$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: RUFnQIG/hS51LrQBNGfkHb+0Siho13dzC8S6YgDND5I= Subject key identifier: 55:1D:3A:00:97:3C:7E:C2:36:3B:AF:B0:89:3D:26:E3:12:B8:CE:00 Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 7F7E0A7A612AF46FDFDBB688B9680BC908259533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: D6 Signing time: Tue 04 Nov 2025 15:51:33 +0000 Manifest this update: Tue 04 Nov 2025 15:46:33 +0000 Manifest next update: Sat 08 Nov 2025 02:25:33 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 2: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 4: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: VCncs1wVQ12CZUumHB/CUFOiovH2A27W7wEA9F653bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:0a:7a:61:2a:f4:6f:df:db:b6:88:b9:68:0b:c9:08:25:95:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Nov 4 15:46:33 2025 GMT Not After : Nov 8 02:25:33 2025 GMT Subject: CN=551D3A00973C7EC2363BAFB0893D26E312B8CE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:95:30:83:9b:92:f2:40:41:dc:7c:e5:97: 6a:de:36:c4:24:cf:85:07:7a:f4:20:bd:53:e8:e8: de:cf:5c:da:70:02:48:6b:25:4f:0a:cb:e0:02:e0: ff:64:0c:5c:f4:b6:92:fd:94:af:1b:72:3e:83:d6: ec:a7:7a:9b:4f:67:d9:27:07:1d:69:93:55:35:68: 23:f6:92:3f:a8:51:36:2c:22:c4:f6:e9:a6:be:b7: 9f:34:aa:29:e7:03:fa:cb:38:6f:09:2a:17:c4:46: 84:e1:26:36:1b:f9:c6:dc:5c:4d:02:d5:31:01:b7: 1c:aa:e6:7d:a0:16:f9:71:76:c2:94:e8:ba:5f:8f: 34:5d:57:a0:be:25:24:a1:4f:5f:b2:bf:11:20:b1: 76:34:62:5f:4f:9f:15:e8:de:f1:71:74:d4:c7:88: be:68:ad:7e:09:d8:ab:f9:5e:82:1e:d2:86:ee:41: a4:9e:af:ea:f9:97:d6:0d:8b:c2:8c:cb:7f:71:48: 23:4d:f5:b7:13:95:57:c5:e3:a0:f5:d6:f3:c8:e6: 44:20:3c:c6:b4:ea:46:38:29:2a:88:20:6c:81:96: 39:21:88:3e:9d:03:30:b2:e2:e1:fd:2a:85:52:e7: 1f:bd:d4:c8:37:13:57:ed:5b:62:98:a7:aa:ef:15: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1D:3A:00:97:3C:7E:C2:36:3B:AF:B0:89:3D:26:E3:12:B8:CE:00 X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:b9:0c:d5:2a:e8:fd:d1:bb:d9:59:93:6a:7b:ea:bc:fd: 77:57:c6:fb:04:d1:54:ca:4d:f8:9a:65:c3:f6:98:ab:b4:a7: 14:2b:d0:ce:7c:16:7c:91:b1:77:1c:7c:c2:27:04:02:d3:31: f0:39:4e:ba:56:86:c9:ee:4f:49:fa:2e:11:34:dd:11:f4:70: 42:3d:41:03:ca:9f:12:65:c4:a3:72:2f:f2:d9:76:fd:03:84: 4c:77:a0:14:85:b7:13:0a:49:f8:7d:26:98:58:2e:52:fb:88: 20:84:01:c2:1b:0e:f0:f9:3f:fa:7e:21:c7:b9:85:f4:45:c8: b9:38:82:ef:a6:ab:4f:88:76:f3:1a:59:c4:c6:de:70:ca:d3: 3c:22:c7:0a:28:05:81:5f:d0:05:e6:b2:6e:b2:7e:8a:74:26: 29:0d:71:c6:a3:80:f6:b5:fa:fa:88:f8:51:3d:3d:ca:3b:fa: b9:df:b5:91:1b:bf:2b:bc:50:2e:6a:b6:55:27:92:ca:55:88: 1a:7e:4d:9a:31:69:e8:41:3c:02:7c:cf:1b:13:ef:ab:d1:f4: e9:15:4c:23:c4:09:b2:ff:8e:42:ec:69:8b:24:14:1b:ec:28: 37:16:fd:4c:6e:6a:78:06:15:31:ae:bb:b7:62:5c:30:bb:fa: 1a:84:78:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf34KemEq9G/f27aIuWgLyQgllTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTExMDQxNTQ2MzNaFw0yNTExMDgwMjI1MzNaMDMxMTAvBgNV BAMTKDU1MUQzQTAwOTczQzdFQzIzNjNCQUZCMDg5M0QyNkUzMTJCOENFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFj5Uwg5uS8kBB3Hzll2reNsQk z4UHevQgvVPo6N7PXNpwAkhrJU8Ky+AC4P9kDFz0tpL9lK8bcj6D1uyneptPZ9kn Bx1pk1U1aCP2kj+oUTYsIsT26aa+t580qinnA/rLOG8JKhfERoThJjYb+cbcXE0C 1TEBtxyq5n2gFvlxdsKU6LpfjzRdV6C+JSShT1+yvxEgsXY0Yl9PnxXo3vFxdNTH iL5orX4J2Kv5XoIe0obuQaSer+r5l9YNi8KMy39xSCNN9bcTlVfF46D11vPI5kQg PMa06kY4KSqIIGyBljkhiD6dAzCy4uH9KoVS5x+91Mg3E1ftW2KYp6rvFULFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR06AJc8fsI2O6+wiT0m4xK4zgAwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASpuQzVKuj90bvZWZNqe+q8/XdXxvsE0VTK TfiaZcP2mKu0pxQr0M58FnyRsXccfMInBALTMfA5TrpWhsnuT0n6LhE03RH0cEI9 QQPKnxJlxKNyL/LZdv0DhEx3oBSFtxMKSfh9JphYLlL7iCCEAcIbDvD5P/p+Ice5 hfRFyLk4gu+mq0+IdvMaWcTG3nDK0zwixwooBYFf0AXmsm6yfop0JikNccajgPa1 +vqI+FE9Pco7+rnftZEbvyu8UC5qtlUnkspViBp+TZoxaehBPAJ8zxsT76vR9OkV TCPECbL/jkLsaYskFBvsKDcW/UxuangGFTGuu7diXDC7+hqEeMA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:20 2025 by rpki-client