGK 0OmTXXGZAGbjBaL7BRs4li1TouRAOi4cV22IL8kxkT44TVMRFSjsYX/Z+SlarNHm DhUVfP0wQPk07M60Lkt3yMxLwv4bIlLKgNwQki3H6X0Bi8tci4WIK1vFYXrZTnbT hXip+Ey/8kR9AqNYYM2IsT+PpnobK/7c5Z6O/XWQR3dm/FdBYe4jZfZmET3WQ86i j+tXkV26tJK/i8NK9xt6LsQukLHH5MDOdfWFwnSA5DqrutxVK+9td3jpRPAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRa9Y16WKNFoLAcLOSP8IygzBZcwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpdbfwwjqYAjpQnyuqzlhQfWZglLTzcBwss QhtsTHqRhzeUzUWyctLYLHA/iUPCPqdcGOeV46cc+4CohY6rp+Xz3cmYpmIawMtD 2Hdwb+q6z69jTiEQno/WK+BbDU4XYC0475Na6Z7B0Pf21qc5wg5I5CFtJu8M6g6E Ov0RkxuMveuXL6frHFRIdcYVWzHZCQPZrrbVFyqPjHTak3WwerPK403EbBafBWqD n3YDq8Pyywb/V32H5Ktef7DBonTR18rZvSurJJqMgIm33G6A9o+bddeDgcdccgQ2 TEnCpe2+ltgDcpxB/fUfUEQo+emNj1o1s4EJFCLdt+O4VBll83s= -----END CERTIFICATE-----Generated at Wed Nov 5 08:17:59 2025 by rpki-client