$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: hywXG4mfmAbHSR94WbZFcMmDV4O1tivML77Mvzvkr9o= Subject key identifier: 7D:3B:18:CB:4A:16:8A:1A:BA:35:D5:AA:73:94:A1:0D:FC:63:07:79 Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 49C35527927107AE113E6F8EBC695BDF662E98A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 0235 Signing time: Tue 04 Nov 2025 21:01:44 +0000 Manifest this update: Tue 04 Nov 2025 20:56:44 +0000 Manifest next update: Sat 08 Nov 2025 07:13:44 +0000 Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) 2: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: aMYi9NBxRlvzkixuEgPdP8wWCRLGNM6IG55lwzj/cwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c3:55:27:92:71:07:ae:11:3e:6f:8e:bc:69:5b:df:66:2e:98:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Nov 4 20:56:44 2025 GMT Not After : Nov 8 07:13:44 2025 GMT Subject: CN=7D3B18CB4A168A1ABA35D5AA7394A10DFC630779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:40:34:a4:22:58:b7:fb:8a:ca:21:18:91: 81:14:55:f8:e0:22:85:87:60:cf:69:09:2e:1c:33: 92:8d:8d:47:2b:b4:ac:59:03:e6:11:25:66:cc:b2: a7:a9:3f:9f:76:81:8a:c2:61:a2:7a:f6:c5:a0:07: ff:45:77:41:00:e8:a0:38:19:48:13:ac:a1:1f:92: d6:15:fa:c2:16:8c:fc:55:fb:e5:d3:5b:6a:39:78: 72:95:cb:8c:8e:17:44:d8:f9:9a:a6:6b:91:62:22: ab:90:89:96:18:76:27:44:3a:33:ed:4c:8f:7b:f4: a0:d1:55:2a:b4:1a:a2:e9:fc:6b:fb:8d:fd:97:38: 60:07:bf:c4:80:4a:b0:50:ed:e3:ad:a3:01:b6:ec: 2f:71:0a:7f:34:cc:51:3a:73:72:cf:34:de:e4:74: 56:7c:2b:7d:0d:9d:67:17:ed:d0:aa:79:48:85:94: 8d:4c:25:6e:6f:d2:95:98:d8:19:ce:bf:69:cd:2d: 3f:73:83:74:4c:8f:44:fb:84:09:32:55:dd:ee:45: f7:2b:6a:da:b2:46:2f:cb:2b:7f:d0:a8:9b:4c:d9: 48:85:11:98:2a:cb:05:64:5c:e9:b5:b8:e1:f7:b7: 69:ac:49:47:d3:c1:dd:f3:c5:6b:a5:4b:11:0b:1c: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3B:18:CB:4A:16:8A:1A:BA:35:D5:AA:73:94:A1:0D:FC:63:07:79 X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:2e:fa:9a:f1:64:bb:a5:3c:2c:d7:63:bc:7b:3a:10:12: e0:f4:4b:71:fc:1b:2f:3b:a6:63:6f:a8:5e:1c:c1:4d:0b:5a: 9f:d1:9d:ec:ce:41:df:42:1d:10:14:64:4c:2b:66:98:06:dc: 23:83:26:7c:78:c5:f4:c5:53:74:87:63:dc:f5:52:3a:e5:40: fc:80:78:78:86:21:1b:e9:ab:f0:c9:1d:3a:ed:72:a6:65:43: 1e:bf:83:cf:c9:81:76:8a:72:11:63:9e:e3:35:ed:ef:8a:f8: eb:76:1b:fc:d9:07:5c:a6:fb:fa:1a:bd:9b:9b:5b:ea:36:c4: d4:3c:eb:22:45:b0:16:d5:b6:98:a0:45:d5:50:ef:df:b8:e7: fd:5a:a6:b9:ac:b4:79:09:7c:aa:a9:9e:75:b3:95:b7:b4:d8: 71:75:bb:da:a4:ff:7e:aa:c9:e4:b9:a8:47:76:09:22:19:80: 04:bb:42:f8:69:7a:cb:6f:b3:a7:5c:9a:3d:a6:09:41:98:ae: 8d:b3:42:59:e3:3b:07:ce:cd:dc:21:47:8d:5d:07:ac:eb:b3: 1d:1e:4a:13:1b:34:e5:2e:29:c4:ac:7d:5f:b8:4b:ef:6b:9a: ee:69:98:5b:ca:ae:6c:1d:5a:1e:3e:22:1c:9c:11:aa:48:3a: f3:f8:d2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScNVJ5JxB64RPm+OvGlb32YumKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTExMDQyMDU2NDRaFw0yNTExMDgwNzEzNDRaMDMxMTAvBgNV BAMTKDdEM0IxOENCNEExNjhBMUFCQTM1RDVBQTczOTRBMTBERkM2MzA3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61kA0pCJYt/uKyiEYkYEUVfjg IoWHYM9pCS4cM5KNjUcrtKxZA+YRJWbMsqepP592gYrCYaJ69sWgB/9Fd0EA6KA4 GUgTrKEfktYV+sIWjPxV++XTW2o5eHKVy4yOF0TY+Zqma5FiIquQiZYYdidEOjPt TI979KDRVSq0GqLp/Gv7jf2XOGAHv8SASrBQ7eOtowG27C9xCn80zFE6c3LPNN7k dFZ8K30NnWcX7dCqeUiFlI1MJW5v0pWY2BnOv2nNLT9zg3RMj0T7hAkyVd3uRfcr atqyRi/LK3/QqJtM2UiFEZgqywVkXOm1uOH3t2msSUfTwd3zxWulSxELHIxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfTsYy0oWihq6NdWqc5ShDfxjB3kwHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYcLvqa8WS7pTws12O8ezoQEuD0S3H8Gy87 pmNvqF4cwU0LWp/RnezOQd9CHRAUZEwrZpgG3CODJnx4xfTFU3SHY9z1UjrlQPyA eHiGIRvpq/DJHTrtcqZlQx6/g8/JgXaKchFjnuM17e+K+Ot2G/zZB1ym+/oavZub W+o2xNQ86yJFsBbVtpigRdVQ79+45/1aprmstHkJfKqpnnWzlbe02HF1u9qk/36q yeS5qEd2CSIZgAS7Qvhpestvs6dcmj2mCUGYro2zQlnjOwfOzdwhR41dB6zrsx0e ShMbNOUuKcSsfV+4S+9rmu5pmFvKrmwdWh4+IhycEapIOvP40hM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:46 2025 by rpki-client