$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: 1lB+5T5qGQ0gjSEJNahMdh2WTJhlqF96ahfBsoFYCEU= Subject key identifier: D9:41:B1:EC:8A:86:50:90:0D:B1:46:0A:6F:05:A6:75:F2:60:14:81 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 0562F67129F9438466E335FC386B1FFD7CC610CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 051B Signing time: Mon 03 Nov 2025 23:10:43 +0000 Manifest this update: Mon 03 Nov 2025 23:05:43 +0000 Manifest next update: Fri 07 Nov 2025 09:34:43 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: 28Ry2gmKBXDeISxCUPcolEHlmj2vLA/5NFYoLSQDt0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:62:f6:71:29:f9:43:84:66:e3:35:fc:38:6b:1f:fd:7c:c6:10:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Nov 3 23:05:43 2025 GMT Not After : Nov 7 09:34:43 2025 GMT Subject: CN=D941B1EC8A8650900DB1460A6F05A675F2601481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:27:30:76:64:1c:ed:5a:02:f1:ef:55:ac: 8a:68:7e:31:8b:74:4e:ab:4b:5c:9a:3f:69:81:dc: 5c:8a:70:dc:74:02:6a:0d:34:72:dd:97:95:f5:1a: 9d:63:07:9d:64:bf:ea:e5:78:80:25:b2:b1:b7:4f: 84:21:8b:c2:3d:c9:b7:f8:16:f4:12:6f:35:f8:38: fa:44:18:f2:b0:36:cf:a2:fe:8b:99:de:85:ab:40: 01:b1:b3:70:ef:1f:64:e0:02:55:04:8f:15:fb:10: a7:94:b8:65:c7:6b:48:3b:06:69:ed:98:c9:95:dc: 05:48:2a:4a:e4:8b:5c:e0:72:c9:31:b3:39:ef:0f: 77:7c:bc:9f:ae:21:9b:ff:97:48:d1:22:77:ca:48: 10:d1:3d:92:62:fc:82:04:ac:41:47:bb:4b:71:c2: db:25:17:26:e9:ba:4f:1c:9c:c1:1c:49:8d:fa:49: 62:87:0a:08:60:81:5f:6b:ad:3d:46:f5:8f:88:3b: 52:30:97:69:c9:9c:f5:86:ed:50:fa:7b:dd:6a:c5: 0c:93:ca:f5:ee:df:76:85:82:0a:b9:a8:e4:81:13: 3c:92:71:6c:a7:f0:44:e2:5f:ea:3a:59:c5:84:56: 3b:a7:8f:3e:54:40:20:f4:81:85:20:17:5e:98:f8: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:41:B1:EC:8A:86:50:90:0D:B1:46:0A:6F:05:A6:75:F2:60:14:81 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fd:29:a3:01:bc:7a:73:7d:04:c9:e5:8c:4b:d1:90:a1:77: 1e:fc:ee:df:24:23:59:b5:62:20:8e:8d:d7:53:80:cd:0f:ba: 20:da:eb:aa:60:93:1d:d6:20:06:a9:e2:62:e2:46:6f:04:b4: 18:35:43:d2:c5:ed:4d:60:20:16:7a:5f:2f:d6:cf:39:c1:e0: 24:2e:0d:5f:af:bc:ce:e3:46:d8:d2:49:14:2a:ef:77:6a:e2: c6:7d:7f:4c:d1:69:ca:a8:d2:48:76:0d:97:34:fa:6e:80:c9: 12:06:f5:d9:02:d7:5a:b3:cf:37:22:d5:a7:99:e9:67:e8:ac: 88:83:b8:30:b5:a4:00:b7:37:bd:af:22:aa:0f:1d:f2:75:f4: 5e:01:a5:5c:45:65:d6:c8:ab:a0:24:4a:fe:e1:55:d4:1e:5b: ff:25:40:9c:aa:1c:3f:6a:28:24:df:c3:a9:e2:f0:fc:7a:c3: 93:d5:44:75:81:19:b1:1a:c0:ee:39:83:f0:b0:78:f3:4e:74: db:41:77:0e:99:ff:88:23:44:35:6a:4a:15:08:c8:18:58:ee: 8c:7d:1a:bd:f0:ed:74:e2:53:76:7d:d4:c9:27:58:60:31:1f: 89:8f:85:2a:76:cc:08:c6:00:c2:4e:f8:77:64:a2:df:3f:8a: 15:c5:bc:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWL2cSn5Q4Rm4zX8OGsf/XzGEMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTExMDMyMzA1NDNaFw0yNTExMDcwOTM0NDNaMDMxMTAvBgNV BAMTKEQ5NDFCMUVDOEE4NjUwOTAwREIxNDYwQTZGMDVBNjc1RjI2MDE0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CicwdmQc7VoC8e9VrIpofjGL dE6rS1yaP2mB3FyKcNx0AmoNNHLdl5X1Gp1jB51kv+rleIAlsrG3T4Qhi8I9ybf4 FvQSbzX4OPpEGPKwNs+i/ouZ3oWrQAGxs3DvH2TgAlUEjxX7EKeUuGXHa0g7Bmnt mMmV3AVIKkrki1zgcskxsznvD3d8vJ+uIZv/l0jRInfKSBDRPZJi/IIErEFHu0tx wtslFybpuk8cnMEcSY36SWKHCghggV9rrT1G9Y+IO1Iwl2nJnPWG7VD6e91qxQyT yvXu33aFggq5qOSBEzyScWyn8ETiX+o6WcWEVjunjz5UQCD0gYUgF16Y+EsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UGx7IqGUJANsUYKbwWmdfJgFIEwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB39KaMBvHpzfQTJ5YxL0ZChdx787t8kI1m1 YiCOjddTgM0PuiDa66pgkx3WIAap4mLiRm8EtBg1Q9LF7U1gIBZ6Xy/WzznB4CQu DV+vvM7jRtjSSRQq73dq4sZ9f0zRacqo0kh2DZc0+m6AyRIG9dkC11qzzzci1aeZ 6WforIiDuDC1pAC3N72vIqoPHfJ19F4BpVxFZdbIq6AkSv7hVdQeW/8lQJyqHD9q KCTfw6ni8Px6w5PVRHWBGbEawO45g/CwePNOdNtBdw6Z/4gjRDVqShUIyBhY7ox9 Gr3w7XTiU3Z91MknWGAxH4mPhSp2zAjGAMJO+Hdkot8/ihXFvO4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:14 2025 by rpki-client