$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: KO5E4RS/HgBAz9ITXzbYPHmRw1E9ELEjRx5pSH1bnEw= Subject key identifier: 6F:23:C2:E6:58:04:37:F2:4C:DD:5C:33:FA:63:CE:F7:B9:2E:D1:20 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 4B12FA39484B602F9EAF0337B11316940E744237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 019C Signing time: Tue 04 Nov 2025 13:31:52 +0000 Manifest this update: Tue 04 Nov 2025 13:26:52 +0000 Manifest next update: Fri 07 Nov 2025 20:27:52 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: b8kjOZTHqisFZKsaoNKt7fAGwJ2HvjecoTjqRk8NRTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:fa:39:48:4b:60:2f:9e:af:03:37:b1:13:16:94:0e:74:42:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Nov 4 13:26:52 2025 GMT Not After : Nov 7 20:27:52 2025 GMT Subject: CN=6F23C2E6580437F24CDD5C33FA63CEF7B92ED120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:ad:2d:f0:2b:36:81:83:d7:81:1e:35:87: b1:6f:9d:7c:09:ae:56:5f:74:cd:05:af:15:1c:fc: 2f:24:93:ae:66:31:98:2a:4c:e5:b2:55:eb:bc:15: b9:f9:6c:e2:49:4d:ed:a0:6a:fd:b1:ec:36:73:07: 9a:27:58:d2:c5:ae:c2:ea:52:e6:6a:58:fd:66:09: 51:ad:1e:86:d8:0d:f0:0a:88:e0:3c:39:dc:10:7f: e0:12:20:74:90:46:ef:4b:e3:ce:03:05:09:be:1c: d1:7e:50:65:91:1b:4b:a6:03:1e:c8:45:52:85:d4: 98:8f:12:1b:54:00:3d:e9:e0:60:96:cf:83:53:28: 81:6a:e7:22:95:e5:f7:79:03:09:f8:58:cb:8f:56: 6b:7c:63:64:31:01:89:08:1e:76:cf:1a:bc:ab:47: 17:da:28:5c:a6:cb:3e:92:a4:ee:33:8a:fe:a2:bd: 66:f9:59:f6:e4:bf:27:07:0c:a6:46:b6:ee:a0:5f: 27:02:a6:25:d1:53:de:ba:99:80:fc:1a:a0:7d:76: 00:e4:fe:2f:de:41:6a:60:40:9d:08:0b:d2:a1:72: 3c:f4:d4:1b:60:62:25:c8:b2:79:bd:79:3d:8c:d2: c1:de:c8:8b:56:b0:f5:a4:e3:fe:d6:71:b8:d7:a1: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:23:C2:E6:58:04:37:F2:4C:DD:5C:33:FA:63:CE:F7:B9:2E:D1:20 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:da:72:fb:60:53:4f:c4:bf:39:e5:88:bb:f0:40:87:5d:4a: 58:35:18:f1:48:e4:63:23:14:6a:c2:cc:aa:4c:57:61:8b:73: 50:8e:d7:a2:a5:56:88:ea:5b:5d:f9:45:7f:b3:9c:82:cd:c5: ad:11:c4:74:74:91:91:fe:e3:a3:c8:c0:5c:6e:3b:80:89:ac: 98:5d:a1:fe:95:62:54:b5:1b:b7:61:7f:4e:e3:d1:16:47:08: cb:b2:89:52:01:18:59:09:91:e6:20:4a:4a:ce:58:55:ac:3f: db:ed:57:88:0e:e2:f7:bd:b6:d7:71:b5:c4:83:56:b1:c2:53: 5d:77:06:0b:ac:00:d6:58:fe:e2:44:82:18:6e:f1:94:a1:64: 80:8d:0c:f5:ab:7c:69:a5:45:d7:89:8a:9d:f8:cd:b6:a1:a0: 7b:43:d9:d0:ad:19:d5:e2:45:c6:1c:49:f3:0c:9e:f9:85:b2: 90:b2:71:88:6b:62:42:11:eb:1d:bd:f8:81:49:7a:90:22:e3: 4c:5d:57:17:51:f6:77:25:74:3a:8e:e1:a1:24:53:1e:a0:32: ab:22:f9:44:31:83:ad:67:6f:82:83:a8:45:fc:95:22:a2:d1: 0d:c1:c7:10:f4:41:1f:db:47:4f:85:b4:da:7c:ff:07:f6:19: e3:f2:25:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxL6OUhLYC+erwM3sRMWlA50QjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTExMDQxMzI2NTJaFw0yNTExMDcyMDI3NTJaMDMxMTAvBgNV BAMTKDZGMjNDMkU2NTgwNDM3RjI0Q0RENUMzM0ZBNjNDRUY3QjkyRUQxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeq0t8Cs2gYPXgR41h7FvnXwJ rlZfdM0FrxUc/C8kk65mMZgqTOWyVeu8Fbn5bOJJTe2gav2x7DZzB5onWNLFrsLq UuZqWP1mCVGtHobYDfAKiOA8OdwQf+ASIHSQRu9L484DBQm+HNF+UGWRG0umAx7I RVKF1JiPEhtUAD3p4GCWz4NTKIFq5yKV5fd5Awn4WMuPVmt8Y2QxAYkIHnbPGryr RxfaKFymyz6SpO4ziv6ivWb5WfbkvycHDKZGtu6gXycCpiXRU966mYD8GqB9dgDk /i/eQWpgQJ0IC9Khcjz01BtgYiXIsnm9eT2M0sHeyItWsPWk4/7WcbjXoZn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbyPC5lgEN/JM3Vwz+mPO97ku0SAwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPacvtgU0/EvznliLvwQIddSlg1GPFI5GMj FGrCzKpMV2GLc1CO16KlVojqW135RX+znILNxa0RxHR0kZH+46PIwFxuO4CJrJhd of6VYlS1G7dhf07j0RZHCMuyiVIBGFkJkeYgSkrOWFWsP9vtV4gO4ve9ttdxtcSD VrHCU113BgusANZY/uJEghhu8ZShZICNDPWrfGmlRdeJip34zbahoHtD2dCtGdXi RcYcSfMMnvmFspCycYhrYkIR6x29+IFJepAi40xdVxdR9ncldDqO4aEkUx6gMqsi +UQxg61nb4KDqEX8lSKi0Q3BxxD0QR/bR0+FtNp8/wf2GePyJcU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:44 2025 by rpki-client