$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: 17Sx/Q80a0VC6rI77C7FDKwZKefe3Yvk/mjdycFdl0Y= Subject key identifier: 5D:3E:78:86:7E:FD:2A:FD:A3:D4:76:73:77:D6:F6:E2:51:CC:9C:0B Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 4CA661A92EF79FC938FCDA71026F3383247762CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 0467 Signing time: Sun 02 Nov 2025 13:51:19 +0000 Manifest this update: Sun 02 Nov 2025 13:46:19 +0000 Manifest next update: Wed 05 Nov 2025 14:49:19 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: iYoTQf8GzfLXP1W/vnT33KEWHmvVCBBR/CDG20CQmjc=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a6:61:a9:2e:f7:9f:c9:38:fc:da:71:02:6f:33:83:24:77:62:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Nov 2 13:46:19 2025 GMT Not After : Nov 5 14:49:19 2025 GMT Subject: CN=5D3E78867EFD2AFDA3D4767377D6F6E251CC9C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:a9:e2:3c:99:e9:62:b1:6c:eb:a7:38:2e: 72:3b:fa:42:59:d2:9c:a2:0f:c4:45:b9:43:30:78: 27:b2:12:fd:31:dc:8c:de:9f:c7:0f:57:37:65:9b: d6:ba:cf:ed:43:31:2b:8e:5c:cb:81:fc:4c:93:da: 71:42:f7:cb:96:da:ec:96:75:68:c2:03:7e:26:68: ff:f7:67:ff:f5:56:7d:ac:1b:d2:e4:41:dc:d5:49: 81:3e:18:06:dc:e6:19:5c:13:25:71:db:a3:2c:15: ee:6e:cb:e2:95:a4:d3:d4:c6:fc:a3:74:b7:e8:11: 50:1b:37:92:ec:4e:cb:a8:f1:ca:10:3f:44:0b:12: ee:98:56:e4:eb:52:7d:21:3f:31:21:82:71:98:02: f7:c7:39:54:81:b5:14:33:7f:cb:57:91:a3:33:69: ca:84:0b:86:43:37:0d:bb:59:cf:12:71:7c:72:81: 0b:ff:d3:d7:03:bd:c5:89:ec:a0:b9:9e:b0:77:d5: cb:f9:6c:71:69:47:47:a2:e8:6b:cc:a2:c3:13:41: 78:2b:c0:99:e4:ca:8c:0e:41:ef:cd:60:c3:8a:f1: a3:14:d7:b5:ce:b6:36:1c:04:eb:4f:34:67:43:b4: 7e:8a:6e:fb:63:4a:96:d9:04:26:ab:f1:67:07:b7: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3E:78:86:7E:FD:2A:FD:A3:D4:76:73:77:D6:F6:E2:51:CC:9C:0B X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a0:c4:95:7c:f8:d2:f6:71:ad:b4:2a:26:02:82:ec:f5:34: f5:00:ca:c9:74:d6:e6:7e:a2:8d:96:27:bf:74:c5:e3:3e:e4: 7e:e1:08:c4:c3:96:f6:78:53:76:60:1b:c3:65:6e:70:56:81: 42:a4:b3:70:59:cb:6a:ed:3c:75:45:0b:c6:08:ae:c6:d0:83: 5a:49:ef:ec:a4:38:ee:11:fa:a8:5d:f9:ca:57:4c:b6:da:0a: 6e:51:19:2b:d8:7f:50:71:2b:6e:17:70:e2:2c:66:be:e6:ca: 79:e0:8e:55:2d:b6:1d:60:d5:29:e8:8e:89:d8:b6:46:c6:e3: 10:1a:5f:a2:0b:91:68:c1:9e:a9:d0:7e:11:f6:a4:5c:94:54: 50:78:06:f5:04:32:1c:b5:af:e8:fd:8f:3e:a9:f0:1f:4b:1f: a1:cc:3f:5d:d4:55:06:dc:44:bf:0a:f2:b4:d3:ca:5f:87:d8: 0c:03:0b:f6:b7:9d:f5:12:3f:af:6b:41:56:d5:b6:50:7d:7d: f0:eb:a9:56:cf:42:c4:3d:85:29:94:d7:39:f6:3f:7d:dd:49: a6:d4:31:1b:bc:79:1e:dd:c6:b6:1f:ee:54:86:f4:a8:dc:cd: 73:0a:a8:a8:76:7b:e3:67:c1:c1:64:9b:0c:a6:95:b4:0e:7b: 62:df:73:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKZhqS73n8k4/NpxAm8zgyR3YsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTExMDIxMzQ2MTlaFw0yNTExMDUxNDQ5MTlaMDMxMTAvBgNV BAMTKDVEM0U3ODg2N0VGRDJBRkRBM0Q0NzY3Mzc3RDZGNkUyNTFDQzlDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E6niPJnpYrFs66c4LnI7+kJZ 0pyiD8RFuUMweCeyEv0x3Izen8cPVzdlm9a6z+1DMSuOXMuB/EyT2nFC98uW2uyW dWjCA34maP/3Z//1Vn2sG9LkQdzVSYE+GAbc5hlcEyVx26MsFe5uy+KVpNPUxvyj dLfoEVAbN5LsTsuo8coQP0QLEu6YVuTrUn0hPzEhgnGYAvfHOVSBtRQzf8tXkaMz acqEC4ZDNw27Wc8ScXxygQv/09cDvcWJ7KC5nrB31cv5bHFpR0ei6GvMosMTQXgr wJnkyowOQe/NYMOK8aMU17XOtjYcBOtPNGdDtH6KbvtjSpbZBCar8WcHt9RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXT54hn79Kv2j1HZzd9b24lHMnAswHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmgxJV8+NL2ca20KiYCguz1NPUAysl01uZ+ oo2WJ790xeM+5H7hCMTDlvZ4U3ZgG8NlbnBWgUKks3BZy2rtPHVFC8YIrsbQg1pJ 7+ykOO4R+qhd+cpXTLbaCm5RGSvYf1BxK24XcOIsZr7mynngjlUtth1g1SnojonY tkbG4xAaX6ILkWjBnqnQfhH2pFyUVFB4BvUEMhy1r+j9jz6p8B9LH6HMP13UVQbc RL8K8rTTyl+H2AwDC/a3nfUSP69rQVbVtlB9ffDrqVbPQsQ9hSmU1zn2P33dSabU MRu8eR7dxrYf7lSG9KjczXMKqKh2e+NnwcFkmwymlbQOe2LfczA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:33 2025 by rpki-client