$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: 8aOLaK8ZumkubEQbn85/SElI/+UWg8g/IBOpoXIEH8w= Subject key identifier: D8:6C:90:E2:41:B3:17:4A:D9:59:6F:C2:52:C6:43:F1:A0:C6:5B:75 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 386F62846C928E78B1AE92ED170057BFA200F46E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04A5 Signing time: Sun 02 Nov 2025 11:42:09 +0000 Manifest this update: Sun 02 Nov 2025 11:37:09 +0000 Manifest next update: Wed 05 Nov 2025 20:00:09 +0000 Files and hashes: 1: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 2: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 3: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: ALTZV4kZt/ugBS51PMMPJCkD+fC8e2YOd+c55z6wBUk=) 4: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 5: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6f:62:84:6c:92:8e:78:b1:ae:92:ed:17:00:57:bf:a2:00:f4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Nov 2 11:37:09 2025 GMT Not After : Nov 5 20:00:09 2025 GMT Subject: CN=D86C90E241B3174AD9596FC252C643F1A0C65B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:67:b2:a3:14:bf:88:74:c4:64:de:2c:f3: fe:73:3e:c2:6b:42:05:90:c2:7b:35:31:94:d2:c8: ff:be:6d:2c:8e:bc:4e:4e:96:1d:e3:70:21:b2:43: d1:3b:38:4f:bb:b4:14:49:a8:56:f2:56:5a:5e:36: a5:6c:c2:da:38:22:c5:e6:29:25:4d:ab:2d:52:e0: 87:a3:ab:67:54:1d:e9:30:9a:e0:07:27:ca:d7:6a: 68:43:2f:b5:41:a8:8f:ad:3f:93:6f:2a:68:48:2b: 14:30:55:59:68:8a:ff:a1:e9:30:28:64:f8:3c:e1: 40:de:c4:28:37:99:67:d3:bf:5c:56:b4:c6:97:c9: d0:30:55:5b:5c:c8:27:bc:2e:fa:98:1f:63:3e:2f: 92:e1:9f:95:97:41:ee:97:a5:3a:61:a8:96:07:d9: 1b:5e:0a:24:2f:c5:06:99:f6:e7:07:15:a8:b9:ea: 5a:e7:78:58:5b:ba:37:52:22:2f:1c:b6:f0:7a:38: ff:18:dd:47:fd:83:cb:ef:41:c4:48:ae:c8:55:41: 26:b0:8a:71:58:7f:b9:70:d4:e8:34:44:c9:0b:c0: ce:a9:da:a9:f1:f0:24:6f:39:98:d9:cc:8a:60:2c: 84:0c:17:8b:8a:a3:bf:a3:fc:a3:84:30:9b:ab:39: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:90:E2:41:B3:17:4A:D9:59:6F:C2:52:C6:43:F1:A0:C6:5B:75 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1b:1d:c8:ea:ae:29:d8:f1:06:34:03:3b:c8:96:26:ee:53: d3:7c:45:09:42:05:56:87:01:ce:33:28:f8:65:68:4d:29:9c: b9:57:59:00:db:32:fb:72:9e:07:94:f4:26:03:a8:50:84:cd: 48:b3:f3:8e:c3:88:0b:18:8b:f5:97:25:85:45:3a:32:23:41: 94:1d:75:91:6e:27:cf:24:f2:a4:43:32:ed:74:95:14:64:4b: 53:ab:04:47:4c:77:cc:66:c7:9e:1a:35:a2:c0:cb:34:22:80: 7f:82:d0:62:b6:0e:3d:16:95:64:1d:77:0c:ed:a5:87:73:b7: 9d:f3:ac:83:f6:05:af:24:24:e0:ad:ca:8a:e6:8c:df:1a:ab: 52:33:4a:09:4c:30:40:b3:9d:64:76:0a:b6:bc:cf:a7:97:0e: e9:76:80:fb:58:12:5e:31:ea:de:0b:87:ba:4c:07:96:1b:37: 42:60:cb:c9:b6:1f:cc:83:93:f7:c0:09:9b:bb:1d:4d:0b:96: 05:6b:26:cb:81:ae:c0:58:cb:a3:40:14:44:84:4e:e9:bc:27: f1:8b:16:46:a2:e7:df:52:dd:6c:53:cc:55:9b:93:dc:d8:38: 96:4a:3a:ce:34:c7:31:81:54:ef:68:90:ec:2e:e5:b3:47:a7: 7a:b0:0f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOG9ihGySjnixrpLtFwBXv6IA9G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTExMDIxMTM3MDlaFw0yNTExMDUyMDAwMDlaMDMxMTAvBgNV BAMTKEQ4NkM5MEUyNDFCMzE3NEFEOTU5NkZDMjUyQzY0M0YxQTBDNjVCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDneGeyoxS/iHTEZN4s8/5zPsJr QgWQwns1MZTSyP++bSyOvE5Olh3jcCGyQ9E7OE+7tBRJqFbyVlpeNqVswto4IsXm KSVNqy1S4Iejq2dUHekwmuAHJ8rXamhDL7VBqI+tP5NvKmhIKxQwVVloiv+h6TAo ZPg84UDexCg3mWfTv1xWtMaXydAwVVtcyCe8LvqYH2M+L5Lhn5WXQe6XpTphqJYH 2RteCiQvxQaZ9ucHFai56lrneFhbujdSIi8ctvB6OP8Y3Uf9g8vvQcRIrshVQSaw inFYf7lw1Og0RMkLwM6p2qnx8CRvOZjZzIpgLIQMF4uKo7+j/KOEMJurOWNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GyQ4kGzF0rZWW/CUsZD8aDGW3UwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsbHcjqrinY8QY0AzvIlibuU9N8RQlCBVaH Ac4zKPhlaE0pnLlXWQDbMvtyngeU9CYDqFCEzUiz847DiAsYi/WXJYVFOjIjQZQd dZFuJ88k8qRDMu10lRRkS1OrBEdMd8xmx54aNaLAyzQigH+C0GK2Dj0WlWQddwzt pYdzt53zrIP2Ba8kJOCtyormjN8aq1IzSglMMECznWR2Cra8z6eXDul2gPtYEl4x 6t4Lh7pMB5YbN0Jgy8m2H8yDk/fACZu7HU0LlgVrJsuBrsBYy6NAFESETum8J/GL Fkai599S3WxTzFWbk9zYOJZKOs40xzGBVO9okOwu5bNHp3qwD78= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:35 2025 by rpki-client