$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: BEhLA3XbItywTXoF4tVgslzktokvgrgwcI7oAj5wwNk= Subject key identifier: 76:4F:26:70:E2:15:DE:04:F5:29:8A:3A:24:6D:18:45:3B:83:C0:C8 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 5D7083C8121574E321C78D06684D6B037780B3AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01E2 Signing time: Tue 04 Nov 2025 07:11:24 +0000 Manifest this update: Tue 04 Nov 2025 07:06:24 +0000 Manifest next update: Fri 07 Nov 2025 10:25:24 +0000 Files and hashes: 1: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) 2: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: 7lvKVFD8ZNPK1MXj7F03xafHLODLZWksYXtvgyFKSE4=) 3: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) 5: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:70:83:c8:12:15:74:e3:21:c7:8d:06:68:4d:6b:03:77:80:b3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Nov 4 07:06:24 2025 GMT Not After : Nov 7 10:25:24 2025 GMT Subject: CN=764F2670E215DE04F5298A3A246D18453B83C0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:e4:7f:e2:e2:62:f3:60:17:cb:6a:5d:b1: 06:5b:84:bf:70:6c:3b:b4:f2:5f:83:bb:03:f7:79: b0:20:67:4e:cc:19:bb:39:59:9d:01:f0:e6:42:b9: b2:a2:a7:33:52:c3:56:dd:0d:5d:30:40:bc:65:fd: 1a:8b:6f:be:03:c3:8e:85:3b:ca:f6:8b:88:9f:9c: 9d:9c:f1:26:b0:39:50:17:75:31:48:7e:c9:91:6c: 05:8f:57:2d:8d:99:63:23:7e:ab:c1:d4:be:23:be: 56:68:9e:de:b7:cf:5a:b7:dc:25:dd:1a:ce:5f:c2: ad:7d:89:db:0d:a2:80:71:0a:60:b2:19:2e:7f:bf: 28:d0:9e:c0:34:4d:bb:c9:e5:47:f4:ec:a6:39:e4: 32:ca:3f:41:b6:1e:05:fe:fa:61:03:71:1a:ba:24: 5a:05:db:c5:5d:de:5a:03:3d:a9:fb:80:43:13:ee: 8c:ac:f9:8f:a7:2a:eb:80:f0:a6:61:32:e1:15:a7: a5:0a:f4:03:50:d6:23:c1:b2:17:b3:7f:02:bd:56: 4c:0a:5c:58:1d:2a:cb:f5:00:0e:77:c2:12:9a:50: 59:03:57:5a:eb:63:18:87:16:b0:c7:6b:8c:cc:49: a1:49:ba:65:ac:28:06:bc:89:f2:78:2a:26:f6:41: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4F:26:70:E2:15:DE:04:F5:29:8A:3A:24:6D:18:45:3B:83:C0:C8 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:87:61:d4:aa:72:5b:8b:c4:21:a4:89:a6:cd:91:da:5d:be: a5:c6:a9:8b:07:01:57:a8:1d:c6:81:65:cb:4a:33:a2:5e:d9: 6c:41:3b:a6:72:59:fa:d4:e6:59:ce:d9:0e:f8:24:ae:4f:98: 9a:31:6d:3a:34:49:cd:4d:ef:0c:de:37:8b:bc:25:44:03:98: 84:ff:dd:9c:45:8c:28:cf:6a:1c:33:1b:b7:c9:db:e4:fe:94: a7:8c:88:1b:2f:b4:4d:7d:43:69:8c:01:e7:04:fc:44:93:26: d0:b3:54:39:80:ea:80:d9:65:b5:2e:d0:e0:96:fc:8c:c2:03: ad:9a:28:49:b3:4e:52:bc:d2:3e:40:a1:ad:d7:2b:b7:7d:6e: cf:fa:33:f0:89:61:bd:c7:9b:19:37:5a:7c:a0:2d:bd:3f:56: e3:2b:92:5e:10:68:30:65:33:41:2f:05:76:ae:4e:05:18:6e: 68:39:0b:31:d9:64:f3:8e:2e:8d:30:90:61:23:d6:c4:6a:f2: 1e:aa:86:00:a9:3e:5a:6a:c2:49:c3:b9:49:ec:e4:bd:cc:f3: b9:02:8e:8e:d0:46:ce:8d:c4:d6:08:1c:6c:75:02:0d:98:d5: ce:5b:0b:e3:91:69:d6:ba:9d:3d:38:e0:91:71:dd:26:f0:f3: 82:1b:26:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXCDyBIVdOMhx40GaE1rA3eAs6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTExMDQwNzA2MjRaFw0yNTExMDcxMDI1MjRaMDMxMTAvBgNV BAMTKDc2NEYyNjcwRTIxNURFMDRGNTI5OEEzQTI0NkQxODQ1M0I4M0MwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpe+R/4uJi82AXy2pdsQZbhL9w bDu08l+DuwP3ebAgZ07MGbs5WZ0B8OZCubKipzNSw1bdDV0wQLxl/RqLb74Dw46F O8r2i4ifnJ2c8SawOVAXdTFIfsmRbAWPVy2NmWMjfqvB1L4jvlZont63z1q33CXd Gs5fwq19idsNooBxCmCyGS5/vyjQnsA0TbvJ5Uf07KY55DLKP0G2HgX++mEDcRq6 JFoF28Vd3loDPan7gEMT7oys+Y+nKuuA8KZhMuEVp6UK9ANQ1iPBshezfwK9VkwK XFgdKsv1AA53whKaUFkDV1rrYxiHFrDHa4zMSaFJumWsKAa8ifJ4Kib2QWIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdk8mcOIV3gT1KYo6JG0YRTuDwMgwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKHYdSqcluLxCGkiabNkdpdvqXGqYsHAVeo HcaBZctKM6Je2WxBO6ZyWfrU5lnO2Q74JK5PmJoxbTo0Sc1N7wzeN4u8JUQDmIT/ 3ZxFjCjPahwzG7fJ2+T+lKeMiBsvtE19Q2mMAecE/ESTJtCzVDmA6oDZZbUu0OCW /IzCA62aKEmzTlK80j5Aoa3XK7d9bs/6M/CJYb3Hmxk3WnygLb0/VuMrkl4QaDBl M0EvBXauTgUYbmg5CzHZZPOOLo0wkGEj1sRq8h6qhgCpPlpqwknDuUns5L3M87kC jo7QRs6NxNYIHGx1Ag2Y1c5bC+ORada6nT044JFx3Sbw84IbJos= -----END CERTIFICATE-----Generated at Wed Nov 5 11:03:56 2025 by rpki-client