$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: 4y5TVHbNX2j5CYylC0yWrK+KxNy4421lvBwVs7YEzoE= Subject key identifier: B6:A6:7D:C5:DB:B7:B8:9D:72:42:A3:A8:EB:8D:18:2D:DC:99:E2:3C Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 4620208ABD22A3C906E745181EBA08C5C9AD885E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: FC Signing time: Mon 03 Nov 2025 12:31:41 +0000 Manifest this update: Mon 03 Nov 2025 12:26:41 +0000 Manifest next update: Thu 06 Nov 2025 23:41:41 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: Lw3D94Wl6dJw+cZuFP9immL8BY1Q1AmiQnFLRw/9dgA=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:20:20:8a:bd:22:a3:c9:06:e7:45:18:1e:ba:08:c5:c9:ad:88:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Nov 3 12:26:41 2025 GMT Not After : Nov 6 23:41:41 2025 GMT Subject: CN=B6A67DC5DBB7B89D7242A3A8EB8D182DDC99E23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:a7:14:59:42:01:12:24:91:45:e9:ac:3f: bb:36:18:86:26:00:c6:dd:4b:73:8d:89:ea:c2:5f: 5c:4b:38:9f:e2:ca:dd:6f:3b:76:4d:ac:49:db:48: 7e:75:b3:eb:c0:a5:27:91:76:40:c6:9c:8b:ec:46: 24:f2:cf:d8:a9:c7:40:88:e6:2a:67:45:f3:87:a1: c0:09:fd:a2:3a:e7:40:e0:78:31:20:86:73:28:6d: 47:37:ca:98:9a:9d:ee:7d:6a:d3:ec:0b:d2:11:4d: 06:b6:c2:c3:25:14:1f:f6:13:53:d4:bb:a2:92:15: 73:88:be:de:c0:cd:30:26:7e:3c:09:d5:04:f4:e5: d3:9c:03:e3:96:fb:d8:96:9d:8e:89:a6:75:4c:12: 99:17:3e:98:92:1c:71:df:f0:67:24:b7:f8:4c:d0: 0d:1b:50:59:6c:31:43:0b:31:ad:51:f2:42:36:b7: 44:14:85:15:76:12:7b:6d:08:51:35:bb:0a:0c:4d: 9e:87:a3:92:df:ee:47:14:67:79:e3:12:4c:0c:ee: 71:44:43:09:cb:8b:63:a4:58:f9:1a:1b:aa:7a:3e: 54:bf:71:2b:21:e6:78:5f:60:b2:63:33:87:d1:a8: aa:ed:a1:b8:66:24:3b:52:89:14:63:e9:20:17:f9: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A6:7D:C5:DB:B7:B8:9D:72:42:A3:A8:EB:8D:18:2D:DC:99:E2:3C X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:21:26:18:6e:5d:58:43:49:af:c8:67:3c:b5:24:7c:9b:6d: 41:31:b4:e0:05:a9:35:b8:5c:ff:c8:45:33:f2:a4:ac:8f:24: 44:7b:3f:20:93:de:50:f5:3f:60:4f:c0:2d:e5:ce:f0:4d:48: 93:3d:82:49:20:a5:fd:e7:15:fc:87:2c:eb:f2:f6:c0:cc:28: 53:2e:3b:d2:2b:c8:81:d2:75:bb:81:89:e3:ba:cf:2d:7f:78: 8a:94:2d:e0:ac:21:d3:46:4f:78:97:3a:38:0f:2d:87:71:82: 42:40:cc:c4:7f:21:3f:85:cf:c8:04:5b:1b:4f:45:31:ef:39: 40:59:77:b4:0f:39:2f:85:29:10:c7:b9:f4:48:8b:6d:b8:8e: 3a:3d:ff:8b:60:bf:65:96:db:5f:d7:83:c9:2e:f8:a2:7f:aa: 48:7c:d3:c6:44:16:01:12:84:b1:b1:c0:79:8e:ca:36:09:00: 94:bf:3c:1c:79:68:2b:b6:b3:38:be:af:3c:6c:ad:ac:89:f5: f9:7c:d5:76:d7:0f:d3:df:c5:49:b0:6e:13:71:d1:ea:6a:a8: 7e:b4:09:75:cf:7b:ca:50:a5:d6:3b:81:81:f5:37:39:4e:e0: de:0d:c1:6a:fa:32:ba:5b:44:46:b1:a0:a6:24:15:57:0d:29: 85:1b:b3:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiAgir0io8kG50UYHroIxcmtiF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTExMDMxMjI2NDFaFw0yNTExMDYyMzQxNDFaMDMxMTAvBgNV BAMTKEI2QTY3REM1REJCN0I4OUQ3MjQyQTNBOEVCOEQxODJEREM5OUUyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmqcUWUIBEiSRRemsP7s2GIYm AMbdS3ONierCX1xLOJ/iyt1vO3ZNrEnbSH51s+vApSeRdkDGnIvsRiTyz9ipx0CI 5ipnRfOHocAJ/aI650DgeDEghnMobUc3ypiane59atPsC9IRTQa2wsMlFB/2E1PU u6KSFXOIvt7AzTAmfjwJ1QT05dOcA+OW+9iWnY6JpnVMEpkXPpiSHHHf8Gckt/hM 0A0bUFlsMUMLMa1R8kI2t0QUhRV2EnttCFE1uwoMTZ6Ho5Lf7kcUZ3njEkwM7nFE QwnLi2OkWPkaG6p6PlS/cSsh5nhfYLJjM4fRqKrtobhmJDtSiRRj6SAX+c6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqZ9xdu3uJ1yQqOo640YLdyZ4jwwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIhJhhuXVhDSa/IZzy1JHybbUExtOAFqTW4 XP/IRTPypKyPJER7PyCT3lD1P2BPwC3lzvBNSJM9gkkgpf3nFfyHLOvy9sDMKFMu O9IryIHSdbuBieO6zy1/eIqULeCsIdNGT3iXOjgPLYdxgkJAzMR/IT+Fz8gEWxtP RTHvOUBZd7QPOS+FKRDHufRIi224jjo9/4tgv2WW21/Xg8ku+KJ/qkh808ZEFgES hLGxwHmOyjYJAJS/PBx5aCu2szi+rzxsrayJ9fl81XbXD9PfxUmwbhNx0epqqH60 CXXPe8pQpdY7gYH1NzlO4N4NwWr6MrpbREaxoKYkFVcNKYUbs+g= -----END CERTIFICATE-----Generated at Wed Nov 5 14:39:54 2025 by rpki-client