$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: nZwsgjNqK+cAOEjABRtBbhJ7k0n1/HjZiqFdb8H8Q/g= Subject key identifier: 5B:04:C9:BC:AD:D6:9F:3F:C1:CB:CF:47:42:D1:08:94:88:EB:C7:13 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 7A9433B8254173FCA32B5ACC2E01359A0F2BB6F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01C3 Signing time: Sun 02 Nov 2025 10:31:05 +0000 Manifest this update: Sun 02 Nov 2025 10:26:05 +0000 Manifest next update: Wed 05 Nov 2025 16:01:05 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) 2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: u1Y6eymNP2easkF12am2n3Vlj8/7rmuvvB7igdh5XbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:94:33:b8:25:41:73:fc:a3:2b:5a:cc:2e:01:35:9a:0f:2b:b6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Nov 2 10:26:05 2025 GMT Not After : Nov 5 16:01:05 2025 GMT Subject: CN=5B04C9BCADD69F3FC1CBCF4742D1089488EBC713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:86:55:6e:61:be:ce:a2:32:8d:45:02:ab: 8d:b2:67:4a:36:37:bd:b6:ee:0d:01:e1:7a:38:91: 02:b1:d5:e1:2a:ce:54:9c:ec:86:f6:f9:f5:f5:81: 31:7b:4b:5f:2b:9c:90:9c:d1:e5:4c:73:de:ef:5c: d8:6c:d1:3c:93:e1:f9:46:5b:27:1f:b8:95:23:26: f9:26:77:27:88:58:aa:63:53:c0:74:6f:09:c0:8c: 3a:bf:db:48:aa:c5:e1:02:79:53:5c:f3:5c:3f:80: 09:a3:76:77:b7:9f:f3:22:da:5a:b8:b0:a2:01:b3: b9:45:77:02:57:60:3a:c5:12:97:96:c0:56:e6:7f: 5f:cc:f1:35:97:98:f7:1c:c2:7b:55:82:9d:40:95: c4:1d:e9:7b:4b:73:0d:35:ab:49:ed:24:16:48:32: e8:72:d6:8a:7d:0f:20:f1:7d:d4:9f:f1:0c:0b:42: fa:1d:d3:04:77:b9:df:a2:6d:ee:bf:00:93:b3:00: a1:fb:ba:40:72:d0:35:8a:24:59:cf:cd:3f:ad:b9: d4:e2:2b:d8:f7:23:11:16:f3:a8:05:3f:65:b2:3f: c7:c7:ea:b3:3c:5b:c7:19:5f:6b:50:c7:73:72:fa: b3:14:34:e6:d6:6d:cc:ac:f9:06:01:c3:f3:11:80: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:C9:BC:AD:D6:9F:3F:C1:CB:CF:47:42:D1:08:94:88:EB:C7:13 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:54:ff:07:20:e7:21:64:38:ae:8d:7f:43:ad:0e:8b:4e: ee:43:e8:da:3e:9f:a4:a0:83:14:ab:91:b8:42:a3:6d:5c:ff: 27:3f:97:77:0b:d8:e2:77:26:67:f6:ba:44:3b:3d:40:8e:1d: ba:95:15:fc:73:42:85:4e:00:83:af:c6:e9:97:22:06:1b:2d: c2:b1:81:e1:a5:d3:24:57:47:c4:9a:9e:e3:cd:1d:75:f2:65: b7:5e:34:00:9e:16:0c:60:19:3c:6b:8b:66:04:f9:61:99:bc: 8e:3a:18:c0:59:ec:cf:ba:83:90:e7:9c:44:94:c4:40:17:7a: cb:18:8b:ea:0d:75:ce:07:9f:03:e7:75:02:53:6e:6d:16:c6: 5e:60:62:09:a0:e0:a0:3c:b3:91:78:db:a8:f8:79:5e:51:9c: 46:90:4c:c5:c5:84:e9:64:9e:38:d3:13:a3:4f:1c:40:f9:fe: f1:5c:24:86:97:6e:dd:66:68:20:be:7a:12:4f:70:bb:31:0a: af:70:76:f8:e1:60:87:e8:72:de:30:87:59:f5:3b:e8:58:98: 04:77:ae:a0:a6:8d:98:58:c3:7c:4a:26:81:ce:85:23:ac:00: e2:83:90:f3:6d:af:22:a8:4e:ab:5e:1e:20:16:c8:f3:35:96: f4:5f:89:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepQzuCVBc/yjK1rMLgE1mg8rtvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTExMDIxMDI2MDVaFw0yNTExMDUxNjAxMDVaMDMxMTAvBgNV BAMTKDVCMDRDOUJDQURENjlGM0ZDMUNCQ0Y0NzQyRDEwODk0ODhFQkM3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KIZVbmG+zqIyjUUCq42yZ0o2 N7227g0B4Xo4kQKx1eEqzlSc7Ib2+fX1gTF7S18rnJCc0eVMc97vXNhs0TyT4flG WycfuJUjJvkmdyeIWKpjU8B0bwnAjDq/20iqxeECeVNc81w/gAmjdne3n/Mi2lq4 sKIBs7lFdwJXYDrFEpeWwFbmf1/M8TWXmPccwntVgp1AlcQd6XtLcw01q0ntJBZI Muhy1op9DyDxfdSf8QwLQvod0wR3ud+ibe6/AJOzAKH7ukBy0DWKJFnPzT+tudTi K9j3IxEW86gFP2WyP8fH6rM8W8cZX2tQx3Ny+rMUNObWbcys+QYBw/MRgJDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWwTJvK3Wnz/By89HQtEIlIjrxxMwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMhVP8HIOchZDiujX9DrQ6LTu5D6No+n6Sg gxSrkbhCo21c/yc/l3cL2OJ3Jmf2ukQ7PUCOHbqVFfxzQoVOAIOvxumXIgYbLcKx geGl0yRXR8SanuPNHXXyZbdeNACeFgxgGTxri2YE+WGZvI46GMBZ7M+6g5DnnESU xEAXessYi+oNdc4HnwPndQJTbm0Wxl5gYgmg4KA8s5F426j4eV5RnEaQTMXFhOlk njjTE6NPHED5/vFcJIaXbt1maCC+ehJPcLsxCq9wdvjhYIfoct4wh1n1O+hYmAR3 rqCmjZhYw3xKJoHOhSOsAOKDkPNtryKoTqteHiAWyPM1lvRfiSI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:38 2025 by rpki-client