$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: HLiQGqVOUX8Et+kWUYUk0UnDS1iw2DM+yF59WHuVCcE= Subject key identifier: C3:62:F4:7C:C3:46:B2:BB:78:38:7D:D6:F0:DF:5A:01:F5:6F:FC:DD Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 4A9DB997C615420310A978B3453656DF2E9B78C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0523 Signing time: Sun 02 Nov 2025 03:41:36 +0000 Manifest this update: Sun 02 Nov 2025 03:36:36 +0000 Manifest next update: Wed 05 Nov 2025 10:06:36 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 2: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: kXNXOK6zIJctD1gqaDPy3kL13dSKwgUi3vpokKpuKRE=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9d:b9:97:c6:15:42:03:10:a9:78:b3:45:36:56:df:2e:9b:78:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Nov 2 03:36:36 2025 GMT Not After : Nov 5 10:06:36 2025 GMT Subject: CN=C362F47CC346B2BB78387DD6F0DF5A01F56FFCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:ed:f6:8d:a6:f0:a8:d0:10:72:b9:12:2f: eb:d2:66:35:de:77:04:01:0d:79:f8:cf:0e:8e:d0: 4c:24:db:6e:c2:a3:9e:40:7a:09:ac:4d:9b:6d:03: ff:2d:21:7a:4c:2f:7f:e6:80:37:2c:2d:6f:b6:4c: 2e:d2:73:58:d8:cf:a6:d7:31:af:e6:75:14:94:83: 0e:02:62:b9:c4:a7:eb:ae:cf:dc:50:87:40:2a:35: 31:5e:59:82:76:f4:88:b8:8a:75:15:2d:3b:11:84: 8e:7c:f4:dc:5a:34:90:83:35:01:4b:1a:2e:9d:38: 47:5a:81:1f:55:66:5f:4f:1e:3f:5f:c2:c2:c3:b3: de:ed:86:c9:f9:04:9d:fd:dc:7a:19:31:c0:1c:5d: a2:8e:b2:e6:9e:53:04:e7:b5:79:ec:16:9a:30:ca: e1:e9:6b:1c:a7:9c:96:f6:15:cc:74:d1:c9:8d:3e: 1c:5a:82:e3:37:e9:4b:c3:df:25:85:22:cd:22:dd: 2c:2f:81:e4:bf:68:fb:5f:17:32:77:93:e9:57:11: 5e:be:b7:30:0a:41:72:43:65:6b:e0:a4:bd:b1:0d: af:a9:5f:0a:34:21:42:bb:f4:3d:59:c7:b7:36:a1: 32:96:3f:a5:98:5e:65:73:93:8f:fe:39:dc:20:52: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:F4:7C:C3:46:B2:BB:78:38:7D:D6:F0:DF:5A:01:F5:6F:FC:DD X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:dc:06:be:72:13:31:6d:c3:bb:be:d8:b6:ca:58:8f:17:55: 75:4b:7c:10:ad:02:7a:33:5a:64:05:cf:5b:0d:cf:1c:ac:fd: 59:4e:44:e6:96:b9:27:39:1e:d9:41:5d:a6:18:dc:f1:da:15: 46:53:d8:8d:41:c4:88:b6:c3:87:39:01:37:b9:ea:d9:07:e7: 59:75:bd:85:db:a4:d1:81:0f:c3:ac:27:65:b2:38:27:91:ac: 7b:02:49:e7:94:a8:c8:75:17:cc:b9:17:27:36:31:a5:74:f8: ec:5a:ff:64:4f:22:38:a3:3b:35:e7:06:36:79:7a:9e:b6:2f: 66:5a:27:f0:8b:ca:ec:e1:32:59:8c:bc:bf:9c:ad:d4:da:0a: 47:78:18:76:a9:bc:97:4b:e3:eb:9f:40:1e:03:84:75:f9:b8: 6b:14:1d:2d:98:5b:13:b4:5d:e0:57:72:44:9e:73:84:cd:07: e8:0b:af:45:6c:6d:71:a3:c4:2a:4a:e4:5d:cc:9d:fa:a3:08: e3:42:7a:d7:b6:3a:d1:ab:e5:88:ad:25:ae:db:93:98:65:d7: 59:ab:54:e6:77:28:bc:07:f1:50:04:b2:03:cb:ff:1c:92:ab: 2b:79:0f:e8:11:c8:0e:81:3a:f4:f6:07:b4:0d:3b:7d:66:7f: 94:c2:20:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp25l8YVQgMQqXizRTZW3y6beMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTExMDIwMzM2MzZaFw0yNTExMDUxMDA2MzZaMDMxMTAvBgNV BAMTKEMzNjJGNDdDQzM0NkIyQkI3ODM4N0RENkYwREY1QTAxRjU2RkZDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZO32jabwqNAQcrkSL+vSZjXe dwQBDXn4zw6O0Ewk227Co55AegmsTZttA/8tIXpML3/mgDcsLW+2TC7Sc1jYz6bX Ma/mdRSUgw4CYrnEp+uuz9xQh0AqNTFeWYJ29Ii4inUVLTsRhI589NxaNJCDNQFL Gi6dOEdagR9VZl9PHj9fwsLDs97thsn5BJ393HoZMcAcXaKOsuaeUwTntXnsFpow yuHpaxynnJb2Fcx00cmNPhxaguM36UvD3yWFIs0i3SwvgeS/aPtfFzJ3k+lXEV6+ tzAKQXJDZWvgpL2xDa+pXwo0IUK79D1Zx7c2oTKWP6WYXmVzk4/+OdwgUqAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw2L0fMNGsrt4OH3W8N9aAfVv/N0wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/cBr5yEzFtw7u+2LbKWI8XVXVLfBCtAnoz WmQFz1sNzxys/VlOROaWuSc5HtlBXaYY3PHaFUZT2I1BxIi2w4c5ATe56tkH51l1 vYXbpNGBD8OsJ2WyOCeRrHsCSeeUqMh1F8y5Fyc2MaV0+Oxa/2RPIjijOzXnBjZ5 ep62L2ZaJ/CLyuzhMlmMvL+crdTaCkd4GHapvJdL4+ufQB4DhHX5uGsUHS2YWxO0 XeBXckSec4TNB+gLr0VsbXGjxCpK5F3MnfqjCONCete2OtGr5YitJa7bk5hl11mr VOZ3KLwH8VAEsgPL/xySqyt5D+gRyA6BOvT2B7QNO31mf5TCIPM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:55 2025 by rpki-client