$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: i6U9xUWqBfEVjO/EVwp1tc42Dq85IPHoB4bFHeGuMcQ= Subject key identifier: CF:5E:A8:35:61:1D:93:25:C7:12:C0:B6:34:A0:46:97:FA:94:0D:DA Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 5F7C3A4E0AEA8F1C776FF7232747D7A2193C7F6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 019C Signing time: Mon 03 Nov 2025 02:50:58 +0000 Manifest this update: Mon 03 Nov 2025 02:45:58 +0000 Manifest next update: Thu 06 Nov 2025 06:51:58 +0000 Files and hashes: 1: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 2: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: uRel8nY64bC/38m8Cz0DVmBJ8pMnp8hxq4/OZVS+zTQ=) 3: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 4: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 5: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:3a:4e:0a:ea:8f:1c:77:6f:f7:23:27:47:d7:a2:19:3c:7f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Nov 3 02:45:58 2025 GMT Not After : Nov 6 06:51:58 2025 GMT Subject: CN=CF5EA835611D9325C712C0B634A04697FA940DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:45:39:0c:6c:1d:5f:81:3c:0e:36:60:b9: b8:c7:5c:e1:d8:1e:f0:4c:03:aa:7a:e3:a2:d0:01: 99:5a:90:f6:28:d3:f8:f4:b4:f1:f3:61:f2:21:e5: 3e:d0:0f:6e:4d:59:fd:ae:3b:5e:3d:57:64:84:35: 0f:f2:e2:9e:3f:9a:16:d8:bc:6c:52:16:ef:ab:61: ea:ab:59:df:20:e7:15:93:69:c2:01:af:74:08:02: 4b:32:6a:09:c5:40:7c:86:d8:ec:d3:40:e9:6b:5d: 03:6d:90:fe:de:bd:ad:a1:5f:90:97:79:fd:46:1e: 94:58:1b:72:de:43:1e:fc:d4:1e:56:86:84:49:47: f0:7d:5e:82:6a:98:6e:a4:70:ad:c6:c6:d9:4a:ad: 13:40:12:86:74:05:4e:20:38:3f:62:c0:6e:a7:d4: f9:ca:9c:6b:77:20:7c:5e:2f:21:f7:38:09:35:46: c5:f9:2d:22:27:a5:32:33:3a:4b:fb:de:18:17:16: e3:75:6c:71:8a:6e:2c:73:9c:7c:fd:11:79:13:fa: 1f:05:a8:c3:23:ac:67:62:d4:c1:fa:e6:bc:4c:e5: 27:ef:5e:d9:0d:05:55:74:f7:f3:4d:ab:81:bc:44: 71:c5:bf:84:53:db:20:ce:d5:c7:73:d2:0b:16:a2: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5E:A8:35:61:1D:93:25:C7:12:C0:B6:34:A0:46:97:FA:94:0D:DA X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:17:f5:48:9e:24:66:9c:c6:0b:7f:65:66:9e:cd:e0:5f:b3: 63:a7:d9:fd:86:17:1a:63:a5:6d:51:4a:46:ae:c6:1f:c5:53: 40:26:18:72:73:fa:e3:90:00:c7:d0:9f:8a:b1:95:6e:a6:1d: 4d:45:4b:ec:27:7a:94:56:2e:cb:4a:73:67:e1:97:6d:8b:69: 43:1f:87:35:fe:f2:c4:a7:a3:08:57:5c:25:8b:b3:dd:b0:13: c8:c8:c9:35:d8:44:db:fe:dc:a5:47:ab:c8:7c:07:81:3c:15: 14:db:fa:83:ab:6c:68:67:47:51:15:1e:2c:47:89:9b:b9:80: 1b:f5:5d:91:84:1a:cb:c8:04:2a:a8:0e:00:7b:a3:c4:db:f5: 6f:e7:6c:bc:ee:75:cf:fe:63:3f:ce:1c:cb:a1:ad:cc:32:da: 9d:dc:a5:41:63:a0:1d:d0:a6:c9:36:f5:60:7e:fa:49:32:04: 5c:f0:a0:0e:bb:45:52:54:f7:10:f7:da:50:ae:9a:36:45:3f: 3c:28:c9:d6:51:cd:0b:28:aa:5e:8f:c2:82:16:d5:98:20:e5: 0e:21:eb:6c:a3:27:80:09:03:73:23:18:55:66:7f:cf:28:d4: 2c:b5:42:1c:e5:7f:72:f6:0b:ca:18:23:6b:57:d9:28:c8:a3: 5a:6c:c9:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3w6Tgrqjxx3b/cjJ0fXohk8f2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTExMDMwMjQ1NThaFw0yNTExMDYwNjUxNThaMDMxMTAvBgNV BAMTKENGNUVBODM1NjExRDkzMjVDNzEyQzBCNjM0QTA0Njk3RkE5NDBEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hkU5DGwdX4E8DjZgubjHXOHY HvBMA6p646LQAZlakPYo0/j0tPHzYfIh5T7QD25NWf2uO149V2SENQ/y4p4/mhbY vGxSFu+rYeqrWd8g5xWTacIBr3QIAksyagnFQHyG2OzTQOlrXQNtkP7eva2hX5CX ef1GHpRYG3LeQx781B5WhoRJR/B9XoJqmG6kcK3GxtlKrRNAEoZ0BU4gOD9iwG6n 1PnKnGt3IHxeLyH3OAk1RsX5LSInpTIzOkv73hgXFuN1bHGKbixznHz9EXkT+h8F qMMjrGdi1MH65rxM5SfvXtkNBVV09/NNq4G8RHHFv4RT2yDO1cdz0gsWogUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz16oNWEdkyXHEsC2NKBGl/qUDdowHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEX9UieJGacxgt/ZWaezeBfs2On2f2GFxpj pW1RSkauxh/FU0AmGHJz+uOQAMfQn4qxlW6mHU1FS+wnepRWLstKc2fhl22LaUMf hzX+8sSnowhXXCWLs92wE8jIyTXYRNv+3KVHq8h8B4E8FRTb+oOrbGhnR1EVHixH iZu5gBv1XZGEGsvIBCqoDgB7o8Tb9W/nbLzudc/+Yz/OHMuhrcwy2p3cpUFjoB3Q psk29WB++kkyBFzwoA67RVJU9xD32lCumjZFPzwoydZRzQsoql6PwoIW1Zgg5Q4h 62yjJ4AJA3MjGFVmf88o1Cy1Qhzlf3L2C8oYI2tX2SjIo1psyb0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:20 2025 by rpki-client