$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: 16rUJP1laGHeCzHcDnl3Hd0WKc15v76vCe7PijQa1wM= Subject key identifier: 98:0A:7E:37:48:F5:49:86:91:3E:A7:51:C6:70:C6:91:1B:E4:AB:C6 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 093027A61F2FD7B5414B3D486269D496A7999A7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03B1 Signing time: Sun 02 Nov 2025 07:12:25 +0000 Manifest this update: Sun 02 Nov 2025 07:07:25 +0000 Manifest next update: Wed 05 Nov 2025 18:23:25 +0000 Files and hashes: 1: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 2: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) 3: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: jI/+1yQZ5mdxMac2aq4g09Dz54pj5n6yy6U34j2OfXI=) 4: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:30:27:a6:1f:2f:d7:b5:41:4b:3d:48:62:69:d4:96:a7:99:9a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Nov 2 07:07:25 2025 GMT Not After : Nov 5 18:23:25 2025 GMT Subject: CN=980A7E3748F54986913EA751C670C6911BE4ABC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:72:f5:81:ae:09:89:24:98:89:07:48:84: bb:42:fa:fc:a8:fa:9a:b6:bd:63:89:6d:a3:09:19: 33:c1:45:a9:e0:7e:0a:5a:f7:86:62:5e:d7:81:e3: 45:a9:f9:ab:91:9a:c7:b5:dd:2f:c4:ef:a2:93:27: 5d:65:4f:75:05:89:1f:b1:21:76:42:a6:bf:f7:47: 30:9a:51:0b:fd:23:1e:90:6d:23:9e:fe:9b:bf:07: 79:cf:1b:35:cb:23:a5:16:01:17:80:db:fb:ff:e2: d6:6b:7d:25:48:56:25:10:10:2c:ae:0b:8b:0c:21: ec:8b:23:0d:4a:b0:80:72:ba:00:63:c1:83:cb:f6: 19:dd:61:3c:2d:7d:61:dd:75:88:02:95:b3:c9:0d: ed:90:fb:0f:08:54:cb:a6:e0:c8:c7:fb:a1:f8:fb: ab:f6:2b:96:15:59:33:9c:c4:1e:c7:29:f2:01:02: 38:f1:04:22:97:24:42:f0:ba:8f:58:f0:72:87:1f: 6f:f0:14:eb:43:04:ff:da:83:46:87:64:7a:bb:bf: 43:62:0c:ef:54:e5:ed:27:e4:6d:ce:04:88:28:a4: 41:2f:be:4c:eb:89:1c:f5:8f:87:d0:f4:43:63:f6: 77:ef:a4:27:91:83:f1:dc:93:ce:c6:1e:b7:44:a5: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:7E:37:48:F5:49:86:91:3E:A7:51:C6:70:C6:91:1B:E4:AB:C6 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:39:3f:03:22:9c:03:1f:2d:d2:49:89:b4:9a:0f:2b:f6:fe: 84:d9:c9:69:47:37:7b:02:37:0c:90:b9:5f:43:9b:15:7a:47: 93:55:0f:3c:8f:65:4e:8e:62:af:a1:c9:d9:8e:65:41:8c:b6: 5e:c6:30:74:2a:f3:5f:a8:99:1f:db:48:ed:5f:25:ae:49:f3: b3:eb:8a:86:d9:64:c4:c0:58:23:45:21:da:3e:1e:82:ef:c0: 4e:6d:0e:26:e2:09:32:78:3b:fe:ca:a7:e8:74:ce:15:9f:2b: d3:bf:49:a4:61:f3:c6:41:c4:fe:2b:4e:d0:d7:7a:3a:9c:03: da:4c:be:ce:2b:44:ab:64:ae:ae:52:53:25:f9:07:22:ae:7c: 59:41:6d:58:5b:0d:d5:75:b5:ca:f2:28:24:af:56:cc:cd:e9: 51:7c:af:9c:82:ce:78:15:f4:08:9a:b4:39:f1:d7:6f:fe:c2: c4:31:b7:7c:a2:23:11:7e:3e:47:17:66:37:ce:d2:d1:fe:1a: 96:2b:c1:79:d9:b2:34:7b:ec:35:cc:f2:21:08:e1:73:7d:b3: 7d:e7:20:60:00:16:a7:63:c9:3e:25:8e:ac:0e:a7:08:77:2b: 19:21:1e:b1:a9:a5:5a:4f:22:11:73:4b:56:05:cf:26:39:45: 91:e3:0d:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTAnph8v17VBSz1IYmnUlqeZmn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTExMDIwNzA3MjVaFw0yNTExMDUxODIzMjVaMDMxMTAvBgNV BAMTKDk4MEE3RTM3NDhGNTQ5ODY5MTNFQTc1MUM2NzBDNjkxMUJFNEFCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+XL1ga4JiSSYiQdIhLtC+vyo +pq2vWOJbaMJGTPBRangfgpa94ZiXteB40Wp+auRmse13S/E76KTJ11lT3UFiR+x IXZCpr/3RzCaUQv9Ix6QbSOe/pu/B3nPGzXLI6UWAReA2/v/4tZrfSVIViUQECyu C4sMIeyLIw1KsIByugBjwYPL9hndYTwtfWHddYgClbPJDe2Q+w8IVMum4MjH+6H4 +6v2K5YVWTOcxB7HKfIBAjjxBCKXJELwuo9Y8HKHH2/wFOtDBP/ag0aHZHq7v0Ni DO9U5e0n5G3OBIgopEEvvkzriRz1j4fQ9ENj9nfvpCeRg/Hck87GHrdEpRoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmAp+N0j1SYaRPqdRxnDGkRvkq8YwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo5PwMinAMfLdJJibSaDyv2/oTZyWlHN3sC NwyQuV9DmxV6R5NVDzyPZU6OYq+hydmOZUGMtl7GMHQq81+omR/bSO1fJa5J87Pr iobZZMTAWCNFIdo+HoLvwE5tDibiCTJ4O/7Kp+h0zhWfK9O/SaRh88ZBxP4rTtDX ejqcA9pMvs4rRKtkrq5SUyX5ByKufFlBbVhbDdV1tcryKCSvVszN6VF8r5yCzngV 9AiatDnx12/+wsQxt3yiIxF+PkcXZjfO0tH+GpYrwXnZsjR77DXM8iEI4XN9s33n IGAAFqdjyT4ljqwOpwh3KxkhHrGppVpPIhFzS1YFzyY5RZHjDSk= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:35 2025 by rpki-client