$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: uQCATmZhiVz8bcyDAEaSBqu8v61LsR+rUonRRRt2rXo= Subject key identifier: 09:09:E8:91:19:B2:73:32:4C:76:2A:36:DC:EB:CE:EB:79:B4:4B:C1 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 2F69234745D0D73F02CF405D4FA55780528ADFC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01DD Signing time: Sun 02 Nov 2025 18:01:05 +0000 Manifest this update: Sun 02 Nov 2025 17:56:05 +0000 Manifest next update: Wed 05 Nov 2025 23:47:05 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: DqwskrnA4Rw690eCus1VEhOQKQxxDPNKuhFeT9mhMGk=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) 4: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:69:23:47:45:d0:d7:3f:02:cf:40:5d:4f:a5:57:80:52:8a:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Nov 2 17:56:05 2025 GMT Not After : Nov 5 23:47:05 2025 GMT Subject: CN=0909E89119B273324C762A36DCEBCEEB79B44BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:a5:fa:11:44:42:39:4d:fd:84:d7:bb:4e: 33:06:8d:c8:39:c5:0f:4c:27:dd:9a:68:d2:29:00: 59:a9:b2:9c:0e:75:07:e9:9e:05:8c:c9:f7:27:a7: 98:26:d8:8d:14:5e:e0:ed:72:6c:05:8b:56:18:4a: 89:25:01:95:98:e4:2d:15:78:a0:9f:eb:4c:da:cd: 39:46:22:0a:77:6b:56:59:ce:a6:f1:5e:b6:ce:e0: 18:f1:14:2e:7e:56:27:58:65:bf:5a:e8:e7:c8:85: 2b:57:fa:01:88:8e:b2:0e:25:32:cd:61:7c:d4:03: 95:28:3c:07:28:6c:29:06:36:f0:17:d7:32:ab:d3: 1b:66:94:f1:66:47:cc:e4:74:05:25:07:34:e7:06: 86:86:17:66:f6:70:69:7d:1e:21:7d:c5:a0:6e:c8: bc:72:d2:9b:1b:36:af:bb:53:9e:a4:e0:81:5d:2c: 69:dc:e6:55:ad:ed:9c:a9:d7:fc:17:5b:95:d7:cb: aa:a2:2e:eb:e2:48:d7:26:af:08:d5:79:03:cd:bc: 8d:6d:c8:72:f5:67:13:94:1d:26:42:aa:aa:2b:5f: 86:16:2a:b9:c6:53:ec:9c:66:5c:b5:f5:f4:d3:21: cb:2a:05:f4:d8:cc:71:68:0c:4c:e4:92:75:b6:f6: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:E8:91:19:B2:73:32:4C:76:2A:36:DC:EB:CE:EB:79:B4:4B:C1 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5f:30:ea:05:de:e3:78:93:68:19:26:eb:62:ab:24:37:15: 03:a2:5b:b1:e8:5a:78:c0:da:da:37:82:51:81:bd:dd:39:da: a8:7f:d2:cc:2d:1d:54:88:29:d9:34:64:a1:19:33:74:8f:f1: c9:32:eb:03:2e:ba:b2:df:97:da:ef:29:6b:67:42:d5:de:59: b8:3a:a7:d7:80:07:c2:06:65:37:1f:d8:69:09:c1:3e:f7:a6: 0a:b7:65:33:e1:f8:b5:1d:cd:ad:a2:60:58:1f:6d:70:4b:2e: a7:26:a9:64:50:16:ec:39:5a:bd:f6:6f:8c:26:6e:60:6e:8d: 9d:0e:64:7a:8a:dd:a0:c0:f6:19:c9:60:5f:92:9c:91:e2:72: e4:02:a6:f2:e1:91:ac:75:bd:57:43:9f:71:a3:8f:b4:ee:3b: 2e:fe:49:88:b6:a9:cd:23:ad:88:78:3d:3e:98:76:2f:90:c2: 3c:94:e1:6e:15:22:f6:32:c3:74:bd:ef:5b:64:15:f6:7b:bb: 21:f8:ef:4e:aa:43:5d:b5:df:52:84:6d:1c:96:bb:2d:a1:51: 9a:20:6a:15:72:f6:bb:e5:da:28:82:0e:f6:6d:d3:73:28:fe: 3c:f0:2a:79:a6:bf:62:95:81:46:ab:61:f0:65:19:e5:c8:d4: 11:fd:de:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2kjR0XQ1z8Cz0BdT6VXgFKK38AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTExMDIxNzU2MDVaFw0yNTExMDUyMzQ3MDVaMDMxMTAvBgNV BAMTKDA5MDlFODkxMTlCMjczMzI0Qzc2MkEzNkRDRUJDRUVCNzlCNDRCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeqX6EURCOU39hNe7TjMGjcg5 xQ9MJ92aaNIpAFmpspwOdQfpngWMyfcnp5gm2I0UXuDtcmwFi1YYSoklAZWY5C0V eKCf60zazTlGIgp3a1ZZzqbxXrbO4BjxFC5+VidYZb9a6OfIhStX+gGIjrIOJTLN YXzUA5UoPAcobCkGNvAX1zKr0xtmlPFmR8zkdAUlBzTnBoaGF2b2cGl9HiF9xaBu yLxy0psbNq+7U56k4IFdLGnc5lWt7Zyp1/wXW5XXy6qiLuviSNcmrwjVeQPNvI1t yHL1ZxOUHSZCqqorX4YWKrnGU+ycZly19fTTIcsqBfTYzHFoDEzkknW29plbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQnokRmyczJMdio23OvO63m0S8EwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9fMOoF3uN4k2gZJutiqyQ3FQOiW7HoWnjA 2to3glGBvd052qh/0swtHVSIKdk0ZKEZM3SP8cky6wMuurLfl9rvKWtnQtXeWbg6 p9eAB8IGZTcf2GkJwT73pgq3ZTPh+LUdza2iYFgfbXBLLqcmqWRQFuw5Wr32b4wm bmBujZ0OZHqK3aDA9hnJYF+SnJHicuQCpvLhkax1vVdDn3Gjj7TuOy7+SYi2qc0j rYh4PT6Ydi+QwjyU4W4VIvYyw3S971tkFfZ7uyH4706qQ12131KEbRyWuy2hUZog ahVy9rvl2iiCDvZt03Mo/jzwKnmmv2KVgUarYfBlGeXI1BH93os= -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:57 2025 by rpki-client