$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: rFIB9sTVCNbxpDXqf3lJVpWuCEjARfcSwrVZG2PTTzo= Subject key identifier: F4:C7:72:69:1E:2C:A1:AF:54:7D:80:ED:A5:5B:71:68:5F:3C:D9:17 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 6A6DEE0747ABE2AE291D7A1511A4E9A14216AF87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 01C5 Signing time: Wed 05 Nov 2025 09:00:01 +0000 Manifest this update: Wed 05 Nov 2025 08:55:01 +0000 Manifest next update: Sat 08 Nov 2025 10:50:01 +0000 Files and hashes: 1: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: UeokTrgmsXwI/m/gAg6GZuFBOsEFb91J8xDn/H6J5a4=) 2: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) 3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: NI+iV212mIRfD7qYmt5q7rBxlWutxZm2u6jypzvhX2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6d:ee:07:47:ab:e2:ae:29:1d:7a:15:11:a4:e9:a1:42:16:af:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Nov 5 08:55:01 2025 GMT Not After : Nov 8 10:50:01 2025 GMT Subject: CN=F4C772691E2CA1AF547D80EDA55B71685F3CD917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:7e:95:d1:61:52:5a:92:f5:d9:5d:3a:d4: 5f:d6:da:63:05:73:b7:9e:26:05:6f:3f:96:5a:86: 5d:06:fb:61:54:5e:42:a8:6d:58:2b:35:a4:1d:47: ae:22:47:cf:8c:a0:c5:4d:66:f5:d0:5c:b6:9f:72: 0b:d1:c5:19:cc:55:8e:30:1b:1e:08:80:fc:35:98: b9:a3:bb:9b:1e:e5:4f:41:3a:1a:46:15:54:9b:04: 9e:08:03:6d:85:b3:49:9f:79:f0:b4:08:c4:2a:70: 3f:6e:7a:f8:36:c8:0b:62:78:c7:0a:de:8c:a2:c7: b1:9b:b4:6d:26:90:25:b0:36:50:0b:8d:f6:fa:bd: 2d:f9:35:95:0f:c5:5f:77:c9:3f:f0:60:b5:31:7e: 17:ee:77:64:43:ce:40:9e:36:c5:49:95:27:3b:35: 02:d8:62:a2:ad:0d:a8:14:af:d0:d1:80:62:dc:b6: 80:7f:f3:5e:4a:4c:62:bf:c3:55:66:44:43:14:1a: a5:52:ea:61:c2:3a:75:0c:03:c3:ef:bf:8a:b1:6b: 51:c1:28:ee:80:3f:64:81:91:fc:75:e2:8e:3f:5b: 4c:0f:6b:30:26:21:e6:c9:c0:90:ea:fa:7d:fe:e3: 65:b6:02:89:72:bd:6d:6b:2e:b3:47:92:4a:fb:e2: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C7:72:69:1E:2C:A1:AF:54:7D:80:ED:A5:5B:71:68:5F:3C:D9:17 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5f:17:d2:96:a9:05:fd:b5:90:a9:c8:53:1a:0f:00:db:96: 3c:f0:19:ec:80:af:2a:3e:11:de:69:9b:9c:35:59:81:6b:d8: 3d:39:2b:8a:b3:fc:ad:42:f0:5f:bf:92:3c:cf:6f:34:45:cb: 41:8f:85:f7:03:1f:51:17:38:78:8c:a0:a9:23:88:8b:13:d0: 65:bf:a8:86:09:c0:01:a9:34:0f:e8:85:39:b5:c5:1c:a1:df: 73:84:7d:98:4c:05:73:fb:a6:13:1d:27:8e:a6:32:66:b3:1b: 9b:d5:87:dd:06:96:83:69:5c:9f:30:04:21:88:ef:fa:62:a6: ab:4c:54:9d:15:9f:75:1d:61:61:9f:d0:ed:84:ef:85:fd:99: 3c:20:1f:4b:e6:69:e6:8f:1a:ee:54:0e:99:f8:25:05:04:16: 7a:c4:1a:33:e9:f5:90:40:b9:b1:59:27:22:73:7c:c7:6c:b3: 43:3e:a1:cf:ee:ef:a4:df:45:19:ed:cd:7c:bc:13:af:21:cb: 45:c9:80:ff:db:17:b8:75:a4:a6:3d:73:02:f6:c8:08:87:c7: 42:35:a2:fa:f1:81:7f:82:60:77:1c:c4:83:eb:44:86:03:a7: 34:9a:49:d5:84:b1:40:cd:f9:a8:12:37:25:b5:59:20:fc:22: 17:4f:d0:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUam3uB0er4q4pHXoVEaTpoUIWr4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTExMDUwODU1MDFaFw0yNTExMDgxMDUwMDFaMDMxMTAvBgNV BAMTKEY0Qzc3MjY5MUUyQ0ExQUY1NDdEODBFREE1NUI3MTY4NUYzQ0Q5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzn6V0WFSWpL12V061F/W2mMF c7eeJgVvP5Zahl0G+2FUXkKobVgrNaQdR64iR8+MoMVNZvXQXLafcgvRxRnMVY4w Gx4IgPw1mLmju5se5U9BOhpGFVSbBJ4IA22Fs0mfefC0CMQqcD9uevg2yAtieMcK 3oyix7GbtG0mkCWwNlALjfb6vS35NZUPxV93yT/wYLUxfhfud2RDzkCeNsVJlSc7 NQLYYqKtDagUr9DRgGLctoB/815KTGK/w1VmREMUGqVS6mHCOnUMA8Pvv4qxa1HB KO6AP2SBkfx14o4/W0wPazAmIebJwJDq+n3+42W2AolyvW1rLrNHkkr74gAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MdyaR4soa9UfYDtpVtxaF882RcwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVfF9KWqQX9tZCpyFMaDwDbljzwGeyAryo+ Ed5pm5w1WYFr2D05K4qz/K1C8F+/kjzPbzRFy0GPhfcDH1EXOHiMoKkjiIsT0GW/ qIYJwAGpNA/ohTm1xRyh33OEfZhMBXP7phMdJ46mMmazG5vVh90GloNpXJ8wBCGI 7/pipqtMVJ0Vn3UdYWGf0O2E74X9mTwgH0vmaeaPGu5UDpn4JQUEFnrEGjPp9ZBA ubFZJyJzfMdss0M+oc/u76TfRRntzXy8E68hy0XJgP/bF7h1pKY9cwL2yAiHx0I1 ovrxgX+CYHccxIPrRIYDpzSaSdWEsUDN+agSNyW1WSD8IhdP0MQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:03 2025 by rpki-client