$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: O6FrPvwk0XfAQrB/ZfPl9OzTK410qp+85pk0FQGh8fk= Subject key identifier: 03:9B:B3:FD:D1:DF:C2:E0:CA:D0:54:BC:9A:CD:82:0D:83:12:54:F2 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 0801C973E5C8570ED60CAB3717FA54CCCE756A8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 11:30:41 +0000 Manifest this update: Sun 02 Nov 2025 11:25:41 +0000 Manifest next update: Wed 05 Nov 2025 19:31:41 +0000 Files and hashes: 1: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: KxmBRqI+0BPUXrZja3bMIxxWeOZbCFM/holr+AkHecc=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 3: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 4: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:01:c9:73:e5:c8:57:0e:d6:0c:ab:37:17:fa:54:cc:ce:75:6a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Nov 2 11:25:41 2025 GMT Not After : Nov 5 19:31:41 2025 GMT Subject: CN=039BB3FDD1DFC2E0CAD054BC9ACD820D831254F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:f2:53:ae:bb:5f:8f:fa:0f:22:58:a1:b8:df: 71:3d:26:2a:0c:54:b7:1a:8f:22:6d:33:cd:45:19: 6b:91:fa:4a:04:26:28:7b:56:b4:9a:91:e4:a7:42: 4e:e2:70:4a:10:57:b9:d9:db:43:2c:ae:b2:a4:15: cb:95:d5:ed:9a:8f:f2:12:5d:d6:be:62:e5:b4:25: ba:69:a3:92:22:d6:2c:78:b6:ac:c3:68:69:d3:13: e0:38:81:5d:c6:31:b3:59:61:48:b9:c3:70:8d:93: de:fc:b3:10:de:17:17:dc:c4:50:4e:72:57:ca:8b: b5:7a:3c:d8:31:a5:b1:40:63:5c:e8:0b:52:e4:ed: e3:f0:8e:6e:0f:3a:99:72:4c:8f:b4:66:4d:a4:cd: c1:6c:34:88:d5:f0:64:8b:35:7e:60:50:01:55:5d: f1:61:3f:3a:90:84:8f:5e:03:db:c0:fd:58:64:49: 59:5f:3e:ef:ab:ff:65:e8:00:4c:09:bc:8e:4a:d0: 15:d2:15:98:c9:45:63:99:fd:27:39:39:14:dd:7d: 1e:a5:af:57:1e:65:6f:a6:9f:36:cc:5f:5d:3e:fc: 64:11:dd:b7:d6:f2:21:97:98:52:26:bd:fd:0c:6d: d7:28:d2:07:1b:2a:67:c4:da:c7:27:4e:e9:73:8d: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:B3:FD:D1:DF:C2:E0:CA:D0:54:BC:9A:CD:82:0D:83:12:54:F2 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fb:2f:f9:3e:ff:5b:c2:5b:50:c2:54:4e:0d:1a:fc:76:82: 2f:50:6d:13:b1:0e:22:ca:6f:95:d3:5e:1c:40:15:44:fa:fa: c6:6b:0a:24:5d:6f:75:25:ee:ba:fc:4b:59:fc:60:8f:4f:17: 33:27:08:67:63:7b:8c:ac:83:81:d8:1e:00:27:d1:c3:59:6f: a6:7f:a7:52:ed:bf:7b:10:53:59:53:64:03:9e:e3:19:f8:fb: ef:09:25:f6:b9:9e:ea:56:f8:3b:40:39:1c:9e:ee:eb:56:e5: c7:90:61:64:9f:62:e4:97:33:6c:40:ee:ff:0c:05:59:4c:f1: f9:7d:a0:28:8a:c7:c0:21:25:85:85:16:44:33:35:10:3b:84: d1:32:4b:8c:aa:98:8a:5a:68:71:60:8d:82:93:77:59:6e:d4: 69:ca:5a:4c:e1:f6:d8:e5:80:2a:cd:35:96:16:32:a4:3c:40: ee:02:96:10:28:97:03:8a:a3:53:97:55:e8:4d:da:db:87:99: 7a:b5:60:55:c1:a8:20:24:15:3b:bc:28:53:a9:f1:78:69:01: ce:a9:be:34:9d:2b:d5:73:fe:80:59:75:1c:db:96:10:31:84: c9:52:c6:17:4b:ea:c4:74:6e:a7:a8:51:a1:4e:68:cd:b5:23: d1:71:dc:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAHJc+XIVw7WDKs3F/pUzM51ao4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTExMDIxMTI1NDFaFw0yNTExMDUxOTMxNDFaMDMxMTAvBgNV BAMTKDAzOUJCM0ZERDFERkMyRTBDQUQwNTRCQzlBQ0Q4MjBEODMxMjU0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD88lOuu1+P+g8iWKG433E9JioM VLcajyJtM81FGWuR+koEJih7VrSakeSnQk7icEoQV7nZ20MsrrKkFcuV1e2aj/IS Xda+YuW0Jbppo5Ii1ix4tqzDaGnTE+A4gV3GMbNZYUi5w3CNk978sxDeFxfcxFBO clfKi7V6PNgxpbFAY1zoC1Lk7ePwjm4POplyTI+0Zk2kzcFsNIjV8GSLNX5gUAFV XfFhPzqQhI9eA9vA/VhkSVlfPu+r/2XoAEwJvI5K0BXSFZjJRWOZ/Sc5ORTdfR6l r1ceZW+mnzbMX10+/GQR3bfW8iGXmFImvf0Mbdco0gcbKmfE2scnTulzjSUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5uz/dHfwuDK0FS8ms2CDYMSVPIwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz7L/k+/1vCW1DCVE4NGvx2gi9QbROxDiLK b5XTXhxAFUT6+sZrCiRdb3Ul7rr8S1n8YI9PFzMnCGdje4ysg4HYHgAn0cNZb6Z/ p1Ltv3sQU1lTZAOe4xn4++8JJfa5nupW+DtAORye7utW5ceQYWSfYuSXM2xA7v8M BVlM8fl9oCiKx8AhJYWFFkQzNRA7hNEyS4yqmIpaaHFgjYKTd1lu1GnKWkzh9tjl gCrNNZYWMqQ8QO4ClhAolwOKo1OXVehN2tuHmXq1YFXBqCAkFTu8KFOp8XhpAc6p vjSdK9Vz/oBZdRzblhAxhMlSxhdL6sR0bqeoUaFOaM21I9Fx3BY= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:34 2025 by rpki-client