$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: 6EjEbjMjJiR3+eS44fc/BtuDw5FCyfExyAN8fNphCZc= Subject key identifier: 53:9E:B6:E8:5C:67:89:15:8E:F6:E4:9D:48:5D:3E:5B:0C:AE:43:40 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 6536E37164A4DB3FC5F1D4BED90BDB06C2748842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: DC Signing time: Mon 03 Nov 2025 23:41:09 +0000 Manifest this update: Mon 03 Nov 2025 23:36:09 +0000 Manifest next update: Fri 07 Nov 2025 07:20:09 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: hQDnpGr5vtcDL6tQAOzqvXLRfgciuuYm4vYqFLxuFzM=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:36:e3:71:64:a4:db:3f:c5:f1:d4:be:d9:0b:db:06:c2:74:88:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Nov 3 23:36:09 2025 GMT Not After : Nov 7 07:20:09 2025 GMT Subject: CN=539EB6E85C6789158EF6E49D485D3E5B0CAE4340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:50:df:e4:ba:d7:a5:04:e9:53:7f:d7:33: 0e:a5:9c:99:32:8f:fa:f9:1e:c8:6d:7c:82:a6:91: 84:a5:53:6d:d0:7d:4a:a9:05:53:2e:8e:be:4d:a8: 72:8a:7e:46:e1:b9:5d:8a:31:db:ec:c5:54:59:93: a3:32:c4:da:50:4d:09:95:d6:07:7b:82:e7:8f:13: a8:89:26:f9:50:1b:e6:87:1b:2f:9f:03:44:24:c5: c9:1d:b5:49:5c:67:0f:40:e1:97:cb:e0:b0:69:ac: 9d:15:aa:df:df:25:16:5f:da:26:65:84:d6:fc:9c: 30:37:66:33:e9:f7:9c:67:1b:7d:71:33:ef:7e:55: 79:9f:f9:57:e1:b4:b8:3f:b7:d8:a4:71:83:2e:10: 67:9d:46:33:d7:8c:dc:7f:30:83:af:53:e4:9e:5a: 93:12:5d:c7:5c:5b:d4:32:b0:b5:4b:0e:29:1e:81: f2:4d:41:fa:60:75:de:47:60:08:91:04:6f:33:e1: b2:61:a6:0c:f9:28:10:ef:c4:fb:26:3d:70:b5:b5: ba:ae:d9:68:3c:ab:35:1e:0c:a4:97:c7:75:fd:ea: 79:da:dc:db:c5:76:8e:54:56:f5:54:8c:b8:d2:dc: 17:65:72:2e:e3:2a:82:dd:f8:9b:e6:30:43:32:72: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:B6:E8:5C:67:89:15:8E:F6:E4:9D:48:5D:3E:5B:0C:AE:43:40 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:d9:39:82:f3:4e:4a:68:a3:e1:91:b6:f8:a9:1a:32:3d:d2: 34:57:bd:48:38:a2:f8:3f:6f:b3:2d:c3:16:68:61:f9:eb:ea: 1e:c8:27:f0:42:10:db:db:1b:e3:9b:34:fc:8e:10:46:7d:e8: 45:6f:a6:be:a1:62:f5:1b:45:0f:61:88:57:bc:0e:e9:7f:0a: 6f:cf:41:10:b0:06:44:b2:07:a7:89:d0:0d:77:b0:de:aa:32: 69:1f:6d:63:a1:2e:3d:7a:0d:f9:2f:93:77:67:44:35:e3:fd: 9a:bf:f1:97:03:e4:6c:9e:02:32:ed:ed:7a:fe:ff:57:db:3c: f3:93:6b:2e:4f:24:1d:e6:a8:58:74:87:43:c1:4f:34:3e:dd: 0e:94:73:b0:5d:60:f1:c7:0b:b3:f7:10:c0:15:48:39:58:d1: f1:e6:cb:c4:32:16:40:b2:94:e5:a9:da:ec:11:0c:15:f8:7c: 1f:ce:8d:11:6d:73:b2:f4:6f:ac:25:c7:cb:51:be:bf:08:8e: 61:d5:8c:12:73:bd:52:c7:28:bd:de:10:b6:a9:b8:43:f6:6e: 45:2f:45:43:96:06:cc:5d:89:2c:9f:fa:db:34:61:db:0c:c7: 89:ff:47:61:f3:b2:3d:db:3a:85:c0:f4:bc:6d:93:b5:c0:23: 17:61:e3:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTbjcWSk2z/F8dS+2QvbBsJ0iEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTExMDMyMzM2MDlaFw0yNTExMDcwNzIwMDlaMDMxMTAvBgNV BAMTKDUzOUVCNkU4NUM2Nzg5MTU4RUY2RTQ5RDQ4NUQzRTVCMENBRTQzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUVDf5LrXpQTpU3/XMw6lnJky j/r5HshtfIKmkYSlU23QfUqpBVMujr5NqHKKfkbhuV2KMdvsxVRZk6MyxNpQTQmV 1gd7guePE6iJJvlQG+aHGy+fA0QkxckdtUlcZw9A4ZfL4LBprJ0Vqt/fJRZf2iZl hNb8nDA3ZjPp95xnG31xM+9+VXmf+VfhtLg/t9ikcYMuEGedRjPXjNx/MIOvU+Se WpMSXcdcW9QysLVLDikegfJNQfpgdd5HYAiRBG8z4bJhpgz5KBDvxPsmPXC1tbqu 2Wg8qzUeDKSXx3X96nna3NvFdo5UVvVUjLjS3Bdlci7jKoLd+JvmMEMycrRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5626FxniRWO9uSdSF0+WwyuQ0AwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvZOYLzTkpoo+GRtvipGjI90jRXvUg4ovg/ b7MtwxZoYfnr6h7IJ/BCENvbG+ObNPyOEEZ96EVvpr6hYvUbRQ9hiFe8Dul/Cm/P QRCwBkSyB6eJ0A13sN6qMmkfbWOhLj16Dfkvk3dnRDXj/Zq/8ZcD5GyeAjLt7Xr+ /1fbPPOTay5PJB3mqFh0h0PBTzQ+3Q6Uc7BdYPHHC7P3EMAVSDlY0fHmy8QyFkCy lOWp2uwRDBX4fB/OjRFtc7L0b6wlx8tRvr8IjmHVjBJzvVLHKL3eELapuEP2bkUv RUOWBsxdiSyf+ts0YdsMx4n/R2Hzsj3bOoXA9Lxtk7XAIxdh49g= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:30 2025 by rpki-client